# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1881

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1882

---

## [Metric visualization of aggregated, then filtered, data](https://discuss.elastic.co/t/metric-visualization-of-aggregated-then-filtered-data/243981)

<div class="topic-metadata">

**Author:** [@Reuven\_Weiser](https://discuss.elastic.co/u/Reuven_Weiser)\
**Replies:** 2\
**Last updated:** [August 7, 2020, 6:26am UTC](https://discuss.elastic.co/t/metric-visualization-of-aggregated-then-filtered-data/243981 "2020-08-07T06:26:20Z")

</div>

I have an index of documents each representing a login event, from a particular device (deviceId) at a particular time (loginTime). I want to create a Metric Visualization showing how many devices have been logged in fr…

---

## [Download data from data table visualization using webapi calls](https://discuss.elastic.co/t/download-data-from-data-table-visualization-using-webapi-calls/242793)

<div class="topic-metadata">

**Author:** [@MyQuery](https://discuss.elastic.co/u/MyQuery)\
**Replies:** 4\
**Last updated:** [July 28, 2020, 8:52pm UTC](https://discuss.elastic.co/t/download-data-from-data-table-visualization-using-webapi-calls/242793 "2020-07-28T20:52:56Z")

</div>

Hi , I want to fetch my visualize/ dashboard data in Kibana from the API How do I approach this issue ? I need to get the data from data table and would like to use in format and send it to users

---

## [Elasticsearch Performance Issue](https://discuss.elastic.co/t/elasticsearch-performance-issue/243979)

<div class="topic-metadata">

**Author:** [@Muthukumaran\_Muruges](https://discuss.elastic.co/u/Muthukumaran_Muruges)\
**Replies:** 6\
**Last updated:** [August 7, 2020, 5:15am UTC](https://discuss.elastic.co/t/elasticsearch-performance-issue/243979 "2020-08-07T05:15:12Z")

</div>

Hi All, We have got a single node cluster of Elasticsearch running 7.5.0. Disk: 250GB Memory: 64GB CPU: 8CPU Index: 1 Shards : 1 Volume: 2 million Mapping: Dynamic Index Structure : PK, {Inner Obj…

---

## [Elasticsearch index not getting created when add\_field is used](https://discuss.elastic.co/t/elasticsearch-index-not-getting-created-when-add-field-is-used/243825)

<div class="topic-metadata">

**Author:** [@pranayv66](https://discuss.elastic.co/u/pranayv66)\
**Replies:** 8\
**Last updated:** [August 7, 2020, 4:49am UTC](https://discuss.elastic.co/t/elasticsearch-index-not-getting-created-when-add-field-is-used/243825 "2020-08-07T04:49:53Z")

</div>

Hi, I'm facing a problem when creating an elasticsearch index. I'm new to this, so please let me know what I could do to fix this. I'm pasting the two config files which I've used for reference. The one at the top is w…

---

## [Logstash is not loading the filter conf files](https://discuss.elastic.co/t/logstash-is-not-loading-the-filter-conf-files/241699)

<div class="topic-metadata">

**Author:** [@kittu9999](https://discuss.elastic.co/u/kittu9999)\
**Replies:** 7\
**Last updated:** [August 7, 2020, 3:43am UTC](https://discuss.elastic.co/t/logstash-is-not-loading-the-filter-conf-files/241699 "2020-08-07T03:43:55Z")

</div>

HI Team, we have upgrade our ELK stack from V5.0.1 to V6.8.1. Basically we moved to docker containers. we are having an issue with new logstash and the necessary fields are not showing in kibana. we have the same conf…

---

## [Master up but cluster down](https://discuss.elastic.co/t/master-up-but-cluster-down/244078)

<div class="topic-metadata">

**Author:** [@Musfiqur\_Siddique](https://discuss.elastic.co/u/Musfiqur_Siddique)\
**Replies:** 9\
**Last updated:** [August 7, 2020, 2:15am UTC](https://discuss.elastic.co/t/master-up-but-cluster-down/244078 "2020-08-07T02:15:57Z")

</div>

Is it possible that master node is up but ES cluster is down?

