# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1675 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1676 --- ## [ILM and max size with logstash ELK 7.10.0](https://discuss.elastic.co/t/ilm-and-max-size-with-logstash-elk-7-10-0/256764)
**Author:** [@fredbcode](https://discuss.elastic.co/u/fredbcode)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 12:15pm UTC](https://discuss.elastic.co/t/ilm-and-max-size-with-logstash-elk-7-10-0/256764 "2020-11-26T12:15:18Z")
Hello I am using ELK stack 7.10.0 and I have an issue with ilm and max\_size { "indices" : { "logstash\_netflow-2020.11.26" : { "index" : "logstash\_netflow-2020.11.26", "managed" : t… --- ## [Kibana error 500 when viewing metrics](https://discuss.elastic.co/t/kibana-error-500-when-viewing-metrics/256429)
**Author:** [@daq](https://discuss.elastic.co/u/daq)\ **Replies:** 0\ **Last updated:** [November 24, 2020, 1:59am UTC](https://discuss.elastic.co/t/kibana-error-500-when-viewing-metrics/256429 "2020-11-24T01:59:26Z")
I'm having a problem viewing metrics in Kibana. My issue seems identical to this bug report. except the workaround there doesn't solve the problem for me. Every time I open metrics tab I get the following error: \[illeg… --- ## [Kibana alerting not matching wildcard AND condition](https://discuss.elastic.co/t/kibana-alerting-not-matching-wildcard-and-condition/256580)
**Author:** [@Chris\_Clifton](https://discuss.elastic.co/u/Chris_Clifton)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 11:33am UTC](https://discuss.elastic.co/t/kibana-alerting-not-matching-wildcard-and-condition/256580 "2020-11-26T11:33:31Z")
Hi, trying to determine why a field isn't matching wildcard searches in our log data in Kibana alerting. We're on the elastic cloud stack, v7.9.2. We need to add an AND condition for this particular log search and with … --- ## [Trying to implement pie chart logic](https://discuss.elastic.co/t/trying-to-implement-pie-chart-logic/256459)
**Author:** [@michaelacc](https://discuss.elastic.co/u/michaelacc)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 11:29am UTC](https://discuss.elastic.co/t/trying-to-implement-pie-chart-logic/256459 "2020-11-26T11:29:34Z")
Hello Everyone! I'm a new user of ELK stack, its looking really powerful and a bit challenging, however I would like to ask you about one thing related to kibana visualizations. I'm currently trying to implement a visua… --- ## [Access to different data source in vega-lite](https://discuss.elastic.co/t/access-to-different-data-source-in-vega-lite/256075)
**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 11:19am UTC](https://discuss.elastic.co/t/access-to-different-data-source-in-vega-lite/256075 "2020-11-26T11:19:50Z")
Hi, Is it possible to access fields in different data source from encoding object in vega-lite? Many thanks in advance, Cheers, Shin --- ## [Timelion Visualization dropdown to edit comparison](https://discuss.elastic.co/t/timelion-visualization-dropdown-to-edit-comparison/255303)
**Author:** [@nagabhushan.tr](https://discuss.elastic.co/u/nagabhushan.tr)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 11:08am UTC](https://discuss.elastic.co/t/timelion-visualization-dropdown-to-edit-comparison/255303 "2020-11-26T11:08:49Z")
Hi, We are building interactive visualization to compare the sales data over timelion, ask is to compare the sales today to yesterday(this duration should be customizable), which i am able to achieve by having a offset … --- ## [Cluster is not available and http request failed, but request by transport client worked well](https://discuss.elastic.co/t/cluster-is-not-available-and-http-request-failed-but-request-by-transport-client-worked-well/256722)
**Author:** [@fanwang](https://discuss.elastic.co/u/fanwang)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 10:51am UTC](https://discuss.elastic.co/t/cluster-is-not-available-and-http-request-failed-but-request-by-transport-client-worked-well/256722 "2020-11-26T10:51:56Z")
Elasticsearch version V5.6.12 JVM version JDK 1.8 OS version CentOS7.6 Description of the problem including expected versus actual behavior : In a cluster with 3 master nodes, minuimum\_master\_nodes is 2. Kill 2 o… --- ## [Timestamps for archived event logs are overwritten with current time](https://discuss.elastic.co/t/timestamps-for-archived-event-logs-are-overwritten-with-current-time/256756)
