# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1725

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1726

---

## [Kibana system indices](https://discuss.elastic.co/t/kibana-system-indices/253538)

<div class="topic-metadata">

**Author:** [@congwensheng](https://discuss.elastic.co/u/congwensheng)\
**Replies:** 3\
**Last updated:** [October 30, 2020, 1:29am UTC](https://discuss.elastic.co/t/kibana-system-indices/253538 "2020-10-30T01:29:28Z")

</div>

the elasticsearch version is 7.9.2 i found there are some system indices .kibana-event-log-7.9.2-000001 .kibana\_task\_manager\_1 .monitoring-kibana-7-2020.10.28 .kibana\_2 .kibana\_1 I can't figure out how these index…

---

## [Java JDK old version](https://discuss.elastic.co/t/java-jdk-old-version/253383)

<div class="topic-metadata">

**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\
**Replies:** 3\
**Last updated:** [October 30, 2020, 12:44am UTC](https://discuss.elastic.co/t/java-jdk-old-version/253383 "2020-10-30T00:44:25Z")

</div>

ELK version 7.1.1... vulnerability scanning shows Java old version found on elasticsearch nodes path for ELK cluster and logstash Java JDK installation on Elasticsearch nodes path /usr/share/elasticsearch/jdk/ version …

---

## [How to create alert in watcher advance? for the basic metrics of CPU, MEMORY](https://discuss.elastic.co/t/how-to-create-alert-in-watcher-advance-for-the-basic-metrics-of-cpu-memory/253363)

<div class="topic-metadata">

**Author:** [@aandrewsllp](https://discuss.elastic.co/u/aandrewsllp)\
**Replies:** 1\
**Last updated:** [October 30, 2020, 12:35am UTC](https://discuss.elastic.co/t/how-to-create-alert-in-watcher-advance-for-the-basic-metrics-of-cpu-memory/253363 "2020-10-30T00:35:59Z")

</div>

How to create alert in watcher advance? for the basic metrics of CPU, MEMORY

---

## [Report on user and the role](https://discuss.elastic.co/t/report-on-user-and-the-role/253531)

<div class="topic-metadata">

**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\
**Replies:** 2\
**Last updated:** [October 30, 2020, 12:22am UTC](https://discuss.elastic.co/t/report-on-user-and-the-role/253531 "2020-10-30T00:22:01Z")

</div>

Hi, I am thinking to create a report about user and the role granted. I know I can run following script in Console to get the list of role mapping, but is there a way to index it so that i can create a Discover or Visu…

---

## [In Kibana 7.7.1, often try create too many scroll contexts when query the index kibana\_task\_manager](https://discuss.elastic.co/t/in-kibana-7-7-1-often-try-create-too-many-scroll-contexts-when-query-the-index-kibana-task-manager/251626)

<div class="topic-metadata">

**Author:** [@bruceandalvin](https://discuss.elastic.co/u/bruceandalvin)\
**Replies:** 3\
**Last updated:** [October 29, 2020, 10:50pm UTC](https://discuss.elastic.co/t/in-kibana-7-7-1-often-try-create-too-many-scroll-contexts-when-query-the-index-kibana-task-manager/251626 "2020-10-29T22:50:43Z")

</div>

\[2020-10-09T21:08:38,776\]\[WARN \]\[r.suppressed \] \[MyNode00\] path: /.kibana\_task\_manager/\_update\_by\_query, params: {ignore\_unavailable=true, refresh=true, conflicts=proceed, index=.kibana\_task\_manager, max\_doc…

---

## [Sync of ESQL queries in canvas, to run at the same time](https://discuss.elastic.co/t/sync-of-esql-queries-in-canvas-to-run-at-the-same-time/253373)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 10:01pm UTC](https://discuss.elastic.co/t/sync-of-esql-queries-in-canvas-to-run-at-the-same-time/253373 "2020-10-29T22:01:58Z")

</div>

Hello, I would like to understand the execution process of ESQL queries in canvas. The scenario is that I have 3 queries of simple counts. ONE SELCET COUNT(\*) FROM MYINDEX WHERE FIELD=x TWO SELCET COUNT(\*) FROM MYI…

---

## [How to extract data from a field and get the max values?](https://discuss.elastic.co/t/how-to-extract-data-from-a-field-and-get-the-max-values/253491)

<div class="topic-metadata">

**Author:** [@AdrianH](https://discuss.elastic.co/u/AdrianH)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 9:46pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-a-field-and-get-the-max-values/253491 "2020-10-29T21:46:43Z")

