# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1678 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1679 --- ## [Search visualization selection disappears](https://discuss.elastic.co/t/search-visualization-selection-disappears/255691)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 7\ **Last updated:** [November 25, 2020, 8:26am UTC](https://discuss.elastic.co/t/search-visualization-selection-disappears/255691 "2020-11-25T08:26:04Z")
Hi I am using kibana 7.8 and I have a control visualization with 3 "controls". When I make a selection for the first one and then select "Apply" everything is ok, but when I make a selection for the first control and … --- ## [Content\_tier](https://discuss.elastic.co/t/content-tier/256513)
**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 7:49am UTC](https://discuss.elastic.co/t/content-tier/256513 "2020-11-25T07:49:47Z")
Hello, with reference to 7.10 and Data tiers | Elasticsearch Guide \[master\] | Elastic Content tier nodes are usually optimized for query performance—​they prioritize processing power over IO throughput so they can proc… --- ## [Data Stop ingesting after deleting index](https://discuss.elastic.co/t/data-stop-ingesting-after-deleting-index/256027)
**Author:** [@bhijay](https://discuss.elastic.co/u/bhijay)\ **Replies:** 7\ **Last updated:** [November 25, 2020, 7:27am UTC](https://discuss.elastic.co/t/data-stop-ingesting-after-deleting-index/256027 "2020-11-25T07:27:33Z")
Hello, I mistakenly deleted the winlogbeat index. However, new data stopped ingesting after deletion. What can I do? Regards. --- ## [How to update rollover conditions for a lifecycle policy?](https://discuss.elastic.co/t/how-to-update-rollover-conditions-for-a-lifecycle-policy/256343)
**Author:** [@Kenn](https://discuss.elastic.co/u/Kenn)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 7:12am UTC](https://discuss.elastic.co/t/how-to-update-rollover-conditions-for-a-lifecycle-policy/256343 "2020-11-25T07:12:07Z")
I have a metricbeat index ,metricbeat-7.9.1-2020.11.23-000001, and I would like to update the max size condition for the rollover action. The response from /\_ilm/explain : { "indices": { "metricbeat-7.9.1… --- ## [Query on too many scroll contexts](https://discuss.elastic.co/t/query-on-too-many-scroll-contexts/256606)
**Author:** [@skandimalla](https://discuss.elastic.co/u/skandimalla)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 6:55am UTC](https://discuss.elastic.co/t/query-on-too-many-scroll-contexts/256606 "2020-11-25T06:55:59Z")
We are using ES version 6.4 and we want to upgrade to 7.4. While testing the up-gradation to do a paginated search using Scroll we are facing the below issue: Trying to create too many scroll contexts. Must be less than… --- ## [Logstash Http poller plugin](https://discuss.elastic.co/t/logstash-http-poller-plugin/256154)
**Author:** [@jerin](https://discuss.elastic.co/u/jerin)\ **Replies:** 7\ **Last updated:** [November 25, 2020, 6:42am UTC](https://discuss.elastic.co/t/logstash-http-poller-plugin/256154 "2020-11-25T06:42:47Z")
Hello , i am using logstash poller plugin to query JIRA API . it works okay .. i am trying to get the ticket status updated in last 5 mins .. the problem is when there is no update , it polls the API and retrives the fi… --- ## [How to set "ignore\_above" : 256 to higher value while using python elasticsearch client?](https://discuss.elastic.co/t/how-to-set-ignore-above-256-to-higher-value-while-using-python-elasticsearch-client/255338)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 8\ **Last updated:** [November 25, 2020, 6:37am UTC](https://discuss.elastic.co/t/how-to-set-ignore-above-256-to-higher-value-while-using-python-elasticsearch-client/255338 "2020-11-25T06:37:38Z")
I am using python ES client to index data into my ES... I have a column which is more than 256 characters. when I create a data table viz. in kibana I get no results message if I include that lengthy column. Below is t… --- ## [Unable to hide the top menu bar of kibana when using the discover page in HTML](https://discuss.elastic.co/t/unable-to-hide-the-top-menu-bar-of-kibana-when-using-the-discover-page-in-html/256518)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/unable-to-hide-the-top-menu-bar-of-kibana-when-using-the-discover-page-in-html/256518 "2020-11-25T06:35:39Z")