---

## [Elastic 7.5.1 S3 plugin version](https://discuss.elastic.co/t/elastic-7-5-1-s3-plugin-version/244075)

<div class="topic-metadata">

**Author:** [@msf127](https://discuss.elastic.co/u/msf127)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 10:19pm UTC](https://discuss.elastic.co/t/elastic-7-5-1-s3-plugin-version/244075 "2020-08-06T22:19:17Z")

</div>

This may seem like a silly question, but if I am running ES 7.5.1, do I want the repository-S3 7.5.1 or 7.5.2 plugin? Do the plugin versions align with the ES version, or should I use the most recent plugin within the E…

---

## [AD User and AD Group in Single Role Mapping](https://discuss.elastic.co/t/ad-user-and-ad-group-in-single-role-mapping/244088)

<div class="topic-metadata">

**Author:** [@Tony\_Chirillo](https://discuss.elastic.co/u/Tony_Chirillo)\
**Replies:** 5\
**Last updated:** [August 6, 2020, 9:32pm UTC](https://discuss.elastic.co/t/ad-user-and-ad-group-in-single-role-mapping/244088 "2020-08-06T21:32:42Z")

</div>

Is it possible to have a role mapping that targets an AD group as well as a single AD user? I am trying the following code from DEV Tools, but can't get it work. I have only been able to get a list of groups to work and…

---

## [How to Visualize Metrics Data in a Kibana Canvas Element with using ESSQL Functions](https://discuss.elastic.co/t/how-to-visualize-metrics-data-in-a-kibana-canvas-element-with-using-essql-functions/244067)

<div class="topic-metadata">

**Author:** [@Bu721](https://discuss.elastic.co/u/Bu721)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 8:16pm UTC](https://discuss.elastic.co/t/how-to-visualize-metrics-data-in-a-kibana-canvas-element-with-using-essql-functions/244067 "2020-08-06T20:16:40Z")

</div>

HI! I am currently working on a metrics visualization in a Kibana Canvas Element. My goal is to calculate the current throughput of the processing process of items in an array and render the returned value into a Canva…

---

## [Kibana bar chart visualisation](https://discuss.elastic.co/t/kibana-bar-chart-visualisation/244061)

<div class="topic-metadata">

**Author:** [@ranu\_shekhar](https://discuss.elastic.co/u/ranu_shekhar)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 8:06pm UTC](https://discuss.elastic.co/t/kibana-bar-chart-visualisation/244061 "2020-08-06T20:06:12Z")

</div>

Kibana bar chart is allowing only five fields to add. I want to add atleast 10 fields. But there is no further option to add more fields.

---

## [Need help with an error on Timelion](https://discuss.elastic.co/t/need-help-with-an-error-on-timelion/242067)

<div class="topic-metadata">

**Author:** [@AlejandroBaj](https://discuss.elastic.co/u/AlejandroBaj)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 7:57pm UTC](https://discuss.elastic.co/t/need-help-with-an-error-on-timelion/242067 "2020-08-06T19:57:44Z")

</div>

Hi all, thank you all for the support. I'm trying to create an specific chart on Timelion that does some simple math to display a percentage. My data index is something similar to this: On our index we have: event…

---

## [Data table standardization](https://discuss.elastic.co/t/data-table-standardization/241704)

<div class="topic-metadata">

**Author:** [@Hugo\_Pires](https://discuss.elastic.co/u/Hugo_Pires)\
**Replies:** 2\
**Last updated:** [August 6, 2020, 7:55pm UTC](https://discuss.elastic.co/t/data-table-standardization/241704 "2020-08-06T19:55:40Z")

</div>

Hello I am trying to build a "proportional bar" chart in order to substitute the usual pie chart. I am using an horizontal stacked bar with Counts by group, but I will need to standardise data table values. Should I use…

