# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1813 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1814 --- ## [How to get a "Tracking Line" in my charts. As seen in the stack monitoring graphs](https://discuss.elastic.co/t/how-to-get-a-tracking-line-in-my-charts-as-seen-in-the-stack-monitoring-graphs/247872)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:10pm UTC](https://discuss.elastic.co/t/how-to-get-a-tracking-line-in-my-charts-as-seen-in-the-stack-monitoring-graphs/247872 "2020-09-10T20:10:35Z")
Hi, is it possible to activate those indicator lines in kibana graphs? They would be really helpful. You can see their behavior unter StackMonitoring-\>Nodes-\>Node1. All those stats have this line when I hover over them. … --- ## [Best practices to auto-update html table from elasticsearch server](https://discuss.elastic.co/t/best-practices-to-auto-update-html-table-from-elasticsearch-server/247980)
**Author:** [@pastoreerrante](https://discuss.elastic.co/u/pastoreerrante)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:09pm UTC](https://discuss.elastic.co/t/best-practices-to-auto-update-html-table-from-elasticsearch-server/247980 "2020-09-10T20:09:24Z")
Hi there, I'm trying to build a simple event visualization web-dashboard based on elasticsearch. Diagram: browser --- web framework (node.js api layer) --- elasticsearch Basically, I'll have a lot of network-applianc… --- ## [Red cluster status master not discovered exception](https://discuss.elastic.co/t/red-cluster-status-master-not-discovered-exception/248142)
**Author:** [@mohitchavda](https://discuss.elastic.co/u/mohitchavda)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:08pm UTC](https://discuss.elastic.co/t/red-cluster-status-master-not-discovered-exception/248142 "2020-09-10T20:08:20Z")
we have facing issues of red cluster status and out of 3, only 1 node is visible. before that, we have t2.small instance and to resolve the red cluster status, we have upgrade instance type t2.medium still, clusters ar… --- ## [Is there a way to query elasticsearch index using timeuuid functionality?](https://discuss.elastic.co/t/is-there-a-way-to-query-elasticsearch-index-using-timeuuid-functionality/248033)
**Author:** [@Kyle\_Neal](https://discuss.elastic.co/u/Kyle_Neal)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:06pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-elasticsearch-index-using-timeuuid-functionality/248033 "2020-09-10T20:06:34Z")
I have an elasticsearch index that is holding a timeuuid field that originally comes from cassandra. The type is keyword and it's named event\_ts. Is it even possible to search elasticsearch index using timeuuid functiona… --- ## [Searching and indexing priority](https://discuss.elastic.co/t/searching-and-indexing-priority/248166)
**Author:** [@ssiws](https://discuss.elastic.co/u/ssiws)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:56pm UTC](https://discuss.elastic.co/t/searching-and-indexing-priority/248166 "2020-09-10T19:56:11Z")
Hello, generally speaking, how does Elasticsearch handles searching "priority" while indexing ? I noticed that when someone performs a query with a timerange of multiple weeks, indexing almost halts while the query is … --- ## [Grok optional pattern parsing](https://discuss.elastic.co/t/grok-optional-pattern-parsing/248220)
**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 7:46pm UTC](https://discuss.elastic.co/t/grok-optional-pattern-parsing/248220 "2020-09-10T19:46:22Z")
I have path field that can have values as /root/cncnz05msp1da15-n01\_logs/a.txt OR /root/cncnz05msp1ts05\_logs/a.txt OR /root/cncnz05mspmon\_logs/a.txt; I have below logstash config which is working fine for cncnz05msp1t… --- ## [How to combine url string field in kibana bar chart visualization?](https://discuss.elastic.co/t/how-to-combine-url-string-field-in-kibana-bar-chart-visualization/247206)
**Author:** [@S\_Zaman](https://discuss.elastic.co/u/S_Zaman)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:41pm UTC](https://discuss.elastic.co/t/how-to-combine-url-string-field-in-kibana-bar-chart-visualization/247206 "2020-09-10T19:41:45Z")
using apm I have collected my application logs and there I found url data like abc.com/edit/1 abc.com/edit/2 abc.com/edit/3 abc.com/update/1 abc.com/update/3 abc.com/update/5 what I am trying to do is I want to pl… --- ## [Kibana error on Discover when accessing index pattern with Recently shrunk index](https://discuss.elastic.co/t/kibana-error-on-discover-when-accessing-index-pattern-with-recently-shrunk-index/248052)
