# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1800 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1801 --- ## [How to use minhash filter?](https://discuss.elastic.co/t/how-to-use-minhash-filter/248320)
**Author:** [@ennian001](https://discuss.elastic.co/u/ennian001)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:39pm UTC](https://discuss.elastic.co/t/how-to-use-minhash-filter/248320 "2020-09-17T13:39:31Z")
could someone give me some search example for minhash filter ??? --- ## [Importing vulnwhisperer kibana.json file for out of the box visualization in kibana dashboard](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889)
**Author:** [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\ **Replies:** 8\ **Last updated:** [September 17, 2020, 1:36pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889 "2020-09-17T13:36:58Z")
Hello Guys, I am extracting reports from Openvas through vulnwhisperer and I would like to view it on my kibana dashboard. I have the configuration file provided by vulnwhisperer which is kibana.json. Could anyone pleas… --- ## [Boolean filter question](https://discuss.elastic.co/t/boolean-filter-question/248346)
**Author:** [@shon3r](https://discuss.elastic.co/u/shon3r)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:32pm UTC](https://discuss.elastic.co/t/boolean-filter-question/248346 "2020-09-17T13:32:37Z")
Hello, I have a problem with filter in boolean query. I want to apply a filter based on 3 fields with 1 minimum filter match : $params = \[ 'from' =\> 0, 'size' =\> 25, 'index' =\> 'document', 'body' =\> \[ … --- ## [How to get cacert for enablingssl\_certificate\_verification?](https://discuss.elastic.co/t/how-to-get-cacert-for-enablingssl-certificate-verification/248909)
**Author:** [@habeebperwad](https://discuss.elastic.co/u/habeebperwad)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 1:20pm UTC](https://discuss.elastic.co/t/how-to-get-cacert-for-enablingssl-certificate-verification/248909 "2020-09-17T13:20:13Z")
ACTUAL TITLE OF THIS QUESTION: How to get cacert for enablingssl\_certificate\_verification? The validation says: Title seems unclear, is it a complete sentence? It may be a very silly question, but I couldn't resolve it… --- ## [Visualization of array vs array from a single document](https://discuss.elastic.co/t/visualization-of-array-vs-array-from-a-single-document/248528)
**Author:** [@Leonid\_Pantaler](https://discuss.elastic.co/u/Leonid_Pantaler)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 1:17pm UTC](https://discuss.elastic.co/t/visualization-of-array-vs-array-from-a-single-document/248528 "2020-09-17T13:17:40Z")
Hi, I'm new to kibana and trying to create a line visualization from arrays given in a single document Let's say some document has the following arrays: A: \[55, 99, 57, 8\] B: \[1, 2, 3, 4\] I want B to be my X axis an… --- ## [Some entries missing when uploading json file in kibana](https://discuss.elastic.co/t/some-entries-missing-when-uploading-json-file-in-kibana/248448)
**Author:** [@Kanav\_Ghai](https://discuss.elastic.co/u/Kanav_Ghai)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 12:46pm UTC](https://discuss.elastic.co/t/some-entries-missing-when-uploading-json-file-in-kibana/248448 "2020-09-17T12:46:53Z")
I have 153 entries in my json file, but when i upload the corresponding log file in kibana, it shows 121 entires (sometimes lesser) . I don't understand why is it missing out a few entries. Below is my conf file inp… --- ## [Where to add min\_doc-count](https://discuss.elastic.co/t/where-to-add-min-doc-count/248612)
**Author:** [@imantha](https://discuss.elastic.co/u/imantha)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:45pm UTC](https://discuss.elastic.co/t/where-to-add-min-doc-count/248612 "2020-09-17T12:45:40Z")
let peopleCount = { size: 0, aggs: { 'min\_doc\_count': 0, group\_by\_day: { // min\_doc\_count: 0, date\_histogram: { field: 'timestamp', interval: '1d', time\_zone: '+11:00', … --- ## [Enrich Processor - If the fields do not match](https://discuss.elastic.co/t/enrich-processor-if-the-fields-do-not-match/248707)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:40pm UTC](https://discuss.elastic.co/t/enrich-processor-if-the-fields-do-not-match/248707 "2020-09-17T12:40:06Z")
