# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1471 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1472 --- ## [Customize kibana 7.11](https://discuss.elastic.co/t/customize-kibana-7-11/269584)
**Author:** [@Chaimaa\_ABD](https://discuss.elastic.co/u/Chaimaa_ABD)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 11:45am UTC](https://discuss.elastic.co/t/customize-kibana-7-11/269584 "2021-04-08T11:45:59Z")
Im trying to make the kibana dashbord more functional, so im wondering if i can customize kibana 7.11 dashbord Add a company logo instead of elastic logo Delete dashbord edit bar Define lucence search and delete the w… --- ## [Users and Rolesnot available in 7.11 version](https://discuss.elastic.co/t/users-and-rolesnot-available-in-7-11-version/268953)
**Author:** [@pooja1](https://discuss.elastic.co/u/pooja1)\ **Replies:** 4\ **Last updated:** [April 8, 2021, 11:34am UTC](https://discuss.elastic.co/t/users-and-rolesnot-available-in-7-11-version/268953 "2021-04-08T11:34:34Z")
I am not able to see Users and Roles options to share the dashboard --- ## [Generate Customized Report from Data in Kibana](https://discuss.elastic.co/t/generate-customized-report-from-data-in-kibana/268901)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 5\ **Last updated:** [April 8, 2021, 11:33am UTC](https://discuss.elastic.co/t/generate-customized-report-from-data-in-kibana/268901 "2021-04-08T11:33:24Z")
My dataset contains data of various batches and each batch record is distributed in number of rows. Using Kibana dashboard, I want to enable the end user to filter the data with respect to batch ID (which is easy) and th… --- ## [Dropdown custom field aggregation](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269527)
**Author:** [@bilel\_meddeb](https://discuss.elastic.co/u/bilel_meddeb)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 11:27am UTC](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269527 "2021-04-08T11:27:52Z")
HELLO, i'm new in ELK i have table id | f1 | f2 | f3 0 | 10| 15| 2 1 | 30| 5 | 9 2 | 1 | 75| 6 i want to create a dropdown list. that list contain a multi choice (x1 x2 x3) if i choice x1 so the result shoul… --- ## [How to delete specific indexes from snapshot?](https://discuss.elastic.co/t/how-to-delete-specific-indexes-from-snapshot/269581)
**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-to-delete-specific-indexes-from-snapshot/269581 "2021-04-08T11:24:43Z")
Hi Team, We use daily indices in elasticsearch and each day we take the snapshot of previous day in our snapshot repository. We want to delete specific indexes matching some pattern from the snapshots. Is it possible … --- ## [How to change moment.js in Kibana?](https://discuss.elastic.co/t/how-to-change-moment-js-in-kibana/269289)
**Author:** [@eniserkaya](https://discuss.elastic.co/u/eniserkaya)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 11:21am UTC](https://discuss.elastic.co/t/how-to-change-moment-js-in-kibana/269289 "2021-04-08T11:21:29Z")
I would like to change language for Duration in readable format. I have scripted fields. The scripted fields calculate duration. When i show the duration to clients, appear the label to screen 10 hours ago, 15 hours ago… --- ## [How to sort primarily on one score, and secondarily on another score](https://discuss.elastic.co/t/how-to-sort-primarily-on-one-score-and-secondarily-on-another-score/269564)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 10:19am UTC](https://discuss.elastic.co/t/how-to-sort-primarily-on-one-score-and-secondarily-on-another-score/269564 "2021-04-08T10:19:11Z")
Hi I have n terms ie: "Cheese","Robot" and "Cake" I wish to do a primary sorting strictly on number of these terms matched, and secondarily on the total score of the three terms. I know a way to sort by number of hit… --- ## [\[ERROR\]\[logstash.filters.ruby \] Ruby exception occurred: undefined method \`\[\]' for #\](https://discuss.elastic.co/t/error-logstash-filters-ruby-ruby-exception-occurred-undefined-method-for-logstash-0x9a18b32/269301)
