# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=167 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 168 --- ## [Set the Fleet server output in Kibana using Docker](https://discuss.elastic.co/t/set-the-fleet-server-output-in-kibana-using-docker/366110)
**Author:** [@lopes](https://discuss.elastic.co/u/lopes)\ **Replies:** 1\ **Last updated:** [September 19, 2024, 6:06pm UTC](https://discuss.elastic.co/t/set-the-fleet-server-output-in-kibana-using-docker/366110 "2024-09-19T18:06:53Z")
Hey there! Here's my scenario: Elasticsearch, Kibana, and Fleet server deployed in Docker. A Windows host in VMware (bridge). All systems sharing the same physical host. I'm trying to send the Windows logs to ES. The… --- ## [Best practice for legacy address database searches](https://discuss.elastic.co/t/best-practice-for-legacy-address-database-searches/366804)
**Author:** [@Stubbs](https://discuss.elastic.co/u/Stubbs)\ **Replies:** 1\ **Last updated:** [September 19, 2024, 6:01pm UTC](https://discuss.elastic.co/t/best-practice-for-legacy-address-database-searches/366804 "2024-09-19T18:01:03Z")
We have a legacy database of addresses that contains data from multiple countries and is quite frankly, a mess! We have lots of duplicates, lots of entries where the same postcode is entered with and without spaces and o… --- ## [Schedule times](https://discuss.elastic.co/t/schedule-times/366487)
**Author:** [@UweW](https://discuss.elastic.co/u/UweW)\ **Replies:** 1\ **Last updated:** [September 19, 2024, 5:44pm UTC](https://discuss.elastic.co/t/schedule-times/366487 "2024-09-19T17:44:23Z")
Hi, how can i influence when the scheduled packs are executed? At the moment I can't see when they are executed. For example, if I want to collect information from the windows clients once a day, this has to happen dur… --- ## [Migrate Filebeat autodiscover for Docker containers to Fleet managed Elastic Agent setup](https://discuss.elastic.co/t/migrate-filebeat-autodiscover-for-docker-containers-to-fleet-managed-elastic-agent-setup/366162)
**Author:** [@piers.geyman](https://discuss.elastic.co/u/piers.geyman)\ **Replies:** 1\ **Last updated:** [September 19, 2024, 5:58pm UTC](https://discuss.elastic.co/t/migrate-filebeat-autodiscover-for-docker-containers-to-fleet-managed-elastic-agent-setup/366162 "2024-09-19T17:58:42Z")
We are currently using Filebeat with autodiscover to send logs from Docker containers of different flavours (Apache HTTP, MySQL, etc). We are now trying to migrate over to Elastic Agent with Fleet managed agents, but I … --- ## [Pie chart with override settings](https://discuss.elastic.co/t/pie-chart-with-override-settings/366618)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 3\ **Last updated:** [September 19, 2024, 2:59pm UTC](https://discuss.elastic.co/t/pie-chart-with-override-settings/366618 "2024-09-19T14:59:54Z")
I am attempting to replicate some dashboards from Grafana into Kibana, for the most part its working. Is there a request to improve Lens for this kind of scenario? I did notice that in Grafana you can create a pie chart… --- ## [Lens - Heat Map Issue](https://discuss.elastic.co/t/lens-heat-map-issue/366803)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 1\ **Last updated:** [September 19, 2024, 2:54pm UTC](https://discuss.elastic.co/t/lens-heat-map-issue/366803 "2024-09-19T14:54:53Z")
Hello, Is there an way to improve this or is there a github issue related to this: The issue is when using a heat map is that its requiring more space to display values on the x axis. This is unfortunate as its requiri… --- ## [Failed to load SSL configuration \[xpack.security.transport.ssl\] - the truststore \[/etc/elasticsearch/certs/root.p12\] does not contain any trusted certificate entries](https://discuss.elastic.co/t/failed-to-load-ssl-configuration-xpack-security-transport-ssl-the-truststore-etc-elasticsearch-certs-root-p12-does-not-contain-any-trusted-certificate-entries/366584)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 3\ **Last updated:** [September 19, 2024, 2:36pm UTC](https://discuss.elastic.co/t/failed-to-load-ssl-configuration-xpack-security-transport-ssl-the-truststore-etc-elasticsearch-certs-root-p12-does-not-contain-any-trusted-certificate-entries/366584 "2024-09-19T14:36:02Z")
