# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1852 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1853 --- ## [Elastic Password reset](https://discuss.elastic.co/t/elastic-password-reset/245578)
**Author:** [@bhargav\_bharat](https://discuss.elastic.co/u/bhargav_bharat)\ **Replies:** 4\ **Last updated:** [August 21, 2020, 12:27am UTC](https://discuss.elastic.co/t/elastic-password-reset/245578 "2020-08-21T00:27:45Z")
Whenever I try to reset password of elastic, I am getting bellow mention error: Request: curl -u user:Password -XPUT 'http://localhost:9200/\_xpack/security/user/elastic/\_password?pretty' -H 'Content-Type: application/j… --- ## [\[Metricbeat Windows\] Services ECS dashboard throwing errors](https://discuss.elastic.co/t/metricbeat-windows-services-ecs-dashboard-throwing-errors/245173)
**Author:** [@mudricd](https://discuss.elastic.co/u/mudricd)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 11:21pm UTC](https://discuss.elastic.co/t/metricbeat-windows-services-ecs-dashboard-throwing-errors/245173 "2020-08-20T23:21:41Z")
Hi, I setup Metricbeat on Windows and I use windows module to send info about services to Elasticsearch through Logstash. There are no filters on Logstash server for this pipeline. Then I loaded Kibana dashboards accor… --- ## [Logstash sincedb file issue](https://discuss.elastic.co/t/logstash-sincedb-file-issue/245831)
**Author:** [@rahulnama](https://discuss.elastic.co/u/rahulnama)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 11:08pm UTC](https://discuss.elastic.co/t/logstash-sincedb-file-issue/245831 "2020-08-20T23:08:08Z")
Hi Team My elk is on docker and I'm mounting sincedb file to mounted volume. I changed the directory of logstash file input and recreated the docker container. I see log data of only one file in elasticsearch though h… --- ## [Unable to reindex after field changes](https://discuss.elastic.co/t/unable-to-reindex-after-field-changes/243867)
**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 11:01pm UTC](https://discuss.elastic.co/t/unable-to-reindex-after-field-changes/243867 "2020-08-20T23:01:39Z")
At the end of each month to keep index and shard counts low, we reindex all of our daily indices into a larger monthly index. We do this by manually running a reindex job on each of our larger index groups by running the… --- ## [Mathematics calculations with daily data records](https://discuss.elastic.co/t/mathematics-calculations-with-daily-data-records/245320)
**Author:** [@MyQuery](https://discuss.elastic.co/u/MyQuery)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:38pm UTC](https://discuss.elastic.co/t/mathematics-calculations-with-daily-data-records/245320 "2020-08-20T22:38:39Z")
Hi Team, We would like to build table in the below format . Data is coming as record by record.. Marketing Operating Count Total AF FL Total(%) AF(%) FL(%) UA UA 9415 24 17 7 0.25 0.18 0.07 UA LH 47 6 6 0 12.… --- ## [Only insert json objects that are not in elasticsearch](https://discuss.elastic.co/t/only-insert-json-objects-that-are-not-in-elasticsearch/245712)
**Author:** [@jmaharjan](https://discuss.elastic.co/u/jmaharjan)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 6:25am UTC](https://discuss.elastic.co/t/only-insert-json-objects-that-are-not-in-elasticsearch/245712 "2020-08-20T06:25:20Z")
Hello. Very new to elasticsearch. I am trying to use the ELK stack to provide a tool for viewing records obtain from an external API. The setup is: Get new records from external API Add them to elasticsearch if they do… --- ## [How to add custom Kibana Plugin App as Visualization Plugin in a Dashboard](https://discuss.elastic.co/t/how-to-add-custom-kibana-plugin-app-as-visualization-plugin-in-a-dashboard/245385)
**Author:** [@burakka](https://discuss.elastic.co/u/burakka)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:31pm UTC](https://discuss.elastic.co/t/how-to-add-custom-kibana-plugin-app-as-visualization-plugin-in-a-dashboard/245385 "2020-08-20T22:31:33Z")
Hi all, I developed a custom Kibana Plugin App. It's a React App which is visualizing data queried from an Elasticsearch index in its React components. It also has buttons in it, e.g. for filtering and updating data. N… --- ## [How to check stats of all saved objects](https://discuss.elastic.co/t/how-to-check-stats-of-all-saved-objects/245553)