---

## [Custom new aggregator](https://discuss.elastic.co/t/custom-new-aggregator/244091)

<div class="topic-metadata">

**Author:** [@Raster](https://discuss.elastic.co/u/Raster)\
**Replies:** 0\
**Last updated:** [August 6, 2020, 7:53pm UTC](https://discuss.elastic.co/t/custom-new-aggregator/244091 "2020-08-06T19:53:32Z")

</div>

Hi, What are the steps to add a custom aggregator into the elastic server? Scenario: need slightly different behaviour for some aggregation metrics. R

---

## [How Kibana visualize network traffic utilization per IP Prefix or CIDR /24, /23 or /22](https://discuss.elastic.co/t/how-kibana-visualize-network-traffic-utilization-per-ip-prefix-or-cidr-24-23-or-22/240929)

<div class="topic-metadata">

**Author:** [@Nsophear](https://discuss.elastic.co/u/Nsophear)\
**Replies:** 2\
**Last updated:** [August 6, 2020, 7:45pm UTC](https://discuss.elastic.co/t/how-kibana-visualize-network-traffic-utilization-per-ip-prefix-or-cidr-24-23-or-22/240929 "2020-08-06T19:45:10Z")

</div>

Hi Elastic team, We are using Kibana Netflow module and seeking your support to advise how to visualize traffic consumption per IP Prefixes (ex. 27.109.112.0/24, 27.109.113.0/24) and Metric as Mbps. Please advise?

---

## [Long URL watcher status\[414\]" in Kibana](https://discuss.elastic.co/t/long-url-watcher-status-414-in-kibana/242550)

<div class="topic-metadata">

**Author:** [@Rajneeshkaur](https://discuss.elastic.co/u/Rajneeshkaur)\
**Replies:** 3\
**Last updated:** [August 6, 2020, 7:36pm UTC](https://discuss.elastic.co/t/long-url-watcher-status-414-in-kibana/242550 "2020-08-06T19:36:21Z")

</div>

Hi All, Looking for some urgent kind suggestion here please for Long URL copy/post URL when deploying watcher. Copy/post URL is too long to implement in watcher so I tried to shorten by enabling " state:storeInSessionS…

---

## [Histogram bar chart (kibana 7.6.2)](https://discuss.elastic.co/t/histogram-bar-chart-kibana-7-6-2/242661)

<div class="topic-metadata">

**Author:** [@ranitg](https://discuss.elastic.co/u/ranitg)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 7:27pm UTC](https://discuss.elastic.co/t/histogram-bar-chart-kibana-7-6-2/242661 "2020-08-06T19:27:15Z")

</div>

Hi, why are there repeating x-axis ticks? why is there so much room between bars? is there a way to have 3 bars with three ticks? or here, these are all consecutive numbers and still there is a space between bars.

---

## [Kibana route proxy](https://discuss.elastic.co/t/kibana-route-proxy/242582)

<div class="topic-metadata">

**Author:** [@tipham](https://discuss.elastic.co/u/tipham)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 7:02pm UTC](https://discuss.elastic.co/t/kibana-route-proxy/242582 "2020-08-06T19:02:12Z")

</div>

I used to have this code to specify proxy for request handler in the legacy Kibana plugin. server.route({ path: '/api/myplugin/{path\*}', method: \['GET', 'POST', 'DELETE'\], handler: { …

---

## [Tsvb display full date on X](https://discuss.elastic.co/t/tsvb-display-full-date-on-x/241654)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 6:52pm UTC](https://discuss.elastic.co/t/tsvb-display-full-date-on-x/241654 "2020-08-06T18:52:09Z")

</div>

I am using timestamp 5 minute interval on pannel options it does not display full date when I do 5 days aggregation. is there a way to display full date rather then just hour:minute

---

## [Unable to make follower index as regular index in elasticsearch CCR setup](https://discuss.elastic.co/t/unable-to-make-follower-index-as-regular-index-in-elasticsearch-ccr-setup/244083)

<div class="topic-metadata">

**Author:** [@lnitin](https://discuss.elastic.co/u/lnitin)\
**Replies:** 0\
**Last updated:** [August 6, 2020, 6:42pm UTC](https://discuss.elastic.co/t/unable-to-make-follower-index-as-regular-index-in-elasticsearch-ccr-setup/244083 "2020-08-06T18:42:21Z")

