# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1496 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1497 --- ## [Installing MetricBeat with ElasticSearch7.9.0](https://discuss.elastic.co/t/installing-metricbeat-with-elasticsearch7-9-0/267118)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 9:45pm UTC](https://discuss.elastic.co/t/installing-metricbeat-with-elasticsearch7-9-0/267118 "2021-03-22T21:45:14Z")
We have a self-managed Elastic EFK stack running. Iam trying to setup metric beats on some of our Linux/UNIX AMIs to monitor their CPU metrics. Referred link: https://www.elastic.co/guide/en/beats/metricbeat/7.x/metric… --- ## [Artifacts.elastic.co forced HTTPS redirect](https://discuss.elastic.co/t/artifacts-elastic-co-forced-https-redirect/267491)
**Author:** [@sfinke0](https://discuss.elastic.co/u/sfinke0)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 9:26pm UTC](https://discuss.elastic.co/t/artifacts-elastic-co-forced-https-redirect/267491 "2021-03-22T21:26:45Z")
Hi there, we recently noticed a forced HTTPS redirect on the artifacts.elastic.co endpoints. Since we use apt-caching (apt-cacher-ng) for more than 1000 hosts this breaks its functionality for plain HTTP proxying and ca… --- ## [Problem with JSON query understanding](https://discuss.elastic.co/t/problem-with-json-query-understanding/268020)
**Author:** [@baka109](https://discuss.elastic.co/u/baka109)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 9:02pm UTC](https://discuss.elastic.co/t/problem-with-json-query-understanding/268020 "2021-03-22T21:02:33Z")
Hello there! I need a little help to understand what I'm doing wrong. I need to modify this index template trying not to rewrite all of this settings and add a value refresh\_interval curl localhost:9200/\_template/test-… --- ## [Painless SHA1 or other hash in scripted field](https://discuss.elastic.co/t/painless-sha1-or-other-hash-in-scripted-field/268018)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 8:53pm UTC](https://discuss.elastic.co/t/painless-sha1-or-other-hash-in-scripted-field/268018 "2021-03-22T20:53:30Z")
I have seen a few posts recommending to use sha1() from painless but I'm unable to make it work. I have a scripted field where I take 4 fields and want to turn them into a hash: x = doc\['1'\].value +'&' + doc\['times… --- ## [Display data results in Markdown visualization](https://discuss.elastic.co/t/display-data-results-in-markdown-visualization/267986)
**Author:** [@elpiloto100](https://discuss.elastic.co/u/elpiloto100)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 8:31pm UTC](https://discuss.elastic.co/t/display-data-results-in-markdown-visualization/267986 "2021-03-22T20:31:27Z")
Is it possible to display results from a data query in a Markdown visualization to be used in a Kibana dashboard? For example, I want a Markdown to display Temperature: \[temp\] C Pressure: \[pres\] kPa Humidity: \[humid\] %R… --- ## [Elasticsearch speed comparison issue with sql](https://discuss.elastic.co/t/elasticsearch-speed-comparison-issue-with-sql/267947)
**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\ **Replies:** 9\ **Last updated:** [March 22, 2021, 8:29pm UTC](https://discuss.elastic.co/t/elasticsearch-speed-comparison-issue-with-sql/267947 "2021-03-22T20:29:57Z")
I compare the speed of Sql with ElasticSearch. I have 1.5 million data. But sql query runs faster than elastic search. I don't understand the problem. Why is the word like query coming faster in sql? My code for Sql \< … --- ## [Is there a reason why using the index API like this does not convert data?](https://discuss.elastic.co/t/is-there-a-reason-why-using-the-index-api-like-this-does-not-convert-data/267990)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 8:29pm UTC](https://discuss.elastic.co/t/is-there-a-reason-why-using-the-index-api-like-this-does-not-convert-data/267990 "2021-03-22T20:29:04Z")
Hello If I create a new index from scratch and make the mapping, it understands the data, so the data isnt the issue. But if I do something like this: POST \_reindex { "source": { "index": "myindex-2021.03.21" }, … --- ## [Filebeat Cisco module field type randomly changing](https://discuss.elastic.co/t/filebeat-cisco-module-field-type-randomly-changing/268012)
