# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1418 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1419 --- ## [Data values about time graph kibana vega, vega-lite](https://discuss.elastic.co/t/data-values-about-time-graph-kibana-vega-vega-lite/272714)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 4\ **Last updated:** [May 12, 2021, 5:45pm UTC](https://discuss.elastic.co/t/data-values-about-time-graph-kibana-vega-vega-lite/272714 "2021-05-12T17:45:31Z")
Hi all experts, I'm a beginner of this new techonolgy. I would like to use vega for display line graph that plot data values over time-series (timestamp). The goal is to represent how data values and not count of data ch… --- ## [ML watcher issues v7.5](https://discuss.elastic.co/t/ml-watcher-issues-v7-5/272517)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 4:28pm UTC](https://discuss.elastic.co/t/ml-watcher-issues-v7-5/272517 "2021-05-12T16:28:55Z")
Hi, I got some problems with my watchers lately, the are not sending mail, and the last issue is that it keep in firing state, but never send mail, the jobs are constantly suggesting me that I set a larger query delay to… --- ## [Kibana roles / Errors - warning showing after login](https://discuss.elastic.co/t/kibana-roles-errors-warning-showing-after-login/272721)
**Author:** [@leal](https://discuss.elastic.co/u/leal)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 4:25pm UTC](https://discuss.elastic.co/t/kibana-roles-errors-warning-showing-after-login/272721 "2021-05-12T16:25:35Z")
We had a need to leave some users of a web application to see specific logs for that app. I have created a role, updated /etc/elasticsearch/role\_mapping.yml, I've installed filebeat to fetch this data from the source hos… --- ## [Admin account for Kibana](https://discuss.elastic.co/t/admin-account-for-kibana/272779)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 4:17pm UTC](https://discuss.elastic.co/t/admin-account-for-kibana/272779 "2021-05-12T16:17:59Z")
Hi! how can i get admin account from kibana via command line? I need to create an administrator account to administer other users and manage their access. I don't have a password for the current kibana administrator acc… --- ## [Drop\_event processor not working](https://discuss.elastic.co/t/drop-event-processor-not-working/272786)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 3:31pm UTC](https://discuss.elastic.co/t/drop-event-processor-not-working/272786 "2021-05-12T15:31:04Z")
I have a proccessor to drop some events for a user. here is my config: processors: - drop\_event: when: and: - or: - equals.event.code: 4658 - equals.event.code: 4656 - equals.even… --- ## [Searching Does not Return Results - Challenge](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/271116)
**Author:** [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 2:58pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/271116 "2021-05-12T14:58:15Z")
I posted a search question Searching Does not Return Results - Challenge - #7 by Gary\_Blackwell, but it was the wrong forum. I have not had time to learn the scripting someone in the forum requested that I learn. I hav… --- ## [Searching Does not Return Results - Challenge](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832)
**Author:** [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\ **Replies:** 29\ **Last updated:** [May 12, 2021, 2:56pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832 "2021-05-12T14:56:59Z")
I have this log message in Elastic: ExtendedProperties \[{"Name":"UserAgent","Value":"Microsoft Office/16.0 (Windows NT 10.0; Microsoft Outlook 16.0.13426; Pro)"} {"Name":"UserAuthenticationMethod","Value":"1"} {"Name":… --- ## [Is this registered\_domain processor's problem?](https://discuss.elastic.co/t/is-this-registered-domain-processors-problem/272819)
**Author:** [@e997cd7e8d9915436150](https://discuss.elastic.co/u/e997cd7e8d9915436150)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 2:32pm UTC](https://discuss.elastic.co/t/is-this-registered-domain-processors-problem/272819 "2021-05-12T14:32:58Z")
I am using the winlogbeat-sysmon.js without modifying. But some domain have wrong result like attached image. I think there is no problem with the public suffix list. What is solution? Thank you. --- ## [Is Elast alert available for Elasticsearch 7.9.3?](https://discuss.elastic.co/t/is-elast-alert-available-for-elasticsearch-7-9-3/272141)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 2:24pm UTC](https://discuss.elastic.co/t/is-elast-alert-available-for-elasticsearch-7-9-3/272141 "2021-05-12T14:24:20Z")