</div>

Hi I'm unable to stop replication with pause or unfollow on the follower index it gives me error. i tried doing POST /testing-copy/\_ccr/pause\_follow and then POST /testing-copy/\_ccr/unfollow "cannot convert the follo…

---

## [Create aliases for indicies and fields through GUI](https://discuss.elastic.co/t/create-aliases-for-indicies-and-fields-through-gui/242546)

<div class="topic-metadata">

**Author:** [@gbfamas003](https://discuss.elastic.co/u/gbfamas003)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 6:41pm UTC](https://discuss.elastic.co/t/create-aliases-for-indicies-and-fields-through-gui/242546 "2020-08-06T18:41:53Z")

</div>

Hello, I am trying to create an alias for three indices, as well as a field alias for them, so that I can use a control on a dash that can filter the data without resulting in no information being displayed for the indi…

---

## [Kibana goes down if a specific node is down](https://discuss.elastic.co/t/kibana-goes-down-if-a-specific-node-is-down/242526)

<div class="topic-metadata">

**Author:** [@Dimitrios\_Dellios](https://discuss.elastic.co/u/Dimitrios_Dellios)\
**Replies:** 3\
**Last updated:** [August 6, 2020, 6:33pm UTC](https://discuss.elastic.co/t/kibana-goes-down-if-a-specific-node-is-down/242526 "2020-08-06T18:33:59Z")

</div>

Greetings to all, I have a 3 node es-cluster (2 data and master-eligible nodes and 1 dedicated master node). Kibana is installed on the first node, pointing out to the host address that acts as a load balancer. For exa…

---

## [How to create a custome plugin to metric visualization that based on our requriment](https://discuss.elastic.co/t/how-to-create-a-custome-plugin-to-metric-visualization-that-based-on-our-requriment/242457)

<div class="topic-metadata">

**Author:** [@Sandeep505](https://discuss.elastic.co/u/Sandeep505)\
**Replies:** 3\
**Last updated:** [August 6, 2020, 6:28pm UTC](https://discuss.elastic.co/t/how-to-create-a-custome-plugin-to-metric-visualization-that-based-on-our-requriment/242457 "2020-08-06T18:28:28Z")

</div>

hey friends i am new to kibana and elasticsearch we are using 7.5.0 version custom url navigation in metric visualisation to dash board. we try to change the metric visualisation in kibana 7.5.0. our requirement is wh…

---

## [Timeline summary data from table](https://discuss.elastic.co/t/timeline-summary-data-from-table/242452)

<div class="topic-metadata">

**Author:** [@radd](https://discuss.elastic.co/u/radd)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 6:24pm UTC](https://discuss.elastic.co/t/timeline-summary-data-from-table/242452 "2020-08-06T18:24:21Z")

</div>

Hi, Suppose we have summary data in one table, for example: Is there any way to show this already prepared table data (based on count(\*) of records for specific ID for specific DAY) on time line using Kibana, without…

---

## [Task record not created when wait\_for\_completion=false and server under load](https://discuss.elastic.co/t/task-record-not-created-when-wait-for-completion-false-and-server-under-load/244080)

<div class="topic-metadata">

**Author:** [@redec](https://discuss.elastic.co/u/redec)\
**Replies:** 0\
**Last updated:** [August 6, 2020, 6:10pm UTC](https://discuss.elastic.co/t/task-record-not-created-when-wait-for-completion-false-and-server-under-load/244080 "2020-08-06T18:10:31Z")

</div>

Hi all. I'm experiencing a problem where I'm issuing update\_by\_query/delete\_by\_query requests, specifying wait\_for\_completion=false....and I get back a task id as I should, but when I attempt to GET that task I get reso…

---

## [Filter curation, kql, dashboards, codegen: am I doing something stupid?](https://discuss.elastic.co/t/filter-curation-kql-dashboards-codegen-am-i-doing-something-stupid/242065)

