# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1660 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1661 --- ## [Custom Logo Kibana 7.10.0 (guide)](https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 5:31pm UTC](https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686 "2020-12-04T17:31:08Z")
Verified on Kibana 7.10.0, running on Debian 10 (Buster). Applies for the same version in Windows. Hello, For all users like me, that need to customize the logos in Kibana, I share this guide that I have been creating … --- ## [Cannot display Logstash pipeline in Monitoring UI](https://discuss.elastic.co/t/cannot-display-logstash-pipeline-in-monitoring-ui/256894)
**Author:** [@glenacota](https://discuss.elastic.co/u/glenacota)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 7:01pm UTC](https://discuss.elastic.co/t/cannot-display-logstash-pipeline-in-monitoring-ui/256894 "2020-12-04T19:01:07Z")
Hi, I've enabled monitoring of my Logstash instance by following the instructions here: Collect Logstash monitoring data with Metricbeatedit. I can see all the collected metrics in the Kibana Stack Monitoring UI, except … --- ## [Variance/Deviation Visualization](https://discuss.elastic.co/t/variance-deviation-visualization/257690)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 6:39pm UTC](https://discuss.elastic.co/t/variance-deviation-visualization/257690 "2020-12-04T18:39:51Z")
I have a dataset with readings every 30m. I want to set a start time and an end time at a single interval (eg 1:00 - 1:30) and rank the devices based on the amount they changed. I've been using the Top N feature in TSV… --- ## [Stderr log format](https://discuss.elastic.co/t/stderr-log-format/257689)
**Author:** [@Andrii](https://discuss.elastic.co/u/Andrii)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 6:39pm UTC](https://discuss.elastic.co/t/stderr-log-format/257689 "2020-12-04T18:39:46Z")
Hello, I noticed that filebeat stderr has a different format than stdout. That makes it impossible to parse filebeat logs with the same rule: here is an example: {"log":"{\\"level\\":\\"debug\\",\\"timestamp\\":\\"2020-12-04… --- ## [Error in Discovery and vizualize when creating a script field](https://discuss.elastic.co/t/error-in-discovery-and-vizualize-when-creating-a-script-field/254818)
**Author:** [@JinLauter](https://discuss.elastic.co/u/JinLauter)\ **Replies:** 8\ **Last updated:** [December 4, 2020, 5:40pm UTC](https://discuss.elastic.co/t/error-in-discovery-and-vizualize-when-creating-a-script-field/254818 "2020-12-04T17:40:08Z")
Hi, We created a simple string script field, and we are getting a error in discovery and when we try to use that script field in any vizualization. I belive the images will explain it better: The script field: Usin… --- ## [Can I update existing dashboard using UPDATE api?](https://discuss.elastic.co/t/can-i-update-existing-dashboard-using-update-api/257682)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 5:39pm UTC](https://discuss.elastic.co/t/can-i-update-existing-dashboard-using-update-api/257682 "2020-12-04T17:39:09Z")
Hi, I am wondering if I can update existing dashboard using UPDATE api with saved json file. I am trying to see if I can revert my old changes back on dashboard back to Kibana. I am designing a way to have version contr… --- ## [Duplicates in ES Index](https://discuss.elastic.co/t/duplicates-in-es-index/256736)
**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 5:28pm UTC](https://discuss.elastic.co/t/duplicates-in-es-index/256736 "2020-12-04T17:28:55Z")
My ELK Stack is running a process which collects logs from 5-6 different PCs. The only issue I am facing at the moment is, my ES index is logging multiple entries for the same timestamp. Any suggestions on how I can fi… --- ## [Cannot create Data Stream](https://discuss.elastic.co/t/cannot-create-data-stream/256621)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 5:25pm UTC](https://discuss.elastic.co/t/cannot-create-data-stream/256621 "2020-12-04T17:25:52Z")
