# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1541 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1542 --- ## [Watcher webhook acked](https://discuss.elastic.co/t/watcher-webhook-acked/265137)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 11:45pm UTC](https://discuss.elastic.co/t/watcher-webhook-acked/265137 "2021-02-22T23:45:19Z")
Hi! guys i need your help with this... I am using the webhook api in a watcher, in my elasticcloud, but I get the following error: { "watch\_id": "aeffa60d-1eca-40c6-a35d-4dcfc7e450f7", "node": "ELuSGxpSRICZb2ZHJp4… --- ## [Active Directory user authentication](https://discuss.elastic.co/t/active-directory-user-authentication/265053)
**Author:** [@AayushPatel](https://discuss.elastic.co/u/AayushPatel)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 11:31pm UTC](https://discuss.elastic.co/t/active-directory-user-authentication/265053 "2021-02-22T23:31:21Z")
Hi, we need to use Elasticsearch authentication for our users in DC (Active Directory). Due to the instructs in link below: https://www.elastic.co/guide/en/elasticsearch/reference/7.11/active-directory-realm.html I a… --- ## [How to move data in a ingest node to data node](https://discuss.elastic.co/t/how-to-move-data-in-a-ingest-node-to-data-node/265102)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 11:25pm UTC](https://discuss.elastic.co/t/how-to-move-data-in-a-ingest-node-to-data-node/265102 "2021-02-22T23:25:26Z")
Hi, I have a cluster with 4 nodes. node1-master node2-master node3-ingest noode4-data Now ingest node fully filled with data and can not start elasticsearch service. I want to move data from ingest node to the dat… --- ## [Problem accured](https://discuss.elastic.co/t/problem-accured/265115)
**Author:** [@Sena\_O](https://discuss.elastic.co/u/Sena_O)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 10:57pm UTC](https://discuss.elastic.co/t/problem-accured/265115 "2021-02-22T22:57:52Z")
hello, i'm trying to open kibana but i always see the blank page. i dont know why it's happening. how can i solve the problem? --- ## [Having trouble with field mappings types](https://discuss.elastic.co/t/having-trouble-with-field-mappings-types/265109)
**Author:** [@lostsoul352](https://discuss.elastic.co/u/lostsoul352)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 10:56pm UTC](https://discuss.elastic.co/t/having-trouble-with-field-mappings-types/265109 "2021-02-22T22:56:46Z")
ELK stack 7.11 I'm having some trouble getting my field mappings types. This is a snippet of my logstash configuration which I've added to include some new fields into an index. if \[log\_message\] =~ /TP status:/… --- ## [Using Ultrawarm storage on AWS ElasticSearch](https://discuss.elastic.co/t/using-ultrawarm-storage-on-aws-elasticsearch/265121)
**Author:** [@codejunkie78](https://discuss.elastic.co/u/codejunkie78)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 10:44pm UTC](https://discuss.elastic.co/t/using-ultrawarm-storage-on-aws-elasticsearch/265121 "2021-02-22T22:44:36Z")
I have a long lived index on ElasticSearch for eg. events which is not partitioned by time. I can store about 3 months data in hot storage. After that I want to move it to warm. If I migrate the entire index to warm, do … --- ## [How to switch between languages without changes in kibana.yml file?](https://discuss.elastic.co/t/how-to-switch-between-languages-without-changes-in-kibana-yml-file/265099)
**Author:** [@WhatsIsKibana](https://discuss.elastic.co/u/WhatsIsKibana)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 10:34pm UTC](https://discuss.elastic.co/t/how-to-switch-between-languages-without-changes-in-kibana-yml-file/265099 "2021-02-22T22:34:29Z")
Hi, Is it possible to switch between languages in kibana on the fly? At this moment I need to change option i18n.locale in kibana.yml file and restart kibana every time when I want to change language, but it would be mu… --- ## [Non-zero metrics in the last 30s](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s/264939)
**Author:** [@Marc2](https://discuss.elastic.co/u/Marc2)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 10:29pm UTC](https://discuss.elastic.co/t/non-zero-metrics-in-the-last-30s/264939 "2021-02-22T22:29:27Z")
Hi, I'm completely new to ELK and I need to create an index in ElasticSearch using Filebeat. When I execute Filebeat.exe it doesn't create the index and it says: 2021-02-20T09:23:57.477+0100 INFO \[monitoring\] log/log.g… --- ## [CSP error after enabling xpack (Dark mode broken)](https://discuss.elastic.co/t/csp-error-after-enabling-xpack-dark-mode-broken/264955)
