# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1564 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1565 --- ## [Kibana, timelion not visualizing as expected](https://discuss.elastic.co/t/kibana-timelion-not-visualizing-as-expected/263652)
**Author:** [@sguerrero](https://discuss.elastic.co/u/sguerrero)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 2:45pm UTC](https://discuss.elastic.co/t/kibana-timelion-not-visualizing-as-expected/263652 "2021-02-09T14:45:46Z")
Kibana version: v 7.6.2 Browser: Firefox OS: Centos7 Hello, I'm facing something estrange working with timelion. I expect to see all my visualizations like this: The circle can be red, green or yellow and it only … --- ## [java.lang.IllegalStateException: node \[LKTUQfgPSeClvaOfA8oIdg\] is not available](https://discuss.elastic.co/t/java-lang-illegalstateexception-node-lktuqfgpseclvaofa8oidg-is-not-available/263750)
**Author:** [@praffuln](https://discuss.elastic.co/u/praffuln)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 2:37pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-node-lktuqfgpseclvaofa8oidg-is-not-available/263750 "2021-02-09T14:37:44Z")
I am using Scroll API Elastic search (https://www.elastic.co/guide/en/elasticsearch/client/java-rest/master/java-rest-high-search-scroll.html). Java code is exactly same as describe in link. This code is giving below ex… --- ## [Show an Scripted Value in a Visualization](https://discuss.elastic.co/t/show-an-scripted-value-in-a-visualization/263630)
**Author:** [@Juan\_Montoya](https://discuss.elastic.co/u/Juan_Montoya)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 2:32pm UTC](https://discuss.elastic.co/t/show-an-scripted-value-in-a-visualization/263630 "2021-02-09T14:32:52Z")
Hi, I'm creating a dashboard and now I need to show the unitary value of the products, this value must be dynamical along the time, the unitary value must be calculated adding all the prices and adding all the units to … --- ## [Filebeat autodiscover+kubernetes module or add\_kubernetes\_metadata processor?](https://discuss.elastic.co/t/filebeat-autodiscover-kubernetes-module-or-add-kubernetes-metadata-processor/263662)
**Author:** [@offero](https://discuss.elastic.co/u/offero)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 2:32pm UTC](https://discuss.elastic.co/t/filebeat-autodiscover-kubernetes-module-or-add-kubernetes-metadata-processor/263662 "2021-02-09T14:32:40Z")
I just set up a new helm chart to use add\_kubernetes\_metadata processor, which seemed to be the way to get k8s annotations based on my googling. But, in the process of trying to figure out which fields are being added, I… --- ## [Problem to get xml response with http\_poller plugin](https://discuss.elastic.co/t/problem-to-get-xml-response-with-http-poller-plugin/263749)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 2:32pm UTC](https://discuss.elastic.co/t/problem-to-get-xml-response-with-http-poller-plugin/263749 "2021-02-09T14:32:39Z")
Hi all, I want to load data from an api rest (response xml) using logstash 7.9.0 this is my config file: input { http\_poller { urls =\> { method =\> get url1 =\> "https://\*\*\*\*\*\*\*/rest/1.0/geography"… --- ## [Can We Bind Default Dashboard to custom Index pattern?](https://discuss.elastic.co/t/can-we-bind-default-dashboard-to-custom-index-pattern/263719)
**Author:** [@shaiksubhan](https://discuss.elastic.co/u/shaiksubhan)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 2:08pm UTC](https://discuss.elastic.co/t/can-we-bind-default-dashboard-to-custom-index-pattern/263719 "2021-02-09T14:08:08Z")
Hi Team, Can we Bind Default Beats Dashboards to Custom index pattern through logstash ?? Actually I am trying to Bind the Default Dashboards to custom Index pattern but Unfortunately I am unable to find anything on I… --- ## [Date, Scripted Fields](https://discuss.elastic.co/t/date-scripted-fields/263341)
**Author:** [@Rajasekhar\_Muthamset](https://discuss.elastic.co/u/Rajasekhar_Muthamset)\ **Replies:** 3\ **Last updated:** [February 9, 2021, 1:49pm UTC](https://discuss.elastic.co/t/date-scripted-fields/263341 "2021-02-09T13:49:06Z")
Hello All, I'm getting data as below from my application ....."extraParams":\[{"name":"Item","value":"item1"},{"name":"DateTime","value":"0001519156380000"},.... I would like the data of the field value as Date instead… --- ## [How to kill filebeat (docker) process?](https://discuss.elastic.co/t/how-to-kill-filebeat-docker-process/263561)