**Author:** [@Redcxx](https://discuss.elastic.co/u/Redcxx)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:17pm UTC](https://discuss.elastic.co/t/how-to-check-stats-of-all-saved-objects/245553 "2020-08-20T22:17:41Z")
Hi I am using the saved\_objects API to create visualizations and dashboard, but since Kibana does not validate the data as mentioned here: When you create saved objects, attributes are not validated, which allows you t… --- ## [Kibana Canvas](https://discuss.elastic.co/t/kibana-canvas/245572)
**Author:** [@oliverlucas](https://discuss.elastic.co/u/oliverlucas)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:06pm UTC](https://discuss.elastic.co/t/kibana-canvas/245572 "2020-08-20T22:06:21Z")
Hi All, Trying to find some help and guidance. I'm new to Canvas (2 days) and I can already see the infinite possibilities to make some really cool stuff, but I'm really struggling. So first off I had problems with SQL… --- ## [Query multiple mapping indices in visualization](https://discuss.elastic.co/t/query-multiple-mapping-indices-in-visualization/244971)
**Author:** [@InfiniteDreamer](https://discuss.elastic.co/u/InfiniteDreamer)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 9:32pm UTC](https://discuss.elastic.co/t/query-multiple-mapping-indices-in-visualization/244971 "2020-08-20T21:32:36Z")
we have a index pattern with few indices with two different mapping, few fields are present in both mapping. we want bucket the common fields from both mapping indices and want to perform metric aggs on data from both m… --- ## [Elastic Agent on Older Windows Disable Driver Signature Enforcement](https://discuss.elastic.co/t/elastic-agent-on-older-windows-disable-driver-signature-enforcement/245667)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 9:31pm UTC](https://discuss.elastic.co/t/elastic-agent-on-older-windows-disable-driver-signature-enforcement/245667 "2020-08-20T21:31:51Z")
In order to have elastic agent install Endpoint on older windows you need to disable Driver Signature Enforcement With CMD as Administrator bcdedit /set testsigning on Then restart windows. --- ## [Kibana crash after 7.9 install; revert to 7.8 is ok](https://discuss.elastic.co/t/kibana-crash-after-7-9-install-revert-to-7-8-is-ok/245697)
**Author:** [@bumpyfaceok](https://discuss.elastic.co/u/bumpyfaceok)\ **Replies:** 11\ **Last updated:** [August 20, 2020, 9:22pm UTC](https://discuss.elastic.co/t/kibana-crash-after-7-9-install-revert-to-7-8-is-ok/245697 "2020-08-20T21:22:51Z")
Kibana starts and then fails with "FATAL URIError: URI malformed" Debian 10, logstash, elasticsearch, kibana all on same box. I removed Kibana 7.9 and installed 7.8 and it's working fine again; elasticsearch remains a… --- ## [CSV Report generation fails with large KQL query](https://discuss.elastic.co/t/csv-report-generation-fails-with-large-kql-query/245636)
**Author:** [@tomervain](https://discuss.elastic.co/u/tomervain)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 9:11pm UTC](https://discuss.elastic.co/t/csv-report-generation-fails-with-large-kql-query/245636 "2020-08-20T21:11:36Z")
Hello, I am running Elasticsearch + Kibana 7.8.0 on a virtual machine, everything in the cluster is operating fine with no issues. In the last few days, I was trying to run a long query (written in KQL) in the search b… --- ## [Custom term dictionary](https://discuss.elastic.co/t/custom-term-dictionary/245820)
**Author:** [@sbt](https://discuss.elastic.co/u/sbt)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:35pm UTC](https://discuss.elastic.co/t/custom-term-dictionary/245820 "2020-08-20T20:35:49Z")
I have a use case where I want to get latest record for a terms filter. I am not interested in its score so its okay even if its not scored. I want this on 5 fields in an index. One option is to have 5 indexes with th… --- ## [Can a Kibana Canvas Markdown Element Display a Total of a Column?](https://discuss.elastic.co/t/can-a-kibana-canvas-markdown-element-display-a-total-of-a-column/245797)
**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 8:35pm UTC](https://discuss.elastic.co/t/can-a-kibana-canvas-markdown-element-display-a-total-of-a-column/245797 "2020-08-20T20:35:01Z")
I have a Markdown Element on a Kibana canvas with the Expression Syntax: filters group="default" | essql query="SELECT host.hostname, (last(system.memory.actual.used.bytes, \\"@timestamp\\")/1073741824 as m… --- ## [Filter after selecting top 5 hits](https://discuss.elastic.co/t/filter-after-selecting-top-5-hits/245290)
