# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1490

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1491

---

## [How can I plot geoinformation from elasticsearch index on kibana maps? I am using kibana version 7.11.1](https://discuss.elastic.co/t/how-can-i-plot-geoinformation-from-elasticsearch-index-on-kibana-maps-i-am-using-kibana-version-7-11-1/268301)

<div class="topic-metadata">

**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\
**Replies:** 4\
**Last updated:** [March 26, 2021, 11:26am UTC](https://discuss.elastic.co/t/how-can-i-plot-geoinformation-from-elasticsearch-index-on-kibana-maps-i-am-using-kibana-version-7-11-1/268301 "2021-03-26T11:26:01Z")

</div>

Hii.I have documents in my elasticsearch index which contains geographical information.How can I plot this information on kibana maps? This is my document:- { "@timestamp" =\> 2021-03-25T07:39:16.648Z, "myl…

---

## [How to use dashbaord plugin in own custom kibana plugin?](https://discuss.elastic.co/t/how-to-use-dashbaord-plugin-in-own-custom-kibana-plugin/268436)

<div class="topic-metadata">

**Author:** [@Kishan\_Sheth](https://discuss.elastic.co/u/Kishan_Sheth)\
**Replies:** 1\
**Last updated:** [March 26, 2021, 10:46am UTC](https://discuss.elastic.co/t/how-to-use-dashbaord-plugin-in-own-custom-kibana-plugin/268436 "2021-03-26T10:46:01Z")

</div>

I want to use the dashboard plugin in my own custom plugin of kibana. When i visit to my plugin page a dropdown should be displayed in which all the dashboards are displayed. When i select one of the dashbaord i want to…

---

## [Embed dashboard with filters in web site page](https://discuss.elastic.co/t/embed-dashboard-with-filters-in-web-site-page/268408)

<div class="topic-metadata">

**Author:** [@stefano\_de\_simone](https://discuss.elastic.co/u/stefano_de_simone)\
**Replies:** 4\
**Last updated:** [March 26, 2021, 10:24am UTC](https://discuss.elastic.co/t/embed-dashboard-with-filters-in-web-site-page/268408 "2021-03-26T10:24:50Z")

</div>

Hi, is it possible to embed a dashboard with filters in a web page? The requirement is that the user can set filters. Thanks in advance Stefano

---

## [Is it possible to search on the field name through wildcard?](https://discuss.elastic.co/t/is-it-possible-to-search-on-the-field-name-through-wildcard/268452)

<div class="topic-metadata">

**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\
**Replies:** 4\
**Last updated:** [March 26, 2021, 10:06am UTC](https://discuss.elastic.co/t/is-it-possible-to-search-on-the-field-name-through-wildcard/268452 "2021-03-26T10:06:47Z")

</div>

Hello, I need to make a query that returns all the document names that have a value greater than 3. The problem is that the names of the documents are changing and are all different, so I do not know the full name of th…

---

## [Hide parameters in Spark History server](https://discuss.elastic.co/t/hide-parameters-in-spark-history-server/268464)

<div class="topic-metadata">

**Author:** [@pablo.jimenez.next](https://discuss.elastic.co/u/pablo.jimenez.next)\
**Replies:** 0\
**Last updated:** [March 26, 2021, 10:06am UTC](https://discuss.elastic.co/t/hide-parameters-in-spark-history-server/268464 "2021-03-26T10:06:37Z")

</div>

Hi, We are trying to connect Spark 3.0.1 with Elasticsearch using the Elastic-hadoop library (Maven Repository: org.elasticsearch » elasticsearch-spark-30) and everything works fine. However, we are using Spark History…

---

## [Refused to load image bolb](https://discuss.elastic.co/t/refused-to-load-image-bolb/268449)

<div class="topic-metadata">

**Author:** [@mukhtorov](https://discuss.elastic.co/u/mukhtorov)\
**Replies:** 2\
**Last updated:** [March 26, 2021, 9:54am UTC](https://discuss.elastic.co/t/refused-to-load-image-bolb/268449 "2021-03-26T09:54:16Z")

</div>

I've tried to modify csp.rules and chrome.pug and other different ways but still getting this error I've

---

## [Problem with time series graphic in Canvas](https://discuss.elastic.co/t/problem-with-time-series-graphic-in-canvas/268377)

<div class="topic-metadata">

**Author:** [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\
**Replies:** 6\
**Last updated:** [March 26, 2021, 9:22am UTC](https://discuss.elastic.co/t/problem-with-time-series-graphic-in-canvas/268377 "2021-03-26T09:22:26Z")

</div>

I am having some issues trying to get a simple cardinal account of documents in an index to show up on a time series graph. I'm using timelion expression and the only thing I ever get back is 0. The data that I have in…

