# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1842 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1843 --- ## [Importing dashboards on Elasicsearch](https://discuss.elastic.co/t/importing-dashboards-on-elasicsearch/246431)
**Author:** [@nb03briceno](https://discuss.elastic.co/u/nb03briceno)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 7:32pm UTC](https://discuss.elastic.co/t/importing-dashboards-on-elasicsearch/246431 "2020-08-26T19:32:03Z")
Hello everyone, i'm just searching for a bit of help regarding on how to import my dashboards through filebeat into ELK running with docker in my computer. When using normal ELk (without docker), I imported my dashboard… --- ## [How to change the text color in kibana dashboard widgets?](https://discuss.elastic.co/t/how-to-change-the-text-color-in-kibana-dashboard-widgets/246334)
**Author:** [@DSMilestone](https://discuss.elastic.co/u/DSMilestone)\ **Replies:** 4\ **Last updated:** [August 26, 2020, 7:14pm UTC](https://discuss.elastic.co/t/how-to-change-the-text-color-in-kibana-dashboard-widgets/246334 "2020-08-26T19:14:24Z")
How to change the text color in kibana dashboard widgets. In the below screenshot, there are three different lens widgets in the dashboard. I want to change the text color of Passed count to green and failed count to… --- ## [Elastic Index data](https://discuss.elastic.co/t/elastic-index-data/246011)
**Author:** [@daviddavid](https://discuss.elastic.co/u/daviddavid)\ **Replies:** 10\ **Last updated:** [August 26, 2020, 6:48pm UTC](https://discuss.elastic.co/t/elastic-index-data/246011 "2020-08-26T18:48:01Z")
I am trying to save data in to table which has relational mapping to another table. Using a spring java jpa project. When the tables are updated with data it works fine but the elastic indexes are not updated with mappe… --- ## [Security index is unavailable. short circuiting retrieval of user with helm chart and letsencrypt](https://discuss.elastic.co/t/security-index-is-unavailable-short-circuiting-retrieval-of-user-with-helm-chart-and-letsencrypt/246497)
**Author:** [@dcanales](https://discuss.elastic.co/u/dcanales)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 6:22pm UTC](https://discuss.elastic.co/t/security-index-is-unavailable-short-circuiting-retrieval-of-user-with-helm-chart-and-letsencrypt/246497 "2020-08-26T18:22:45Z")
Hi, i have a kubernetes cluster and im trying to configure elasticsearch with xpack.security.enabled through the helm template I have the same config from the documentation: https://github.com/elastic/helm-charts/blob/7… --- ## [\[help\]how to write config for multiplication](https://discuss.elastic.co/t/help-how-to-write-config-for-multiplication/246448)
**Author:** [@manojb1-in.ibm.com](https://discuss.elastic.co/u/manojb1-in.ibm.com)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 6:05pm UTC](https://discuss.elastic.co/t/help-how-to-write-config-for-multiplication/246448 "2020-08-26T18:05:44Z")
I am writing logstash config for iostat output of aix\_server. sample lines is given Below Disks: xfers read write … --- ## [Grok for IP then geoip and ip2proxy plugin?](https://discuss.elastic.co/t/grok-for-ip-then-geoip-and-ip2proxy-plugin/246362)
**Author:** [@mortimerj](https://discuss.elastic.co/u/mortimerj)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 5:25pm UTC](https://discuss.elastic.co/t/grok-for-ip-then-geoip-and-ip2proxy-plugin/246362 "2020-08-26T17:25:20Z")
Hello! I'm trying to grok just the IP address from the field ClientIP, which can present as \[1.2.3.4:4444\] or 1.2.3.4:4444, then create a new field (clientipfixed), and apply the geoip and ip2proxy plugins to enrich it.… --- ## [Elasticsearch nested sorting is not working](https://discuss.elastic.co/t/elasticsearch-nested-sorting-is-not-working/246491)
**Author:** [@abhishek\_chaturvedi](https://discuss.elastic.co/u/abhishek_chaturvedi)\ **Replies:** 0\ **Last updated:** [August 26, 2020, 5:08pm UTC](https://discuss.elastic.co/t/elasticsearch-nested-sorting-is-not-working/246491 "2020-08-26T17:08:16Z")
I want to sort below query based on responseDate: And every time I am returning some wrong BIG\_INTEGER in sort with each data. I think nested sort is not working properly. Kindly help: { "size": 1000, "query": { … --- ## [Set threshold or condition when to Email in logstash script](https://discuss.elastic.co/t/set-threshold-or-condition-when-to-email-in-logstash-script/246373)