**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\ **Replies:** 5\ **Last updated:** [August 20, 2020, 7:52pm UTC](https://discuss.elastic.co/t/filter-after-selecting-top-5-hits/245290 "2020-08-20T19:52:49Z")
Hi, I'm using the alerting feature in Kibana and I want to check if the last 5 consecutive values of a field exceed a threshold x but if I use a filter in my elastic query, it gets applied before the top N aggregation. … --- ## [Scripted field - Fielddata is disabled on text fields by default ... Alternatively use a keyword field instead. How to solve?](https://discuss.elastic.co/t/scripted-field-fielddata-is-disabled-on-text-fields-by-default-alternatively-use-a-keyword-field-instead-how-to-solve/245779)
**Author:** [@VooDooX](https://discuss.elastic.co/u/VooDooX)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 7:24pm UTC](https://discuss.elastic.co/t/scripted-field-fielddata-is-disabled-on-text-fields-by-default-alternatively-use-a-keyword-field-instead-how-to-solve/245779 "2020-08-20T19:24:40Z")
Hello. Running that script: def inst = /.\*instrument:(\[a-z\]+).\*/.matcher(doc\['FullDetails'\].value); if (inst.matches()) { return inst.group(1) } else { return "no match" } causes "Fielddata is disabled on text fi… --- ## [Canvas - Any way to consolidate 2 metric elements into one markdown element?](https://discuss.elastic.co/t/canvas-any-way-to-consolidate-2-metric-elements-into-one-markdown-element/245670)
**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 7:18pm UTC](https://discuss.elastic.co/t/canvas-any-way-to-consolidate-2-metric-elements-into-one-markdown-element/245670 "2020-08-20T19:18:17Z")
I have an elastic sql query that returns 2 calculated ("last") columns. I have use 2 "metric" elements on a canvas dashboard to display the sum of each column, respectively (selecting "sum" of the column name in both ele… --- ## [Kibana query help, find entries that occur on two different sites](https://discuss.elastic.co/t/kibana-query-help-find-entries-that-occur-on-two-different-sites/245790)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 7:03pm UTC](https://discuss.elastic.co/t/kibana-query-help-find-entries-that-occur-on-two-different-sites/245790 "2020-08-20T19:03:49Z")
hi, i'm struggling to sort out how to get a query to work. I have two sites sending logs via filebeat into an ELK stack. Each entry will have a field called "site" along with a bunch of log info (ip address, port, etc) … --- ## [Send Logstash events to secure Elasticsearch cluster](https://discuss.elastic.co/t/send-logstash-events-to-secure-elasticsearch-cluster/245810)
**Author:** [@panwarsagar](https://discuss.elastic.co/u/panwarsagar)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 6:57pm UTC](https://discuss.elastic.co/t/send-logstash-events-to-secure-elasticsearch-cluster/245810 "2020-08-20T18:57:30Z")
Hi, I have a 6 node Elasticsearch cluster deployed at two center with two Zone configuration. There are two master nodes (Master-1 & Master-2) at two locations. Both Master nodes are configured to use different certific… --- ## [Single Kibana Dashboard for All Users Limited with their Own Data](https://discuss.elastic.co/t/single-kibana-dashboard-for-all-users-limited-with-their-own-data/245807)
**Author:** [@Solaris23](https://discuss.elastic.co/u/Solaris23)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 6:28pm UTC](https://discuss.elastic.co/t/single-kibana-dashboard-for-all-users-limited-with-their-own-data/245807 "2020-08-20T18:28:36Z")
How to implement following scenario with ELK stack. Multiple users with same data type Single Kibana Dashboard for all users Each user should see own data on Dashboard The data type is same for all users. Should we cr… --- ## [Add\_kubernetes\_metadata causes KubeAPIErrorsHigh alert](https://discuss.elastic.co/t/add-kubernetes-metadata-causes-kubeapierrorshigh-alert/245806)
**Author:** [@yogeek](https://discuss.elastic.co/u/yogeek)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 5:39pm UTC](https://discuss.elastic.co/t/add-kubernetes-metadata-causes-kubeapierrorshigh-alert/245806 "2020-08-20T17:39:05Z")
Hi, 2 days ago, we began to regularly receive the "KubeAPIErrorsHigh" alert on our Kubernetes cluster (definition of the alert here). To try to find the cause, we looked at the API server logs and saw the following err… --- ## [Winlogbeats error](https://discuss.elastic.co/t/winlogbeats-error/245803)
