# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1573 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1574 --- ## [Saved field "engines.time" is invalid for use with the "Date Histogram" aggregation. Please select a new field](https://discuss.elastic.co/t/saved-field-engines-time-is-invalid-for-use-with-the-date-histogram-aggregation-please-select-a-new-field/263160)
**Author:** [@Ankit4](https://discuss.elastic.co/u/Ankit4)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 6:26pm UTC](https://discuss.elastic.co/t/saved-field-engines-time-is-invalid-for-use-with-the-date-histogram-aggregation-please-select-a-new-field/263160 "2021-02-03T18:26:42Z")
I am getting this error, while creating index pattern in kibana; Error: Saved field "engines.time" is invalid for use with the "Date Histogram" aggregation. Please select a new field. at FieldParamType.\_this.deseria… --- ## [How to set SameSite='None' in Kibana 7.6.2](https://discuss.elastic.co/t/how-to-set-samesite-none-in-kibana-7-6-2/262633)
**Author:** [@gaetano](https://discuss.elastic.co/u/gaetano)\ **Replies:** 17\ **Last updated:** [February 3, 2021, 6:25pm UTC](https://discuss.elastic.co/t/how-to-set-samesite-none-in-kibana-7-6-2/262633 "2021-02-03T18:25:15Z")
I'm using kibana 7.6.2 version and I tried to execute a cross-site domain access to Kibana bypassing login page. After I launched http post call to Kibana login endpoint, attaching username and password, I obtain a war… --- ## [Maximize Panel by default](https://discuss.elastic.co/t/maximize-panel-by-default/263149)
**Author:** [@advanced4](https://discuss.elastic.co/u/advanced4)\ **Replies:** 1\ **Last updated:** [February 3, 2021, 6:08pm UTC](https://discuss.elastic.co/t/maximize-panel-by-default/263149 "2021-02-03T18:08:09Z")
On an embedded dashboard, in the top right under the 3 dot menu, there's the option to "Maximize Panel". Is there a way to do this by default? I cannot find any reference to this feature anywhere. I assume a hack is all… --- ## [Logstash - How can i get the data from a key-value pair?](https://discuss.elastic.co/t/logstash-how-can-i-get-the-data-from-a-key-value-pair/263134)
**Author:** [@vinodhini](https://discuss.elastic.co/u/vinodhini)\ **Replies:** 2\ **Last updated:** [February 3, 2021, 6:00pm UTC](https://discuss.elastic.co/t/logstash-how-can-i-get-the-data-from-a-key-value-pair/263134 "2021-02-03T18:00:38Z")
I have a field which is like "host":{"name":"abcdef"}, How can i get the value "abcdef" alone from the host field? gsub is not allowing me to remove the {} or "name": I tried to get the value by referencing as %{host}{n… --- ## [Ruby code to add entry into an array?](https://discuss.elastic.co/t/ruby-code-to-add-entry-into-an-array/263046)
**Author:** [@aidanoc15](https://discuss.elastic.co/u/aidanoc15)\ **Replies:** 3\ **Last updated:** [February 3, 2021, 5:37pm UTC](https://discuss.elastic.co/t/ruby-code-to-add-entry-into-an-array/263046 "2021-02-03T17:37:10Z")
Hi, I'm using logstash as a method posting tickets into our ticketing system using data from an elasticsearch index. The API for out ticketing system expects all of the custom fields for our ticket to come through as an … --- ## [Visualisation with unique values](https://discuss.elastic.co/t/visualisation-with-unique-values/263111)
**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\ **Replies:** 2\ **Last updated:** [February 3, 2021, 4:31pm UTC](https://discuss.elastic.co/t/visualisation-with-unique-values/263111 "2021-02-03T16:31:57Z")
I have emails in my logs and I parse them like this: "email:" "user1@gmail.com" "name:" "user1" "provider:" "gmail.com" Now I want to make visualiation that will reflect unique providers in given timeframe, for example… --- ## [Elasticsearch: ('search\_phase\_execution\_exception', 'compile error')](https://discuss.elastic.co/t/elasticsearch-search-phase-execution-exception-compile-error/263146)
**Author:** [@Nikkie](https://discuss.elastic.co/u/Nikkie)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 4:09pm UTC](https://discuss.elastic.co/t/elasticsearch-search-phase-execution-exception-compile-error/263146 "2021-02-03T16:09:40Z")
I am executing script\_query with cosineSimilarity using tensorflow embedding. The embeddings are obtained from tensorflow-hub. model which is loaded using the url: "https://tfhub.dev/google/universal-sentence-encoder/4" … --- ## [Disable gray coloring when refreshing dashboard](https://discuss.elastic.co/t/disable-gray-coloring-when-refreshing-dashboard/263127)
