# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1886

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1887

---

## [How to add buttons on kibana visualization similar to dropdown in Controls](https://discuss.elastic.co/t/how-to-add-buttons-on-kibana-visualization-similar-to-dropdown-in-controls/243672)

<div class="topic-metadata">

**Author:** [@HariniGajendran](https://discuss.elastic.co/u/HariniGajendran)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 11:45am UTC](https://discuss.elastic.co/t/how-to-add-buttons-on-kibana-visualization-similar-to-dropdown-in-controls/243672 "2020-08-05T11:45:37Z")

</div>

Hi, I have a dashboard with dropdown, listing the logs and upon selection it would display the dashboard based on the selection. But instead of dropdown i would want a display button clicking on which should display the…

---

## [Timezone issue in ingesting a document](https://discuss.elastic.co/t/timezone-issue-in-ingesting-a-document/243843)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 9:53am UTC](https://discuss.elastic.co/t/timezone-issue-in-ingesting-a-document/243843 "2020-08-05T09:53:30Z")

</div>

Hi All, I am ingesting documents into ELK using logstash http\_poller plugin, there is a static field i have added as "default\_date" and the value for this date field i had mentioned as "01-01-1970 00:00:00" default\_da…

---

## [Logstash Grok JSON error - mapper of different type](https://discuss.elastic.co/t/logstash-grok-json-error-mapper-of-different-type/243840)

<div class="topic-metadata">

**Author:** [@nnikolay](https://discuss.elastic.co/u/nnikolay)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 11:08am UTC](https://discuss.elastic.co/t/logstash-grok-json-error-mapper-of-different-type/243840 "2020-08-05T11:08:55Z")

</div>

I have this log file: \`2020-08-05 09:11:19 INFO-flask.model-{"version": "1.2.1", "time": 0.651745080947876, "output": {...}}\` This is my logstash filter setting \`grok{ match =\> { "message…

---

## [Is dense\_vector field available in AWS Elasticsearch Service?](https://discuss.elastic.co/t/is-dense-vector-field-available-in-aws-elasticsearch-service/243845)

<div class="topic-metadata">

**Author:** [@taichi](https://discuss.elastic.co/u/taichi)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 10:34am UTC](https://discuss.elastic.co/t/is-dense-vector-field-available-in-aws-elasticsearch-service/243845 "2020-08-05T10:34:14Z")

</div>

I would like to use dense\_vector field (https://www.elastic.co/guide/en/elasticsearch/reference/current/dense-vector.html) while it seems to be contained in X-Pack. Is it available in AWS Elasticsearch Service too? P.S…

---

## [Secure browser to kibana](https://discuss.elastic.co/t/secure-browser-to-kibana/243593)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 4\
**Last updated:** [August 5, 2020, 10:07am UTC](https://discuss.elastic.co/t/secure-browser-to-kibana/243593 "2020-08-05T10:07:27Z")

</div>

I'm following this documentation page for securing communications between the browser and kibana. I'm a little confused as the documentation suggests createing a csr while later in the line ( and in kibana.yml) it expect…

---

## [Watcher alert error](https://discuss.elastic.co/t/watcher-alert-error/241311)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 5\
**Last updated:** [August 5, 2020, 10:06am UTC](https://discuss.elastic.co/t/watcher-alert-error/241311 "2020-08-05T10:06:11Z")

</div>

Hello, I want to calculate the ratio of orders/searches per customer number in my erp and send an alert with that info. So i have created an advance alert with the following code: { "trigger": { "schedule": { …

---

## [Metricbeat AWS dashboards fails on cloud.region alias](https://discuss.elastic.co/t/metricbeat-aws-dashboards-fails-on-cloud-region-alias/243841)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 9:46am UTC](https://discuss.elastic.co/t/metricbeat-aws-dashboards-fails-on-cloud-region-alias/243841 "2020-08-05T09:46:57Z")