**Author:** [@davidbrilliant](https://discuss.elastic.co/u/davidbrilliant)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 5:16pm UTC](https://discuss.elastic.co/t/winlogbeats-error/245803 "2020-08-20T17:16:44Z")
When running winlogbeat.exe setup, I am getting an error that I cannot solve. "Exiting: 1 error: error loading index pattern: returned 408 to import file: . Response {statusCode:408,error,Request Time-out, message, Requ… --- ## [Free up disk space](https://discuss.elastic.co/t/free-up-disk-space/245799)
**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 5:03pm UTC](https://discuss.elastic.co/t/free-up-disk-space/245799 "2020-08-20T17:03:42Z")
We have an ELK server that periodically runs out of space. In the spring I worked out a method using curator to delete indices that were more than 30 days old. But I still don't know much about ELK - Because everyone i… --- ## [Enabling features on air gapped network](https://discuss.elastic.co/t/enabling-features-on-air-gapped-network/245795)
**Author:** [@ave19](https://discuss.elastic.co/u/ave19)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 4:29pm UTC](https://discuss.elastic.co/t/enabling-features-on-air-gapped-network/245795 "2020-08-20T16:29:43Z")
I've just upgraded to 7.9.0 on an air gapped cluster. I cannot use the Ingest Manager because it cannot get to external repositories. Is there a way for me to get these packages and install them manually? Will these f… --- ## [Kibana 7.9.0: Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read](https://discuss.elastic.co/t/kibana-7-9-0-configuring-logger-failed-error-eisdir-illegal-operation-on-a-directory-read/245653)
**Author:** [@nixy](https://discuss.elastic.co/u/nixy)\ **Replies:** 7\ **Last updated:** [August 20, 2020, 4:04pm UTC](https://discuss.elastic.co/t/kibana-7-9-0-configuring-logger-failed-error-eisdir-illegal-operation-on-a-directory-read/245653 "2020-08-20T16:04:08Z")
Upgraded Kibana-full 7.8.1 to 7.9.0 using homebrew and elastic/tap/kibana-full. Afterwards when start kibana always get this error: Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read ..… --- ## [Logstash filter drop message with $ into string](https://discuss.elastic.co/t/logstash-filter-drop-message-with-into-string/245784)
**Author:** [@davide.stallone](https://discuss.elastic.co/u/davide.stallone)\ **Replies:** 9\ **Last updated:** [August 20, 2020, 3:54pm UTC](https://discuss.elastic.co/t/logstash-filter-drop-message-with-into-string/245784 "2020-08-20T15:54:22Z")
Hi, I'm trying to build a logstash filter to drop message that contains dollar at the end of string. I'm receiving log from a domain controller and I would like to get message that has in the field "user.name" only rea… --- ## [Ship metricbeat data without logstash or kafka?](https://discuss.elastic.co/t/ship-metricbeat-data-without-logstash-or-kafka/245613)
**Author:** [@FTLJ](https://discuss.elastic.co/u/FTLJ)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 3:30pm UTC](https://discuss.elastic.co/t/ship-metricbeat-data-without-logstash-or-kafka/245613 "2020-08-20T15:30:26Z")
Hi, I am planning to deploy metricbeat to monitor servers' basic metrics. Is it fine to ship metricbeat data to data node directly (without logstash or kafka) under this situation? Anything I should take into considera… --- ## [Composite aggregation after\_key](https://discuss.elastic.co/t/composite-aggregation-after-key/245789)
**Author:** [@Robert\_Pofuk](https://discuss.elastic.co/u/Robert_Pofuk)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 3:14pm UTC](https://discuss.elastic.co/t/composite-aggregation-after-key/245789 "2020-08-20T15:14:45Z")
Hi all! I have question. If I use histogram composite aggregation with setting size. For example I have integer range. Each number bucket in aggregation represents 1 day (Using integer for date is not important). If I… --- ## [Using environment variables](https://discuss.elastic.co/t/using-environment-variables/245621)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 3:13pm UTC](https://discuss.elastic.co/t/using-environment-variables/245621 "2020-08-20T15:13:24Z")
I am trying to execute a conf file and get the following error: Connecion refused - failed to open TCP connection The error does not occur when I export the http and https\_proxy variables before executing the conf file… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1851) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1853)