# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1592 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1593 --- ## [Vega: Condition based on drop down value](https://discuss.elastic.co/t/vega-condition-based-on-drop-down-value/261513)
**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\ **Replies:** 4\ **Last updated:** [January 22, 2021, 6:35am UTC](https://discuss.elastic.co/t/vega-condition-based-on-drop-down-value/261513 "2021-01-22T06:35:01Z")
Hello everyone The graph both x-axis and y-axis value must change automatically when a value is selected from dropdown. I have a grouped bar chart displaying count of incidents logged on x-axis grouped by year, month o… --- ## [Search operation on Remote cluster is taking longer time](https://discuss.elastic.co/t/search-operation-on-remote-cluster-is-taking-longer-time/261434)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 2\ **Last updated:** [January 22, 2021, 6:18am UTC](https://discuss.elastic.co/t/search-operation-on-remote-cluster-is-taking-longer-time/261434 "2021-01-22T06:18:21Z")
Hi All, I have created two clusters in elasticsearch. When I try to do some search operations in their respective Kibana , it is working as expected. I have connected cluster 2 as remote cluster of cluster 1. I am try… --- ## [Reporting error forbidden kibana](https://discuss.elastic.co/t/reporting-error-forbidden-kibana/261729)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 5:13am UTC](https://discuss.elastic.co/t/reporting-error-forbidden-kibana/261729 "2021-01-22T05:13:16Z")
Hi, I got the error "reporting error forbidden kibana" when I'm trying to download the CSV file from Kibana... User privileges are kibana\_user, reporting\_user. Thank You... --- ## [Help with processing log files](https://discuss.elastic.co/t/help-with-processing-log-files/261858)
**Author:** [@Maria\_Elle](https://discuss.elastic.co/u/Maria_Elle)\ **Replies:** 3\ **Last updated:** [January 22, 2021, 3:16am UTC](https://discuss.elastic.co/t/help-with-processing-log-files/261858 "2021-01-22T03:16:16Z")
I'm very very new to Elasticsearch/ELK, and I'm currently learning it from scratch for a project. I'm running it on an Ubuntu VM and my first task is to process json log files from my desktop through Filebeat into Elasti… --- ## [Where is the Kibana password set?](https://discuss.elastic.co/t/where-is-the-kibana-password-set/261577)
**Author:** [@oskrdt](https://discuss.elastic.co/u/oskrdt)\ **Replies:** 9\ **Last updated:** [January 22, 2021, 12:02am UTC](https://discuss.elastic.co/t/where-is-the-kibana-password-set/261577 "2021-01-22T00:02:57Z")
I was transferred the ownership of a server with elasticsearch and kibana running, where I was not involved on the setup process. I was given a username and password to access kibana, which seems to have being manually … --- ## [Auto Sizing Visualization](https://discuss.elastic.co/t/auto-sizing-visualization/261851)
**Author:** [@gerardo\_dutan](https://discuss.elastic.co/u/gerardo_dutan)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 11:50pm UTC](https://discuss.elastic.co/t/auto-sizing-visualization/261851 "2021-01-21T23:50:31Z")
I'm having issues with visualizations auto scaling in a dashboard when using Vega visualizations. The issue occurs when using multiple the multi column functionality in Vega. The output of the Vega script is 2 plots but… --- ## [If I reduce the number in "ignore\_above" will I use less disk space?](https://discuss.elastic.co/t/if-i-reduce-the-number-in-ignore-above-will-i-use-less-disk-space/261855)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 11:28pm UTC](https://discuss.elastic.co/t/if-i-reduce-the-number-in-ignore-above-will-i-use-less-disk-space/261855 "2021-01-21T23:28:45Z")
Hi, I have an APM span index, and I realize that in the mapping the "ignore\_above" is set to 1024, I was wandering if I change some of this setting I can use less disk space. for example in agent.name, the longest valu… --- ## [SQL in Dashboard](https://discuss.elastic.co/t/sql-in-dashboard/261814)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 11:21pm UTC](https://discuss.elastic.co/t/sql-in-dashboard/261814 "2021-01-21T23:21:58Z")