I am trying to create my own PKCS12 certificate files to use with elasticsearch, but when I do systemctl start elasticsearch, I get this error: 2024-09-15T01:24:22,581\]\[ERROR\]\[o.e.b.Elasticsearch \] \[node1\] fatal ex… --- ## [Logstash-Not able to grok parse the incoming message field properly with condition](https://discuss.elastic.co/t/logstash-not-able-to-grok-parse-the-incoming-message-field-properly-with-condition/366792)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 3\ **Last updated:** [September 19, 2024, 2:14pm UTC](https://discuss.elastic.co/t/logstash-not-able-to-grok-parse-the-incoming-message-field-properly-with-condition/366792 "2024-09-19T14:14:21Z")
Hello, Below is my incoming single log message: \[2024-02-14T03:29:07.962+0000\]\[118\]\[safepoint \] Safepoint "Cleanup", Time since last: 1000174402 ns, Reaching safepoint: 9291 ns, Cleanup: 83971 ns, At safepoint: 14116… --- ## [Prometheus Integration - Possible Bug?](https://discuss.elastic.co/t/prometheus-integration-possible-bug/366562)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 5\ **Last updated:** [September 19, 2024, 2:09pm UTC](https://discuss.elastic.co/t/prometheus-integration-possible-bug/366562 "2024-09-19T14:09:03Z")
I am able to collect data from Prometheus integration. The point of the integration is to grab Prometheus formatted metrics and convert it into ECS. I think I found a bug. I don't see any errors with the intergration b… --- ## [Extract multiline logs as single event](https://discuss.elastic.co/t/extract-multiline-logs-as-single-event/366545)
**Author:** [@rubhamra](https://discuss.elastic.co/u/rubhamra)\ **Replies:** 3\ **Last updated:** [September 19, 2024, 12:41pm UTC](https://discuss.elastic.co/t/extract-multiline-logs-as-single-event/366545 "2024-09-19T12:41:44Z")
Hello I am trying to extract java logs , these logs are multiline but I want extract as single event Ingest pipeline: POST \_ingest/pipeline/\_simulate { "pipeline": { "description": "Pipeline to combine multiline lo… --- ## [Queries with nested fields and "having" clauses](https://discuss.elastic.co/t/queries-with-nested-fields-and-having-clauses/366643)
**Author:** [@Ludmilla1963](https://discuss.elastic.co/u/Ludmilla1963)\ **Replies:** 4\ **Last updated:** [September 19, 2024, 12:14pm UTC](https://discuss.elastic.co/t/queries-with-nested-fields-and-having-clauses/366643 "2024-09-19T12:14:51Z")
I have this index with a nested field: { "test-nested": { "mappings": { "properties": { "indicator": { "type": "nested", "properties": { "id": { "type": … --- ## [Issues Collecting POD Metrics in Elastic Agent on Private Kubernetes Cluster](https://discuss.elastic.co/t/issues-collecting-pod-metrics-in-elastic-agent-on-private-kubernetes-cluster/362324)
**Author:** [@FelipeNoguez](https://discuss.elastic.co/u/FelipeNoguez)\ **Replies:** 1\ **Last updated:** [September 19, 2024, 11:48am UTC](https://discuss.elastic.co/t/issues-collecting-pod-metrics-in-elastic-agent-on-private-kubernetes-cluster/362324 "2024-09-19T11:48:57Z")
Hello. I have a private Azure Kubernetes Service, where I have several services running. I also have another private Azure Kubernetes Service, where Elastic Cloud Kubernetes is running, both managed by our team. The p… --- ## [No ML nodes with sufficient capacity for trained model deployment](https://discuss.elastic.co/t/no-ml-nodes-with-sufficient-capacity-for-trained-model-deployment/357517)
**Author:** [@msola](https://discuss.elastic.co/u/msola)\ **Replies:** 9\ **Last updated:** [September 19, 2024, 9:18am UTC](https://discuss.elastic.co/t/no-ml-nodes-with-sufficient-capacity-for-trained-model-deployment/357517 "2024-09-19T09:18:23Z")
Hi, I'm new with elasticsearch. I currently have the trial period Platinum subscription, since I want to check if elasticsearch fits with what I want to do. I want to test the elster\_model\_2 ML model. However, every ti… --- ## [Lens - If Statements with color](https://discuss.elastic.co/t/lens-if-statements-with-color/366750)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 3\ **Last updated:** [September 19, 2024, 8:07am UTC](https://discuss.elastic.co/t/lens-if-statements-with-color/366750 "2024-09-19T08:07:26Z")
Hello, is it possible to add a condition in Lens? I am trying to create a visualization that will turn "red" or "green" based on the value of a keyword. So for example, task: "running" = green , and it will show the v… --- ## [Visualisation Error after upgrade](https://discuss.elastic.co/t/visualisation-error-after-upgrade/366040)
**Author:** [@Scott\_Barker](https://discuss.elastic.co/u/Scott_Barker)\ **Replies:** 8\ **Last updated:** [September 19, 2024, 6:43am UTC](https://discuss.elastic.co/t/visualisation-error-after-upgrade/366040 "2024-09-19T06:43:43Z")
Hi All I've updated Elasticsearch and Kibana from 7.12 to 8.14 and seemed OK with no errors during the upgrade. After the upgrade I view a index \\ index pattern I can view the data but the Visualisation showing the dat… --- ## [Elasticsearch LDAP - java.io.FilePermission error](https://discuss.elastic.co/t/elasticsearch-ldap-java-io-filepermission-error/366756)