**Author:** [@p1k4chu](https://discuss.elastic.co/u/p1k4chu)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 10:46am UTC](https://discuss.elastic.co/t/timestamps-for-archived-event-logs-are-overwritten-with-current-time/256756 "2020-11-26T10:46:46Z")
I've used the latest winlogbeat to ingest an archived evtx (sample taken from: GitHub - sbousseaden/EVTX-ATTACK-SAMPLES: Windows Events Attack Samples). The timestamp I see in Kibana when ingested via Logstash (without a… --- ## [Syncronize vega-lite timestamp with kibana chart's timestamp](https://discuss.elastic.co/t/syncronize-vega-lite-timestamp-with-kibana-charts-timestamp/256082)
**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 10:33am UTC](https://discuss.elastic.co/t/syncronize-vega-lite-timestamp-with-kibana-charts-timestamp/256082 "2020-11-26T10:33:01Z")
Hi Experts, I'm writing a scatter plots in vega-lite now and it's on a dashboard contining many kibana charts. One of the charts on the doashboard changes every 1 second and I would like the other charts to synchronize… --- ## [Dynamically changing the graphical dashboard](https://discuss.elastic.co/t/dynamically-changing-the-graphical-dashboard/256487)
**Author:** [@All](https://discuss.elastic.co/u/All)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 10:21am UTC](https://discuss.elastic.co/t/dynamically-changing-the-graphical-dashboard/256487 "2020-11-26T10:21:11Z")
Hey everyone, is it possible to dynamically change the appearance of the dashboard, e.g. if some data is missing the graph or table is not shown? Thanks for reading and I am also very thankful for any comment! --- ## [Attachments on ELK](https://discuss.elastic.co/t/attachments-on-elk/256717)
**Author:** [@AChopra](https://discuss.elastic.co/u/AChopra)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 10:07am UTC](https://discuss.elastic.co/t/attachments-on-elk/256717 "2020-11-26T10:07:35Z")
Hello, I have some attachments which need to be ingested into elastic. There are of varying types i.e PDF, TXT, CSV, XLS, DOC, MSG (Outlook emails). As far as I could find out , I got to know that I can use Ingest Att… --- ## [Reindexing does not resolve conflict](https://discuss.elastic.co/t/reindexing-does-not-resolve-conflict/256745)
**Author:** [@eliwap](https://discuss.elastic.co/u/eliwap)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 9:33am UTC](https://discuss.elastic.co/t/reindexing-does-not-resolve-conflict/256745 "2020-11-26T09:33:01Z")
Recently we upgraded our stack to elasticsearch-7.9.2 from 6.8. I had to reindex to resolve several mapping conflicts. However reindexing did not resolve all of them. How do I fix the following conflicts filebeat - rea… --- ## [Default index template is it reale?](https://discuss.elastic.co/t/default-index-template-is-it-reale/256658)
**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 12:35pm UTC](https://discuss.elastic.co/t/default-index-template-is-it-reale/256658 "2020-11-25T12:35:46Z")
I want create some index template which will use all new indexes which will create logstash and that doesn't have exactly template for his. Example: I have templates: pattern: log1-\* + ilm1 + priority 200 pattern: lo… --- ## [Is it possible to show videos in Canvas?](https://discuss.elastic.co/t/is-it-possible-to-show-videos-in-canvas/256675)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 8:57am UTC](https://discuss.elastic.co/t/is-it-possible-to-show-videos-in-canvas/256675 "2020-11-26T08:57:41Z")
Hello, So is it possible to show videos in Canvas? (Youtube link) If yes, how would I do that? If no, could this functionality be added? Grtz Willem --- ## [Display the most frequent words in tagcloud chart in kibana](https://discuss.elastic.co/t/display-the-most-frequent-words-in-tagcloud-chart-in-kibana/252561)