</div>

Hi, I'm new to Kibana (using version 6.4.2) and am trying to extract some values out of a field. This would require parsing the field to extract 3 numbers. I could export this data out to a CSV, but seems that if I …

---

## [Dynamic Titles to Bar Chart](https://discuss.elastic.co/t/dynamic-titles-to-bar-chart/253489)

<div class="topic-metadata">

**Author:** [@tilakraj](https://discuss.elastic.co/u/tilakraj)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 9:38pm UTC](https://discuss.elastic.co/t/dynamic-titles-to-bar-chart/253489 "2020-10-29T21:38:32Z")

</div>

I have a question to the community. I am using Kibana 7.7.0 . I have been trying creating a Bar chart with a dynamic title using aggregation of one of the fields from indices. But I am not able find the option like how …

---

## [Internals of snapshot and restore](https://discuss.elastic.co/t/internals-of-snapshot-and-restore/253750)

<div class="topic-metadata">

**Author:** [@avee](https://discuss.elastic.co/u/avee)\
**Replies:** 0\
**Last updated:** [October 29, 2020, 9:21pm UTC](https://discuss.elastic.co/t/internals-of-snapshot-and-restore/253750 "2020-10-29T21:21:24Z")

</div>

How does snapshot and restore works in the background? For example - When a snapshot is taken with AWS S3 as backend store, what all oprations are carried out on elastic nodes and which nodes ? And which node is responsi…

---

## [How to use logstash with docker?](https://discuss.elastic.co/t/how-to-use-logstash-with-docker/253638)

<div class="topic-metadata">

**Author:** [@mohhef](https://discuss.elastic.co/u/mohhef)\
**Replies:** 3\
**Last updated:** [October 29, 2020, 9:20pm UTC](https://discuss.elastic.co/t/how-to-use-logstash-with-docker/253638 "2020-10-29T21:20:49Z")

</div>

Hello, My enviroment: Host: windows 10 Containers: linux I am building a spring boot application and I am logging my logs to "C:/elk/spring-boot-elk.log" I want to have a docker setup such that logstash will be abl…

---

## [Elasticsearch plugin status RED](https://discuss.elastic.co/t/elasticsearch-plugin-status-red/253550)

<div class="topic-metadata">

**Author:** [@Jonny\_Reyes](https://discuss.elastic.co/u/Jonny_Reyes)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 9:19pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-status-red/253550 "2020-10-29T21:19:49Z")

</div>

Hi everyone, I have a version 5.6 of elk stack and kibana crashes every day, as you can see in the following image. I have two questions This heap size is from kibana or elasticsearch Because a restart of the servi…

---

## [How to Limit Message Length in Watcher Json File](https://discuss.elastic.co/t/how-to-limit-message-length-in-watcher-json-file/253581)

<div class="topic-metadata">

**Author:** [@mdamera](https://discuss.elastic.co/u/mdamera)\
**Replies:** 0\
**Last updated:** [October 28, 2020, 3:17pm UTC](https://discuss.elastic.co/t/how-to-limit-message-length-in-watcher-json-file/253581 "2020-10-28T15:17:17Z")

</div>

Hello Everyone, I have following lines on a watcher Json configuration file and I would like to trim/limit the {{\_source.message}} to 3000 characters in the email alert Can anyone help me how can we do that ? "body":…

---

## [Kibana canvas create using api error](https://discuss.elastic.co/t/kibana-canvas-create-using-api-error/253350)

<div class="topic-metadata">

**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 9:02pm UTC](https://discuss.elastic.co/t/kibana-canvas-create-using-api-error/253350 "2020-10-29T21:02:35Z")

</div>

Hello. I am trying to create a canvas using this API endpoint: For this I am using the following curl: curl -X POST curl -X POST localhost:5601/api/saved\_objects/canvas -H 'kbn-xsrf: true' -H 'Content-Type: applic…

---

## [Display image assets in canvas markdown element](https://discuss.elastic.co/t/display-image-assets-in-canvas-markdown-element/253113)

<div class="topic-metadata">

**Author:** [@wmcleod](https://discuss.elastic.co/u/wmcleod)\
**Replies:** 2\
**Last updated:** [October 29, 2020, 8:34pm UTC](https://discuss.elastic.co/t/display-image-assets-in-canvas-markdown-element/253113 "2020-10-29T20:34:36Z")

</div>

Hi, Is it possible to display images from the loaded assets in a Canvas Markdown element? I'd like to make the image a hyperlink and have been able to do this with externally available images. But how can I reference a…

---

## [Cross Log source field unify format](https://discuss.elastic.co/t/cross-log-source-field-unify-format/253308)

<div class="topic-metadata">

**Author:** [@akefallonitis](https://discuss.elastic.co/u/akefallonitis)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 8:29pm UTC](https://discuss.elastic.co/t/cross-log-source-field-unify-format/253308 "2020-10-29T20:29:34Z")