**Author:** [@v1p3r0u5](https://discuss.elastic.co/u/v1p3r0u5)\ **Replies:** 2\ **Last updated:** [September 19, 2024, 5:58am UTC](https://discuss.elastic.co/t/elasticsearch-ldap-java-io-filepermission-error/366756 "2024-09-19T05:58:29Z")
Hello everybody :slight\_smile: I'm having a very strange problem while setting up LDAP for elasticsearch. First of all some information about my environment Elasticsearch version: \[root@elastic ~\]# /usr/share/elastic… --- ## [Default behavior of sorting in the transform](https://discuss.elastic.co/t/default-behavior-of-sorting-in-the-transform/366729)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 3:50pm UTC](https://discuss.elastic.co/t/default-behavior-of-sorting-in-the-transform/366729 "2024-09-18T15:50:43Z")
We are using transform and doing sorting based in extractDateTime. We want to know if we two logs available with the exact same extractDateTime value. Then based on which behavior it will show the log. Or is it random i… --- ## [Absence of fields in VMware vSphere Elastic Agent integration](https://discuss.elastic.co/t/absence-of-fields-in-vmware-vsphere-elastic-agent-integration/366761)
**Author:** [@iTiago](https://discuss.elastic.co/u/iTiago)\ **Replies:** 0\ **Last updated:** [September 18, 2024, 10:29pm UTC](https://discuss.elastic.co/t/absence-of-fields-in-vmware-vsphere-elastic-agent-integration/366761 "2024-09-18T22:29:11Z")
The failure is basically that the vsphere.virtualmachine.cpu.total.mhz and sphere.virtualmachine.cpu.free.mhz fields do not record information in a large number of documents, while in another, these metrics are received. … --- ## [Custom embeddable plugin - How to add to dashboard](https://discuss.elastic.co/t/custom-embeddable-plugin-how-to-add-to-dashboard/366613)
**Author:** [@OAJ](https://discuss.elastic.co/u/OAJ)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 10:26pm UTC](https://discuss.elastic.co/t/custom-embeddable-plugin-how-to-add-to-dashboard/366613 "2024-09-18T22:26:52Z")
Hi all, So i just completed my embeddable plugin and it is currently showing up in the main side menu at the bottom. How do i add it to my dashboard? Thanks in advance for your reply --- ## [How to eliminate gaps in a Bar Vertical chart that's broken down by a number?](https://discuss.elastic.co/t/how-to-eliminate-gaps-in-a-bar-vertical-chart-thats-broken-down-by-a-number/364631)
**Author:** [@ewatkins](https://discuss.elastic.co/u/ewatkins)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 4:23pm UTC](https://discuss.elastic.co/t/how-to-eliminate-gaps-in-a-bar-vertical-chart-thats-broken-down-by-a-number/364631 "2024-09-18T16:23:05Z")
See attached. I've got a vertical bar chart with "Company" (a string) for the horizontal axis, and it's broken down by "VersionID" (a number). For example, the first company is MOUK and it's broken down into two versio… --- ## [How to shange JSON Output so its not wrapped in a field name](https://discuss.elastic.co/t/how-to-shange-json-output-so-its-not-wrapped-in-a-field-name/366738)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 2:22pm UTC](https://discuss.elastic.co/t/how-to-shange-json-output-so-its-not-wrapped-in-a-field-name/366738 "2024-09-18T14:22:58Z")
How to I output my JSON so that it looks like this \[{"value":"main.abc.com","risk":"High","type":"fqdn","notes":"suspect"}\] Its currently outputting like this {"domain\_data":\[{"value":"main.abc.com","risk":"High","typ… --- ## [Sorting the data based on date in Elasticseach using the transform](https://discuss.elastic.co/t/sorting-the-data-based-on-date-in-elasticseach-using-the-transform/366734)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 2:19pm UTC](https://discuss.elastic.co/t/sorting-the-data-based-on-date-in-elasticseach-using-the-transform/366734 "2024-09-18T14:19:29Z")
Hi Team, We are using a sort in our transform to sort the records based on a timestamp field by grouping them on a unique key and get only the latest record out of that. But we are facing an issue as in one use case my … --- ## [Salesforce Logstash pipeline shutting down after a single execution](https://discuss.elastic.co/t/salesforce-logstash-pipeline-shutting-down-after-a-single-execution/366590)