Hi, I am trying to create Data Streams by issuing: PUT \_data\_stream/test-index-pattern but I have this error: "error" : { "root\_cause" : \[ { "type" : "security\_exception", "reason" : "acti… --- ## [Control visualization issue in Dashboard](https://discuss.elastic.co/t/control-visualization-issue-in-dashboard/256645)
**Author:** [@sarthaksahu](https://discuss.elastic.co/u/sarthaksahu)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 5:23pm UTC](https://discuss.elastic.co/t/control-visualization-issue-in-dashboard/256645 "2020-12-04T17:23:33Z")
We are upgrading kibana from 7.0.1 to 7.8.0 We had created Control Visualization in Kibana with 3 level parental control and using this in Dashboard. This was working as expected in 7.0.1 Issue: When we upgraded to 7.8… --- ## [Geohash Aggregation Question](https://discuss.elastic.co/t/geohash-aggregation-question/257681)
**Author:** [@johnrodey](https://discuss.elastic.co/u/johnrodey)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 5:08pm UTC](https://discuss.elastic.co/t/geohash-aggregation-question/257681 "2020-12-04T17:08:11Z")
Is there a way to create a geohash aggregation with counts for subtypes/numeric ranges within that geohash. For example if I have a collection of buildings and I want to know for each geohash, what is the count of offic… --- ## [Validation Failed: 1: this action would add \[2\] total shards, but this cluster currently has \[2122\]/\[2000\] maximum shards open](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2122-2000-maximum-shards-open/257678)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 4:59pm UTC](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2122-2000-maximum-shards-open/257678 "2020-12-04T16:59:27Z")
How can I solve this problem? \[2020-12-04T10:10:41,540\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>"e45d58acd2b072154d7ac57ceb05491db728… --- ## [Logstash](https://discuss.elastic.co/t/logstash/257661)
**Author:** [@bhuvaneswari](https://discuss.elastic.co/u/bhuvaneswari)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:12pm UTC](https://discuss.elastic.co/t/logstash/257661 "2020-12-04T14:12:52Z")
Is there any possibility to add logstash configuration to uberagent configuration file? --- ## [Error after upgrading filebeat to 7.10](https://discuss.elastic.co/t/error-after-upgrading-filebeat-to-7-10/255402)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 11\ **Last updated:** [December 4, 2020, 4:43pm UTC](https://discuss.elastic.co/t/error-after-upgrading-filebeat-to-7-10/255402 "2020-12-04T16:43:47Z")
Hi, after I upgraded my stack to 7.10(from 7.9.3), I tried to upgrade my filebeat. But I'm getting this error: Nov 14 14:41:54 XXXXXXX filebeat\[13184\]: 2020-11-14T14:41:54.462+0330 INFO instance/beat.go:46… --- ## [Change Login Page Logo - Kibana 7.9.1 Docker](https://discuss.elastic.co/t/change-login-page-logo-kibana-7-9-1-docker/257647)
**Author:** [@Ayakashi97](https://discuss.elastic.co/u/Ayakashi97)\ **Replies:** 11\ **Last updated:** [December 4, 2020, 4:31pm UTC](https://discuss.elastic.co/t/change-login-page-logo-kibana-7-9-1-docker/257647 "2020-12-04T16:31:48Z")
Hi threre, i am on Version 7.9.1 and want to change the login page logo. I found this thread: Custom Logo Kibana 7.9.2 (guide) All is working fine in docker-container, but i cannot use this command in the kibana docker… --- ## [How to filter empty objects in Logstash?](https://discuss.elastic.co/t/how-to-filter-empty-objects-in-logstash/257456)
**Author:** [@ppuschmann](https://discuss.elastic.co/u/ppuschmann)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 4:27pm UTC](https://discuss.elastic.co/t/how-to-filter-empty-objects-in-logstash/257456 "2020-12-04T16:27:30Z")
Hi, given you get the following access-log: { "container\_id": "b62946591d90f24", "service": "slash", "bytes\_received": 0, "input": {}, "type": "filebeat", "protocol": "HTTP/1.1", "bytes\_sent": 8236, "ho… --- ## [How can I automate version control Kibana Saved Object?](https://discuss.elastic.co/t/how-can-i-automate-version-control-kibana-saved-object/257677)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 4:23pm UTC](https://discuss.elastic.co/t/how-can-i-automate-version-control-kibana-saved-object/257677 "2020-12-04T16:23:22Z")