**Author:** [@dmitryyankowski](https://discuss.elastic.co/u/dmitryyankowski)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 10:21pm UTC](https://discuss.elastic.co/t/csp-error-after-enabling-xpack-dark-mode-broken/264955 "2021-02-22T22:21:41Z")
Current version: 7.11.1 Hi there, i've just enabled xpack.. and logged in and i'm seeing the following error in my console: Refused to execute inline script because it violates the following Content Security Policy dir… --- ## [Kibana chart legend options](https://discuss.elastic.co/t/kibana-chart-legend-options/264926)
**Author:** [@CJ\_Chang](https://discuss.elastic.co/u/CJ_Chang)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 7:58pm UTC](https://discuss.elastic.co/t/kibana-chart-legend-options/264926 "2021-02-22T19:58:36Z")
Is there a way to reduce the legend length? --- ## [Pie chart visualization](https://discuss.elastic.co/t/pie-chart-visualization/265022)
**Author:** [@saintjohn](https://discuss.elastic.co/u/saintjohn)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 7:50pm UTC](https://discuss.elastic.co/t/pie-chart-visualization/265022 "2021-02-22T19:50:20Z")
Hi experts, I'm creating a pie chart as below(labels hidden) but struggling with the following 2 points. Could you please advise? The chart is sliced as descended in anticlockwise manner. I would like to order them… --- ## [Field length and average field lengths BM25](https://discuss.elastic.co/t/field-length-and-average-field-lengths-bm25/265105)
**Author:** [@d3v3lop3r](https://discuss.elastic.co/u/d3v3lop3r)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 7:39pm UTC](https://discuss.elastic.co/t/field-length-and-average-field-lengths-bm25/265105 "2021-02-22T19:39:36Z")
I dont quite understand the forumula of the BM25 explained here: What is menat by the field length? --- ## [File beat version 6.8.13, not parsing ngnix logs from docker container using dissect processor](https://discuss.elastic.co/t/file-beat-version-6-8-13-not-parsing-ngnix-logs-from-docker-container-using-dissect-processor/265114)
**Author:** [@sainumpud](https://discuss.elastic.co/u/sainumpud)\ **Replies:** 0\ **Last updated:** [February 22, 2021, 7:11pm UTC](https://discuss.elastic.co/t/file-beat-version-6-8-13-not-parsing-ngnix-logs-from-docker-container-using-dissect-processor/265114 "2021-02-22T19:11:05Z")
Hi, File beat version 6.8.13 running on VM, I am trying to parse this ngnix container log into separate fields for reporting on unique clientIP address and browser details to show reports on Kibana. I added dissect pro… --- ## [Kibana failing to install on centos6 or upgrading to kibana-7.11.1-1.x86\_64](https://discuss.elastic.co/t/kibana-failing-to-install-on-centos6-or-upgrading-to-kibana-7-11-1-1-x86-64/265110)
**Author:** [@Bjen\_Shah](https://discuss.elastic.co/u/Bjen_Shah)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 7:18pm UTC](https://discuss.elastic.co/t/kibana-failing-to-install-on-centos6-or-upgrading-to-kibana-7-11-1-1-x86-64/265110 "2021-02-22T19:18:19Z")
While I try to install on centos 7 is fine but on centos 6 I get all of these errors /usr/share/kibana/bin/../node/bin/node: /lib64/libc.so.6: versionGLIBC\_2.16' not found (required by /usr/share/kibana/bin/../node/… --- ## [Dynamic query in jdbc plugin](https://discuss.elastic.co/t/dynamic-query-in-jdbc-plugin/264806)
**Author:** [@niki1](https://discuss.elastic.co/u/niki1)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 6:57pm UTC](https://discuss.elastic.co/t/dynamic-query-in-jdbc-plugin/264806 "2021-02-22T18:57:29Z")
I got a mysql(or any other relational database) with a table like this: id,name,prod 11,alex,car 22,alice,ship 33,bob,airplane and I have messages going through logstash pipeline like this: 11,20210215,ford,.... 2… --- ## [Pipeline: field \[evidence\] not present as part of path \[threatintel.evidence\]](https://discuss.elastic.co/t/pipeline-field-evidence-not-present-as-part-of-path-threatintel-evidence/263008)