---

## [Convert ElasticSearch index to sql](https://discuss.elastic.co/t/convert-elasticsearch-index-to-sql/268310)

<div class="topic-metadata">

**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\
**Replies:** 8\
**Last updated:** [March 26, 2021, 8:32am UTC](https://discuss.elastic.co/t/convert-elasticsearch-index-to-sql/268310 "2021-03-26T08:32:56Z")

</div>

Hello, I currently use elasticsearch for my graylog server, everything works fine but disk space fills up too fast I understood that it is possible to convert elasticsearch indexes into sql tables, which seems to me to…

---

## [Problem creating docker container for arm64](https://discuss.elastic.co/t/problem-creating-docker-container-for-arm64/268367)

<div class="topic-metadata">

**Author:** [@suityou01](https://discuss.elastic.co/u/suityou01)\
**Replies:** 1\
**Last updated:** [March 26, 2021, 8:24am UTC](https://discuss.elastic.co/t/problem-creating-docker-container-for-arm64/268367 "2021-03-26T08:24:09Z")

</div>

Hi, I've created a docker image for filebeat for arm64 arch. This is what my simplistic docker file looks like FROM golang:1.15.10 RUN \\ apt-get update \\ && apt-get install -y --no-install-recommends…

---

## [Remove IPV6 from host.ip and host.mac field](https://discuss.elastic.co/t/remove-ipv6-from-host-ip-and-host-mac-field/268095)

<div class="topic-metadata">

**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\
**Replies:** 3\
**Last updated:** [March 26, 2021, 7:58am UTC](https://discuss.elastic.co/t/remove-ipv6-from-host-ip-and-host-mac-field/268095 "2021-03-26T07:58:36Z")

</div>

Hi, after filebeat upgrade (installed as daemonset on openshift) from 7.6.2 to 7.9.1 I get very big amount of data per field for host.ip and host.mac. Before upgrade it was just IP version 4 and now I have multiple line…

---

## [Elasticsearch does not find the result in the first search after the space character in NEST](https://discuss.elastic.co/t/elasticsearch-does-not-find-the-result-in-the-first-search-after-the-space-character-in-nest/268447)

<div class="topic-metadata">

**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\
**Replies:** 0\
**Last updated:** [March 26, 2021, 7:26am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-find-the-result-in-the-first-search-after-the-space-character-in-nest/268447 "2021-03-26T07:26:20Z")

</div>

I am indexing in elasticsearch as I share below. But after I do the indexing process, when I search in autocomplete, it finds the text I searched for before the space, but the first key I press after the space character …

---

## [Clarification on buckets for range aggregation](https://discuss.elastic.co/t/clarification-on-buckets-for-range-aggregation/268435)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 1\
**Last updated:** [March 26, 2021, 4:53am UTC](https://discuss.elastic.co/t/clarification-on-buckets-for-range-aggregation/268435 "2021-03-26T04:53:02Z")

</div>

I just wanted some clarification on what data would be included in my buckets if I did a range aggregation, it was not clear to me in reading the documentation (Range aggregation | Elasticsearch Reference \[7.12\] | Elasti…

---

## [Does Elasticsearch and kibana use bzip2](https://discuss.elastic.co/t/does-elasticsearch-and-kibana-use-bzip2/267507)

<div class="topic-metadata">

**Author:** [@nkarthik](https://discuss.elastic.co/u/nkarthik)\
**Replies:** 8\
**Last updated:** [March 26, 2021, 3:07am UTC](https://discuss.elastic.co/t/does-elasticsearch-and-kibana-use-bzip2/267507 "2021-03-26T03:07:38Z")

</div>

Hi, Does kibana or Elasticsearch use bzip2 ? If yes, How can I check what is the current version?

---

## [Encrypting HTTP client communications](https://discuss.elastic.co/t/encrypting-http-client-communications/268230)

<div class="topic-metadata">

**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\
**Replies:** 1\
**Last updated:** [March 26, 2021, 2:37am UTC](https://discuss.elastic.co/t/encrypting-http-client-communications/268230 "2021-03-26T02:37:44Z")

</div>

According to elasticsearch reference \[7.12\] , as I understood, we can encrypt HTTP client communications with any of the following .p12 certificates: First option : use the same certificate which I have used for encryp…

---

## [I want to combine field](https://discuss.elastic.co/t/i-want-to-combine-field/268300)

<div class="topic-metadata">

**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\
**Replies:** 2\
**Last updated:** [March 26, 2021, 1:46am UTC](https://discuss.elastic.co/t/i-want-to-combine-field/268300 "2021-03-26T01:46:38Z")

</div>

I want to new create "Message" field by "Thread" + "Loglevel" + "Content". Please teach me how to do it. Raw log. \[13172\] \[INFO\] 2021-03-25 09:18:21.150 +0900 : Java class name: org.apache.catalina.startup.Bootstrap; …