**Author:** [@rumala](https://discuss.elastic.co/u/rumala)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 9:57am UTC](https://discuss.elastic.co/t/error-logstash-filters-ruby-ruby-exception-occurred-undefined-method-for-logstash-0x9a18b32/269301 "2021-04-08T09:57:12Z")
Hello experts, I'm still learning about ELK. last week i set up my ELK lab. And I got error in my Logstash. I'm using logstash 7.5.1. I would like to parse through all fields of my Logstash and convert field starting wi… --- ## [Security\_exception in logstash log: indices:admin/auto\_create is unauthorized for user](https://discuss.elastic.co/t/security-exception-in-logstash-log-indices-admin-auto-create-is-unauthorized-for-user/269523)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 9:56am UTC](https://discuss.elastic.co/t/security-exception-in-logstash-log-indices-admin-auto-create-is-unauthorized-for-user/269523 "2021-04-08T09:56:08Z")
Hello, I configured fluentd to forward logs to Logstash (7.10) and the Elasticsearch output throws the following error: \[2021-04-07T17:17:11,390\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\]\[2662b9682e97be5de9346f00d19… --- ## [Logstash unable to connect ssl enabled elasticsearch](https://discuss.elastic.co/t/logstash-unable-to-connect-ssl-enabled-elasticsearch/269570)
**Author:** [@abhishek\_s1](https://discuss.elastic.co/u/abhishek_s1)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 9:37am UTC](https://discuss.elastic.co/t/logstash-unable-to-connect-ssl-enabled-elasticsearch/269570 "2021-04-08T09:37:23Z")
I was using logstash to ingest data into elasticearch. But now after enabling ssl to elasticsearch (using this) for using alerts & detections, Logstash is unable to connect elasticsearch. Browser or curl command works a… --- ## [Improve logstash performance](https://discuss.elastic.co/t/improve-logstash-performance/269569)
**Author:** [@Paresh\_Vaniya](https://discuss.elastic.co/u/Paresh_Vaniya)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 9:34am UTC](https://discuss.elastic.co/t/improve-logstash-performance/269569 "2021-04-08T09:34:33Z")
Hi All, We are using logstash for full data load from Azure SQL to Elasticsearch & that takes too much time. Currently its taking 12 hours to insert 16 million records(using Default configuration of logstash). I have c… --- ## [Watcher multiple condition script error](https://discuss.elastic.co/t/watcher-multiple-condition-script-error/269263)
**Author:** [@Smit108](https://discuss.elastic.co/u/Smit108)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 7:37pm UTC](https://discuss.elastic.co/t/watcher-multiple-condition-script-error/269263 "2021-04-05T19:37:33Z")
HI i'm trying to set cluster health with condition in script but getting error while i'm execute it. { “trigger”: { “schedule”: { “interval”: “10s” } }, “input”: { “http”: { “request… --- ## [What is the source of kubernetes.pod.memory.usage.bytes and kubernetes.pod.cpu.usage.nanocores metrics?](https://discuss.elastic.co/t/what-is-the-source-of-kubernetes-pod-memory-usage-bytes-and-kubernetes-pod-cpu-usage-nanocores-metrics/269053)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 9:27am UTC](https://discuss.elastic.co/t/what-is-the-source-of-kubernetes-pod-memory-usage-bytes-and-kubernetes-pod-cpu-usage-nanocores-metrics/269053 "2021-04-08T09:27:45Z")
I am wondering where the metrics kubernetes.pod.memory.usage.bytes and kubernetes.pod.cpu.usage.nanocores in metricbeat are obtained from? Are they OS statistics? If so, which statistic? I am trying to compare them again… --- ## [ELK rollover renamed indexes](https://discuss.elastic.co/t/elk-rollover-renamed-indexes/269426)
**Author:** [@arvanMalian](https://discuss.elastic.co/u/arvanMalian)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 9:19am UTC](https://discuss.elastic.co/t/elk-rollover-renamed-indexes/269426 "2021-04-08T09:19:26Z")
Hi, I'm using ELK stack version 7.10.1 ( elasticsearch, kibana, filebeat ) My goal is to apply lifecycle policy to my indexes with ILM. I remaned indexes, it's something like this: filebeat-7.10.1-2021.04.06-000001 (… --- ## [Line graph duplicating y-axes legend](https://discuss.elastic.co/t/line-graph-duplicating-y-axes-legend/269117)