Hi, I am very new to Kibana. I create Dashboard using Kibana and found that I can save it by using Saved Object. I was thinking I can version control these json file in my Azure DevOps repo. Instead of export-\>saving i… --- ## [Logstash elasticsearch filter plugin authentication issues](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-authentication-issues/257233)
**Author:** [@Dede\_Pessu](https://discuss.elastic.co/u/Dede_Pessu)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 4:21pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-authentication-issues/257233 "2020-12-04T16:21:28Z")
Hey Everyone, I am currently trying to use the elasticsearch filter plugin for logstash to do some calculations/aggregations and it seems to be having issues connecting to our elasticsearch node. based on the documenta… --- ## [Tracing which privileged user used a local admin account in windows](https://discuss.elastic.co/t/tracing-which-privileged-user-used-a-local-admin-account-in-windows/257473)
**Author:** [@mkanukur](https://discuss.elastic.co/u/mkanukur)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 4:18pm UTC](https://discuss.elastic.co/t/tracing-which-privileged-user-used-a-local-admin-account-in-windows/257473 "2020-12-04T16:18:35Z")
Hi All, Reaching out to the community to seek a response to find which privileged user has used a local admin account on a windows server from Kibana, can anyone suggest ? Regards, --- ## [Vega chart not plotting correctly](https://discuss.elastic.co/t/vega-chart-not-plotting-correctly/257675)
**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 4:17pm UTC](https://discuss.elastic.co/t/vega-chart-not-plotting-correctly/257675 "2020-12-04T16:17:08Z")
I have just upgraded to v7.10 and was pleased to see that the Vega visualisation has moved out of experimental. Unfortunately, exitsing charts show the marks offsets from where they should be. I have created a new chart … --- ## [Why the order of split rows change the displayed values on Kibana table visualization](https://discuss.elastic.co/t/why-the-order-of-split-rows-change-the-displayed-values-on-kibana-table-visualization/257168)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 4:15pm UTC](https://discuss.elastic.co/t/why-the-order-of-split-rows-change-the-displayed-values-on-kibana-table-visualization/257168 "2020-12-04T16:15:42Z")
Im counting documents with repeated values of the field throughput\_mb\_range grouped by the name of an interface. My metric is Count. My first split row is the name of the interface with a size of 600. My second split … --- ## [Kibana canvas collapse json inside table](https://discuss.elastic.co/t/kibana-canvas-collapse-json-inside-table/255263)
**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 3:51pm UTC](https://discuss.elastic.co/t/kibana-canvas-collapse-json-inside-table/255263 "2020-12-04T15:51:30Z")
Hello. I am showing some json inside a table. Thanks to this post: the json is shown correctly. I was wondering if there is a way to collapse said json when it gets really long, so the user does not have to use the mou… --- ## [Sequence diagram in Canvas](https://discuss.elastic.co/t/sequence-diagram-in-canvas/257021)
**Author:** [@Kasun\_Perera](https://discuss.elastic.co/u/Kasun_Perera)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 3:48pm UTC](https://discuss.elastic.co/t/sequence-diagram-in-canvas/257021 "2020-12-04T15:48:56Z")
Can we draw a sequence diagram using Canvas? --- ## [Bar length in Horizontal bar graph is differing based on color condition](https://discuss.elastic.co/t/bar-length-in-horizontal-bar-graph-is-differing-based-on-color-condition/255580)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 3:10pm UTC](https://discuss.elastic.co/t/bar-length-in-horizontal-bar-graph-is-differing-based-on-color-condition/255580 "2020-12-04T15:10:39Z")