**Author:** [@remote](https://discuss.elastic.co/u/remote)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 6:14pm UTC](https://discuss.elastic.co/t/pipeline-field-evidence-not-present-as-part-of-path-threatintel-evidence/263008 "2021-02-22T18:14:10Z")
Hi, I have an issue when trying to ingest data from a CSV file via Logstash to Elasticsearch. My data contains a nested JSON object (array) that I want to properly parse using the JSON processor in the ingest pipeline. … --- ## [Elastic search migration from 6.4 to 7.10](https://discuss.elastic.co/t/elastic-search-migration-from-6-4-to-7-10/265091)
**Author:** [@jerin](https://discuss.elastic.co/u/jerin)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 5:44pm UTC](https://discuss.elastic.co/t/elastic-search-migration-from-6-4-to-7-10/265091 "2021-02-22T17:44:14Z")
Hello team , By seeing the upgrade strategy from ELK docs I can directly upgrade from 6.4 to 7.10 but if I do so I am facing an issue "incompatible version " is that I need to upgrade from 6.4 to 6.8 and then to 7.10 ? … --- ## [Kibana Fleet "Another broken 7.11.1 upgrade"](https://discuss.elastic.co/t/kibana-fleet-another-broken-7-11-1-upgrade/264628)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 7\ **Last updated:** [February 22, 2021, 5:19pm UTC](https://discuss.elastic.co/t/kibana-fleet-another-broken-7-11-1-upgrade/264628 "2021-02-22T17:19:53Z")
I'll be honest this is painful so far every upgrade from kibana 7.1 to 7.11.1 has resulting in something going wrong 1 prod cluster and 2 dev clusters. Seems I just have terrible luck. All index's have been default for m… --- ## [Drill down visualization for json data that contains nested structure](https://discuss.elastic.co/t/drill-down-visualization-for-json-data-that-contains-nested-structure/264173)
**Author:** [@kinnub](https://discuss.elastic.co/u/kinnub)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 4:52pm UTC](https://discuss.elastic.co/t/drill-down-visualization-for-json-data-that-contains-nested-structure/264173 "2021-02-22T16:52:45Z")
Continuing the discussion from Drill Down Visualization: I am looking for a solution and my use case is similar to the discussion (above link ). Could you please let me know if there is any solution/workaround for it? M… --- ## [Rsyslog to send logs to logstash](https://discuss.elastic.co/t/rsyslog-to-send-logs-to-logstash/264973)
**Author:** [@Prabhath\_samarasingh](https://discuss.elastic.co/u/Prabhath_samarasingh)\ **Replies:** 11\ **Last updated:** [February 22, 2021, 2:41pm UTC](https://discuss.elastic.co/t/rsyslog-to-send-logs-to-logstash/264973 "2021-02-22T14:41:57Z")
Hi, Configured rsyslog to send logs to logstash. But kibana dosen't receive. Please help. OS : Ubuntu 20.04 \ cat /etc/elasticsearch/elasticsearch.yml Elasticsearch performs poorly when the system is swapping t… --- ## [Strings to numerics](https://discuss.elastic.co/t/strings-to-numerics/265090)
**Author:** [@Marc2](https://discuss.elastic.co/u/Marc2)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 4:46pm UTC](https://discuss.elastic.co/t/strings-to-numerics/265090 "2021-02-22T16:46:23Z")
Hello community! I am new at this and my problem is the following: I am trying to use some .csv files to represent data in Kibana, and to do that i am using the code i found on this web: https://alexmarquardt.com/2020/… --- ## [Heartbeat HTTP Monitor - GET with JSON Body and Response](https://discuss.elastic.co/t/heartbeat-http-monitor-get-with-json-body-and-response/262168)
**Author:** [@bbek](https://discuss.elastic.co/u/bbek)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 4:43pm UTC](https://discuss.elastic.co/t/heartbeat-http-monitor-get-with-json-body-and-response/262168 "2021-02-22T16:43:12Z")
Hello! I'm trying to get heartbeat to perform an HTTP GET , while combining a JSON body with the GET request to the page. My goal is to query an elastic index, take the fields and analyze for up/down accordingly. In t… --- ## [Failed to enable security by setting \[xpack.security.enabled\] to \[true\] in the elasticsearch.yml](https://discuss.elastic.co/t/failed-to-enable-security-by-setting-xpack-security-enabled-to-true-in-the-elasticsearch-yml/264554)