<div class="topic-metadata">

**Author:** [@EICAR-STANDARD-ANTIV](https://discuss.elastic.co/u/EICAR-STANDARD-ANTIV)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 6:09pm UTC](https://discuss.elastic.co/t/filter-curation-kql-dashboards-codegen-am-i-doing-something-stupid/242065 "2020-08-06T18:09:12Z")

</div>

Hi, I get the feeling that I am doing something silly here, so hoping someone might have some insight that's been using ELK for longer than I have. I have a deployment of LME from ncsc which is an ELK stack fed by sysm…

---

## [Dockerized kibana not connecting to elasticsearch in prod server](https://discuss.elastic.co/t/dockerized-kibana-not-connecting-to-elasticsearch-in-prod-server/241993)

<div class="topic-metadata">

**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 5:55pm UTC](https://discuss.elastic.co/t/dockerized-kibana-not-connecting-to-elasticsearch-in-prod-server/241993 "2020-08-06T17:55:50Z")

</div>

Hello, I had a docker compose set-up of whole elastic stack and the same is working fine on my dev instance. Once i moved the whole to production server, facing connectivity issues between kibana and elastic search. Pl…

---

## [How to do Mathematical calculation on grok filter output](https://discuss.elastic.co/t/how-to-do-mathematical-calculation-on-grok-filter-output/244063)

<div class="topic-metadata">

**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\
**Replies:** 2\
**Last updated:** [August 6, 2020, 5:52pm UTC](https://discuss.elastic.co/t/how-to-do-mathematical-calculation-on-grok-filter-output/244063 "2020-08-06T17:52:55Z")

</div>

My Input file looks like below. MemoryTotal: 100831888 kB MemoryFree: 1212388 kB MemoryAvailable: 49997588 kB I am filtering the values like "MemFree:\\s+%{NUMBER:mem\_free}","MemTotal:\\s+%{NUMBER:mem\_tot…

---

## [\[DEV-TOOLS\]\[6.8.10\] DELETE /\_security/api\_key Error 400 request body is required](https://discuss.elastic.co/t/dev-tools-6-8-10-delete-security-api-key-error-400-request-body-is-required/241577)

<div class="topic-metadata">

**Author:** [@Agzem](https://discuss.elastic.co/u/Agzem)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 5:41pm UTC](https://discuss.elastic.co/t/dev-tools-6-8-10-delete-security-api-key-error-400-request-body-is-required/241577 "2020-08-06T17:41:10Z")

</div>

I have elastic cloud service version 6.8.10 and I currently have an api-key that I want to invalidate through dev tools, but when I made the call, it responsed as below snippet. Request DELETE /\_security/api\_key { "…

---

## [Kibana: Map: How to set the default Latitude, Longitude and zoom factor?](https://discuss.elastic.co/t/kibana-map-how-to-set-the-default-latitude-longitude-and-zoom-factor/243980)

<div class="topic-metadata">

**Author:** [@Hung\_M\_Le](https://discuss.elastic.co/u/Hung_M_Le)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 5:31pm UTC](https://discuss.elastic.co/t/kibana-map-how-to-set-the-default-latitude-longitude-and-zoom-factor/243980 "2020-08-06T17:31:03Z")

</div>

Hi I would like to find out if there is a way to set the current map : Latitude, Longitude and Zoom factor based on the ingested data. I have created a map to map all the Geospatial field on the map; however, I find th…

---

## [Writing Custom Plugins](https://discuss.elastic.co/t/writing-custom-plugins/241938)

<div class="topic-metadata">

**Author:** [@tinhn](https://discuss.elastic.co/u/tinhn)\
**Replies:** 1\
**Last updated:** [August 6, 2020, 5:28pm UTC](https://discuss.elastic.co/t/writing-custom-plugins/241938 "2020-08-06T17:28:14Z")

</div>

Hello, I'm currently developing a custom plugin for Kibana 7.8.0. I've followed the steps to generate a sample plugin. It successfully shows up on my kibana instance built from source. When I try to add this plugin to …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1880)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1882)
