# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1475

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1476

---

## [Dotted lines in visualization when doint split series with Kibana 7.12.0](https://discuss.elastic.co/t/dotted-lines-in-visualization-when-doint-split-series-with-kibana-7-12-0/269379)

<div class="topic-metadata">

**Author:** [@Bastian\_Jager](https://discuss.elastic.co/u/Bastian_Jager)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 8:28pm UTC](https://discuss.elastic.co/t/dotted-lines-in-visualization-when-doint-split-series-with-kibana-7-12-0/269379 "2021-04-06T20:28:18Z")

</div>

Since the update to Kibana 7.12.0 we see these annoying dotted lines going to zero in case there is a data sample or two missing (no dense data) that is split like this: But if we filter for e.g. on device, things lo…

---

## [Stemmer filter not working as expected when search, wont find some exact words](https://discuss.elastic.co/t/stemmer-filter-not-working-as-expected-when-search-wont-find-some-exact-words/269377)

<div class="topic-metadata">

**Author:** [@Old\_Relict](https://discuss.elastic.co/u/Old_Relict)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 8:23pm UTC](https://discuss.elastic.co/t/stemmer-filter-not-working-as-expected-when-search-wont-find-some-exact-words/269377 "2021-04-06T20:23:47Z")

</div>

I have a simple search field. The search results work strangely.. some search work as expected, other not. For example 'Building', if I search for the exact term, it wont find the search. Other words, like for example '…

---

## [Stacked bar graph not showing percentage](https://discuss.elastic.co/t/stacked-bar-graph-not-showing-percentage/269378)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 8:17pm UTC](https://discuss.elastic.co/t/stacked-bar-graph-not-showing-percentage/269378 "2021-04-06T20:17:23Z")

</div>

Hello, I'm using Kibana 7.3.2 where I have created a stacked bar graph where I have the count of two fields in the form of a percentage to each other. When I select show values on chart, it shows a decimal number inste…

---

## [Sort on TSVB column when Last Value is selected](https://discuss.elastic.co/t/sort-on-tsvb-column-when-last-value-is-selected/268662)

<div class="topic-metadata">

**Author:** [@Raynb](https://discuss.elastic.co/u/Raynb)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 7:16pm UTC](https://discuss.elastic.co/t/sort-on-tsvb-column-when-last-value-is-selected/268662 "2021-04-06T19:16:21Z")

</div>

I have a TSVB table that is showing simple aggregations (sum of field) and I am showing it as last value. However when I sort descending it is instead sorting based on the entire time range (sort order does not match num…

---

## [Kibana Plugin Development - Introducing a new Button](https://discuss.elastic.co/t/kibana-plugin-development-introducing-a-new-button/269360)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 5:53pm UTC](https://discuss.elastic.co/t/kibana-plugin-development-introducing-a-new-button/269360 "2021-04-06T17:53:36Z")

</div>

I want to develop a new plug in which adds a new button to one of my dashboards. Once that button is clicked, I want to get the values of filter applied on that dashboard and save that filter value in a CSV file. Can so…

---

## [Shards randomly going into "initializing"/"unassigned" state even when the cluster is in stable state](https://discuss.elastic.co/t/shards-randomly-going-into-initializing-unassigned-state-even-when-the-cluster-is-in-stable-state/269329)

<div class="topic-metadata">

**Author:** [@dinesh\_gnanasamy](https://discuss.elastic.co/u/dinesh_gnanasamy)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 5:26pm UTC](https://discuss.elastic.co/t/shards-randomly-going-into-initializing-unassigned-state-even-when-the-cluster-is-in-stable-state/269329 "2021-04-06T17:26:33Z")

</div>

Description : Even without any nodal disturbances (nodes leaving/joining), some shards go into INITIALIZING, UNASSIGNED states randomly over 24-48 hours. Environment : ES Version : 7.0.1 No of nodes : 12 (No specific…

---

## [Selectively ignore dashboard global filters](https://discuss.elastic.co/t/selectively-ignore-dashboard-global-filters/269292)

<div class="topic-metadata">

**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\
**Replies:** 3\
**Last updated:** [April 6, 2021, 4:40pm UTC](https://discuss.elastic.co/t/selectively-ignore-dashboard-global-filters/269292 "2021-04-06T16:40:27Z")

</div>

I have a dashboard with two filters, and I need to set a visualization that uses the second one. There is an option to Ignore Global Filter in TSVB, but it ignores both of them. Can a visualization apply the second filte…

---

## [Elk stack](https://discuss.elastic.co/t/elk-stack/269231)

<div class="topic-metadata">

**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\
**Replies:** 3\
**Last updated:** [April 6, 2021, 4:36pm UTC](https://discuss.elastic.co/t/elk-stack/269231 "2021-04-06T16:36:20Z")