**Author:** [@skime](https://discuss.elastic.co/u/skime)\ **Replies:** 5\ **Last updated:** [February 9, 2021, 1:36pm UTC](https://discuss.elastic.co/t/how-to-kill-filebeat-docker-process/263561 "2021-02-09T13:36:54Z")
Hello, how can I kill filebeat process that was started on docker? Linux situation by "top" command: I have restarted docker daemon, and it don't want to start - probably because of the filebeat, last log from docker … --- ## [Proximity with intervals query question](https://discuss.elastic.co/t/proximity-with-intervals-query-question/263730)
**Author:** [@Daantie](https://discuss.elastic.co/u/Daantie)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 1:12pm UTC](https://discuss.elastic.co/t/proximity-with-intervals-query-question/263730 "2021-02-09T13:12:28Z")
Hi all! I'm trying to understand the inner workings of intervals query and I'm confused and hope that anyone can explain this to me a bit. So I have encountered this piece of data (mind the bold words for the query later… --- ## [Logstash - Elastichsearch Output - ILM](https://discuss.elastic.co/t/logstash-elastichsearch-output-ilm/263700)
**Author:** [@Jurilz](https://discuss.elastic.co/u/Jurilz)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 9:15am UTC](https://discuss.elastic.co/t/logstash-elastichsearch-output-ilm/263700 "2021-02-09T09:15:26Z")
Good day, I'm trying to establish an Index Lifecycle Management for my indices by using the elasticsearch output in Logstash. This is the elasticsearch output plugin config: output { if "tomcat" in \[type\] { elas… --- ## [Heartbeat timeout](https://discuss.elastic.co/t/heartbeat-timeout/262509)
**Author:** [@rckvanwijk](https://discuss.elastic.co/u/rckvanwijk)\ **Replies:** 5\ **Last updated:** [February 9, 2021, 1:18pm UTC](https://discuss.elastic.co/t/heartbeat-timeout/262509 "2021-02-09T13:18:14Z")
Hi there, we've got several heartbeats running for the uptime monitoring aspect. Usually it works fine but sometimes the uptime says the applications are down (while our second tool and our manual tests say they are not… --- ## [Filebeat logs not being published to Elastic](https://discuss.elastic.co/t/filebeat-logs-not-being-published-to-elastic/263605)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 5\ **Last updated:** [February 9, 2021, 1:11pm UTC](https://discuss.elastic.co/t/filebeat-logs-not-being-published-to-elastic/263605 "2021-02-09T13:11:19Z")
I am sending csv data from filebeat to elastic search following this guide: I have created an ingest pipeline, tested it with the \_simulate api, and everything looks fine. This is my filebeat configuration: fil… --- ## [Moving from daily to weekly indices, advice needed](https://discuss.elastic.co/t/moving-from-daily-to-weekly-indices-advice-needed/263710)
**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 12:52pm UTC](https://discuss.elastic.co/t/moving-from-daily-to-weekly-indices-advice-needed/263710 "2021-02-09T12:52:29Z")
After running into the 1000/1000 shards issue, I need to reduce the number of shards in use preferably without needing to remove to many old indices. Currently the configuration is set to daily indices, so we decided to … --- ## [Logstash filter with separator " \_"](https://discuss.elastic.co/t/logstash-filter-with-separator/263675)
**Author:** [@vik1](https://discuss.elastic.co/u/vik1)\ **Replies:** 3\ **Last updated:** [February 9, 2021, 12:47pm UTC](https://discuss.elastic.co/t/logstash-filter-with-separator/263675 "2021-02-09T12:47:45Z")
Hello, I am using logstash to collect data from FortiGate. I have one special field to check the number of connections per day. This "vpn" field looks like sz\_forti, szec\_forti. I need to take the first characters before… --- ## [Kibana services not running in ubuntu 18.04](https://discuss.elastic.co/t/kibana-services-not-running-in-ubuntu-18-04/263680)