Hi, I am using enrich processor to enrich some fields from the already existing Index in elasticsearch. The problem is, if the enrich processor does not find any match, it skips the document. I want to ingest both mat… --- ## [Skipping duplicates with search\_as\_you\_type field in Elasticsearch](https://discuss.elastic.co/t/skipping-duplicates-with-search-as-you-type-field-in-elasticsearch/248845)
**Author:** [@zaidw21](https://discuss.elastic.co/u/zaidw21)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 12:35pm UTC](https://discuss.elastic.co/t/skipping-duplicates-with-search-as-you-type-field-in-elasticsearch/248845 "2020-09-17T12:35:35Z")
We are using the completion suggester for showing text suggestions and autocomplete functionality in our search implementation. We recently migrated to the Elasticsearch v7.4 from v7.1. As a new field (search\_as\_you\_typ… --- ## [How to parse Watcher/Aggs in JSON format into a table automatically?](https://discuss.elastic.co/t/how-to-parse-watcher-aggs-in-json-format-into-a-table-automatically/247623)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 12:32pm UTC](https://discuss.elastic.co/t/how-to-parse-watcher-aggs-in-json-format-into-a-table-automatically/247623 "2020-09-17T12:32:12Z")
The output of an aggregation in search (or in watcher), currently comes as JSON and contains key-value. The outcome is different and may contain different fields, so hardcoding them into an html body is not possible. Is … --- ## [Stack monitoring: self vs metricbeat monitoring](https://discuss.elastic.co/t/stack-monitoring-self-vs-metricbeat-monitoring/248858)
**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 12:27pm UTC](https://discuss.elastic.co/t/stack-monitoring-self-vs-metricbeat-monitoring/248858 "2020-09-17T12:27:06Z")
Dear all, I have an ELK 7.9.1 platform. When I go to Kibana --\> Stack Monitoring, I can see Elasticsearcxj, Kibana and Beats with SELF MONITORING, but I have the option to change to METRICBEAT MONITORING using this beat… --- ## [How to apply different index patterns to same dashboard and its widgets?](https://discuss.elastic.co/t/how-to-apply-different-index-patterns-to-same-dashboard-and-its-widgets/248723)
**Author:** [@DSMilestone](https://discuss.elastic.co/u/DSMilestone)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 12:13pm UTC](https://discuss.elastic.co/t/how-to-apply-different-index-patterns-to-same-dashboard-and-its-widgets/248723 "2020-09-17T12:13:49Z")
I have created a kibana dashboard for katalon reports for my API services. For that I have created a index pattern api\_katalon\_reports\*. all the widgets inside that dashboard use this index pattern. Now, I have katalon … --- ## [How to Send the alerts to opsgenie from kibana](https://discuss.elastic.co/t/how-to-send-the-alerts-to-opsgenie-from-kibana/246631)
**Author:** [@Bala\_Kumaar\_1653](https://discuss.elastic.co/u/Bala_Kumaar_1653)\ **Replies:** 7\ **Last updated:** [September 17, 2020, 11:44am UTC](https://discuss.elastic.co/t/how-to-send-the-alerts-to-opsgenie-from-kibana/246631 "2020-09-17T11:44:52Z")
Hi all, Can anyone help me out on sending the alerts to opsgenie from kibana. In actions i selected Webhook and pasted the Opsgenie webhook url, but still its not working..!! --- ## [Will AutoDiscovery work with a Role and RoleBinding in kubernetes](https://discuss.elastic.co/t/will-autodiscovery-work-with-a-role-and-rolebinding-in-kubernetes/248584)
**Author:** [@TejaV](https://discuss.elastic.co/u/TejaV)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 11:28am UTC](https://discuss.elastic.co/t/will-autodiscovery-work-with-a-role-and-rolebinding-in-kubernetes/248584 "2020-09-17T11:28:12Z")
Hi, I like the autodiscovery feature of filebeat (as a Daemonset) but I was reluctant to use a clusterRole and clusterRoleBinding as part of my kubernetes deployment. Apparently I'm not allowed to use a clusterRoleBindi… --- ## [Issue with Multiple .conf files](https://discuss.elastic.co/t/issue-with-multiple-conf-files/247760)
**Author:** [@anirudh.venkata](https://discuss.elastic.co/u/anirudh.venkata)\ **Replies:** 6\ **Last updated:** [September 17, 2020, 11:31am UTC](https://discuss.elastic.co/t/issue-with-multiple-conf-files/247760 "2020-09-17T11:31:33Z")
Hi All, My ELK is setup in a single Ubuntu machine.. I am using Logstash as a service to collect different logs and send them to Elasticsearch..Initially ,i have created an auth.conf in logstash conf.d folder to parse L… --- ## [Using FVH Highlighter and multi pre/post tags to map query string to highlight tag](https://discuss.elastic.co/t/using-fvh-highlighter-and-multi-pre-post-tags-to-map-query-string-to-highlight-tag/248969)