**Author:** [@Jasper\_Tan](https://discuss.elastic.co/u/Jasper_Tan)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 9:06am UTC](https://discuss.elastic.co/t/line-graph-duplicating-y-axes-legend/269117 "2021-04-08T09:06:30Z")
I was trying to create a new visualization using the "Aggregation based \>\> Line Graph". However I encountered a bug where my y-axes legends seems to be duplicating (See axes "N6\_TEMP, N7\_TEMP and N8\_TEMP" in the image be… --- ## [Create kibana space in output elasticsearch section in logstash](https://discuss.elastic.co/t/create-kibana-space-in-output-elasticsearch-section-in-logstash/269351)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 8:48am UTC](https://discuss.elastic.co/t/create-kibana-space-in-output-elasticsearch-section-in-logstash/269351 "2021-04-08T08:48:57Z")
HI all I am using elastic cloud 7.12 with filebeat and logstash through helm. Now, filebeat send all the logs to logstash then logstash does some filters then output to elasticsearch. In the pipeline in output I have … --- ## [Fill an Elasticsearch index with data from another index on same cluster](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451)
**Author:** [@workaround](https://discuss.elastic.co/u/workaround)\ **Replies:** 6\ **Last updated:** [April 8, 2021, 8:30am UTC](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451 "2021-04-08T08:30:18Z")
This is kind of a noob question so please be kind. I have an elasticsearch cluster (v5) with 3 nodes and two indexes, lets say indexes X and Y(default). I would like to know if there is a way to write data to the index … --- ## [TSVB dates not lining up (1M offset, 1st MAR vs 1st FEB)](https://discuss.elastic.co/t/tsvb-dates-not-lining-up-1m-offset-1st-mar-vs-1st-feb/269327)
**Author:** [@Brendan\_Fisher](https://discuss.elastic.co/u/Brendan_Fisher)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 8:26am UTC](https://discuss.elastic.co/t/tsvb-dates-not-lining-up-1m-offset-1st-mar-vs-1st-feb/269327 "2021-04-08T08:26:03Z")
Hi, I've been trying to get a Month over Month comparison going using TSVB Time Series. I finalised this series last week and everything looked good. I've opened up the visualisation this morning and found that the date… --- ## [Bulk upsert of nested document without mapping](https://discuss.elastic.co/t/bulk-upsert-of-nested-document-without-mapping/269563)
**Author:** [@Omri](https://discuss.elastic.co/u/Omri)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 8:04am UTC](https://discuss.elastic.co/t/bulk-upsert-of-nested-document-without-mapping/269563 "2021-04-08T08:04:20Z")
Hello everyone, I'm using the dynamic mapping feature of ES while predefining the mapping of specific index which also contains a nested field and a mapping to the fields in this nested field. When I run a bulk upsert … --- ## [Elasticsearch warm phase on rollover](https://discuss.elastic.co/t/elasticsearch-warm-phase-on-rollover/269503)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-warm-phase-on-rollover/269503 "2021-04-08T07:59:43Z")
I created a simple policy for rollover using Kibana getting the following request: PUT \_ilm/policy/30d { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": … --- ## [Using an array as parameter for update script](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/269562)
**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 7:45am UTC](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/269562 "2021-04-08T07:45:48Z")
I am using ElasticSearch 6.8, I want to update many documents at the same time. So I use update by query \` { "index": "index", "type": "type" "body": { "query" : { "bool" :{ "must" :{ … --- ## [Compare Two Indexes](https://discuss.elastic.co/t/compare-two-indexes/269254)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 16\ **Last updated:** [April 8, 2021, 7:31am UTC](https://discuss.elastic.co/t/compare-two-indexes/269254 "2021-04-08T07:31:12Z")
Hi, I have one document in one index and other document in other index. Now I want to compare the fields of these two documents of different indexes. Is it possible to do it, not sure did some couldn't find any satisfac… --- ## [Aggregation on substring of a specific field](https://discuss.elastic.co/t/aggregation-on-substring-of-a-specific-field/269412)