**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\ **Replies:** 3\ **Last updated:** [November 26, 2020, 8:54am UTC](https://discuss.elastic.co/t/display-the-most-frequent-words-in-tagcloud-chart-in-kibana/252561 "2020-11-26T08:54:42Z")
hello, i have text data indexed on elasticsearch, and i want to display the words that are frequently cited in this data in tagcloud format, how i can do this on kibana thank you very much --- ## [Integration of Kibana dashboard in angular application](https://discuss.elastic.co/t/integration-of-kibana-dashboard-in-angular-application/256729)
**Author:** [@sam189](https://discuss.elastic.co/u/sam189)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 8:40am UTC](https://discuss.elastic.co/t/integration-of-kibana-dashboard-in-angular-application/256729 "2020-11-26T08:40:50Z")
Hi, When i am trying to integrate kibana dashboard inside my angular application via iframe it is giving me below error. Refused to execute inline script because it violates the following Content Security Policy direct… --- ## [Missing elastic-agent.yml](https://discuss.elastic.co/t/missing-elastic-agent-yml/256739)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 8:33am UTC](https://discuss.elastic.co/t/missing-elastic-agent-yml/256739 "2020-11-26T08:33:31Z")
Hi, For installing Elastic Agent it is recommended now to use the tarball (Linux) version instead of the deb version. So I did on my Ubuntu server. But when running the install command to enroll to Fleet I am getting t… --- ## [Kibana plugin or custom app](https://discuss.elastic.co/t/kibana-plugin-or-custom-app/256648)
**Author:** [@jnc943](https://discuss.elastic.co/u/jnc943)\ **Replies:** 3\ **Last updated:** [November 26, 2020, 8:26am UTC](https://discuss.elastic.co/t/kibana-plugin-or-custom-app/256648 "2020-11-26T08:26:35Z")
I would like to automate some current troubleshooting workflows that are done manually. Essentially, I would like to be able to run a query, extract some fields/information which can then be passed down to subsequent que… --- ## [Unable to find any unassigned shards to explain](https://discuss.elastic.co/t/unable-to-find-any-unassigned-shards-to-explain/256733)
**Author:** [@devdatta\_mulgund](https://discuss.elastic.co/u/devdatta_mulgund)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 8:01am UTC](https://discuss.elastic.co/t/unable-to-find-any-unassigned-shards-to-explain/256733 "2020-11-26T08:01:34Z")
I am facing this error in Elasticsearch. Can someone help with this? Below is the output for Elasticsearch APIs: curl localhost:9200/\_cluster/health output: {"cluster\_name":"docker-cluster","status":"green","timed\_ou… --- ## [Taking care of syslog PRI header in filter](https://discuss.elastic.co/t/taking-care-of-syslog-pri-header-in-filter/256732)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 0\ **Last updated:** [November 26, 2020, 7:53am UTC](https://discuss.elastic.co/t/taking-care-of-syslog-pri-header-in-filter/256732 "2020-11-26T07:53:36Z")
I use kv filter on a syslog data on the form key1=value1 key2=value2 etc. However, every syslog row has a leading PRI header of key1=value1. Is there a way to: Parse the pri header and all key-value pairs. Remove… --- ## [Kibana development - migrate/upgrade plugins from 7.3.x to 7.9.x](https://discuss.elastic.co/t/kibana-development-migrate-upgrade-plugins-from-7-3-x-to-7-9-x/251741)
**Author:** [@tsvet](https://discuss.elastic.co/u/tsvet)\ **Replies:** 19\ **Last updated:** [November 26, 2020, 7:53am UTC](https://discuss.elastic.co/t/kibana-development-migrate-upgrade-plugins-from-7-3-x-to-7-9-x/251741 "2020-11-26T07:53:24Z")
Hi, I have custom plugins that are compatible with Kibana 7.3.2 . And usually moving from one version to another is not that hard (especially if it is not a major release). I have read that for version 7.9+ there is a … --- ## [How can I set x-opaque-id when I use es-sql？](https://discuss.elastic.co/t/how-can-i-set-x-opaque-id-when-i-use-es-sql/256065)
**Author:** [@ITzhangqiang](https://discuss.elastic.co/u/ITzhangqiang)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 7:38am UTC](https://discuss.elastic.co/t/how-can-i-set-x-opaque-id-when-i-use-es-sql/256065 "2020-11-26T07:38:19Z")
Hi,all How can I set x-opaque-id when I use es-sql？ --- ## [Pipeline with id does not exist](https://discuss.elastic.co/t/pipeline-with-id-does-not-exist/256689)