**Author:** [@David03](https://discuss.elastic.co/u/David03)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 4:33pm UTC](https://discuss.elastic.co/t/set-threshold-or-condition-when-to-email-in-logstash-script/246373 "2020-08-26T16:33:38Z")
Is it possible to set a threshold or condition when to email to avoid a continuous firing of email? This is my current script. if \[message\] =~ "Caused by:" { grok{ match =\>\["message", "Caused by:"\] add\_tag =\>\["shoul… --- ## [Parse Generic Nestaed json without splitting](https://discuss.elastic.co/t/parse-generic-nestaed-json-without-splitting/246435)
**Author:** [@Bhargav\_Patel1](https://discuss.elastic.co/u/Bhargav_Patel1)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 4:28pm UTC](https://discuss.elastic.co/t/parse-generic-nestaed-json-without-splitting/246435 "2020-08-26T16:28:22Z")
Hello, I have valid json string which i want to parse as json and want to stored in elastic { "id": "101834545", "date": "06-Apr-2016", "Gender": "Male", "ActiveStatus": "Active", "NameDetails": { "Name": \[{ … --- ## [Scripted field to find percent of documents to be used in a metric](https://discuss.elastic.co/t/scripted-field-to-find-percent-of-documents-to-be-used-in-a-metric/246338)
**Author:** [@jc034240](https://discuss.elastic.co/u/jc034240)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 4:25pm UTC](https://discuss.elastic.co/t/scripted-field-to-find-percent-of-documents-to-be-used-in-a-metric/246338 "2020-08-26T16:25:45Z")
I made a scripted field in Kibana using the below which syntactically is fine but doesn't function properly. I want to take the amount of documents with "Execution", divide that hit count by 10, then multiply that numbe… --- ## [Convert Different timezones syslog time to datetime format](https://discuss.elastic.co/t/convert-different-timezones-syslog-time-to-datetime-format/246352)
**Author:** [@Pavani\_Reddy](https://discuss.elastic.co/u/Pavani_Reddy)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 4:17pm UTC](https://discuss.elastic.co/t/convert-different-timezones-syslog-time-to-datetime-format/246352 "2020-08-26T16:17:41Z")
I have following timestamp with different timezones in the log messages. Aug 11 03:31:12.942 UTC Aug 11 04:31:12.819 GMT Aug 10 22:31:51.207 CST Aug 10 04:31:38.897 PAC Aug 10 22:31:13.210 CDT Aug 11 03:31:13.048 P… --- ## [Issue on creating index mapping](https://discuss.elastic.co/t/issue-on-creating-index-mapping/246475)
**Author:** [@jakobdoering](https://discuss.elastic.co/u/jakobdoering)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 4:09pm UTC](https://discuss.elastic.co/t/issue-on-creating-index-mapping/246475 "2020-08-26T16:09:21Z")
Hi, i would like to create the following structure with my index template: egress.bytes egress.test egress.test.delta egress.test.performance egress.test.state egress.test.state.performance.low … --- ## [Input http\_endpoint is not accepted by 7.9.0 or master](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557)
**Author:** [@KlavsKlavsen](https://discuss.elastic.co/u/KlavsKlavsen)\ **Replies:** 6\ **Last updated:** [August 26, 2020, 3:58pm UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557 "2020-08-26T15:58:22Z")
I just tried building docker images (make release) from github on both master and the new 7.9.0 tag. When I then run filebeat with this config: filebeat.inputs: - type: http\_endpoint enabled: true l… --- ## [Elastic Memory:Storage Ratio / Hot-warm](https://discuss.elastic.co/t/elastic-memory-storage-ratio-hot-warm/246389)
**Author:** [@skysbsb](https://discuss.elastic.co/u/skysbsb)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 3:48pm UTC](https://discuss.elastic.co/t/elastic-memory-storage-ratio-hot-warm/246389 "2020-08-26T15:48:55Z")
I am setting up a cluster with the Elasticsearch BASIC version and one question I have is related to the memory: storage ratio. I saw in a webinar (https://www.elastic.co/pdf/elasticsearch-sizing-and-capacity-planning… --- ## [Elasticsearch with warm nodes setup, kibana not yet ready](https://discuss.elastic.co/t/elasticsearch-with-warm-nodes-setup-kibana-not-yet-ready/246324)
**Author:** [@souji](https://discuss.elastic.co/u/souji)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 3:37pm UTC](https://discuss.elastic.co/t/elasticsearch-with-warm-nodes-setup-kibana-not-yet-ready/246324 "2020-08-26T15:37:11Z")
Hi I setup the 7.8 version elastic search with 3 master, 3 client, 3 warm, 3 data nodes in amazon ec2 machines. warm nodes: bootstrap.memory\_lock: true node.name: ${HOSTNAME} action.destructive\_requires\_name: true ind… --- ## [Filebeat Fortinet module doesn't parse message field](https://discuss.elastic.co/t/filebeat-fortinet-module-doesnt-parse-message-field/246013)