Hello Everyone, I have 2 versions of ELK - on AWS (version 7.1) on my own server (version 7.9) My situation / requirement is to navigate to "discover" tab from dashboard, which I am achieving by making one of my colu… --- ## [Filebeat decoded JSON fields aren't searchable](https://discuss.elastic.co/t/filebeat-decoded-json-fields-arent-searchable/256410)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 6:34am UTC](https://discuss.elastic.co/t/filebeat-decoded-json-fields-arent-searchable/256410 "2020-11-25T06:34:06Z")
Sending logs (JSON nested) using filebeat, the fields are getting created in (confirming from index pattern) , but the decoded fields are not visible in Kibana Discover tab. Sample data {"id":"5f5a0206-c431-4d76-9e8a-0… --- ## [Shard in es cluster](https://discuss.elastic.co/t/shard-in-es-cluster/256512)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:48am UTC](https://discuss.elastic.co/t/shard-in-es-cluster/256512 "2020-11-25T05:48:15Z")
I had a single node default "Elasticsearch" cluster so far. It had one index and two alias associated with that curl -s -X PUT $elasticsearchURL/$indexName?pretty -H 'Content-Type: application/json' -d '{"settings":{"in… --- ## [DNS enablement in elastic search on gcp kubernetes](https://discuss.elastic.co/t/dns-enablement-in-elastic-search-on-gcp-kubernetes/256600)
**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:47am UTC](https://discuss.elastic.co/t/dns-enablement-in-elastic-search-on-gcp-kubernetes/256600 "2020-11-25T05:47:39Z")
Please share the link to refer --- ## [Metricbeat-IIS](https://discuss.elastic.co/t/metricbeat-iis/256596)
**Author:** [@reza\_naipospos](https://discuss.elastic.co/u/reza_naipospos)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:39am UTC](https://discuss.elastic.co/t/metricbeat-iis/256596 "2020-11-25T05:39:27Z")
I install metricbeat on windows server, system overview is working fine and show statistic data, but i enable iis module is not send any data about iis, this is my iis.yml # Docs: https://www.elastic.co/guide/en/bea… --- ## [Cisco.yml missing from filebeat](https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561)
**Author:** [@dave.mc](https://discuss.elastic.co/u/dave.mc)\ **Replies:** 3\ **Last updated:** [November 25, 2020, 5:27am UTC](https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561 "2020-11-25T05:27:06Z")
Attempting to set up a Cisco switch to send logs to Elastic, but Cisco.yml is missing from /etc/filebeat/modules.d folder. I'm asssuming I did something wrong in the setup, but I'm so new to ELK I don't know where to ev… --- ## [Process Visualization in Kibana](https://discuss.elastic.co/t/process-visualization-in-kibana/255933)
**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 5:11am UTC](https://discuss.elastic.co/t/process-visualization-in-kibana/255933 "2020-11-25T05:11:31Z")
How to visualize process data in Kibana, Please have a look on the image attached below and give suggestions. --- ## [Elasticsearch monitoring sometime not showing indexing rate](https://discuss.elastic.co/t/elasticsearch-monitoring-sometime-not-showing-indexing-rate/256594)
**Author:** [@heric](https://discuss.elastic.co/u/heric)\ **Replies:** 0\ **Last updated:** [November 25, 2020, 3:49am UTC](https://discuss.elastic.co/t/elasticsearch-monitoring-sometime-not-showing-indexing-rate/256594 "2020-11-25T03:49:41Z")
Hi, Sometimes i saw the indexing rate in the monitoring is showing as below: Normally it is showing as below : Is there anything abnormal with above 1st indexing rate trend, in which direction i need to look at … --- ## [Label to display full](https://discuss.elastic.co/t/label-to-display-full/256479)
**Author:** [@gulshann](https://discuss.elastic.co/u/gulshann)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 4:42am UTC](https://discuss.elastic.co/t/label-to-display-full/256479 "2020-11-25T04:42:31Z")
How to ensure labels can be viewed in full without being cut off with "…" Using Kibana 7.10. --- ## [Filebeat - Overwrite hostname from decoded json](https://discuss.elastic.co/t/filebeat-overwrite-hostname-from-decoded-json/256537)