**Author:** [@jalzacs](https://discuss.elastic.co/u/jalzacs)\ **Replies:** 2\ **Last updated:** [February 3, 2021, 3:45pm UTC](https://discuss.elastic.co/t/disable-gray-coloring-when-refreshing-dashboard/263127 "2021-02-03T15:45:47Z")
I use Kibana dashboards to see real time data, updating them every 5 seconds. I have updated the ELK stack from 7.5 to 7.10 and now when the dashboard is refreshing data all dashboard goes gray. It is very annoying to se… --- ## [Machine Learning - Import LOG file](https://discuss.elastic.co/t/machine-learning-import-log-file/262466)
**Author:** [@mariannoem-eltras](https://discuss.elastic.co/u/mariannoem-eltras)\ **Replies:** 11\ **Last updated:** [February 3, 2021, 3:20pm UTC](https://discuss.elastic.co/t/machine-learning-import-log-file/262466 "2021-02-03T15:20:23Z")
Hi there, would anyone be able to help with Importing Log file into Kibana? I am trying to import \*.log file from server through kibana/app/home - Import log file. However, in process of analyzing I keep getting error… --- ## [Xpack enabled elastic stack Cluster](https://discuss.elastic.co/t/xpack-enabled-elastic-stack-cluster/262808)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 7\ **Last updated:** [February 3, 2021, 3:04pm UTC](https://discuss.elastic.co/t/xpack-enabled-elastic-stack-cluster/262808 "2021-02-03T15:04:31Z")
Hi Team, I have a fedora distribution environment setup where I have 1 master node and 2 data node for Elasticsearch and single kibana and logstash in total I've 4 servers where logstash and kibana are in a single serve… --- ## [Kibana Dashboard read only](https://discuss.elastic.co/t/kibana-dashboard-read-only/262977)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 2\ **Last updated:** [February 3, 2021, 2:56pm UTC](https://discuss.elastic.co/t/kibana-dashboard-read-only/262977 "2021-02-03T14:56:48Z")
Hi all. We have elastic cloud 7.10.2 and I'd like to create users with only access Kibana dashboards and in read only mode Also the dashboards that I create/update as an admin must be the same the read only users in Ki… --- ## [S3 backup configuration error](https://discuss.elastic.co/t/s3-backup-configuration-error/262795)
**Author:** [@Lior\_Yakobov](https://discuss.elastic.co/u/Lior_Yakobov)\ **Replies:** 12\ **Last updated:** [February 3, 2021, 2:42pm UTC](https://discuss.elastic.co/t/s3-backup-configuration-error/262795 "2021-02-03T14:42:39Z")
Hello, I'm trying to configure AWS S3 repository for backups but facing access issues to the S3 bucket. I did the following steps: Installed repository-s3 plugin on all cluster nodes restarted all nodes after the plu… --- ## [Recently rolled index does process data (0 docs)](https://discuss.elastic.co/t/recently-rolled-index-does-process-data-0-docs/261242)
**Author:** [@Zeroc0pter](https://discuss.elastic.co/u/Zeroc0pter)\ **Replies:** 8\ **Last updated:** [February 3, 2021, 2:33pm UTC](https://discuss.elastic.co/t/recently-rolled-index-does-process-data-0-docs/261242 "2021-02-03T14:33:03Z")
Hi People, I'm having an issue with our ILM set up. Well, I think it's related to our ILM policy. We use ElasticSearch 7. The policy rolled from 00001 to 00002 and suddenly it stopped processing data from our applicati… --- ## [Filebeat keystore permissions](https://discuss.elastic.co/t/filebeat-keystore-permissions/262962)
**Author:** [@Coyz](https://discuss.elastic.co/u/Coyz)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 10:58am UTC](https://discuss.elastic.co/t/filebeat-keystore-permissions/262962 "2021-02-02T10:58:12Z")
Hello, i'm trying to setup filebeat as non root user. Here the service file ; \[Unit\] Description=Filebeat sends log files to Logstash or directly to Elasticsearch. Documentation=https://www.elastic.co/products/beats/f… --- ## [Elastic search indices](https://discuss.elastic.co/t/elastic-search-indices/262971)
**Author:** [@geomario](https://discuss.elastic.co/u/geomario)\ **Replies:** 3\ **Last updated:** [February 3, 2021, 2:22pm UTC](https://discuss.elastic.co/t/elastic-search-indices/262971 "2021-02-03T14:22:48Z")
Hello, I am a new user of Kibana and Elastic search. I am trying to load my elastic indices into my Kibana without success. I already created an index pattern which comes into mind that the information is there. In the … --- ## [How to create ingest pipeline for elasticsearch in kubernetes context?](https://discuss.elastic.co/t/how-to-create-ingest-pipeline-for-elasticsearch-in-kubernetes-context/263130)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 2:15pm UTC](https://discuss.elastic.co/t/how-to-create-ingest-pipeline-for-elasticsearch-in-kubernetes-context/263130 "2021-02-03T14:15:55Z")