**Author:** [@Abhiranjan\_Singh](https://discuss.elastic.co/u/Abhiranjan_Singh)\ **Replies:** 4\ **Last updated:** [February 9, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-services-not-running-in-ubuntu-18-04/263680 "2021-02-09T12:40:42Z")
Kibana services not running in ubuntu 18.04, earlier it was working fine since i have updated , it is not working now , getting below error at Module.require (internal/modules/cjs/loader.js:637:17)"} {"type":"log","@ti… --- ## [KIbana reporting problem](https://discuss.elastic.co/t/kibana-reporting-problem/263410)
**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\ **Replies:** 3\ **Last updated:** [February 9, 2021, 11:58am UTC](https://discuss.elastic.co/t/kibana-reporting-problem/263410 "2021-02-09T11:58:10Z")
Hi Team, I've problem when generating CSV report based on search result. I've two Kibanas (7.8.0) connected to one Elasticsearch cluster so I've added the same xpack.reporting.encryptionKey in both instances as describ… --- ## [Heartbeat monitoring](https://discuss.elastic.co/t/heartbeat-monitoring/263329)
**Author:** [@tech](https://discuss.elastic.co/u/tech)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 11:44am UTC](https://discuss.elastic.co/t/heartbeat-monitoring/263329 "2021-02-09T11:44:04Z")
Hi, Is there a way to monitor up time for spot instances --- ## [Its always necesary to use throttling in watcher alerts?](https://discuss.elastic.co/t/its-always-necesary-to-use-throttling-in-watcher-alerts/263409)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 11:42am UTC](https://discuss.elastic.co/t/its-always-necesary-to-use-throttling-in-watcher-alerts/263409 "2021-02-09T11:42:01Z")
Hi, Im using this schedule in my watcher alert "trigger" : { "schedule" : { "daily" : { "at" : "17:00" } } } so I was wandering if it is necesary to use throttling in the watchers. --- ## [Kibana Alert on missing process](https://discuss.elastic.co/t/kibana-alert-on-missing-process/263495)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 11:36am UTC](https://discuss.elastic.co/t/kibana-alert-on-missing-process/263495 "2021-02-09T11:36:15Z")
Hi, I've a question about setting up an alert on a missing process on several hosts I'm monitoring. I've setup a Metric threshold alert with instances on hostnames, which should do the job, but I don't think, this aler… --- ## [Not able to change Kibana custom logo in 7.10](https://discuss.elastic.co/t/not-able-to-change-kibana-custom-logo-in-7-10/263374)
**Author:** [@shehzadshaikh](https://discuss.elastic.co/u/shehzadshaikh)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 11:33am UTC](https://discuss.elastic.co/t/not-able-to-change-kibana-custom-logo-in-7-10/263374 "2021-02-09T11:33:13Z")
I am trying to customize the Kibana UI with custom message and logo, i tried following the guide published here - https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686 However, when run the npx command aft… --- ## [Reindex api to move all data from one cluster to another](https://discuss.elastic.co/t/reindex-api-to-move-all-data-from-one-cluster-to-another/263721)
**Author:** [@abhijit](https://discuss.elastic.co/u/abhijit)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 11:28am UTC](https://discuss.elastic.co/t/reindex-api-to-move-all-data-from-one-cluster-to-another/263721 "2021-02-09T11:28:26Z")
I have a use-case where I want to move all my elastic data (index/shards/documents etc) from one cluster to another remote cluster. I am trying to use the \_reindex api for the same but it requires source and destination … --- ## [PV sizing](https://discuss.elastic.co/t/pv-sizing/263715)
**Author:** [@crazysyops](https://discuss.elastic.co/u/crazysyops)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 10:57am UTC](https://discuss.elastic.co/t/pv-sizing/263715 "2021-02-09T10:57:48Z")
Hey Guys, I am just starting my journey with ELK. I was trying to do a little bit of research about it however I could not find a clear answer. We say we have 100TB requirement for data storage etc. We have built our cl… --- ## [Line Graphs with Values](https://discuss.elastic.co/t/line-graphs-with-values/263677)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 11:20am UTC](https://discuss.elastic.co/t/line-graphs-with-values/263677 "2021-02-09T11:20:18Z")