**Author:** [@mosaadshaikh1998](https://discuss.elastic.co/u/mosaadshaikh1998)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 1:14pm UTC](https://discuss.elastic.co/t/salesforce-logstash-pipeline-shutting-down-after-a-single-execution/366590 "2024-09-18T13:14:47Z")
Hi Team, I'm using the Logstash Salesforce input plugin on a Windows server to fetch Salesforce application data. When I run it from the command line, the pipeline shuts down after fetching data once. Is there a way to… --- ## [Conditional processing of "date" processor when empty value](https://discuss.elastic.co/t/conditional-processing-of-date-processor-when-empty-value/366418)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 10\ **Last updated:** [September 18, 2024, 12:51pm UTC](https://discuss.elastic.co/t/conditional-processing-of-date-processor-when-empty-value/366418 "2024-09-18T12:51:54Z")
Hello, My logs are parsed with a dissect processor which works flawlessly. Then I have some processors to enrich my data. One of these processors is a "date" on a field calle "date\_begin" which takes a string value an… --- ## [Kibana is not working on the browser microsoft edge](https://discuss.elastic.co/t/kibana-is-not-working-on-the-browser-microsoft-edge/366614)
**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 10:06am UTC](https://discuss.elastic.co/t/kibana-is-not-working-on-the-browser-microsoft-edge/366614 "2024-09-18T10:06:14Z")
My kibana and elasticsearch service is working but cannot get the browser to work on port 5601 as they are on the same box curl --cacert /etc/elasticsearch/certs/http\_ca.crt -u elastic:xxxxxxxx https://localhost:9200 … --- ## [Unable to retrieve version information from Elasticsearch nodes. unable to verify the first certificate](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/366675)
**Author:** [@Mubolio](https://discuss.elastic.co/u/Mubolio)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 7:57am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/366675 "2024-09-18T07:57:09Z")
Hello, I generated with certutils my own ca.crt, ca.key and the certificates for each node(with an instances.yml), however when I load the elastic and kibana, kibana docker container logs says: kibana\_1 | \[2024-09-17… --- ## [elasticsearch query for selecting records where agent1 is one of the agents but there are also other agents](https://discuss.elastic.co/t/elasticsearch-query-for-selecting-records-where-agent1-is-one-of-the-agents-but-there-are-also-other-agents/366678)
**Author:** [@ali7](https://discuss.elastic.co/u/ali7)\ **Replies:** 2\ **Last updated:** [September 18, 2024, 9:30am UTC](https://discuss.elastic.co/t/elasticsearch-query-for-selecting-records-where-agent1-is-one-of-the-agents-but-there-are-also-other-agents/366678 "2024-09-18T09:30:48Z")
I have an elasticsearch index that has this fields: user\_id, agent\_name, city, ... I want to run a query for selecting records where agent\_name "agent1" is one of the agents but there are also other agents, and then sel… --- ## [Filter bar vertical kibana](https://discuss.elastic.co/t/filter-bar-vertical-kibana/366700)
**Author:** [@Rafabravo](https://discuss.elastic.co/u/Rafabravo)\ **Replies:** 1\ **Last updated:** [September 18, 2024, 9:41am UTC](https://discuss.elastic.co/t/filter-bar-vertical-kibana/366700 "2024-09-18T09:41:38Z")
I have a vertical bar in kibana. I add 10 variable on the horizontal axis. Can a different filter be generated by clicking the different bars? --- ## [Best way to introduce multiple new NLP models to existing indexes?](https://discuss.elastic.co/t/best-way-to-introduce-multiple-new-nlp-models-to-existing-indexes/361209)
**Author:** [@Jason\_Woo](https://discuss.elastic.co/u/Jason_Woo)\ **Replies:** 1\ **Last updated:** [September 18, 2024, 9:07am UTC](https://discuss.elastic.co/t/best-way-to-introduce-multiple-new-nlp-models-to-existing-indexes/361209 "2024-09-18T09:07:53Z")
I am following this documentation: Add NLP inference to ingest pipelines | Machine Learning in the Elastic Stack \[8.14\] | Elastic and I learned that I can set up an ingest pipeline and reindex existing indexes into a new… --- ## [ML Inference speeds &](https://discuss.elastic.co/t/ml-inference-speeds/362084)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 1\ **Last updated:** [September 18, 2024, 8:49am UTC](https://discuss.elastic.co/t/ml-inference-speeds/362084 "2024-09-18T08:49:05Z")
Hello, I have a question regarding the speed of which I embed my documents. I currently have an index with 10.000 documents, My ML node looks like this: As can be seen, I currently have 4GB of ram & 2vCPU's. With… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=166) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=168)