I am shipping a csv file from filebeat to elasticsearch. I understand that I need to use an ingest pipeline to parse the csv data prior to it being stored in elastic, similar to what is described in this answer From wha… --- ## [Recovered from panic while fetching 'azure/app\_insights' for host ''. \[AZURE\]](https://discuss.elastic.co/t/recovered-from-panic-while-fetching-azure-app-insights-for-host-azure/263113)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 11:19am UTC](https://discuss.elastic.co/t/recovered-from-panic-while-fetching-azure-app-insights-for-host-azure/263113 "2021-02-03T11:19:06Z")
Hey, I'm trying to send app\_insights metric via metric beat to elastic. I can't see any reference to 'host' in the app\_insight docs Any suggestion on how to solve this panic error I found the cause of the error, wh… --- ## [Kibana 7.10.0 pageNavigation style](https://discuss.elastic.co/t/kibana-7-10-0-pagenavigation-style/262957)
**Author:** [@Rollup\_eval](https://discuss.elastic.co/u/Rollup_eval)\ **Replies:** 5\ **Last updated:** [February 3, 2021, 2:09pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-pagenavigation-style/262957 "2021-02-03T14:09:26Z")
Using kibana 7.10.0 with elasticsearch 7.10.0. Switching from modern mode (menu) to legacy mode(buttons) in advanced settings: pageNavigation style not working Modern mode is always displayed. --- ## [Use NGINX with Logstash](https://discuss.elastic.co/t/use-nginx-with-logstash/263126)
**Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 1:25pm UTC](https://discuss.elastic.co/t/use-nginx-with-logstash/263126 "2021-02-03T13:25:37Z")
Do we have any kind of benefit or improvement if I configure an NGINX on top of LS? The only one that I can see is that I'll just configure one entry in my output.logstash and having a load balancer with a few helthchec… --- ## [Index Status goes Unknown after Dramatic Increase in Size](https://discuss.elastic.co/t/index-status-goes-unknown-after-dramatic-increase-in-size/263038)
**Author:** [@Senthamarai\_Kannan](https://discuss.elastic.co/u/Senthamarai_Kannan)\ **Replies:** 2\ **Last updated:** [February 3, 2021, 1:22pm UTC](https://discuss.elastic.co/t/index-status-goes-unknown-after-dramatic-increase-in-size/263038 "2021-02-03T13:22:35Z")
One of our ES indices go to Unknown status after the size increases dramatically. Usually the index size is about 300MB but it goes above 8GB and goes to Unknown state. This is a single node instance hosted in a Windo… --- ## [Incorrect regexp reaction](https://discuss.elastic.co/t/incorrect-regexp-reaction/263001)
**Author:** [@dmalchikov](https://discuss.elastic.co/u/dmalchikov)\ **Replies:** 3\ **Last updated:** [February 3, 2021, 1:17pm UTC](https://discuss.elastic.co/t/incorrect-regexp-reaction/263001 "2021-02-03T13:17:07Z")
Hi! Using ELK 7.10 Tried different terms but result always go through My winlogbeat.yml: ...... '- name: Windows PowerShell event\_id: 400, 403, 600, 800 processors: - drop\_event.when.or: - regexp.process.command\_l… --- ## [Better way to convert the object field to nested type field](https://discuss.elastic.co/t/better-way-to-convert-the-object-field-to-nested-type-field/263026)
**Author:** [@Prabaharan\_Kathiresa](https://discuss.elastic.co/u/Prabaharan_Kathiresa)\ **Replies:** 0\ **Last updated:** [February 2, 2021, 6:14pm UTC](https://discuss.elastic.co/t/better-way-to-convert-the-object-field-to-nested-type-field/263026 "2021-02-02T18:14:08Z")
Hi Team We have an index with object field, we are planning to improve the object field into nested type (array of objects). ie. { "name": "Adam", "car" : { "name": "Maruthi", "modelyear": "2005" } } we are … --- ## [Parallel queries to partitions in Elasticsearch aggregations](https://discuss.elastic.co/t/parallel-queries-to-partitions-in-elasticsearch-aggregations/263122)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 12:58pm UTC](https://discuss.elastic.co/t/parallel-queries-to-partitions-in-elasticsearch-aggregations/263122 "2021-02-03T12:58:40Z")