**Author:** [@Ajay\_Singh2](https://discuss.elastic.co/u/Ajay_Singh2)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 2:41am UTC](https://discuss.elastic.co/t/filebeat-overwrite-hostname-from-decoded-json/256537 "2020-11-25T02:41:54Z")
Hi, I am trying to ingest a json file using filebeat, here are few logs from the file: {"iso.gov.dd.internet.public.enterprises.7.0.1.3.0":23,"@timestamp":"2020-11-24T09:09:09.875Z","host":"1.2.3.4","@version":"1"} {"i… --- ## [How to skip docker related package when make beats](https://discuss.elastic.co/t/how-to-skip-docker-related-package-when-make-beats/256324)
**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 2:11am UTC](https://discuss.elastic.co/t/how-to-skip-docker-related-package-when-make-beats/256324 "2020-11-25T02:11:16Z")
Hi there, I'm trying to build metricbeat from source code. The build process needs some docker info with running docker cmds. But I'm building it in a image and I don't want to install docker in it. Also I just want a … --- ## [Filebeat support rotating or renaming log files of another service?](https://discuss.elastic.co/t/filebeat-support-rotating-or-renaming-log-files-of-another-service/256543)
**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 1:59am UTC](https://discuss.elastic.co/t/filebeat-support-rotating-or-renaming-log-files-of-another-service/256543 "2020-11-25T01:59:54Z")
Hello, Does Filebeat support rotating / renaming log files of an other service? Meaning can Filebeat be used as a replacement for logrotate or other similar tools? Thanks, FREDDIE --- ## [Elasticsearch and syslog-ng](https://discuss.elastic.co/t/elasticsearch-and-syslog-ng/256474)
**Author:** [@atamc3rb3r](https://discuss.elastic.co/u/atamc3rb3r)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 12:56am UTC](https://discuss.elastic.co/t/elasticsearch-and-syslog-ng/256474 "2020-11-25T00:56:01Z")
Hello, I have deployed my elasticsearch (ver. 7.10.0 on Linux) with Kibana and syslog-ng. Syslog-ng server receives logs data from network devices on port UDP/514 and using module elasticsearch-http() to send all data t… --- ## [Security: Data at rest encryption with SaaS service](https://discuss.elastic.co/t/security-data-at-rest-encryption-with-saas-service/256517)
**Author:** [@stijnvr](https://discuss.elastic.co/u/stijnvr)\ **Replies:** 1\ **Last updated:** [November 25, 2020, 12:43am UTC](https://discuss.elastic.co/t/security-data-at-rest-encryption-with-saas-service/256517 "2020-11-25T00:43:42Z")
What are the possibilities to encrypt data at rest in AWS with the SaaS service? Can an AWS KMS cross-account (customer-managed/AWS-managed/AWS-owned) CMKs be used that is provided by the customer? Other possibilities? … --- ## [Divide two columns(generated from aggregations) in data table](https://discuss.elastic.co/t/divide-two-columns-generated-from-aggregations-in-data-table/256575)
**Author:** [@ejmath12](https://discuss.elastic.co/u/ejmath12)\ **Replies:** 1\ **Last updated:** [November 24, 2020, 10:18pm UTC](https://discuss.elastic.co/t/divide-two-columns-generated-from-aggregations-in-data-table/256575 "2020-11-24T22:18:54Z")
I am very new to Elastic stack, so apologies upfront, if I am missing the obvious. Let me start by explaining my use case. All documents in my index has field \_idVal(represents a session). Sessions will have different pr… --- ## [Resource\_already\_exists\_exception\]: index \[.kibana\_task\_manager\_2](https://discuss.elastic.co/t/resource-already-exists-exception-index-kibana-task-manager-2/256549)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 9:40pm UTC](https://discuss.elastic.co/t/resource-already-exists-exception-index-kibana-task-manager-2/256549 "2020-11-24T21:40:09Z")
HI, Just upgraded from 7.9 to 7.10 and now kibana shows: "error","elasticsearch","data"\],"pid":10858,"message":"\[resource\_already\_exists\_exception\]: index \[.kibana\_task\_manager\_2/Ary\_lXNFQguMojj-E4-2bQ\] already exists"… --- ## [Visualisations with fields from different indexes?](https://discuss.elastic.co/t/visualisations-with-fields-from-different-indexes/256553)