**Author:** [@JackScripter](https://discuss.elastic.co/u/JackScripter)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 7:57pm UTC](https://discuss.elastic.co/t/filebeat-cisco-module-field-type-randomly-changing/268012 "2021-03-22T19:57:40Z")
Hi ! We use 2 filebeat modules (cisco + checkpoint) running on the same server, so it's basically a syslog server. I configured filebeat to use a custom index. For some reason, some field type are mapped incorrectly, es… --- ## [Data type unsigned long is not showing up as an option in index patterns](https://discuss.elastic.co/t/data-type-unsigned-long-is-not-showing-up-as-an-option-in-index-patterns/267893)
**Author:** [@gbandasha](https://discuss.elastic.co/u/gbandasha)\ **Replies:** 2\ **Last updated:** [March 22, 2021, 7:33pm UTC](https://discuss.elastic.co/t/data-type-unsigned-long-is-not-showing-up-as-an-option-in-index-patterns/267893 "2021-03-22T19:33:55Z")
Hello Team, In Elastic version 7.11, you have added the support for a new Numeric Data type called unsigned long but when I try to set the index template I don't see that option in the drop-down and also I tried to set … --- ## [Highlight synonyms with multi\_match cross\_field search type](https://discuss.elastic.co/t/highlight-synonyms-with-multi-match-cross-field-search-type/268008)
**Author:** [@julioz](https://discuss.elastic.co/u/julioz)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 7:16pm UTC](https://discuss.elastic.co/t/highlight-synonyms-with-multi-match-cross-field-search-type/268008 "2021-03-22T19:16:21Z")
Hi. I'm facing a problem with search highlight. When using cross\_field type of search, the content returned in highlight does not consider synonyms. Example: "settings": { "index": { "analysis": { … --- ## [Parsing a syslog log](https://discuss.elastic.co/t/parsing-a-syslog-log/267651)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 7\ **Last updated:** [March 22, 2021, 6:21pm UTC](https://discuss.elastic.co/t/parsing-a-syslog-log/267651 "2021-03-22T18:21:46Z")
Im receiving the following log (some things changes for privacy, althought the password is literally sent as asterisks) \<134\> 2021/03/18:13:33:41 SYSTEMNAME 0-PPE-0 : default GUI CMD\_EXECUTED 1324333 0 : User invalid… --- ## [Setting indices.id\_field\_data.enabled for index instead of cluster](https://discuss.elastic.co/t/setting-indices-id-field-data-enabled-for-index-instead-of-cluster/268003)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 6:16pm UTC](https://discuss.elastic.co/t/setting-indices-id-field-data-enabled-for-index-instead-of-cluster/268003 "2021-03-22T18:16:27Z")
This setting has been great to be able to change because many problems can come up from aggregating on the \_id field. However, I want to be able to control this setting for a specific index, rather than the whole cluster… --- ## [Does remote cluster with proxy mode support high availability](https://discuss.elastic.co/t/does-remote-cluster-with-proxy-mode-support-high-availability/267994)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 6:11pm UTC](https://discuss.elastic.co/t/does-remote-cluster-with-proxy-mode-support-high-availability/267994 "2021-03-22T18:11:04Z")
Hello Team, we are implementing remote cluster with proxy mode. we have noticed that we could able to add only one node as proxy\_address and its opened 18 socket connection to the same node. we are not able to search t… --- ## [Multiline pattern not working for more complex cases](https://discuss.elastic.co/t/multiline-pattern-not-working-for-more-complex-cases/267407)
**Author:** [@RFeiten](https://discuss.elastic.co/u/RFeiten)\ **Replies:** 4\ **Last updated:** [March 22, 2021, 4:37pm UTC](https://discuss.elastic.co/t/multiline-pattern-not-working-for-more-complex-cases/267407 "2021-03-22T16:37:52Z")
Hi all! I'm facing an issue while collecting logs using Filebeat (7.x) in conjunction to a pipeline in Logstash. The multi-line scenario has been overcome by checking elastic documentation, however, there are specific … --- ## [Custom query to create Kibana data table](https://discuss.elastic.co/t/custom-query-to-create-kibana-data-table/267919)
**Author:** [@venkat\_swaminathan](https://discuss.elastic.co/u/venkat_swaminathan)\ **Replies:** 7\ **Last updated:** [March 22, 2021, 4:01pm UTC](https://discuss.elastic.co/t/custom-query-to-create-kibana-data-table/267919 "2021-03-22T16:01:26Z")
Team, How to create a Kibana custom graph (\*in my case data table), the guidance here will be helpful. Query:: "aggs": { "group\_by\_name": { "terms": { "field": "Dimensions.keyword", … --- ## [Problem configuring elastic search with downloaded with msi](https://discuss.elastic.co/t/problem-configuring-elastic-search-with-downloaded-with-msi/267973)