If I have a partitioned terms aggregation, say with 20 partitions. If I request for all the 20 partitions by sending 20 requests at the same time using the REST API, will the result be fetched faster or would it still ta… --- ## [Filebeat o365 module - Parsing o365.audit.data field](https://discuss.elastic.co/t/filebeat-o365-module-parsing-o365-audit-data-field/261591)
**Author:** [@opiedrah](https://discuss.elastic.co/u/opiedrah)\ **Replies:** 4\ **Last updated:** [February 3, 2021, 12:24pm UTC](https://discuss.elastic.co/t/filebeat-o365-module-parsing-o365-audit-data-field/261591 "2021-02-03T12:24:52Z")
Hi, I have filebeat 7.10 running with module o365 beat. Similar to how extendedproperties filed for azure active directory workload is parsed. How can i parse this o365.audit.data filed. the value in this field looks… --- ## [Percentage symbol in vega bar graphs](https://discuss.elastic.co/t/percentage-symbol-in-vega-bar-graphs/262794)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 2\ **Last updated:** [February 3, 2021, 12:05pm UTC](https://discuss.elastic.co/t/percentage-symbol-in-vega-bar-graphs/262794 "2021-02-03T12:05:01Z")
{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "description": "A bar graph showing what activites consume what percentage of the day.", "data": { "values": \[ {"Activity": "Sleeping", "Tim… --- ## [Logstash errors](https://discuss.elastic.co/t/logstash-errors/263116)
**Author:** [@vdelcampo](https://discuss.elastic.co/u/vdelcampo)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 12:02pm UTC](https://discuss.elastic.co/t/logstash-errors/263116 "2021-02-03T12:02:08Z")
Hi! Since last week Im having a lot of errors in logstash like these: \[ERROR\] 2021-02-03 11:59:46.340 \[nioEventLoopGroup-2-1\] tcp - Error in Netty pipeline: java.io.IOException: Connection reset by peer \[ERROR\] 2021-0… --- ## [No\_shard\_available\_action\_exception in integration tests](https://discuss.elastic.co/t/no-shard-available-action-exception-in-integration-tests/262941)
**Author:** [@rdehuyss](https://discuss.elastic.co/u/rdehuyss)\ **Replies:** 4\ **Last updated:** [February 3, 2021, 11:49am UTC](https://discuss.elastic.co/t/no-shard-available-action-exception-in-integration-tests/262941 "2021-02-03T11:49:34Z")
Hi, I'm the author of JobRunr, a distributed job scheduling library that also supports ElasticSearch as a storage provider. For my integration tests, I use TestContainers and start an ElasticSearch. @Container pri… --- ## [Pushing different types of (access, application) logs using filebeat-daemonset in Kubernetes](https://discuss.elastic.co/t/pushing-different-types-of-access-application-logs-using-filebeat-daemonset-in-kubernetes/261353)
**Author:** [@JasminShah](https://discuss.elastic.co/u/JasminShah)\ **Replies:** 2\ **Last updated:** [February 3, 2021, 11:43am UTC](https://discuss.elastic.co/t/pushing-different-types-of-access-application-logs-using-filebeat-daemonset-in-kubernetes/261353 "2021-02-03T11:43:54Z")
I have several pods running spring-boot applications, writing application-logs to stdout, which is then picked up by filebeat-daemonset and then pushed to elasticsearch. (standard logging architecture for kubernetes) No… --- ## [Logstash error. Expected symbols](https://discuss.elastic.co/t/logstash-error-expected-symbols/262752)
**Author:** [@111435](https://discuss.elastic.co/u/111435)\ **Replies:** 5\ **Last updated:** [February 3, 2021, 11:38am UTC](https://discuss.elastic.co/t/logstash-error-expected-symbols/262752 "2021-02-03T11:38:34Z")
Hello, I am new at logstash, so please could you help me. I have this log: 2021-01-27 00:20:10 GET /ads/servlet/dbRequest?BNumber=353&ANumber=485739274 200 0.013 There are tabs between "date", "time", "GET" and "… --- ## [@timestamp in date\_nanos](https://discuss.elastic.co/t/timestamp-in-date-nanos/263112)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 0\ **Last updated:** [February 3, 2021, 11:17am UTC](https://discuss.elastic.co/t/timestamp-in-date-nanos/263112 "2021-02-03T11:17:19Z")
Hi , I am using ELK 7.7.0 and want to know that how can I change @timestamp to date\_nanos while sending logs from logstash to elasticsearch? I know that we can change format of @timestamp to date\_nanos , but it simply … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1572) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1574)