</div>

Elasticseach 7.8.1, Kibana 7.8.1, Logstash 7.7.x, Metricbeat 7.8.1 and 7.7.1 on an AWS Kubernetes cluster. All dashboards, searches and visualizations have been updated. The metricbeat index template has also been update…

---

## [Vertical Bar - Combine 'Normal' and 'Stacked' view](https://discuss.elastic.co/t/vertical-bar-combine-normal-and-stacked-view/241137)

<div class="topic-metadata">

**Author:** [@Barabossa](https://discuss.elastic.co/u/Barabossa)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 9:36am UTC](https://discuss.elastic.co/t/vertical-bar-combine-normal-and-stacked-view/241137 "2020-08-05T09:36:51Z")

</div>

Hi, I'm working for a company that has a lot of mail servers. These mailservers send mail in packages (which we call 'slots'). Each single email gets logged as a record, and has a slot value. In addition, each email re…

---

## [Plugin to modify "get" and "search" action results](https://discuss.elastic.co/t/plugin-to-modify-get-and-search-action-results/243837)

<div class="topic-metadata">

**Author:** [@zyx\_0312](https://discuss.elastic.co/u/zyx_0312)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 9:33am UTC](https://discuss.elastic.co/t/plugin-to-modify-get-and-search-action-results/243837 "2020-08-05T09:33:28Z")

</div>

I want to implement a elasticsearch plugin, which could modify the get and search action results, such as modify the field's value of docs, then return the modified docs result to users. I want to know which kind of plu…

---

## [Logstash dosen't support avro date type?](https://discuss.elastic.co/t/logstash-dosent-support-avro-date-type/243836)

<div class="topic-metadata">

**Author:** [@hwi](https://discuss.elastic.co/u/hwi)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 9:30am UTC](https://discuss.elastic.co/t/logstash-dosent-support-avro-date-type/243836 "2020-08-05T09:30:57Z")

</div>

I use logstash to stream data from kafka topic to elasticsearch index. (Input plugin kafka, output plugin elasticsearch) logstash version is 7.8 kafka topic schema include date type. example) name startDate type int…

---

## [Using ILM rollover with multiple indices](https://discuss.elastic.co/t/using-ilm-rollover-with-multiple-indices/243443)

<div class="topic-metadata">

**Author:** [@SaigyoujiYuyuko233](https://discuss.elastic.co/u/SaigyoujiYuyuko233)\
**Replies:** 5\
**Last updated:** [August 5, 2020, 9:26am UTC](https://discuss.elastic.co/t/using-ilm-rollover-with-multiple-indices/243443 "2020-08-05T09:26:06Z")

</div>

Enviroment ES: 7.8.1 Kibana: 7.8.1 Run in docker: 19.03.8, build afacb8b Using docker image: docker.elastic.co/elasticsearch/elasticsearch:7.8.1 Hi everybody, I'm having a hard time with using ILM rollover with mult…

---

## [Issue with strating Elastic Search on Ples Onyx with CentOS 7](https://discuss.elastic.co/t/issue-with-strating-elastic-search-on-ples-onyx-with-centos-7/243761)

<div class="topic-metadata">

**Author:** [@kootjoo](https://discuss.elastic.co/u/kootjoo)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 8:43am UTC](https://discuss.elastic.co/t/issue-with-strating-elastic-search-on-ples-onyx-with-centos-7/243761 "2020-08-05T08:43:22Z")

</div>

Hi, I am struggling to get things working on my Plesk server. I have succesfully installed Elasticsearch and see this error in te log: \[2020-08-04T19:38:31,728\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[www.…

---

## [Auditbeat and reverse shells. Help required!](https://discuss.elastic.co/t/auditbeat-and-reverse-shells-help-required/243824)

<div class="topic-metadata">

**Author:** [@Simon\_Moller](https://discuss.elastic.co/u/Simon_Moller)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 8:22am UTC](https://discuss.elastic.co/t/auditbeat-and-reverse-shells-help-required/243824 "2020-08-05T08:22:52Z")