We are using Elasticsearch with Basic license. Kibana Alerts / Watchers are not available for the Basic License. Ours is a completely open source project, and we are trying to achieve alerting with open source options a… --- ## [Unable to start Elasticsearch as a service](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-a-service/272722)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 5\ **Last updated:** [May 12, 2021, 2:21pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-a-service/272722 "2021-05-12T14:21:26Z")
Elasticsearch version: 7.12 Elasticsearch is installed as an RPM on RHEL 7.9 server. We running ELK on a single VM. For the path.data we have an NFS mounted. When I try to start elasticsearch with path.data set to /var… --- ## [Ingest several csv and create geo\_point](https://discuss.elastic.co/t/ingest-several-csv-and-create-geo-point/272816)
**Author:** [@RichaMax](https://discuss.elastic.co/u/RichaMax)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 1:47pm UTC](https://discuss.elastic.co/t/ingest-several-csv-and-create-geo-point/272816 "2021-05-12T13:47:59Z")
Hello everyone, I'm new to ELK and I have some questions regarding the ingestion of csv files and I couldn't find what I was looking for on the forum. I want to ingest several csv into elasticsearch in different index … --- ## [Stalled Logstash Pipeline and Centralized Pipeline Management](https://discuss.elastic.co/t/stalled-logstash-pipeline-and-centralized-pipeline-management/272815)
**Author:** [@e.sharshenaliev](https://discuss.elastic.co/u/e.sharshenaliev)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 1:30pm UTC](https://discuss.elastic.co/t/stalled-logstash-pipeline-and-centralized-pipeline-management/272815 "2021-05-12T13:30:03Z")
We are using one instance of Logstash (running on Debian VM via "systemctl start logstash") with x-pack Centralized Pipeline Management (CPM). We've encountered the following problem: if for whatever reason pipelines is… --- ## [Set Colors (under certain condition if possible) onto Data Table rows](https://discuss.elastic.co/t/set-colors-under-certain-condition-if-possible-onto-data-table-rows/272709)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 1:17pm UTC](https://discuss.elastic.co/t/set-colors-under-certain-condition-if-possible-onto-data-table-rows/272709 "2021-05-12T13:17:27Z")
Hi everyone. I have a little question about Data table visualisation. Is there a way to set colors to rows and not leave them white ? Even better is there a way to have odd row from one color and pair rows an other co… --- ## [Elasticsearch cannot parse the string value in json？](https://discuss.elastic.co/t/elasticsearch-cannot-parse-the-string-value-in-json/272793)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-cannot-parse-the-string-value-in-json/272793 "2021-05-12T13:06:40Z")
Failure when writing some json data to es with logstash. {"type"=\>"mapper\_parsing\_exception", "reason"=\>"object mapping for \[Data.responsedto\] tried to parse field \[responsedto\] as object, but found a concrete value"} … --- ## [Logstash multiline pattern not working](https://discuss.elastic.co/t/logstash-multiline-pattern-not-working/272635)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 1:04pm UTC](https://discuss.elastic.co/t/logstash-multiline-pattern-not-working/272635 "2021-05-12T13:04:18Z")
Hello All , My logstash.conf file .. input { exec { command =\> "E:\\ELK\\logstash\\scripts\\srvrmgr.bat" interval =\> 300 codec =\> multiline { # Grok pattern names are valid! :slight\_smile: pattern =\> "^(D122|T… --- ## [Plugin installation was unsuccessful due to error "ENOENT: no such file or directory, mkdir"](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-enoent-no-such-file-or-directory-mkdir/272539)