---

## [Kibana alert on index threshold](https://discuss.elastic.co/t/kibana-alert-on-index-threshold/268221)

<div class="topic-metadata">

**Author:** [@sireesha\_m](https://discuss.elastic.co/u/sireesha_m)\
**Replies:** 7\
**Last updated:** [March 26, 2021, 12:53am UTC](https://discuss.elastic.co/t/kibana-alert-on-index-threshold/268221 "2021-03-26T00:53:18Z")

</div>

I have created an index 'foo'. I created an alert of type index threshold to send emails when any info is written in this index. But I see that the alert has not changed to 'active' state. It stays in 'ok' and I see no …

---

## [Beats on ppc64le](https://discuss.elastic.co/t/beats-on-ppc64le/268213)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 1\
**Last updated:** [March 26, 2021, 12:25am UTC](https://discuss.elastic.co/t/beats-on-ppc64le/268213 "2021-03-26T00:25:31Z")

</div>

Hi, I am trying to install beats on ppc64le on Redhat OS on production server. I have tried rpm 32, 64 bit also tried aarch64 bit package but getting error : Package metricbeat is intended for different architecture. …

---

## [Write queue size in elasticsearch 6.8.5](https://discuss.elastic.co/t/write-queue-size-in-elasticsearch-6-8-5/268311)

<div class="topic-metadata">

**Author:** [@Bengagi\_Foued](https://discuss.elastic.co/u/Bengagi_Foued)\
**Replies:** 1\
**Last updated:** [March 25, 2021, 11:56pm UTC](https://discuss.elastic.co/t/write-queue-size-in-elasticsearch-6-8-5/268311 "2021-03-25T23:56:21Z")

</div>

settings : thread\_pool.write.queue\_size: 500 , default value is 200 exception thrown : failed to execute pipeline for a bulk request org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execut…

---

## [Getting to geo\_point types for maps](https://discuss.elastic.co/t/getting-to-geo-point-types-for-maps/268405)

<div class="topic-metadata">

**Author:** [@snobysmake](https://discuss.elastic.co/u/snobysmake)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 11:54pm UTC](https://discuss.elastic.co/t/getting-to-geo-point-types-for-maps/268405 "2021-03-25T23:54:02Z")

</div>

I'm trying to create a template before creating the index so that we can get to display location on maps. We have multiple AWS Load Balancer and want to look from where traffic is coming from. We use ElasticSearch Vers…

---

## [Functionbeat Kinesis Record Deaggregation (contribution)](https://discuss.elastic.co/t/functionbeat-kinesis-record-deaggregation-contribution/268420)

<div class="topic-metadata">

**Author:** [@jpaskhay](https://discuss.elastic.co/u/jpaskhay)\
**Replies:** 0\
**Last updated:** [March 25, 2021, 11:47pm UTC](https://discuss.elastic.co/t/functionbeat-kinesis-record-deaggregation-contribution/268420 "2021-03-25T23:47:26Z")

</div>

Hey there, Our team would like to make use of Kinesis record aggregation to save on AWS costs (high throughput of \<1KiB size logs), but it appears FunctionBeat does not currently handle the Kinesis aggregate record form…

---

## [Canvas with live data on website](https://discuss.elastic.co/t/canvas-with-live-data-on-website/268354)

<div class="topic-metadata">

**Author:** [@Rosie](https://discuss.elastic.co/u/Rosie)\
**Replies:** 1\
**Last updated:** [March 25, 2021, 10:18pm UTC](https://discuss.elastic.co/t/canvas-with-live-data-on-website/268354 "2021-03-25T22:18:18Z")

</div>

Hi all, I would like to add a canvas on our public website, so people can consult the latest and live data. Is this possible in Kibana Canvas? Best wishes, Rosie

---

## [Call Elasticsearch queries from Custom Kibana Plugin](https://discuss.elastic.co/t/call-elasticsearch-queries-from-custom-kibana-plugin/268179)

<div class="topic-metadata">

**Author:** [@theonlycatonice](https://discuss.elastic.co/u/theonlycatonice)\
**Replies:** 8\
**Last updated:** [March 25, 2021, 8:55pm UTC](https://discuss.elastic.co/t/call-elasticsearch-queries-from-custom-kibana-plugin/268179 "2021-03-25T20:55:56Z")

</div>

Good day, I have searched high and low for an example that works in 2021 (ES 7.11) on how to implement ES querying from a Custom Kibana Plugin. The use case is there are config files stored in an index that we would like…

---

## [Logviewing - filebeat - Timestamp](https://discuss.elastic.co/t/logviewing-filebeat-timestamp/268375)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 8:34pm UTC](https://discuss.elastic.co/t/logviewing-filebeat-timestamp/268375 "2021-03-25T20:34:50Z")