**Author:** [@anon56147639](https://discuss.elastic.co/u/anon56147639)\ **Replies:** 6\ **Last updated:** [August 26, 2020, 3:35pm UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-doesnt-parse-message-field/246013 "2020-08-26T15:35:27Z")
Hi everyone, I'm facing issues with the Fortinet module in Filebeat. It stores the whole log in the message field instead of seperate fields. This is an example of my log (I removed some info such as IPs): https://paste… --- ## [Display Metric Visualization in Abbrievated Number Format based on condition](https://discuss.elastic.co/t/display-metric-visualization-in-abbrievated-number-format-based-on-condition/246248)
**Author:** [@antony\_kavin](https://discuss.elastic.co/u/antony_kavin)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 2:48pm UTC](https://discuss.elastic.co/t/display-metric-visualization-in-abbrievated-number-format-based-on-condition/246248 "2020-08-26T14:48:30Z")
Hi team, I have a question related to number formatting in kibana. I have created a metric visualization(sum) in Kibana using a number field(Sales). I want to display the metric in abbreviated number format(m or k). I… --- ## [Logstash parsing input filter beat csv file](https://discuss.elastic.co/t/logstash-parsing-input-filter-beat-csv-file/246314)
**Author:** [@Carlos\_Xavier](https://discuss.elastic.co/u/Carlos_Xavier)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 3:25pm UTC](https://discuss.elastic.co/t/logstash-parsing-input-filter-beat-csv-file/246314 "2020-08-25T15:25:50Z")
Hi everoene, I getting an issue between filebeat and logstash that I can not uderstand what is gonig on, I need some help with that. Let me tell you what is going on... The filebeat setting is the following.... // f… --- ## [Script throwing error on visualisations: Caused by: java.lang.IllegalArgumentException: invalid sequence of tokens near \['}'\]](https://discuss.elastic.co/t/script-throwing-error-on-visualisations-caused-by-java-lang-illegalargumentexception-invalid-sequence-of-tokens-near/246150)
**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 2:43pm UTC](https://discuss.elastic.co/t/script-throwing-error-on-visualisations-caused-by-java-lang-illegalargumentexception-invalid-sequence-of-tokens-near/246150 "2020-08-26T14:43:49Z")
My script: if (doc\['companiesHouse.date\_of\_creation'\].size()\>0 && doc\['awards.date'\].size() \> 0) { return ((doc\['awards.date'\].value.getMillis() - doc\['companiesHouse.date\_of\_creation'\].value.getMillis()) / 86400000); }… --- ## [Dynamic Title for Kibana visualization](https://discuss.elastic.co/t/dynamic-title-for-kibana-visualization/246241)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 2:42pm UTC](https://discuss.elastic.co/t/dynamic-title-for-kibana-visualization/246241 "2020-08-26T14:42:40Z")
Hi, I have created a visualization for CPU load, Disk load, memory load for the devices in our network. User can filter any particular device and check its load. The requirement is to add the Device name as the title … --- ## [Want to match against single grok pattern and multiple patterns in same filter](https://discuss.elastic.co/t/want-to-match-against-single-grok-pattern-and-multiple-patterns-in-same-filter/246470)
**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\ **Replies:** 0\ **Last updated:** [August 26, 2020, 2:35pm UTC](https://discuss.elastic.co/t/want-to-match-against-single-grok-pattern-and-multiple-patterns-in-same-filter/246470 "2020-08-26T14:35:13Z")
I want to have below kinds of match patterns in my logstash configuration file to match different lines. (a) match =\> { "message" =\> "\\\[%{TIMESTAMP\_ISO8601:bip\_timestamp}\\\] \\\[%{WORD:app\_server}\] \\\[%{WORD:log\_level}\] \\\[… --- ## [Is it possible combine two index together in Kibana](https://discuss.elastic.co/t/is-it-possible-combine-two-index-together-in-kibana/246345)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 12\ **Last updated:** [August 26, 2020, 2:27pm UTC](https://discuss.elastic.co/t/is-it-possible-combine-two-index-together-in-kibana/246345 "2020-08-26T14:27:44Z")
I have two index data which i am using in kibana.For that I created Visulazation as well and able to see Data in dashboard. But challange is when i am filtering data for Index1 after clicking on +Button other index data… --- ## [Scale type option in TSVB visualization](https://discuss.elastic.co/t/scale-type-option-in-tsvb-visualization/246460)