Hello everybody, in Canvas it is possible to use Elasticsearch SQL to generate data tables and metrics. How can I use Elasticsearch SQL in Dashboard to generate the same output as in Canvas? With best regards Treki … --- ## [Elasticsearch Hybrid Query - No Results](https://discuss.elastic.co/t/elasticsearch-hybrid-query-no-results/260834)
**Author:** [@Vincent\_Dandenault](https://discuss.elastic.co/u/Vincent_Dandenault)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-hybrid-query-no-results/260834 "2021-01-21T23:19:50Z")
I’m currently trying to do a hybrid search on two indexes: a full text index and knn\_vector (word embeddings) index. Currently, over 10’000 documents from Wikipedia are indexed on an ES stack, indexed on both of these fi… --- ## [Credentials with Private gem Repository for Logstash](https://discuss.elastic.co/t/credentials-with-private-gem-repository-for-logstash/261856)
**Author:** [@jason\_0](https://discuss.elastic.co/u/jason_0)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 10:02pm UTC](https://discuss.elastic.co/t/credentials-with-private-gem-repository-for-logstash/261856 "2021-01-21T22:02:38Z")
Hi All, Our Logstash servers don't have access to the Internet and instead we use a private repository available at https://repo.domain.com etc. This repo requires a username and password to access. Can we do this/how d… --- ## [Recommendations to Create Entity-Specific Models with Nested Hits/Documents](https://discuss.elastic.co/t/recommendations-to-create-entity-specific-models-with-nested-hits-documents/261705)
**Author:** [@jasonzissman](https://discuss.elastic.co/u/jasonzissman)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 9:02pm UTC](https://discuss.elastic.co/t/recommendations-to-create-entity-specific-models-with-nested-hits-documents/261705 "2021-01-21T21:02:07Z")
Hi all! I have event logs from my system that describe the actions that users take. I am trying to devise the best method for storing those events in a user entity model. For example, my event data looks like this: {t… --- ## [Filebeat not exposing the name](https://discuss.elastic.co/t/filebeat-not-exposing-the-name/261854)
**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 8:48pm UTC](https://discuss.elastic.co/t/filebeat-not-exposing-the-name/261854 "2021-01-21T20:48:23Z")
Hi All, I'm running Filebeat (7.10.2) in a Docker-Container and wanted to switch from Internal Monitoring to Metricbeat using the Beat module. It works fine so far, but the name configured in filebeat.yml is not used. … --- ## [Cannot make deployment changes due to Coordinating Node](https://discuss.elastic.co/t/cannot-make-deployment-changes-due-to-coordinating-node/261693)
**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 8:41pm UTC](https://discuss.elastic.co/t/cannot-make-deployment-changes-due-to-coordinating-node/261693 "2021-01-21T20:41:51Z")
Hello, I am struggling to update a deployment. I made some changes successfully yesterday. However today, when I want to change my node configuration, I get this message: I don't understand the message because there… --- ## [Use of dynamic\_template in \_index\_template](https://discuss.elastic.co/t/use-of-dynamic-template-in-index-template/261453)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 7:41pm UTC](https://discuss.elastic.co/t/use-of-dynamic-template-in-index-template/261453 "2021-01-21T19:41:59Z")
Hi all, Is it possible to use dynamic\_template in the newly introduced \_index\_template ? If yes, do you have any example of how to use it ? If not, how should I declare some dynamic\_template with the use of \_index\_tem… --- ## [How does the interaction between classes and objects?](https://discuss.elastic.co/t/how-does-the-interaction-between-classes-and-objects/261842)
**Author:** [@IvanovRoman](https://discuss.elastic.co/u/IvanovRoman)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 7:18pm UTC](https://discuss.elastic.co/t/how-does-the-interaction-between-classes-and-objects/261842 "2021-01-21T19:18:23Z")
What is used di/ioc containers or dependency inversion/ijection in kibana? --- ## [Azure Marketplace 9200 port allow](https://discuss.elastic.co/t/azure-marketplace-9200-port-allow/261796)