**Author:** [@vvwood](https://discuss.elastic.co/u/vvwood)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 7:37pm UTC](https://discuss.elastic.co/t/kibana-error-on-discover-when-accessing-index-pattern-with-recently-shrunk-index/248052 "2020-09-10T19:37:01Z")
As mentioned in the subject, I have an index pattern that references a recently shrunk index. After the shrink happened, I get the following error. Wrapper@https://Node1.domain.com:5601/31997/bundles/commons.bundle.js:3… --- ## [Line chart with date range calculating the total per day](https://discuss.elastic.co/t/line-chart-with-date-range-calculating-the-total-per-day/247850)
**Author:** [@importasapo](https://discuss.elastic.co/u/importasapo)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:31pm UTC](https://discuss.elastic.co/t/line-chart-with-date-range-calculating-the-total-per-day/247850 "2020-09-10T19:31:21Z")
Kibana Line Chart that i have events and instead of showing all events per day, I use the date range to show the total of events per day. After an elastic search updated I start seeing a extra line. This is a Stacked l… --- ## [How to call api url declared in server of plugin from component in plugin in kibana 7.8 OSS version?](https://discuss.elastic.co/t/how-to-call-api-url-declared-in-server-of-plugin-from-component-in-plugin-in-kibana-7-8-oss-version/247798)
**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:18pm UTC](https://discuss.elastic.co/t/how-to-call-api-url-declared-in-server-of-plugin-from-component-in-plugin-in-kibana-7-8-oss-version/247798 "2020-09-10T19:18:22Z")
I am developing a plugin in 7.8 kibana oss version When I define route in routes in server folder of plugin then how to call from component in public in plugin? --- ## [KIBANA Dashboard information tab size](https://discuss.elastic.co/t/kibana-dashboard-information-tab-size/248188)
**Author:** [@RuBi](https://discuss.elastic.co/u/RuBi)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:03pm UTC](https://discuss.elastic.co/t/kibana-dashboard-information-tab-size/248188 "2020-09-10T19:03:50Z")
Hi, how to increase windows tab length, i don't see all the information now --- ## [Dashboard for Storage like storage available & utilization with server list](https://discuss.elastic.co/t/dashboard-for-storage-like-storage-available-utilization-with-server-list/248211)
**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 6:56pm UTC](https://discuss.elastic.co/t/dashboard-for-storage-like-storage-available-utilization-with-server-list/248211 "2020-09-10T18:56:24Z")
Hi Team, Can someone please help me to create dashboard for Storage basically I'm looking to to achieve servers list with like total storage, disk utilization and available space as list in the dashboard for all servers… --- ## [Delete index command from kibana not working](https://discuss.elastic.co/t/delete-index-command-from-kibana-not-working/248215)
**Author:** [@baidwan007](https://discuss.elastic.co/u/baidwan007)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 6:32pm UTC](https://discuss.elastic.co/t/delete-index-command-from-kibana-not-working/248215 "2020-09-10T18:32:42Z")
I am running DELETE /\ command from kibana. I get acknowledged:true response from kibana but Instead of the index getting deleted, i see that a replica shard appears instead while the primary index also stays.… --- ## [Mapping fields cannot be replaced during template composition](https://discuss.elastic.co/t/mapping-fields-cannot-be-replaced-during-template-composition/248217)
**Author:** [@Lolo\_Bee](https://discuss.elastic.co/u/Lolo_Bee)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 6:18pm UTC](https://discuss.elastic.co/t/mapping-fields-cannot-be-replaced-during-template-composition/248217 "2020-09-10T18:18:47Z")
Hi, I'm trying to setup a template index composed of some component templates. One of the component templates creates new fields mapping on an existing object, and this raises the following error "mapping fields \[tcp\] c… --- ## [Filebeat apache module: Provided Grok expressions do not match field value](https://discuss.elastic.co/t/filebeat-apache-module-provided-grok-expressions-do-not-match-field-value/248214)