This is the Code and result without color conditioning { "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "width":806 data: { url: { %context%: true index: index\_ssd\_2 body: { … --- ## [\[Help\] How to ship logs from Kubernetes Cluster to Elasticsearch/Kibana](https://discuss.elastic.co/t/help-how-to-ship-logs-from-kubernetes-cluster-to-elasticsearch-kibana/257545)
**Author:** [@kekoks](https://discuss.elastic.co/u/kekoks)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 4:03pm UTC](https://discuss.elastic.co/t/help-how-to-ship-logs-from-kubernetes-cluster-to-elasticsearch-kibana/257545 "2020-12-03T16:03:29Z")
(topic withdrawn by author, will be automatically deleted in 24 hours unless flagged) --- ## [Logstash Apache Logs - pipeline ingest help needed](https://discuss.elastic.co/t/logstash-apache-logs-pipeline-ingest-help-needed/257655)
**Author:** [@retroisbest](https://discuss.elastic.co/u/retroisbest)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 3:03pm UTC](https://discuss.elastic.co/t/logstash-apache-logs-pipeline-ingest-help-needed/257655 "2020-12-04T15:03:29Z")
Hi there, I am using filebeat to push my logs and can see the apache logs using the kibana discover page. im using the apache module with filebeat 7.10 Im struggling ingesting this info so the fields are mapped correc… --- ## [Can we globally store the alert recipient mail and use it as to address watcher email actions](https://discuss.elastic.co/t/can-we-globally-store-the-alert-recipient-mail-and-use-it-as-to-address-watcher-email-actions/257152)
**Author:** [@Akhil\_Mohan](https://discuss.elastic.co/u/Akhil_Mohan)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 3:01pm UTC](https://discuss.elastic.co/t/can-we-globally-store-the-alert-recipient-mail-and-use-it-as-to-address-watcher-email-actions/257152 "2020-12-04T15:01:41Z")
Our aim is to store the mail address as global and use that email address in email actions in watcher as TO address.can you suggest is it possible? --- ## [Not able to start to logstash due could not find main class Xmx1024m](https://discuss.elastic.co/t/not-able-to-start-to-logstash-due-could-not-find-main-class-xmx1024m/257638)
**Author:** [@Siva\_Munnaluri](https://discuss.elastic.co/u/Siva_Munnaluri)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 2:47pm UTC](https://discuss.elastic.co/t/not-able-to-start-to-logstash-due-could-not-find-main-class-xmx1024m/257638 "2020-12-04T14:47:59Z")
Getting error as "Error: Could not find or load main class Xmx1024m" when we command "logstash.bat -e 'input {stdin{}} output {stdout{}}'" Logstash version : 7.6.2 Java version : Java 8.0 Please help me on this . --- ## [Kibana Alerts](https://discuss.elastic.co/t/kibana-alerts/256849)
**Author:** [@werner.fletcher](https://discuss.elastic.co/u/werner.fletcher)\ **Replies:** 12\ **Last updated:** [December 4, 2020, 2:40pm UTC](https://discuss.elastic.co/t/kibana-alerts/256849 "2020-12-04T14:40:10Z")
Good day, We've upgraded our subscription to Gold today but i still cannot see the Alerting option for Kibana. I want to set up email alerts to notify me when certain keywords appear in the logs shipped by the Filebeat… --- ## [\`-Infinity\` Scores during rolling upgrade](https://discuss.elastic.co/t/infinity-scores-during-rolling-upgrade/257667)
**Author:** [@ggdd](https://discuss.elastic.co/u/ggdd)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:35pm UTC](https://discuss.elastic.co/t/infinity-scores-during-rolling-upgrade/257667 "2020-12-04T14:35:57Z")
Hi, We are performing a rolling upgrade from ES6 to ES7 and we have 3 types of nodes: Coordinators Data-only Master eligible-only As recommended, we start the upgrade with the non-master-eligible nodes, in our case t… --- ## [Filebeat error](https://discuss.elastic.co/t/filebeat-error/257666)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:31pm UTC](https://discuss.elastic.co/t/filebeat-error/257666 "2020-12-04T14:31:51Z")
Hi. I am using the ELK with filebeat sending logs to elastic via suricata module. I have all configured but after some time the information on "discover" and "dashboard" just disappears. On the elastic and filebeat logs … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1659) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1661)