**Author:** [@roman.pavliuk](https://discuss.elastic.co/u/roman.pavliuk)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 2:03pm UTC](https://discuss.elastic.co/t/azure-marketplace-9200-port-allow/261796 "2021-01-21T14:03:04Z")
Hi all. I have created your Elasticsearch (Self-Managed) VM. And I can enter into Kibana without any problems. But I can't have access to 9200 port. In network I see inbound rule for 5601 port, but missed for 9200. When… --- ## [More than 1000 rows in canwas](https://discuss.elastic.co/t/more-than-1000-rows-in-canwas/261415)
**Author:** [@Alexey\_Nikolaev](https://discuss.elastic.co/u/Alexey_Nikolaev)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 6:15pm UTC](https://discuss.elastic.co/t/more-than-1000-rows-in-canwas/261415 "2021-01-21T18:15:20Z")
Try to count call from CISCO CDR. I have QUERY that grouping all call by globalCallID\_callId and I need to COUNT unique globalCallID\_callId - but I have much more records than 1000. My SQL is: SELECT globalCallID\_callI… --- ## [Data from rollup indice is empty in visualisation](https://discuss.elastic.co/t/data-from-rollup-indice-is-empty-in-visualisation/261801)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 5:46pm UTC](https://discuss.elastic.co/t/data-from-rollup-indice-is-empty-in-visualisation/261801 "2021-01-21T17:46:43Z")
Hi there. I've setup 3 rollup jobs, and for1 of them, I can't see nothing in visualization. I've got documents in rollup indice (~30M documents) Below is an example of data { "\_index": "rollup-haproxy", … --- ## [Having problems parsing data](https://discuss.elastic.co/t/having-problems-parsing-data/261817)
**Author:** [@BeMoore](https://discuss.elastic.co/u/BeMoore)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 5:30pm UTC](https://discuss.elastic.co/t/having-problems-parsing-data/261817 "2021-01-21T17:30:45Z")
Hi there, Im having some issues filtering this section of a log file, 2021-01-19T13:32:25.263Z localhost {reason=user\_approved, txid=cbcf50e8-e05e-4ee8-9c6d-125d78b6ff9e, ood\_software=null, isotimestamp=2021-01-19T13:2… --- ## [ELK License](https://discuss.elastic.co/t/elk-license/261820)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 4:37pm UTC](https://discuss.elastic.co/t/elk-license/261820 "2021-01-21T16:37:48Z")
Currently, we're using licensed ELK-Stack Does using an independent coordinator node consume a node-license? Example: Let's assume, we've 4 node license. and we've already used 4 nodes for Master & Data. Now, we need a… --- ## [Variable addition](https://discuss.elastic.co/t/variable-addition/261139)
**Author:** [@John\_H](https://discuss.elastic.co/u/John_H)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 2:54pm UTC](https://discuss.elastic.co/t/variable-addition/261139 "2021-01-21T14:54:28Z")
I want to add up a number and show it in a kibana timeline chart. I've got a datastream which has a connect and disconnect entry. I've written a scripted field in kibana index which adds 1 when its connected to and subs… --- ## [Custom Template for Logstash 7.10 output](https://discuss.elastic.co/t/custom-template-for-logstash-7-10-output/261822)
**Author:** [@GrandOurs35](https://discuss.elastic.co/u/GrandOurs35)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 4:22pm UTC](https://discuss.elastic.co/t/custom-template-for-logstash-7-10-output/261822 "2021-01-21T16:22:20Z")
Hello, i'm new to Elastic Stack and my setup is with Docker and i'm using 7.10.2 version. For now, i'm trying to analyze my nginx logs in Kibana. I can see my logs in Discover but not in "terms" in the dashboard part. … --- ## [Elastic, unable to set a cluster with three nodes](https://discuss.elastic.co/t/elastic-unable-to-set-a-cluster-with-three-nodes/261819)