**Author:** [@jackhodkinson](https://discuss.elastic.co/u/jackhodkinson)\ **Replies:** 0\ **Last updated:** [September 17, 2020, 11:22am UTC](https://discuss.elastic.co/t/using-fvh-highlighter-and-multi-pre-post-tags-to-map-query-string-to-highlight-tag/248969 "2020-09-17T11:22:58Z")
I am using Elasticsearch Version 7.1.1 Given a search object like this: { "query": { "bool": { "must": { {"query\_string": {"query": "bar", "default\_field": "text"}, {"query\_string": {"query"… --- ## [Validation API got error with highlight.(org.elasticsearch.common.ParsingException: request does not support \[highlight\]](https://discuss.elastic.co/t/validation-api-got-error-with-highlight-org-elasticsearch-common-parsingexception-request-does-not-support-highlight/248953)
**Author:** [@po3rin](https://discuss.elastic.co/u/po3rin)\ **Replies:** 0\ **Last updated:** [September 17, 2020, 9:48am UTC](https://discuss.elastic.co/t/validation-api-got-error-with-highlight-org-elasticsearch-common-parsingexception-request-does-not-support-highlight/248953 "2020-09-17T09:48:14Z")
Hello :slight\_smile: I tried highlight with reference to the following document. (using docker.elastic.co/elasticsearch/elasticsearch:7.5.1) This example works fine, but when I check it with the validation api, I ge… --- ## [KQL (or SQL or DSL): How to do transaction/pairing up between events based on a same sessiond, user combo?](https://discuss.elastic.co/t/kql-or-sql-or-dsl-how-to-do-transaction-pairing-up-between-events-based-on-a-same-sessiond-user-combo/248877)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 9:40am UTC](https://discuss.elastic.co/t/kql-or-sql-or-dsl-how-to-do-transaction-pairing-up-between-events-based-on-a-same-sessiond-user-combo/248877 "2020-09-17T09:40:59Z")
We have certain dataset like below 2020-09-10T01:00:01 entry=1 user=A session=ses1 action=create 2020-09-10T01:01:01 entry=2 user=A session=ses1 action=delete 2020-09-10T01:02:01 entry=3 user=B session=ses2 action=creat… --- ## [Filebeat.yml drop event not working](https://discuss.elastic.co/t/filebeat-yml-drop-event-not-working/248761)
**Author:** [@angeloli](https://discuss.elastic.co/u/angeloli)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 9:34am UTC](https://discuss.elastic.co/t/filebeat-yml-drop-event-not-working/248761 "2020-09-17T09:34:53Z")
I have add these in filebeat.yml, (version is 7.9) I try every kinds of these keywords , but i still receive the process.name = "kibana" event. why ? Please kindly help #======== Drop event processors: - drop\_event… --- ## [I need to get the last document field to visualize](https://discuss.elastic.co/t/i-need-to-get-the-last-document-field-to-visualize/248932)
**Author:** [@dotnet85](https://discuss.elastic.co/u/dotnet85)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 8:56am UTC](https://discuss.elastic.co/t/i-need-to-get-the-last-document-field-to-visualize/248932 "2020-09-17T08:56:26Z")
I have created an index and I would like to get the latest value available in the index e.g.: { "\_index": "tester", "\_type": "\_doc", "\_id": "Qujl-nMBaIdydddddd", "\_version": 1, "\_score": 0, "\_source": { … --- ## [If not a root account, the kubernetes metadata is not generated](https://discuss.elastic.co/t/if-not-a-root-account-the-kubernetes-metadata-is-not-generated/248786)
**Author:** [@kyungseok](https://discuss.elastic.co/u/kyungseok)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 7:38am UTC](https://discuss.elastic.co/t/if-not-a-root-account-the-kubernetes-metadata-is-not-generated/248786 "2020-09-17T07:38:01Z")
Hello, I am trying to run auditbeat on kubernetes cluster But kubernetes metadata are not added to events when I run application with not a root account Below is a debug messages 2020-09-16T04:59:16.435Z DEBUG \[add\_… --- ## [How to add delimiter in functionbeat.yml](https://discuss.elastic.co/t/how-to-add-delimiter-in-functionbeat-yml/248916)
**Author:** [@deepasaju](https://discuss.elastic.co/u/deepasaju)\ **Replies:** 1\ **Last updated:** [September 17, 2020, 7:32am UTC](https://discuss.elastic.co/t/how-to-add-delimiter-in-functionbeat-yml/248916 "2020-09-17T07:32:08Z")
Team, How to add delimiter in functionbeat.yml file to include the entire loggroups ? ex. If I have multiple logs start with API-Gateway , what is the exact syntax ? /API-Gateway-\* is not working API-Gateway-Executio… --- ## [How to filter all in KQL](https://discuss.elastic.co/t/how-to-filter-all-in-kql/248908)