</div>

Hello there, I am exploring ELK capabilities for log viewing. I understand how to ingest log data into elasticsearch through filebeat and viewing from Kibana. but I noticed that if I select timestamp while creating ind…

---

## [Performance and storage of the dense\_vector type](https://discuss.elastic.co/t/performance-and-storage-of-the-dense-vector-type/265850)

<div class="topic-metadata">

**Author:** [@Jacek\_Wolkowicz](https://discuss.elastic.co/u/Jacek_Wolkowicz)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 8:20pm UTC](https://discuss.elastic.co/t/performance-and-storage-of-the-dense-vector-type/265850 "2021-03-25T20:20:53Z")

</div>

While testing the dense\_vector type for 'indexing' of deep n-n embeddings, I came up with a very confusing outcome. I have been testing the impact and performance of the following part of the mapping: { ... 'embeddi…

---

## [How to create hyperlink in Kibana Canvas data table](https://discuss.elastic.co/t/how-to-create-hyperlink-in-kibana-canvas-data-table/267583)

<div class="topic-metadata">

**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\
**Replies:** 8\
**Last updated:** [March 25, 2021, 7:45pm UTC](https://discuss.elastic.co/t/how-to-create-hyperlink-in-kibana-canvas-data-table/267583 "2021-03-25T19:45:16Z")

</div>

Hi, all. I am trying to create hyperlinks in Kibana's Canvas data table. I have already defined the fields with Url format in the Index Patterns page(some users suggested that the keyword version of the fields be define…

---

## [Aggs returning more Cardinality than Source documents](https://discuss.elastic.co/t/aggs-returning-more-cardinality-than-source-documents/268142)

<div class="topic-metadata">

**Author:** [@LeeBear](https://discuss.elastic.co/u/LeeBear)\
**Replies:** 3\
**Last updated:** [March 25, 2021, 6:57pm UTC](https://discuss.elastic.co/t/aggs-returning-more-cardinality-than-source-documents/268142 "2021-03-25T18:57:08Z")

</div>

I am running: { "size": 0, "track\_total\_hits": true, "query": { "bool": { "must": \[ {"match": {"prgx\_email\_join": {"query": "attachmentChild" } } } \] } }, "aggs": { "attachment\_count" : { "cardi…

---

## [Remove multiple similar prefix events from a json variable](https://discuss.elastic.co/t/remove-multiple-similar-prefix-events-from-a-json-variable/268402)

<div class="topic-metadata">

**Author:** [@rgreen](https://discuss.elastic.co/u/rgreen)\
**Replies:** 1\
**Last updated:** [March 25, 2021, 6:46pm UTC](https://discuss.elastic.co/t/remove-multiple-similar-prefix-events-from-a-json-variable/268402 "2021-03-25T18:46:01Z")

</div>

How can I remove multiple events from a json variable with a prefix such as "customer\_" ? I have used the json plugin to pull the data into a variable json { source =\> "message" target =\> "\[@metadata\]\[json\]" } Now i a…

---

## [Thread Pools/Hot Thread Help](https://discuss.elastic.co/t/thread-pools-hot-thread-help/268266)

<div class="topic-metadata">

**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\
**Replies:** 5\
**Last updated:** [March 25, 2021, 6:40pm UTC](https://discuss.elastic.co/t/thread-pools-hot-thread-help/268266 "2021-03-25T18:40:00Z")

</div>

I am trying to get additional information on thread pools/hot threads. I am currently looking for any documentation that may give some more detailed information on what these terms/stats mean in the out put. If I run t…

---

## [How to split index by field value?](https://discuss.elastic.co/t/how-to-split-index-by-field-value/268055)

<div class="topic-metadata">

**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\
**Replies:** 9\
**Last updated:** [March 25, 2021, 6:15pm UTC](https://discuss.elastic.co/t/how-to-split-index-by-field-value/268055 "2021-03-25T18:15:07Z")

</div>

I have a VM. There are 2 similiar apps (docker apps) inside it, staging and development. They use 1 filebeat to push log to logstash. On these log, I have field container.labels.com\_docker\_compose\_project. I want to crea…

---

## [Should I run multiple pipelines with http input or a single one?](https://discuss.elastic.co/t/should-i-run-multiple-pipelines-with-http-input-or-a-single-one/268337)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 1\
**Last updated:** [March 25, 2021, 5:53pm UTC](https://discuss.elastic.co/t/should-i-run-multiple-pipelines-with-http-input-or-a-single-one/268337 "2021-03-25T17:53:48Z")

</div>

I have a 16GB machine solely dedicated for running logstash. I will be using the http input. I will have different sources whose data will be stored in different indices. I have a choice of running separate pipelines f…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1489)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1491)