</div>

Hi one question. I have to different indexes with an IP field: src.ip clientip Is there a way to combine both with scripted field somehow so i can be able to search in both indexes using the same field name (without …

---

## [I want to Download 2 Million Record from Kibana , Its failing in Reporting](https://discuss.elastic.co/t/i-want-to-download-2-million-record-from-kibana-its-failing-in-reporting/253303)

<div class="topic-metadata">

**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 8:26pm UTC](https://discuss.elastic.co/t/i-want-to-download-2-million-record-from-kibana-its-failing-in-reporting/253303 "2020-10-29T20:26:04Z")

</div>

Hello, Can Someone Help me solving my issue with Reports in Kibana I want to download 2 Million data logs from Kibana but it is Failing to download that report. By trial and error Somehow I can download Only 95Mb Size…

---

## [Skip Kibana login without reverse proxy](https://discuss.elastic.co/t/skip-kibana-login-without-reverse-proxy/253226)

<div class="topic-metadata">

**Author:** [@aneelkhan](https://discuss.elastic.co/u/aneelkhan)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 8:03pm UTC](https://discuss.elastic.co/t/skip-kibana-login-without-reverse-proxy/253226 "2020-10-29T20:03:34Z")

</div>

Is there any way to skip kibana login screen and access the dashboard directly without any credentials? I know this can be done via reverse proxy or search guard but I am looking for a solution with in Kibana or ES using…

---

## [Error when trying to load lifecycle policies after updating to 7.9](https://discuss.elastic.co/t/error-when-trying-to-load-lifecycle-policies-after-updating-to-7-9/247271)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 6\
**Last updated:** [October 29, 2020, 8:00pm UTC](https://discuss.elastic.co/t/error-when-trying-to-load-lifecycle-policies-after-updating-to-7-9/247271 "2020-10-29T20:00:24Z")

</div>

Hello, after updating from elastic stack 7.4 to 7.9 when I try to go into the lifecycle policies page I receive the error: 400: Bad Request. \[illegal\_argument\_exception\] duration cannot be negative, was given \[-11930239…

---

## [Problem with kibana index pattern](https://discuss.elastic.co/t/problem-with-kibana-index-pattern/253202)

<div class="topic-metadata">

**Author:** [@milguad](https://discuss.elastic.co/u/milguad)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:59pm UTC](https://discuss.elastic.co/t/problem-with-kibana-index-pattern/253202 "2020-10-29T19:59:48Z")

</div>

Hi, I have a problem with kibana index pattern. I set up a ES Cluster with Nginx as a reverse proxy. Everything is working well, but the Kibana index pattern. I have logs coming from fluentd into elasticsearch. I can se…

---

## [Searching nested objects in kibana 6.1.1](https://discuss.elastic.co/t/searching-nested-objects-in-kibana-6-1-1/253197)

<div class="topic-metadata">

**Author:** [@vvvprabhakar](https://discuss.elastic.co/u/vvvprabhakar)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:53pm UTC](https://discuss.elastic.co/t/searching-nested-objects-in-kibana-6-1-1/253197 "2020-10-29T19:53:31Z")

</div>

logs : { "fields": \[{ "value": "exception", "type": "string", "key": "message" }, { "value": "Access denied to perform this action", "type": "string", "key": "exception.messag…

---

## [Adding two dasboards in a space Kibana](https://discuss.elastic.co/t/adding-two-dasboards-in-a-space-kibana/253183)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:43pm UTC](https://discuss.elastic.co/t/adding-two-dasboards-in-a-space-kibana/253183 "2020-10-29T19:43:19Z")

</div>

I want to associate two dashboards in a kibana space ? How can i do this ?

---

## [How to remove the "double" value from tooltip in kibana heatmap](https://discuss.elastic.co/t/how-to-remove-the-double-value-from-tooltip-in-kibana-heatmap/253682)

<div class="topic-metadata">

**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:42pm UTC](https://discuss.elastic.co/t/how-to-remove-the-double-value-from-tooltip-in-kibana-heatmap/253682 "2020-10-29T19:42:34Z")

</div>

Hi! I would like to use heatmap visualization in order to display some data but I am facing an issue with the tooltip. I have chosen for Y-axis Term as aggregation (which is a string type field, id\_no) and for the X-ax…

---

## [How to fetch data from elastic index using Kibana 7.9 custome plugin](https://discuss.elastic.co/t/how-to-fetch-data-from-elastic-index-using-kibana-7-9-custome-plugin/253111)

<div class="topic-metadata">

**Author:** [@Sanket\_Jadyar](https://discuss.elastic.co/u/Sanket_Jadyar)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:41pm UTC](https://discuss.elastic.co/t/how-to-fetch-data-from-elastic-index-using-kibana-7-9-custome-plugin/253111 "2020-10-29T19:41:59Z")

</div>

Hello, I am trying to build new plugin for kibana version 7.9.1. can someone please guide me how to fetch data from elasticsearch index. can someone provide me example for it.