**Author:** [@111457](https://discuss.elastic.co/u/111457)\ **Replies:** 4\ **Last updated:** [April 8, 2021, 6:49am UTC](https://discuss.elastic.co/t/aggregation-on-substring-of-a-specific-field/269412 "2021-04-08T06:49:01Z")
Hi. I'm trying to aggregate on part of strings of a given field. For example, I have 5 documents in an index "Petroglyph". Each documents includes a field called "Site". In "Site", input values follow pattern like 'si… --- ## [Security for Elasticsearch](https://discuss.elastic.co/t/security-for-elasticsearch/269210)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 17\ **Last updated:** [April 8, 2021, 6:18am UTC](https://discuss.elastic.co/t/security-for-elasticsearch/269210 "2021-04-08T06:18:26Z")
I have followed everything on YouTube: Getting Star but I just made 1 elastic not 2 as requested. is that a problem? I have made the cert in / config and also I have followed everything I made the xpack in elasticsearc… --- ## [One ES Data node's CPU jumps to 90%+ suddenly while in production](https://discuss.elastic.co/t/one-es-data-nodes-cpu-jumps-to-90-suddenly-while-in-production/267610)
**Author:** [@zxx\_bd](https://discuss.elastic.co/u/zxx_bd)\ **Replies:** 6\ **Last updated:** [April 8, 2021, 6:13am UTC](https://discuss.elastic.co/t/one-es-data-nodes-cpu-jumps-to-90-suddenly-while-in-production/267610 "2021-04-08T06:13:20Z")
Hi, guys, we are running an ES cluster with 7.1.1 in production, and everything looks good while one day, a data node's CPU jumps to 90%+ suddenly, and all of the queries related to the index on that nodes were time out… --- ## [Multiple highlight on one field](https://discuss.elastic.co/t/multiple-highlight-on-one-field/269549)
**Author:** [@futorio](https://discuss.elastic.co/u/futorio)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 5:38am UTC](https://discuss.elastic.co/t/multiple-highlight-on-one-field/269549 "2021-04-08T05:38:45Z")
Hello, i need to use 2 highlights on one field. For example: "query": {...}, "highlight": { "fields": { "text": \[ "highlight\_1": {...}, "highlight\_2": {...} … --- ## [Is scroll id always same for one user](https://discuss.elastic.co/t/is-scroll-id-always-same-for-one-user/269517)
**Author:** [@IliaIsakhin](https://discuss.elastic.co/u/IliaIsakhin)\ **Replies:** 5\ **Last updated:** [April 8, 2021, 5:33am UTC](https://discuss.elastic.co/t/is-scroll-id-always-same-for-one-user/269517 "2021-04-08T05:33:52Z")
For example, I have an Elasticsearch cluster with a single user and two different applications that want to retrieve all documents from the index to process them. Both applications are using search with scroll mechanism … --- ## [Conditionally run aggregation](https://discuss.elastic.co/t/conditionally-run-aggregation/269546)
**Author:** [@bhimawan](https://discuss.elastic.co/u/bhimawan)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 5:04am UTC](https://discuss.elastic.co/t/conditionally-run-aggregation/269546 "2021-04-08T05:04:26Z")
I'm wondering if there's any way to run aggregation conditionally. So I have a \_search request that have both query and aggs param. So the aggs is scoped by the query param. Now if the query return no hits, is there a … --- ## [Trying to setup logstash with a github repo](https://discuss.elastic.co/t/trying-to-setup-logstash-with-a-github-repo/269541)
**Author:** [@anon65617794](https://discuss.elastic.co/u/anon65617794)\ **Replies:** 5\ **Last updated:** [April 8, 2021, 3:37am UTC](https://discuss.elastic.co/t/trying-to-setup-logstash-with-a-github-repo/269541 "2021-04-08T03:37:44Z")
I'm using this github repo \*as start point. Started elasticsearch,kibana from a docker-compose file and currently trying to add logstash -f logstash.conf to work in command prompt but reaches a error message. = GitHub … --- ## [Help With Validating This Filebeat Config](https://discuss.elastic.co/t/help-with-validating-this-filebeat-config/269164)
**Author:** [@LongBeachHXC](https://discuss.elastic.co/u/LongBeachHXC)\ **Replies:** 4\ **Last updated:** [April 8, 2021, 3:20am UTC](https://discuss.elastic.co/t/help-with-validating-this-filebeat-config/269164 "2021-04-08T03:20:40Z")
I am having the toughest time getting filebeat to send logs to my elastic stack. Am I missing something? I have heartbeat and metricbeat working. Filebeat is being fussy with me. filebeat.config: modules: path: ${… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1470) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1472)