**Author:** [@madteo](https://discuss.elastic.co/u/madteo)\ **Replies:** 4\ **Last updated:** [November 24, 2020, 9:31pm UTC](https://discuss.elastic.co/t/visualisations-with-fields-from-different-indexes/256553 "2020-11-24T21:31:47Z")
Hi everyone! I have a little question for the wizards of Elastic, here... I hope that someone can help me in clarifying if this is an issue that is affecting my logic, or if I've encountered a limitation of the technolo… --- ## [Logstash Beats Handler Error](https://discuss.elastic.co/t/logstash-beats-handler-error/256576)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 0\ **Last updated:** [November 24, 2020, 9:20pm UTC](https://discuss.elastic.co/t/logstash-beats-handler-error/256576 "2020-11-24T21:20:09Z")
Not really sure what this means, the pipeline appears to come back up and processing...but it unnerves me seeing this get vomitted out into the logs. Can anybody shed light on what this is? --- ## [Understanding Joint Probability of Less Likely Samples :: calculate method](https://discuss.elastic.co/t/understanding-joint-probability-of-less-likely-samples-calculate-method/256562)
**Author:** [@ProfSimoes](https://discuss.elastic.co/u/ProfSimoes)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 8:34pm UTC](https://discuss.elastic.co/t/understanding-joint-probability-of-less-likely-samples-calculate-method/256562 "2020-11-24T20:34:09Z")
I bought great Collier's book, I've read the Prelert paper about APM monitoring, and then I've been trough the ML-CPP code at github... A tiny sense of curiosity sparkled inside me about the method: ProbabilityAggrega… --- ## [Dynamic range in Goal or Gauge visualization in 7.4 or above](https://discuss.elastic.co/t/dynamic-range-in-goal-or-gauge-visualization-in-7-4-or-above/256566)
**Author:** [@hellitonwoo](https://discuss.elastic.co/u/hellitonwoo)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 8:30pm UTC](https://discuss.elastic.co/t/dynamic-range-in-goal-or-gauge-visualization-in-7-4-or-above/256566 "2020-11-24T20:30:13Z")
Hi, I'm new to Kibana. Looking for some help here. Anyone knows how to use "Gauge" or "Goal" as a "meter". For instance, to present a success rate which is a on-going thing. I defined a field like "Performance", and … --- ## [Multiline codec in filter](https://discuss.elastic.co/t/multiline-codec-in-filter/256520)
**Author:** [@shani](https://discuss.elastic.co/u/shani)\ **Replies:** 9\ **Last updated:** [November 24, 2020, 7:47pm UTC](https://discuss.elastic.co/t/multiline-codec-in-filter/256520 "2020-11-24T19:47:41Z")
Can I use a multiline codec in the filter? I've more than 10k+ files of 3 different patterns logs pattern on S3 bucket that will be fetched using input plugin. One log pattern requires a multiline codec before start pa… --- ## [Passing search parameters through POST Url](https://discuss.elastic.co/t/passing-search-parameters-through-post-url/256425)
**Author:** [@All](https://discuss.elastic.co/u/All)\ **Replies:** 1\ **Last updated:** [November 24, 2020, 7:23pm UTC](https://discuss.elastic.co/t/passing-search-parameters-through-post-url/256425 "2020-11-24T19:23:10Z")
Hey, I am totally new to the elastic stack, so sorry if I am not aware of everything. Is it possible to pass one or more parameters in a post URL in order to search for certain data? Basically I want to request a dashb… --- ## [Filter bar not working in canvas](https://discuss.elastic.co/t/filter-bar-not-working-in-canvas/255698)
**Author:** [@borisllona](https://discuss.elastic.co/u/borisllona)\ **Replies:** 9\ **Last updated:** [November 24, 2020, 6:53pm UTC](https://discuss.elastic.co/t/filter-bar-not-working-in-canvas/255698 "2020-11-24T18:53:51Z")
I am creating a canvas and I want a Time Filter bar to select a specific date and all my elements from the canvas to adapt to that new time range. How can I do that? I have just added a filter bar in my canvas where are… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1677) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1679)