**Author:** [@leow](https://discuss.elastic.co/u/leow)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 4:17pm UTC](https://discuss.elastic.co/t/elastic-unable-to-set-a-cluster-with-three-nodes/261819 "2021-01-21T16:17:19Z")
Hello, I triing to install elastic as cluster on three environments, where previuosly was installed and working. i have a elasticsearch 7.8.1 zip package and this i have put and extracted on three machines (im in Windo… --- ## [Unable to start Elasticsearch as single node and for developing](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-single-node-and-for-developing/261753)
**Author:** [@first100](https://discuss.elastic.co/u/first100)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 4:10pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-single-node-and-for-developing/261753 "2021-01-21T16:10:50Z")
Hello, i try to install elasticsearch as single node and noi i production mode i have sette in my elastisearch.yml file: cluster.name: elastic-cluster node.name: elastic-cluster-node-1 path.data: C:\\Elastic\\da… --- ## [Connection issues using apikey](https://discuss.elastic.co/t/connection-issues-using-apikey/261452)
**Author:** [@LarryLeisure](https://discuss.elastic.co/u/LarryLeisure)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 4:10pm UTC](https://discuss.elastic.co/t/connection-issues-using-apikey/261452 "2021-01-21T16:10:17Z")
Dear all, I have just recently started working with ElasticSearch and Rest APIs and would like to ask for your help concerning the following issue: I am using a trial version of ElasticSearch Cloud Service, set up a de… --- ## [Vega: Signal value automatically resets to initial value](https://discuss.elastic.co/t/vega-signal-value-automatically-resets-to-initial-value/261441)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 3:50pm UTC](https://discuss.elastic.co/t/vega-signal-value-automatically-resets-to-initial-value/261441 "2021-01-21T15:50:56Z")
I am trying to create a toggle button using Vega viz to add/remove a Dashboard filter. Everything works fine except when I toggle it ON, the filter gets added but the toggle button jumps back to the OFF state automatical… --- ## [Data loss prevention?](https://discuss.elastic.co/t/data-loss-prevention/261707)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 7\ **Last updated:** [January 21, 2021, 3:47pm UTC](https://discuss.elastic.co/t/data-loss-prevention/261707 "2021-01-21T15:47:01Z")
Hi, Unfortunately I am have issues with my platform. This means sometimes my beats cannot send data to my logstash/elasticsearch anymore. They keep trying of course, but this may take an hour or even 2. We are searchi… --- ## [Change absolute timing in kibana for every 10/15 minutes](https://discuss.elastic.co/t/change-absolute-timing-in-kibana-for-every-10-15-minutes/261767)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 3:38pm UTC](https://discuss.elastic.co/t/change-absolute-timing-in-kibana-for-every-10-15-minutes/261767 "2021-01-21T15:38:01Z")
Hi experts, Is there a way to change the time to be for every10 or 15 minutes rather than every 30 minutes in kibana --- ## [Unable to filter with scripted field even through Add a filter](https://discuss.elastic.co/t/unable-to-filter-with-scripted-field-even-through-add-a-filter/261676)
**Author:** [@ras79](https://discuss.elastic.co/u/ras79)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 3:31pm UTC](https://discuss.elastic.co/t/unable-to-filter-with-scripted-field-even-through-add-a-filter/261676 "2021-01-21T15:31:21Z")
I have a scripted field setup with the following code: List list = new ArrayList(); Map m = new HashMap(); m.put("usColpo", "colpo"); m.put("vp", "visualPap"); for (int i… --- ## [Docs.deleted value not changing](https://discuss.elastic.co/t/docs-deleted-value-not-changing/261023)
**Author:** [@munasia](https://discuss.elastic.co/u/munasia)\ **Replies:** 10\ **Last updated:** [January 21, 2021, 3:19pm UTC](https://discuss.elastic.co/t/docs-deleted-value-not-changing/261023 "2021-01-21T15:19:13Z")
I have a non-prod cluster that I use to run tests. I took a snapshot of my prod cluster data and restored it into this non-prod cluster which created the two indices that I have in production. However when I GET \_cat/ind… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1591) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1593)