</div>

hi i hope this message finds you well ,so how can i add correlation rules to my Elk Stack regards and thank

---

## [\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/267826)

<div class="topic-metadata">

**Author:** [@gerald716](https://discuss.elastic.co/u/gerald716)\
**Replies:** 6\
**Last updated:** [April 6, 2021, 4:30pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/267826 "2021-04-06T16:30:31Z")

</div>

\[2021-03-18T15:33:29,348\]\[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"http://elastic:xxxxxx@127.0.0.1:9200/", :error\_type=\>LogStash::Outputs::E…

---

## [Documents are not getting inserted in ES6.2](https://discuss.elastic.co/t/documents-are-not-getting-inserted-in-es6-2/267968)

<div class="topic-metadata">

**Author:** [@rajat\_singh1](https://discuss.elastic.co/u/rajat_singh1)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 4:26pm UTC](https://discuss.elastic.co/t/documents-are-not-getting-inserted-in-es6-2/267968 "2021-04-06T16:26:21Z")

</div>

Hi, I'm trying to insert documents in ES 6.2. My concern is when I'm inserting data into ES by mapping one of index and mentioning "index": false, This is my mapping query: ' "state": { "type": "text", "index"…

---

## [Json parse exception](https://discuss.elastic.co/t/json-parse-exception/269035)

<div class="topic-metadata">

**Author:** [@jayasree](https://discuss.elastic.co/u/jayasree)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 4:22pm UTC](https://discuss.elastic.co/t/json-parse-exception/269035 "2021-04-06T16:22:14Z")

</div>

Hi Team, We are using elastic search cloud. we got below error. Please help me in resolving this. PHP Fatal error: Uncaught Elasticsearch\\Common\\Exceptions\\BadRequest400Exception: {"error":{"root\_cause":\[{"type":"json\_…

---

## [NoNodesAvailableException: No alive nodes found in your cluster](https://discuss.elastic.co/t/nonodesavailableexception-no-alive-nodes-found-in-your-cluster/268647)

<div class="topic-metadata">

**Author:** [@sewox](https://discuss.elastic.co/u/sewox)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 4:15pm UTC](https://discuss.elastic.co/t/nonodesavailableexception-no-alive-nodes-found-in-your-cluster/268647 "2021-04-06T16:15:20Z")

</div>

Hi everyone, I tried different ways this issue but I can't fix it. Elasticsearch service is running. this is throws exception Fatal error: Uncaught Elasticsearch\\Common\\Exceptions\\NoNodesAvailableException: No alive …

---

## [SQL query do not return whole data](https://discuss.elastic.co/t/sql-query-do-not-return-whole-data/269309)

<div class="topic-metadata">

**Author:** [@czmoku](https://discuss.elastic.co/u/czmoku)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 4:11pm UTC](https://discuss.elastic.co/t/sql-query-do-not-return-whole-data/269309 "2021-04-06T16:11:23Z")

</div>

Hello We facing with issue with Apache Superset + elasticsearch. Apache Superset use the SQL (this one Elasticsearch SQL: Query Elasticsearch Indices with SQL | Elastic) and we notice problems with fetching old data. Ou…

---

## [Elasticsearch plugin error while installing analysis-icu,zenity and analysis-phonetic](https://discuss.elastic.co/t/elasticsearch-plugin-error-while-installing-analysis-icu-zenity-and-analysis-phonetic/269237)

<div class="topic-metadata">

**Author:** [@ishan2](https://discuss.elastic.co/u/ishan2)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-error-while-installing-analysis-icu-zenity-and-analysis-phonetic/269237 "2021-04-06T16:09:01Z")

</div>

Elastic search plugin error while installing analysis-icu: $bin/elasticsearch-plugin install analysis-icu Error: Could not find or load main class org.elasticsearch.plugins.PluginCli Caused by: java.lang.ClassNotFoundEx…

---

## [Logstash or Spark -- Elasticsearch](https://discuss.elastic.co/t/logstash-or-spark-elasticsearch/269313)

<div class="topic-metadata">

**Author:** [@alvgoro](https://discuss.elastic.co/u/alvgoro)\
**Replies:** 3\
**Last updated:** [April 6, 2021, 4:05pm UTC](https://discuss.elastic.co/t/logstash-or-spark-elasticsearch/269313 "2021-04-06T16:05:13Z")

</div>

Hi there! I was searching on Google and this forum but I am still undecided. I would like to develop a system which collects logs from several servers and then analyze them. I thinked about Beats to collect logs (and …