I was just wondering if there is any way to display values in line graph. Currently if we hover over the data points, it displays the corresponding values. I'm open to using any extensions as well. Please let me know --- ## [Is it possible to assign shard according to disk space?](https://discuss.elastic.co/t/is-it-possible-to-assign-shard-according-to-disk-space/263720)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 11:18am UTC](https://discuss.elastic.co/t/is-it-possible-to-assign-shard-according-to-disk-space/263720 "2021-02-09T11:18:29Z")
I have a cluster of 3 masters and 13 data nodes. The disk capacity of data-12 and data-13 nodes is 1.5TB, but the disk capacity of other data nodes is 5TB. As shown in the screenshot, data-12 and data-13 disk space are… --- ## [Generate http certificate non-interactive](https://discuss.elastic.co/t/generate-http-certificate-non-interactive/263685)
**Author:** [@mysil](https://discuss.elastic.co/u/mysil)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 11:09am UTC](https://discuss.elastic.co/t/generate-http-certificate-non-interactive/263685 "2021-02-09T11:09:20Z")
Hi, I need to script generation of a certificate using 'elasticsearch-certutil http'. Is that even possible? I managed to do this with 'elasticsearch-certutil ca'. I need this to enable Alerts in my Kibana. Running on … --- ## [JVM reached above 70% in client node without any request serve](https://discuss.elastic.co/t/jvm-reached-above-70-in-client-node-without-any-request-serve/262305)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 3\ **Last updated:** [February 9, 2021, 10:58am UTC](https://discuss.elastic.co/t/jvm-reached-above-70-in-client-node-without-any-request-serve/262305 "2021-02-09T10:58:01Z")
JVM of client node reached above 70% in an ideal state of the cluster. Is there any reason to increase JVM without any request? The number of shards and instance memory is optimal. --- ## [Getting MasterNotDiscoveredException: null in client node](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-null-in-client-node/262317)
**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\ **Replies:** 5\ **Last updated:** [February 9, 2021, 10:57am UTC](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-null-in-client-node/262317 "2021-02-09T10:57:16Z")
We have 3 master nodes, 2 client nodes, and 8 data nodes. And client nodes ES logs show below mentioned error even though resource usage(JVM and CPU ) looks fine at that time. And cluster went unresponsive mode. ALL node… --- ## [Can not list indices](https://discuss.elastic.co/t/can-not-list-indices/263711)
**Author:** [@Muhammad\_Yasser](https://discuss.elastic.co/u/Muhammad_Yasser)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 10:43am UTC](https://discuss.elastic.co/t/can-not-list-indices/263711 "2021-02-09T10:43:49Z")
Hello, I'm running ELK cluster on Openshift. I can see the container log for Elasticsearch container and verify that it's storing infra, audit and app indices. Like this: \[2021-02-09T08:10:39,473\]\[INFO \]\[o.e.c.m.Meta… --- ## [Group the data fields from multiple indexes](https://discuss.elastic.co/t/group-the-data-fields-from-multiple-indexes/263712)
**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\ **Replies:** 0\ **Last updated:** [February 9, 2021, 10:45am UTC](https://discuss.elastic.co/t/group-the-data-fields-from-multiple-indexes/263712 "2021-02-09T10:45:37Z")
Hi Team, I have 3 different index with one transaction\_id as common in all, i am generation report with fields from all 3 indices at every midnight for transactions of last 3 days. I have different fields in all indic… --- ## [Data stream = real time search?](https://discuss.elastic.co/t/data-stream-real-time-search/263697)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 10:36am UTC](https://discuss.elastic.co/t/data-stream-real-time-search/263697 "2021-02-09T10:36:29Z")
I dont understand what feature Data Stream (https://www.elastic.co/guide/en/elasticsearch/reference/master/data-streams.html) is providing. On first reading, DataStream is dynamic index alias. Is it providing in-memory… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1563) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1565)