---

## [Prevent using IP to connect to Kibana - DNS hostname only](https://discuss.elastic.co/t/prevent-using-ip-to-connect-to-kibana-dns-hostname-only/253180)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:38pm UTC](https://discuss.elastic.co/t/prevent-using-ip-to-connect-to-kibana-dns-hostname-only/253180 "2020-10-29T19:38:09Z")

</div>

Hello, is there a way to make Kibana accept connections only if the client used the DNS hostname, and not the direct IP address? Thanks!

---

## [Unique values in data tables](https://discuss.elastic.co/t/unique-values-in-data-tables/253179)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:34pm UTC](https://discuss.elastic.co/t/unique-values-in-data-tables/253179 "2020-10-29T19:34:11Z")

</div>

I have a bunch of documents on business. One of their properties is customer\_id. The same customer\_id might now up in several documents, but I would only like to display unique customer\_id in data table. Ideally the da…

---

## [TSVB - Data table creating ratio column using filter ratio in aggregation](https://discuss.elastic.co/t/tsvb-data-table-creating-ratio-column-using-filter-ratio-in-aggregation/253019)

<div class="topic-metadata">

**Author:** [@SebastianKluthCSA](https://discuss.elastic.co/u/SebastianKluthCSA)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:33pm UTC](https://discuss.elastic.co/t/tsvb-data-table-creating-ratio-column-using-filter-ratio-in-aggregation/253019 "2020-10-29T19:33:09Z")

</div>

Hi Community, I set up a data table using TSVB. The data table includes total numbers as well as ratios, please see the screenshot: The ratios are based on bucket scripts using aggregations: As last column I am tr…

---

## [Script Painless with Timelion](https://discuss.elastic.co/t/script-painless-with-timelion/253177)

<div class="topic-metadata">

**Author:** [@Guilherme](https://discuss.elastic.co/u/Guilherme)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:28pm UTC](https://discuss.elastic.co/t/script-painless-with-timelion/253177 "2020-10-29T19:28:55Z")

</div>

Would it be possible to use any timelion or transformation script in the query? as the watcher does. something like that idiot example: .es (q = '' "" script ": { "source": "" " def theDate = ... "" ", "lang": "pa…

---

## [Anonymous login](https://discuss.elastic.co/t/anonymous-login/253484)

<div class="topic-metadata">

**Author:** [@Raul\_Uria](https://discuss.elastic.co/u/Raul_Uria)\
**Replies:** 4\
**Last updated:** [October 29, 2020, 7:25pm UTC](https://discuss.elastic.co/t/anonymous-login/253484 "2020-10-29T19:25:10Z")

</div>

Hi, trying to login into kibana 7.4 as anonymous user (without user login). I have a user with access to a particular dashboard, I can login and display the dashboard fine. I've configured apache with RequestHeader s…

---

## [Questions related to URL creation, time range and filters (by combobox)](https://discuss.elastic.co/t/questions-related-to-url-creation-time-range-and-filters-by-combobox/253000)

<div class="topic-metadata">

**Author:** [@mathric](https://discuss.elastic.co/u/mathric)\
**Replies:** 2\
**Last updated:** [October 29, 2020, 7:10pm UTC](https://discuss.elastic.co/t/questions-related-to-url-creation-time-range-and-filters-by-combobox/253000 "2020-10-29T19:10:57Z")

</div>

Hi there, since we are trying to use standardized dashboards, we are facing some issues: the users like to have predefined filters and time range (depending per user / per PC) this can be done by applying the filter…

---

## [Question About search in Kibana](https://discuss.elastic.co/t/question-about-search-in-kibana/252929)

<div class="topic-metadata">

**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\
**Replies:** 1\
**Last updated:** [October 29, 2020, 7:05pm UTC](https://discuss.elastic.co/t/question-about-search-in-kibana/252929 "2020-10-29T19:05:13Z")

</div>

Hello everyone, I have something looking as a trouble in my Kibana, so I need to ask about searching in Kibana. I want to make search by ip in Kibana search string, I have "destination.ip" field in IP format and "destin…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1724)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1726)