**Author:** [@Pratiks](https://discuss.elastic.co/u/Pratiks)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 12:49pm UTC](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-enoent-no-such-file-or-directory-mkdir/272539 "2021-05-12T12:49:08Z")
I am trying to install enhance table plugin which is available in the github here GitHub - fbaligand/kibana-enhanced-table: Kibana visualization like a Data Table, but with enhanced features like computed columns, filter… --- ## [Date fields comparison](https://discuss.elastic.co/t/date-fields-comparison/272724)
**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 12:32pm UTC](https://discuss.elastic.co/t/date-fields-comparison/272724 "2021-05-12T12:32:58Z")
Hi There! I would desire to create a scripted field comparing 2 date fields in Kibana, in particular: I want to use current date ( new Date().getTime() ) and a date field I indexed already (named expiring date). The co… --- ## [Java/RestClient Render/Dump/Log the BulkRequest issued](https://discuss.elastic.co/t/java-restclient-render-dump-log-the-bulkrequest-issued/272806)
**Author:** [@ibexit](https://discuss.elastic.co/u/ibexit)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 12:19pm UTC](https://discuss.elastic.co/t/java-restclient-render-dump-log-the-bulkrequest-issued/272806 "2021-05-12T12:19:24Z")
We´re able to access the RequestBody sent by the client for searches - pretty easy. But is there a way to have this for BulkRequests too? Or in other words: I need access to the \_bulk payloads compiled/send by the java-… --- ## [Upgraded from 7.1 to 7.10 when re-index found this error "unknown parameter \[dynamic\] on mapper"](https://discuss.elastic.co/t/upgraded-from-7-1-to-7-10-when-re-index-found-this-error-unknown-parameter-dynamic-on-mapper/272789)
**Author:** [@guokoko](https://discuss.elastic.co/u/guokoko)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 12:19pm UTC](https://discuss.elastic.co/t/upgraded-from-7-1-to-7-10-when-re-index-found-this-error-unknown-parameter-dynamic-on-mapper/272789 "2021-05-12T12:19:22Z")
Upgraded from 7.1 to 7.10 when re-index found this error "unknown parameter \[dynamic\] on mapper" anyone found this before? please help This error "failures" : \[ { "index" : "xxx\_product\_202105\_test", "type" : "\_doc", … --- ## [Bar charts as percentage no longer clickable in Kibana 7.12.1](https://discuss.elastic.co/t/bar-charts-as-percentage-no-longer-clickable-in-kibana-7-12-1/272745)
**Author:** [@alrubaa](https://discuss.elastic.co/u/alrubaa)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 11:55am UTC](https://discuss.elastic.co/t/bar-charts-as-percentage-no-longer-clickable-in-kibana-7-12-1/272745 "2021-05-12T11:55:54Z")
Hi All, I have just update Elasticsearch and Kibana from 7.11 to 7.12.1 and I noticed that any bar chart I have that is displaying percentage is no longer clickable. If I change the bar chart from percentage to normal, … --- ## [Unable to Install Filebeat . Need some help in fixing installation issue](https://discuss.elastic.co/t/unable-to-install-filebeat-need-some-help-in-fixing-installation-issue/272574)
**Author:** [@vishnu\_rao](https://discuss.elastic.co/u/vishnu_rao)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 11:53am UTC](https://discuss.elastic.co/t/unable-to-install-filebeat-need-some-help-in-fixing-installation-issue/272574 "2021-05-12T11:53:38Z")
I am trying to install filebeat on IBM Clould Kubernetes Service , but the demonset does not start for the filebeat.. seeing below error. Request you to help fixing the issue. Warning FailedCreate DaemonSet Error … --- ## [Elasticsearch Helm chart- node type clarification](https://discuss.elastic.co/t/elasticsearch-helm-chart-node-type-clarification/272803)
**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-helm-chart-node-type-clarification/272803 "2021-05-12T11:46:14Z")
Hi, With the default Elasticsearch helm charts configuration all elasticsearch pods plays all roles(master,data, client). Also there is example configuration for setting different roles. Wanted to understand which is … --- ## [JSON Schema of the Elasticsearch Query DSL](https://discuss.elastic.co/t/json-schema-of-the-elasticsearch-query-dsl/272600)