**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 5:43pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-provided-grok-expressions-do-not-match-field-value/248214 "2020-09-10T17:43:43Z")
Hello. Filebeat is unable to parse any entry from the Apache access log. Here is a complete document which demonstrates the error: { "\_index": "filebeat-7.7.1-2020.08.29-000002", "\_type": "\_doc", "\_id": "ZV4cdHQB… --- ## [Remove wildcard fields in logstash](https://discuss.elastic.co/t/remove-wildcard-fields-in-logstash/248173)
**Author:** [@Yanick\_Quirion](https://discuss.elastic.co/u/Yanick_Quirion)\ **Replies:** 4\ **Last updated:** [September 10, 2020, 5:40pm UTC](https://discuss.elastic.co/t/remove-wildcard-fields-in-logstash/248173 "2020-09-10T17:40:10Z")
Hello, I have this data: "winlog" =\> { "channel" =\> "Security", "record\_id" =\> 1401770357, "event\_data" =\> { "param14" =\> "-", "param9" =\> "-", "param21" =\> "-", "param13" =\> … --- ## [Kibana Monitoring Cluster Alerts \[7.9.0\]](https://discuss.elastic.co/t/kibana-monitoring-cluster-alerts-7-9-0/247987)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 4:55pm UTC](https://discuss.elastic.co/t/kibana-monitoring-cluster-alerts-7-9-0/247987 "2020-09-10T16:55:49Z")
Hi, everyone I have found out some warnings on Kibana's log about monitoring.cluster\_alerts: {"type":"log","@timestamp":"2020-09-09T10:26:31Z","tags":\["warning","config","deprecation"\],"pid":7,"message":"Config key \[mo… --- ## [Filebeat Kubernetes Pod Publishing Behind For Only Some Files in Container Path Input](https://discuss.elastic.co/t/filebeat-kubernetes-pod-publishing-behind-for-only-some-files-in-container-path-input/248207)
**Author:** [@stockhausenj](https://discuss.elastic.co/u/stockhausenj)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 4:52pm UTC](https://discuss.elastic.co/t/filebeat-kubernetes-pod-publishing-behind-for-only-some-files-in-container-path-input/248207 "2020-09-10T16:52:13Z")
Greetings! I have deployed the Filebeat Daemonset to collect container logs. Kubernetes YAML: apiVersion: v1 kind: ConfigMap metadata: name: filebeat-config namespace: filebeat data: filebeat.yml: |- filebea… --- ## [Efficient way to sort by different fields by client](https://discuss.elastic.co/t/efficient-way-to-sort-by-different-fields-by-client/248206)
**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 4:48pm UTC](https://discuss.elastic.co/t/efficient-way-to-sort-by-different-fields-by-client/248206 "2020-09-10T16:48:17Z")
I have an index named items . And we have many stores (now around 100, and in the future it may be 10,000) . Each item has a price for each store. So item document may look like this: { "item\_id": 1, "description":… --- ## [Logstash query to elastic](https://discuss.elastic.co/t/logstash-query-to-elastic/248205)
**Author:** [@FDO](https://discuss.elastic.co/u/FDO)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 4:27pm UTC](https://discuss.elastic.co/t/logstash-query-to-elastic/248205 "2020-09-10T16:27:25Z")
I use https://www.elastic.co/guide/en/logstash/current/plugins-filters-elasticsearch.html For end event I trying to find data from first event if \[url\] { elasticsearch { hosts =\> \["${ES\_node… --- ## [Docker.elastic.co/r/beats down?](https://discuss.elastic.co/t/docker-elastic-co-r-beats-down/248203)
**Author:** [@ldavis2](https://discuss.elastic.co/u/ldavis2)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 4:17pm UTC](https://discuss.elastic.co/t/docker-elastic-co-r-beats-down/248203 "2020-09-10T16:17:13Z")
As mentioned in title, when visiting www.docker.elastic.co and navigating to the beats namespace, an internal server error occurs. This prevents deploying images from the beats namespace. For backup purposes, are the im… --- ## [Elasticsearch(7.8) NEST(C#) aggregations](https://discuss.elastic.co/t/elasticsearch-7-8-nest-c-aggregations/248094)
**Author:** [@Joseph\_Tucci](https://discuss.elastic.co/u/Joseph_Tucci)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 4:14pm UTC](https://discuss.elastic.co/t/elasticsearch-7-8-nest-c-aggregations/248094 "2020-09-10T16:14:47Z")
document count ~10 billion documents elastics disk usage ~2TB elasticsearch 7.8 via NEST/C# api. my model is a transaction receipt. a simplified schema \[keyword\] string customer\_id { get; set; } //cardinality 100M \[k… --- ## [Kibana Data Table Math Operations](https://discuss.elastic.co/t/kibana-data-table-math-operations/248078)