---

## [Logstash Post Install of plugins](https://discuss.elastic.co/t/logstash-post-install-of-plugins/269348)

<div class="topic-metadata">

**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 3:47pm UTC](https://discuss.elastic.co/t/logstash-post-install-of-plugins/269348 "2021-04-06T15:47:46Z")

</div>

For those who are struggeling with the install of plugins and having them install on spinning up a container I have wrote this mount the file from your volumn outside the container to Container Path: /usr/share/logstas…

---

## [Filebeat AWS S3 Module not working](https://discuss.elastic.co/t/filebeat-aws-s3-module-not-working/268781)

<div class="topic-metadata">

**Author:** [@bapa](https://discuss.elastic.co/u/bapa)\
**Replies:** 6\
**Last updated:** [April 6, 2021, 3:42pm UTC](https://discuss.elastic.co/t/filebeat-aws-s3-module-not-working/268781 "2021-04-06T15:42:30Z")

</div>

Hi Team, We are facing the filebeat aws s3 module issue in version 7.10 ,7.10.1, 7.11.0, 7.11.1, 7.11.2, 7.12.0 We have deployed the filebeat in k8s environment. And the ELK with ECK operator. While we tried to use th…

---

## [Data Transfer from Sql Server to Elasticsearch with SSIS and CData](https://discuss.elastic.co/t/data-transfer-from-sql-server-to-elasticsearch-with-ssis-and-cdata/269307)

<div class="topic-metadata">

**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 3:42pm UTC](https://discuss.elastic.co/t/data-transfer-from-sql-server-to-elasticsearch-with-ssis-and-cdata/269307 "2021-04-06T15:42:14Z")

</div>

I am trying to data transfer from Sql Server to Elasticsearch with SSIS (Microsoft SQL Server Integration Services) application using CData Elasticsearch Destination tool. What I am successfully for now. Using SSIS I …

---

## [Elasticsearch - Forcemerge to merge several shards](https://discuss.elastic.co/t/elasticsearch-forcemerge-to-merge-several-shards/269310)

<div class="topic-metadata">

**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-forcemerge-to-merge-several-shards/269310 "2021-04-06T15:40:48Z")

</div>

I have indexes that are created weekly, associated to an allias. The indexes were configured for two shards, and one replica per shard. The shards are very low space, around 50 mb, so I think those could be converted to …

---

## [I am getting this error when running logstash configuration pipeline through logstash.yml file](https://discuss.elastic.co/t/i-am-getting-this-error-when-running-logstash-configuration-pipeline-through-logstash-yml-file/269318)

<div class="topic-metadata">

**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 3:40pm UTC](https://discuss.elastic.co/t/i-am-getting-this-error-when-running-logstash-configuration-pipeline-through-logstash-yml-file/269318 "2021-04-06T15:40:23Z")

</div>

I have written a logstash configuration pipeline that receive events from syslog and stores that events in elasticsearch.When I run this pipeline through command line everything works fine,but when I run this pipeline th…

---

## [Server Company and Developer Company keep passing the buck](https://discuss.elastic.co/t/server-company-and-developer-company-keep-passing-the-buck/269343)

<div class="topic-metadata">

**Author:** [@Joanchka](https://discuss.elastic.co/u/Joanchka)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 3:36pm UTC](https://discuss.elastic.co/t/server-company-and-developer-company-keep-passing-the-buck/269343 "2021-04-06T15:36:05Z")

</div>

I want to upgrade my Magento to 2.4.2. The Developer Company who is doing this upgrade asked me to ensure my server has ElasticSearch 7.9.2 The Server Company installed ElasticSearch 7.9.2 on my server (I can see this …

---

## [Grok works (no grok parse failure) but doesnt create the fields](https://discuss.elastic.co/t/grok-works-no-grok-parse-failure-but-doesnt-create-the-fields/269203)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 7\
**Last updated:** [April 6, 2021, 3:15pm UTC](https://discuss.elastic.co/t/grok-works-no-grok-parse-failure-but-doesnt-create-the-fields/269203 "2021-04-06T15:15:45Z")

</div>

Hi I have a field called "if\_speed\_in\_out", this field contains strings like this "100 Mbps:100 Mbps" i have tested the grok on kibana devs tools and works, but never create the fields defined in the grok, just get the o…

---

## [Fix for CVE-2021-22134 in 7.10.X version](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340)

<div class="topic-metadata">

**Author:** [@Ruslan\_Kovpey](https://discuss.elastic.co/u/Ruslan_Kovpey)\
**Replies:** 3\
**Last updated:** [April 6, 2021, 2:53pm UTC](https://discuss.elastic.co/t/fix-for-cve-2021-22134-in-7-10-x-version/269340 "2021-04-06T14:53:55Z")

</div>

Hello, do exist any plans to create a security patch for CVE-2021-22134 NVD - CVE-2021-22134 in 7.10.x version, if yes then when? Thanks