**Author:** [@kyoh86](https://discuss.elastic.co/u/kyoh86)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 10:19am UTC](https://discuss.elastic.co/t/json-schema-of-the-elasticsearch-query-dsl/272600 "2021-05-12T10:19:39Z")
Recently, it has become quite common to define JSON Schema for various JSON format documents and publish them to assist editors and other development environments. For example, JSON Schema Store is a very good example o… --- ## [Aggregating fields within document](https://discuss.elastic.co/t/aggregating-fields-within-document/272773)
**Author:** [@agKaspar](https://discuss.elastic.co/u/agKaspar)\ **Replies:** 6\ **Last updated:** [May 12, 2021, 10:00am UTC](https://discuss.elastic.co/t/aggregating-fields-within-document/272773 "2021-05-12T10:00:08Z")
Hi, We have a mechanism which handles a queue of database operations (INSERT, DELETE and UPDATE operations) for various tables, I am now working on creating a Kibana dashboard with some metrics about this queue, but am h… --- ## [Nest, Routing\_missing\_exception](https://discuss.elastic.co/t/nest-routing-missing-exception/272791)
**Author:** [@bjni](https://discuss.elastic.co/u/bjni)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 9:50am UTC](https://discuss.elastic.co/t/nest-routing-missing-exception/272791 "2021-05-12T09:50:08Z")
Hi, We want to implement elastic search in our application and are now in a bit of the research phase. We first played around a bit with the dev-tools of Kibana, and we could index different documents with routing. We… --- ## [Logstash aggregate problem](https://discuss.elastic.co/t/logstash-aggregate-problem/271760)
**Author:** [@fabryx87](https://discuss.elastic.co/u/fabryx87)\ **Replies:** 5\ **Last updated:** [May 12, 2021, 9:35am UTC](https://discuss.elastic.co/t/logstash-aggregate-problem/271760 "2021-05-12T09:35:27Z")
Hi all, I am trying to do an aggregate in logstash, but probably i am not understanding how it works.... I want to copy the field contenent of elevated\_token inside the map, and create a new field with this value on t… --- ## [Using PIT for searching but update a doc an be able to see it change](https://discuss.elastic.co/t/using-pit-for-searching-but-update-a-doc-an-be-able-to-see-it-change/272263)
**Author:** [@Eyal\_Borovsky](https://discuss.elastic.co/u/Eyal_Borovsky)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 9:20am UTC](https://discuss.elastic.co/t/using-pit-for-searching-but-update-a-doc-an-be-able-to-see-it-change/272263 "2021-05-12T09:20:51Z")
I am using a search query and I save a snapshot of the results using PIT(point in time). My problem is that I updated one of the document that is in the result. when I paginate between the pages I still get the old statu… --- ## [How to make filed as aggregatable in Elastic search](https://discuss.elastic.co/t/how-to-make-filed-as-aggregatable-in-elastic-search/272636)
**Author:** [@Suvarna\_S](https://discuss.elastic.co/u/Suvarna_S)\ **Replies:** 7\ **Last updated:** [May 12, 2021, 9:00am UTC](https://discuss.elastic.co/t/how-to-make-filed-as-aggregatable-in-elastic-search/272636 "2021-05-12T09:00:59Z")
Hi Team, I am new to elastic search/kibana. I have a field "exceptions". I want to make this field as aggregatable, so that I can use this field for my visualization dashboard to fetch the count of exceptions. Kindly h… --- ## [Monitoring string with dynamic data](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647)
**Author:** [@RustyP](https://discuss.elastic.co/u/RustyP)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 8:57am UTC](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647 "2021-05-12T08:57:47Z")
Hi I have a string which has a dynamic number in the middle of it, how woud i go about monitoring the string considering it wont be the same every time due to the changing number? eg: (ISO-host-async-XXX) Unknown Exce… --- ## [How to send logs to logstash using log4js?](https://discuss.elastic.co/t/how-to-send-logs-to-logstash-using-log4js/272783)
**Author:** [@K\_N](https://discuss.elastic.co/u/K_N)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 8:32am UTC](https://discuss.elastic.co/t/how-to-send-logs-to-logstash-using-log4js/272783 "2021-05-12T08:32:37Z")
I want to send logs from my local node.js application and I used this https://github.com/log4js-node/logstashHTTP. But the examples that the documentation mention send logs directly to elasticsearch (I'm able to see the… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1417) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1419)