**Author:** [@haithem899](https://discuss.elastic.co/u/haithem899)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 4:08pm UTC](https://discuss.elastic.co/t/failed-to-enable-security-by-setting-xpack-security-enabled-to-true-in-the-elasticsearch-yml/264554 "2021-02-22T16:08:48Z")
Hello, I'm trying to enable security by setting \[xpack.security.enabled\] to \[true\] in the elasticsearch.yml but after this action, the elasticsearch service failed to start. have you any idea to rsolve this issue? thank… --- ## [Kafka keeps syslog timestamp in the message](https://discuss.elastic.co/t/kafka-keeps-syslog-timestamp-in-the-message/264902)
**Author:** [@ywsong2](https://discuss.elastic.co/u/ywsong2)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 4:04pm UTC](https://discuss.elastic.co/t/kafka-keeps-syslog-timestamp-in-the-message/264902 "2021-02-22T16:04:12Z")
Hi, I am having an issue with syslog timestamp when the Filebeat sends system module logs (/var/log/messages and /var/log/secure) through Kafka output. If I send logs straight to Elasticsearch, the default Filebeat's da… --- ## [Mapping use dynamic strict](https://discuss.elastic.co/t/mapping-use-dynamic-strict/264957)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [February 22, 2021, 4:03pm UTC](https://discuss.elastic.co/t/mapping-use-dynamic-strict/264957 "2021-02-22T16:03:07Z")
I am trying to test out this feature but not getting what I want for example PUT \_index\_template/sachin\_quick\_test { "index\_patterns": \["sachin\_quick\_test-\*"\], "template": { "settings": { "number\_of\_shard… --- ## [ILM - Index size doubles during shrink process](https://discuss.elastic.co/t/ilm-index-size-doubles-during-shrink-process/265019)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 2\ **Last updated:** [February 22, 2021, 3:38pm UTC](https://discuss.elastic.co/t/ilm-index-size-doubles-during-shrink-process/265019 "2021-02-22T15:38:40Z")
Hi - I've noticed the index size when moved from hot to warm phase doubles up before shrinking in size. Just curious to know if this is the expected behavior and if there is a way to avoid the doubling up part of that f… --- ## [401 Unathorized when trying to call the Kibana API](https://discuss.elastic.co/t/401-unathorized-when-trying-to-call-the-kibana-api/263225)
**Author:** [@rbjoergensen](https://discuss.elastic.co/u/rbjoergensen)\ **Replies:** 9\ **Last updated:** [February 22, 2021, 3:35pm UTC](https://discuss.elastic.co/t/401-unathorized-when-trying-to-call-the-kibana-api/263225 "2021-02-22T15:35:48Z")
I am trying to use a generated API key to export my workpads. However no matter what i do i end up getting a 401 unathorized back from Kibana. This happens even when i use the exact curl command from the documentation h… --- ## [Export to CSV on 7.9.3](https://discuss.elastic.co/t/export-to-csv-on-7-9-3/264113)
**Author:** [@Francisco\_Navarro](https://discuss.elastic.co/u/Francisco_Navarro)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 3:11pm UTC](https://discuss.elastic.co/t/export-to-csv-on-7-9-3/264113 "2021-02-22T15:11:38Z")
I'm trying to export the content of an index to CSV using Kibana 7.9.3 I've seen that this is possible on 7.10.0 but I cannot find the button on 7.9.3, is it not available? 7.10 7.9 Best regards! --- ## [How can I index HTML tags](https://discuss.elastic.co/t/how-can-i-index-html-tags/265078)
**Author:** [@peterbe](https://discuss.elastic.co/u/peterbe)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 3:09pm UTC](https://discuss.elastic.co/t/how-can-i-index-html-tags/265078 "2021-02-22T15:09:27Z")
I use the standard tokenizer and I don't use the html\_strip char filter. How can I index HTML tags? In fact, I want to be able to search with and without the \< and \> characters. I.e. a search for \ should match… --- ## [Grok matching multi-lines saving first and last value to separate fields](https://discuss.elastic.co/t/grok-matching-multi-lines-saving-first-and-last-value-to-separate-fields/264958)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 11\ **Last updated:** [February 22, 2021, 3:08pm UTC](https://discuss.elastic.co/t/grok-matching-multi-lines-saving-first-and-last-value-to-separate-fields/264958 "2021-02-22T15:08:30Z")
Hello everyone, as the caption indicates I am trying to match multiple-lines of logs of which I would like to save first occurence of timestamp to separate field than last occurence of the timestamp. I am using codec mu… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1540) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1542)