**Author:** [@Samuel\_Amico](https://discuss.elastic.co/u/Samuel_Amico)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 4:14pm UTC](https://discuss.elastic.co/t/kibana-data-table-math-operations/248078 "2020-09-10T16:14:17Z")
Hi guys, this question is very Important to me, so please help me: I have two fields: priceA and priceB, and I have to do some operation like this in the data table: sum(priceA) / sum(priceB). How can I achive this, t… --- ## [Install radar plugin for kibana](https://discuss.elastic.co/t/install-radar-plugin-for-kibana/248011)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 4:08pm UTC](https://discuss.elastic.co/t/install-radar-plugin-for-kibana/248011 "2020-09-10T16:08:37Z")
Hi all I am interested in using radar plugin in kibana. My kibana version is 6.6. I download kbn\_radar-6.zip using following link and extract it in the kibana/plugins folder. https://github.com/dlumbrer/kbn\_radar/relea… --- ## [Suggestions for person names doens't work so well](https://discuss.elastic.co/t/suggestions-for-person-names-doenst-work-so-well/248035)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 4\ **Last updated:** [September 10, 2020, 4:08pm UTC](https://discuss.elastic.co/t/suggestions-for-person-names-doenst-work-so-well/248035 "2020-09-10T16:08:18Z")
Hi guys, I know that this use case is quite common but I'm a bit confused after I've read several tutorials and docs. In my application I'm trying to help the user when he digits a person's name in the form. I'd like t… --- ## [Logstash rabbitmq\_input connection recovery fails](https://discuss.elastic.co/t/logstash-rabbitmq-input-connection-recovery-fails/247554)
**Author:** [@Helena\_Ji](https://discuss.elastic.co/u/Helena_Ji)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 4:00pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-connection-recovery-fails/247554 "2020-09-10T16:00:52Z")
I am facing some issue that logstash does not want to reconnect to the rabbitMQ after losing the connection somehow. I am using two logstash instances on two different VMs, these two logstash instances listen to the sam… --- ## [Elasticsearch vertical clustering](https://discuss.elastic.co/t/elasticsearch-vertical-clustering/248006)
**Author:** [@cham](https://discuss.elastic.co/u/cham)\ **Replies:** 4\ **Last updated:** [September 10, 2020, 3:50pm UTC](https://discuss.elastic.co/t/elasticsearch-vertical-clustering/248006 "2020-09-10T15:50:51Z")
Hi, We are setting up ES cluster in our env and have 2 concerns. Is it advisable to do vertical clustering (putting more than one node per server) is it possible to move the elasticsearch.yml configuration file to a s… --- ## [TSVB Metric visualization with dynamic data filter](https://discuss.elastic.co/t/tsvb-metric-visualization-with-dynamic-data-filter/248192)
**Author:** [@paolinux](https://discuss.elastic.co/u/paolinux)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 3:34pm UTC](https://discuss.elastic.co/t/tsvb-metric-visualization-with-dynamic-data-filter/248192 "2020-09-10T15:34:36Z")
Hi there, I have created a TSVB Metric visualization in Kibana with a filter hardcoded in the "Data" -\> "Options" section. I would like to re-use this visualization in a Dashboard where I have a control field (option l… --- ## [Synonym graph filterにてエラーの出る単語を一括検知に関して](https://discuss.elastic.co/t/synonym-graph-filter/248196)
**Author:** [@nuko](https://discuss.elastic.co/u/nuko)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 3:15pm UTC](https://discuss.elastic.co/t/synonym-graph-filter/248196 "2020-09-10T15:15:17Z")
kuromoji\_tokenizerを "search"モードで指定して、 synonym graph filterを使用している場合、 辞書に入ってない単語をシノニムとして指定すると、 シノニムファイルのロード時に、下記のようなレスポンスとなります。 （ POST /indexname/\_reload\_search\_analyzers でリロードをかけています） { "error" : { "root\_caus… --- ## [Is auto-generated @timestamp field will always be in UTC timezone?](https://discuss.elastic.co/t/is-auto-generated-timestamp-field-will-always-be-in-utc-timezone/248125)
**Author:** [@patilsharanu](https://discuss.elastic.co/u/patilsharanu)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 3:10pm UTC](https://discuss.elastic.co/t/is-auto-generated-timestamp-field-will-always-be-in-utc-timezone/248125 "2020-09-10T15:10:33Z")
Query: @timestamp field is auto-generated and its in UTC timezone. Will is it always be in UTC or will it change in future releases? \[Input source\](input.txt): 1524206424.034 19395 207.96.0.0 TCP\_MISS/306 15363 GET ht… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1812) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1814)