**Author:** [@Tino23](https://discuss.elastic.co/u/Tino23)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 3:50pm UTC](https://discuss.elastic.co/t/problem-configuring-elastic-search-with-downloaded-with-msi/267973 "2021-03-22T15:50:02Z")
Unexpected response code \[405\] from calling GET http://127.0.0.1:9200/\_security/\_authenticate?pretty It doesn't look like the X-Pack security feature is enabled on this Elasticsearch node. Please check if you have enab… --- ## [Create programable links with enabled custom filters to Kibana Dashboard](https://discuss.elastic.co/t/create-programable-links-with-enabled-custom-filters-to-kibana-dashboard/267243)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 4\ **Last updated:** [March 22, 2021, 3:26pm UTC](https://discuss.elastic.co/t/create-programable-links-with-enabled-custom-filters-to-kibana-dashboard/267243 "2021-03-22T15:26:53Z")
Hello, my company is testing Kibana in order to check if the programme is usable for our business case. We want to create programable links with enabled custom filters to Kibana Dashboard: I know, there is the possi… --- ## [Search\_phase\_execution\_exception and error on dashboard visualizations](https://discuss.elastic.co/t/search-phase-execution-exception-and-error-on-dashboard-visualizations/267572)
**Author:** [@ayi](https://discuss.elastic.co/u/ayi)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 2:33pm UTC](https://discuss.elastic.co/t/search-phase-execution-exception-and-error-on-dashboard-visualizations/267572 "2021-03-22T14:33:32Z")
Please i a new to kibana, i am getting the error below when i try to visualise. I have no idea what the error is about. i need help solving this, please. search\_phase\_execution\_exception Error at Fetch.\_callee3$ (http… --- ## [Full match on analyzed text field](https://discuss.elastic.co/t/full-match-on-analyzed-text-field/267982)
**Author:** [@JBo\_Shim](https://discuss.elastic.co/u/JBo_Shim)\ **Replies:** 0\ **Last updated:** [March 22, 2021, 2:24pm UTC](https://discuss.elastic.co/t/full-match-on-analyzed-text-field/267982 "2021-03-22T14:24:26Z")
Hi guys. I'm looking for the way to query only fully matched string on analyzed text field. For example, when I set "tasty" as synonym of "delicious", the indexed data will be like this: 1. "delicious apple" term pos… --- ## [Kibana APIs](https://discuss.elastic.co/t/kibana-apis/267067)
**Author:** [@somil\_kulshreshtha](https://discuss.elastic.co/u/somil_kulshreshtha)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 2:15pm UTC](https://discuss.elastic.co/t/kibana-apis/267067 "2021-03-22T14:15:24Z")
We want to prepare an analytics dashboard in Kibana, at the same time we want to expose these APIs in other BI tools to visualize. Describe a specific use case for the feature: e.g. I have tableau and jasper reports f… --- ## [Alerts using Kibana in AWS managed Elasticsearch](https://discuss.elastic.co/t/alerts-using-kibana-in-aws-managed-elasticsearch/267974)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 2:14pm UTC](https://discuss.elastic.co/t/alerts-using-kibana-in-aws-managed-elasticsearch/267974 "2021-03-22T14:14:48Z")
How can we enable alert from Kibana to Zenoss in AWS managed Elasticsearch --- ## [Kibana Dashboard, selected filters download csv from a table taking the information of filters](https://discuss.elastic.co/t/kibana-dashboard-selected-filters-download-csv-from-a-table-taking-the-information-of-filters/267394)
**Author:** [@Meroni](https://discuss.elastic.co/u/Meroni)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 2:07pm UTC](https://discuss.elastic.co/t/kibana-dashboard-selected-filters-download-csv-from-a-table-taking-the-information-of-filters/267394 "2021-03-22T14:07:25Z")
Hi everyone, I'm dealing with Kibana Dashboard. Does anyone know if it is possible to download a csv from a table (part of a Kibana Dashboard), also taking the information of which filters have been selected? Thank you. … --- ## [Executing Alert has resulted in Error](https://discuss.elastic.co/t/executing-alert-has-resulted-in-error/267889)
**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\ **Replies:** 9\ **Last updated:** [March 22, 2021, 1:32pm UTC](https://discuss.elastic.co/t/executing-alert-has-resulted-in-error/267889 "2021-03-22T13:32:15Z")
Hi, so I tried to setup multiple Kibana instances in our self-managed environment hoping it will improve alerting and detections performance. Together there are 4 Kibana instances, 2 were setup before (as a service with… --- ## [Filebeat stopped automatically](https://discuss.elastic.co/t/filebeat-stopped-automatically/267950)