**Author:** [@Integration](https://discuss.elastic.co/u/Integration)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 7:32am UTC](https://discuss.elastic.co/t/pipeline-with-id-does-not-exist/256689 "2020-11-26T07:32:37Z")
Hello, I'm trying to configure my filebeat.yml file with a pipeline that I created, and it's not working. I created the pipeline using Ingest Node Pipelines on the ElasticSearch UI. I get this error: 'pipeline with i… --- ## [How do I set number of replica to zero in metricbeat?](https://discuss.elastic.co/t/how-do-i-set-number-of-replica-to-zero-in-metricbeat/256618)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 5:52am UTC](https://discuss.elastic.co/t/how-do-i-set-number-of-replica-to-zero-in-metricbeat/256618 "2020-11-26T05:52:05Z")
I have only 1 node cluster and hence I need only 1 shard and 0 replica for all my indices. I cannot set the number of replica to 0 for metricbeat index. My yml file looks like this: setup.template.name: "metricbeat"… --- ## [What config will need to send mail using log4j.property settings in logstash?](https://discuss.elastic.co/t/what-config-will-need-to-send-mail-using-log4j-property-settings-in-logstash/256481)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 4\ **Last updated:** [November 26, 2020, 5:51am UTC](https://discuss.elastic.co/t/what-config-will-need-to-send-mail-using-log4j-property-settings-in-logstash/256481 "2020-11-26T05:51:28Z")
currently logstash create plain.log, how can send mail using log4j2.property file. any idea? --- ## [Auditbeat chroot jail support](https://discuss.elastic.co/t/auditbeat-chroot-jail-support/256677)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 5:45am UTC](https://discuss.elastic.co/t/auditbeat-chroot-jail-support/256677 "2020-11-26T05:45:23Z")
Hi All, I was wondering if there is any documentation on getting Auditbeat to collect information from chroot jails? Based on how chroot jails work, it doesn't seem like there is a straight forward way of getting Auditb… --- ## [Kibana alerts on Resolution](https://discuss.elastic.co/t/kibana-alerts-on-resolution/255396)
**Author:** [@Basilis\_Ch](https://discuss.elastic.co/u/Basilis_Ch)\ **Replies:** 1\ **Last updated:** [November 26, 2020, 5:37am UTC](https://discuss.elastic.co/t/kibana-alerts-on-resolution/255396 "2020-11-26T05:37:04Z")
I can read in the documentation: Kibana alerts tracks and persists the state of each detected condition through alert instances . This makes it possible to mute and throttle individual instances, and detect changes in s… --- ## [Kibana Alerts vs Watcher](https://discuss.elastic.co/t/kibana-alerts-vs-watcher/256551)
**Author:** [@fran6ssl](https://discuss.elastic.co/u/fran6ssl)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 5:31am UTC](https://discuss.elastic.co/t/kibana-alerts-vs-watcher/256551 "2020-11-26T05:31:57Z")
Hi, I would like to know what is included with Kibana Alerts in the Basic Plan ? I need to setup email alerts when certain conditions are met. For exemple, send an email when a new log entry exists where the user ha… --- ## [KIbana indicies always missing by a random time](https://discuss.elastic.co/t/kibana-indicies-always-missing-by-a-random-time/256624)
**Author:** [@Junedi\_Rajagukguk](https://discuss.elastic.co/u/Junedi_Rajagukguk)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 5:26am UTC](https://discuss.elastic.co/t/kibana-indicies-always-missing-by-a-random-time/256624 "2020-11-26T05:26:36Z")
Hi i still cant find the solution for this issue, can anybody help me. my indices always reset, so i always miss logdata in kibana for the past days, even the data in log servers still exist. here the configuration … --- ## [Enable HTTPS on Kibana on Docker](https://discuss.elastic.co/t/enable-https-on-kibana-on-docker/256139)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 2\ **Last updated:** [November 26, 2020, 5:19am UTC](https://discuss.elastic.co/t/enable-https-on-kibana-on-docker/256139 "2020-11-26T05:19:09Z")
I've used this for deploying the ELK: https://github.com/deviantony/docker-elk I have my cert and private key, but I have no idea where to store them and how to write the path according to this: https://www.elastic.co/g… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1674) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1676)