**Author:** [@Rizin\_Hussain](https://discuss.elastic.co/u/Rizin_Hussain)\ **Replies:** 1\ **Last updated:** [August 26, 2020, 2:13pm UTC](https://discuss.elastic.co/t/scale-type-option-in-tsvb-visualization/246460 "2020-08-26T14:13:52Z")
Created a moving average visualization using TSVB, Since Y-Axis is generated large number scale value small digit number is marked on top of the '0' line. So difficult understand the analysis. In this screenshot, both … --- ## [Use part of the log files name for the index?](https://discuss.elastic.co/t/use-part-of-the-log-files-name-for-the-index/246366)
**Author:** [@hcker2000](https://discuss.elastic.co/u/hcker2000)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 2:04pm UTC](https://discuss.elastic.co/t/use-part-of-the-log-files-name-for-the-index/246366 "2020-08-26T14:04:14Z")
I have my files all in the same directory names like such: /var/log/apache2/testsite1.com\_error.log /var/log/apache2/testsite1.com\_access.log /var/log/apache2/subdomain.testsite1.com\_error.log /var/log/apache2/subdomain… --- ## [\[Ingest management\] Use insecure elasticsearch output managed in fleet mode for elastic agent](https://discuss.elastic.co/t/ingest-management-use-insecure-elasticsearch-output-managed-in-fleet-mode-for-elastic-agent/246022)
**Author:** [@arnold79](https://discuss.elastic.co/u/arnold79)\ **Replies:** 14\ **Last updated:** [August 26, 2020, 1:21pm UTC](https://discuss.elastic.co/t/ingest-management-use-insecure-elasticsearch-output-managed-in-fleet-mode-for-elastic-agent/246022 "2020-08-26T13:21:14Z")
I'm playing around with the new Elastic agent (7.9) and using the Ingest Manager BETA. Created several agent configs with several integrations and can them easily re-assign to an agent. Standalone the configuration goe… --- ## [Unmatched responses or requests](https://discuss.elastic.co/t/unmatched-responses-or-requests/246455)
**Author:** [@toms130](https://discuss.elastic.co/u/toms130)\ **Replies:** 0\ **Last updated:** [August 26, 2020, 1:18pm UTC](https://discuss.elastic.co/t/unmatched-responses-or-requests/246455 "2020-08-26T13:18:32Z")
Hi all, I'm using packetbeat to capture http webservices traffic using SOAP , and I'm facing a lot of http requests that are logged as unmatched requests or responses. ( for example, 80k on 470k documents on last 24h ha… --- ## [Deleting indices with Curator based upon age of document timestamps](https://discuss.elastic.co/t/deleting-indices-with-curator-based-upon-age-of-document-timestamps/246451)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 0\ **Last updated:** [August 26, 2020, 12:49pm UTC](https://discuss.elastic.co/t/deleting-indices-with-curator-based-upon-age-of-document-timestamps/246451 "2020-08-26T12:49:15Z")
All the indices I deal with contain logs from servers so I'd like to have Curator delete indices once the documents inside them refer to events that happened more than N days ago. Looking at the Curator documentation htt… --- ## [Certificate format for Kibana](https://discuss.elastic.co/t/certificate-format-for-kibana/246329)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 12:35pm UTC](https://discuss.elastic.co/t/certificate-format-for-kibana/246329 "2020-08-26T12:35:49Z")
Hi, Note: Running ELK 7.9 I am trying to configure TLS in Kibana to try out the Alerts beta feature. By following the official documentation, the bin/elasticsearch-certutil csr tool will generate a cert in PEM format, … --- ## [Kibana issue with PEM format](https://discuss.elastic.co/t/kibana-issue-with-pem-format/246356)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 12:34pm UTC](https://discuss.elastic.co/t/kibana-issue-with-pem-format/246356 "2020-08-26T12:34:30Z")
\*Running ELK 7.9 Apparently Kibana is not being able to read/parse certificate/key files in PEM format. These file where generated via /usr/share/elasticsearch/bin/elasticsearch-certutil csr , so it should work like a c… --- ## [Scaling with many custom log patterns](https://discuss.elastic.co/t/scaling-with-many-custom-log-patterns/246450)
**Author:** [@pcosic](https://discuss.elastic.co/u/pcosic)\ **Replies:** 0\ **Last updated:** [August 26, 2020, 12:34pm UTC](https://discuss.elastic.co/t/scaling-with-many-custom-log-patterns/246450 "2020-08-26T12:34:26Z")
Hi Community, I'm wondering how would we write a filter with logs from a firewall like cisco asa with thousands of custom logs? Currently in the filebeat module for cisco there are supported 150 cisco asa log id's. If… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1841) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1843)