**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 7:28am UTC](https://discuss.elastic.co/t/how-to-filter-all-in-kql/248908 "2020-09-17T07:28:32Z")
HI all, may i know how i want to filter all panw.panos.threat.id in KQL? --- ## [Kibana can't create Index](https://discuss.elastic.co/t/kibana-cant-create-index/248622)
**Author:** [@Funky89](https://discuss.elastic.co/u/Funky89)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 6:53am UTC](https://discuss.elastic.co/t/kibana-cant-create-index/248622 "2020-09-17T06:53:17Z")
Hello everyone, I have followed the steps of @knrdv at this post : and it still does not work Here is a picture of what I did : Connector : Template : Alert : I have nothing here : In… --- ## [Weird "\_dateparsefailure" issue](https://discuss.elastic.co/t/weird-dateparsefailure-issue/248798)
**Author:** [@opellulo](https://discuss.elastic.co/u/opellulo)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 6:44am UTC](https://discuss.elastic.co/t/weird-dateparsefailure-issue/248798 "2020-09-17T06:44:00Z")
Hi all, I'm facing a really weird issue parsing the date from an access log that doesn't use standard ISO8601 format but one that looks like: \[08/Sep/2020:18:39:23 +0200\] I captured the group with a simple grok in a fi… --- ## [Remove time chart from Discover in Kibana](https://discuss.elastic.co/t/remove-time-chart-from-discover-in-kibana/248860)
**Author:** [@Cosmin\_Marginean1](https://discuss.elastic.co/u/Cosmin_Marginean1)\ **Replies:** 7\ **Last updated:** [September 17, 2020, 6:36am UTC](https://discuss.elastic.co/t/remove-time-chart-from-discover-in-kibana/248860 "2020-09-17T06:36:17Z")
We're using Kibana 7.2.0 and we'd very much like to remove the bar chart at the top of the Discover section (see below) but we couldn't find the setting for it. Thanks! --- ## [Unable to configure environment to get metrics of my another server using metricbeat into one central server](https://discuss.elastic.co/t/unable-to-configure-environment-to-get-metrics-of-my-another-server-using-metricbeat-into-one-central-server/248823)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 4\ **Last updated:** [September 17, 2020, 4:26am UTC](https://discuss.elastic.co/t/unable-to-configure-environment-to-get-metrics-of-my-another-server-using-metricbeat-into-one-central-server/248823 "2020-09-17T04:26:03Z")
Hello Everyone, I am new to ElK stack, and i want to monitor my system metrics of one or more servers into one central server. i hope i am clear with my architecture! i am using metricbeat 7.9.1 elasticsearch 7.9.1 … --- ## [Unable to see older logs in kibana after restarting the ELK](https://discuss.elastic.co/t/unable-to-see-older-logs-in-kibana-after-restarting-the-elk/248818)
**Author:** [@neelu\_patel](https://discuss.elastic.co/u/neelu_patel)\ **Replies:** 6\ **Last updated:** [September 17, 2020, 6:22am UTC](https://discuss.elastic.co/t/unable-to-see-older-logs-in-kibana-after-restarting-the-elk/248818 "2020-09-17T06:22:08Z")
Unable to see older logs in kibana after restarting the ELK. please give your best suggestions. --- ## [Getting org.elasticsearch.discovery.MasterNotDiscoveredException, while I use only one node](https://discuss.elastic.co/t/getting-org-elasticsearch-discovery-masternotdiscoveredexception-while-i-use-only-one-node/248662)
**Author:** [@111320](https://discuss.elastic.co/u/111320)\ **Replies:** 3\ **Last updated:** [September 17, 2020, 6:19am UTC](https://discuss.elastic.co/t/getting-org-elasticsearch-discovery-masternotdiscoveredexception-while-i-use-only-one-node/248662 "2020-09-17T06:19:26Z")
I'm running elasticsearch (7.6.2) on RHEL 6.1 with only one node and I get: org.elasticsearch.discovery.MasterNotDiscoveredException org.elasticsearch.discovery.MasterNotDiscoveredException This is my elasticsearch.ym… --- ## [Import/Export elasticsearch users and roles](https://discuss.elastic.co/t/import-export-elasticsearch-users-and-roles/248805)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 5:55am UTC](https://discuss.elastic.co/t/import-export-elasticsearch-users-and-roles/248805 "2020-09-17T05:55:56Z")
Greetings, I have to backup user and roles from one server to another server. I am following the given method to achieve this. Take JSON dump of .security-7 index from source server. Re-index .security-7 index on dest… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1799) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1801)