---

## [Cannot read elasticsearch.hosts from kibana configuration](https://discuss.elastic.co/t/cannot-read-elasticsearch-hosts-from-kibana-configuration/269232)

<div class="topic-metadata">

**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\
**Replies:** 3\
**Last updated:** [April 6, 2021, 2:12pm UTC](https://discuss.elastic.co/t/cannot-read-elasticsearch-hosts-from-kibana-configuration/269232 "2021-04-06T14:12:51Z")

</div>

Hi all, We were trying to read the elasticsearch cluster hosts in out plugin's server-side, but we were unable to find anything in the context parameter in callback function. as shown in below code: export function de…

---

## [Logstash translate filter and converting integers to strings](https://discuss.elastic.co/t/logstash-translate-filter-and-converting-integers-to-strings/268803)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 2\
**Last updated:** [April 6, 2021, 2:48pm UTC](https://discuss.elastic.co/t/logstash-translate-filter-and-converting-integers-to-strings/268803 "2021-04-06T14:48:13Z")

</div>

I am on logstash 7.11. I need a translate from an integer code to real speed value. mutate { convert =\> { "ifspeed" =\> "string" } } translate { field =\> "\[ifspeed\]" destination =\> "\[inf\_speed\]" dictionary =\> …

---

## [Using Vega to create a Histogram with Global Mean](https://discuss.elastic.co/t/using-vega-to-create-a-histogram-with-global-mean/269335)

<div class="topic-metadata">

**Author:** [@AquaX](https://discuss.elastic.co/u/AquaX)\
**Replies:** 4\
**Last updated:** [April 6, 2021, 2:37pm UTC](https://discuss.elastic.co/t/using-vega-to-create-a-histogram-with-global-mean/269335 "2021-04-06T14:37:52Z")

</div>

Hey everyone. EDIT: I'm using Kibana 7.11 I'm eventually trying to create one of these diagrams using Vega-Lite: It looks easy enough but I'm trying to use pre-aggregated data so I'm starting by just trying to get t…

---

## [PDF reporting option not available in free licensed version](https://discuss.elastic.co/t/pdf-reporting-option-not-available-in-free-licensed-version/269324)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 1\
**Last updated:** [April 6, 2021, 2:33pm UTC](https://discuss.elastic.co/t/pdf-reporting-option-not-available-in-free-licensed-version/269324 "2021-04-06T14:33:28Z")

</div>

I am using a free version of Kibana and wondering whether it is allowed to generate PDF reports from dashboard or not? I do not get any option for PDF report when I click on Share on my dashboard.

---

## [Logstash workers dying randomly](https://discuss.elastic.co/t/logstash-workers-dying-randomly/269342)

<div class="topic-metadata">

**Author:** [@Fran\_Raknic](https://discuss.elastic.co/u/Fran_Raknic)\
**Replies:** 0\
**Last updated:** [April 6, 2021, 2:20pm UTC](https://discuss.elastic.co/t/logstash-workers-dying-randomly/269342 "2021-04-06T14:20:33Z")

</div>

Hello, we use Logstash to collect syslog messages from network devices. The instance has one pipeline listening on UDP port 7514 with 16 workers, the filter part consists of a couple of grok patterns, mutate fileds, DNS…

---

## [Elastic Agent will not upgrade through fleet or locally](https://discuss.elastic.co/t/elastic-agent-will-not-upgrade-through-fleet-or-locally/269337)

<div class="topic-metadata">

**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\
**Replies:** 0\
**Last updated:** [April 6, 2021, 2:10pm UTC](https://discuss.elastic.co/t/elastic-agent-will-not-upgrade-through-fleet-or-locally/269337 "2021-04-06T14:10:06Z")

</div>

Hi, We deployed the agent to a number of devices for testing. At the time the Elastic stack and Agents were on version 7.10.1 . We have recently upgraded our stack to 7.12.0 and as you would expect the agents in fleet …

---

## [Failed to load indices and failed to load cluster](https://discuss.elastic.co/t/failed-to-load-indices-and-failed-to-load-cluster/269124)

<div class="topic-metadata">

**Author:** [@FOMihai](https://discuss.elastic.co/u/FOMihai)\
**Replies:** 4\
**Last updated:** [April 6, 2021, 2:00pm UTC](https://discuss.elastic.co/t/failed-to-load-indices-and-failed-to-load-cluster/269124 "2021-04-06T14:00:10Z")

</div>

Hello, I have ELK stack installed with: Elasticsearch version 7.11 and Kibana 7.8.1 with RoR free version for security. I plan also to upgrade Kibana to a version more appropriate to elastic search 7.11. I have the…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1474)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1476)