**Author:** [@Tristan\_D](https://discuss.elastic.co/u/Tristan_D)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-stopped-automatically/267950 "2021-03-22T13:14:30Z")
Hi, everyone. I have two servers using filebeat-7.10.1. Today I found filebeat stoped automaticaly at the same time. They have worked normaly several days. We didn't kill it, the cpu or mem of the servers didn't have any… --- ## [How to use configure filebeat to filter docker containers using hints-based autodiscovery](https://discuss.elastic.co/t/how-to-use-configure-filebeat-to-filter-docker-containers-using-hints-based-autodiscovery/267813)
**Author:** [@Daniel\_Porter](https://discuss.elastic.co/u/Daniel_Porter)\ **Replies:** 2\ **Last updated:** [March 22, 2021, 12:50pm UTC](https://discuss.elastic.co/t/how-to-use-configure-filebeat-to-filter-docker-containers-using-hints-based-autodiscovery/267813 "2021-03-22T12:50:33Z")
Hi there, I'm trying to figure out how to configure filebeat (e.g. set a condition) to harvest from certain docker containers when using hints-based autodiscover. My use case is having two instances of filebeat running,… --- ## [Kibana REST API - saved pbjects import - createNewCopies](https://discuss.elastic.co/t/kibana-rest-api-saved-pbjects-import-createnewcopies/267952)
**Author:** [@ranitg](https://discuss.elastic.co/u/ranitg)\ **Replies:** 3\ **Last updated:** [March 22, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-rest-api-saved-pbjects-import-createnewcopies/267952 "2021-03-22T12:40:22Z")
Hi, I'm trying to use the flag "createNewCopies" in the saved\_objects import api. I am using Kibana 7.9.3. it is documented in: but not implemented in the code... How can I import and resolve a dashboard existing co… --- ## [Link recognition in Elastic Detections emails seem wrong and confusing](https://discuss.elastic.co/t/link-recognition-in-elastic-detections-emails-seem-wrong-and-confusing/267156)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 7\ **Last updated:** [March 22, 2021, 12:25pm UTC](https://discuss.elastic.co/t/link-recognition-in-elastic-detections-emails-seem-wrong-and-confusing/267156 "2021-03-22T12:25:27Z")
Hello, While working with Elastic Emails alerts on detections, I've noticed several misrecognized links. For example: In the above example user.name is suddenly a link.., while this is just a part of a query. Anot… --- ## [First Claster for log collection](https://discuss.elastic.co/t/first-claster-for-log-collection/267765)
**Author:** [@zenekas1978](https://discuss.elastic.co/u/zenekas1978)\ **Replies:** 4\ **Last updated:** [March 22, 2021, 12:02pm UTC](https://discuss.elastic.co/t/first-claster-for-log-collection/267765 "2021-03-22T12:02:48Z")
Hi All, I would like to build my first ELK cluster in Azure in order to collect and analyze logs from VM's and firewalls. I used ELK Azure template and I created 3 masters, 1 data, Kibana and Logstash nodes. I would li… --- ## [Agrupar datos por característica común](https://discuss.elastic.co/t/agrupar-datos-por-caracteristica-comun/267575)
**Author:** [@andres\_brandt](https://discuss.elastic.co/u/andres_brandt)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 11:55am UTC](https://discuss.elastic.co/t/agrupar-datos-por-caracteristica-comun/267575 "2021-03-22T11:55:21Z")
Amigos, necesito de su ayuda, quiero agrupar mis datos en tres mundos, y para ello quiero hacer una botonera donde al presionar uno de estos mundos me despliegue toda la info de ese mundo. 01 SOP Evento 01 SOP Falla M… --- ## [Bucket Aggregation with Distinct Source at multiple levels](https://discuss.elastic.co/t/bucket-aggregation-with-distinct-source-at-multiple-levels/267722)
**Author:** [@F\_Doe\_FW](https://discuss.elastic.co/u/F_Doe_FW)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 9:27pm UTC](https://discuss.elastic.co/t/bucket-aggregation-with-distinct-source-at-multiple-levels/267722 "2021-03-18T21:27:17Z")
Trying to see if I can pull out distinct values (keyword,float) on a bucket level. Top Hits will give me a lot of values that I have to discard. { "size": 0, "query": { "bool": { "filter": { "bool… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1495) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1497)