</div>

I am having troubles working with Auditbeat under certain conditions. My team is using Auditbeat and Elasticsearch to monitor students while they are performing a project that involves hacking networks that are set up on…

---

## [Will my LDAP integration stop working when my Platinum license expires and enters in degraded mode?](https://discuss.elastic.co/t/will-my-ldap-integration-stop-working-when-my-platinum-license-expires-and-enters-in-degraded-mode/238940)

<div class="topic-metadata">

**Author:** [@alexmm](https://discuss.elastic.co/u/alexmm)\
**Replies:** 6\
**Last updated:** [August 5, 2020, 8:03am UTC](https://discuss.elastic.co/t/will-my-ldap-integration-stop-working-when-my-platinum-license-expires-and-enters-in-degraded-mode/238940 "2020-08-05T08:03:58Z")

</div>

In in this topic I asked about if my LDAP integration would stop working if my Platinum license expires. I got a good answer but actually, I think it was not what I expected. The answer was more about what would happen…

---

## [Why can't the mapping field be deleted](https://discuss.elastic.co/t/why-cant-the-mapping-field-be-deleted/243685)

<div class="topic-metadata">

**Author:** [@RunAsOnehhb](https://discuss.elastic.co/u/RunAsOnehhb)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 7:54am UTC](https://discuss.elastic.co/t/why-cant-the-mapping-field-be-deleted/243685 "2020-08-05T07:54:25Z")

</div>

Why can't the mapping field be deleted？

---

## [Performance problem in Percolator fetch phase classes](https://discuss.elastic.co/t/performance-problem-in-percolator-fetch-phase-classes/243748)

<div class="topic-metadata">

**Author:** [@apeteri](https://discuss.elastic.co/u/apeteri)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 7:46am UTC](https://discuss.elastic.co/t/performance-problem-in-percolator-fetch-phase-classes/243748 "2020-08-05T07:46:49Z")

</div>

Hi, We are using Elasticsearch 7.8.0 and seem to be encountering a performance issue that we traced back to the method PercolatorHighlightSubFetchPhase#locatePercolatorQuery. Lucene 8.6 introduced a change to QueryVisit…

---

## [Cat shards API param "local" does not apply](https://discuss.elastic.co/t/cat-shards-api-param-local-does-not-apply/243679)

<div class="topic-metadata">

**Author:** [@CHU\_XU](https://discuss.elastic.co/u/CHU_XU)\
**Replies:** 3\
**Last updated:** [August 5, 2020, 7:44am UTC](https://discuss.elastic.co/t/cat-shards-api-param-local-does-not-apply/243679 "2020-08-05T07:44:25Z")

</div>

Hi there, I'm using the api \_cat/shards to monitor my shards' info. Since I may have a large cluster and many shards, I would like to collect the info from each node instead of collecting them by one call. As described…

---

## [Specifies the date format](https://discuss.elastic.co/t/specifies-the-date-format/243178)

<div class="topic-metadata">

**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\
**Replies:** 9\
**Last updated:** [August 5, 2020, 7:33am UTC](https://discuss.elastic.co/t/specifies-the-date-format/243178 "2020-08-05T07:33:07Z")

</div>

A timestamp that specifies the format 07/20/20 00:00:08 match =\> \["timestamp","mm/dd/yy HH:mm:ss"\] after test result grokparsefailure how to slove?

---

## [Change color of axis from grey to black](https://discuss.elastic.co/t/change-color-of-axis-from-grey-to-black/243729)

<div class="topic-metadata">

**Author:** [@MariemHAMDI](https://discuss.elastic.co/u/MariemHAMDI)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 7:20am UTC](https://discuss.elastic.co/t/change-color-of-axis-from-grey-to-black/243729 "2020-08-05T07:20:34Z")

</div>

How can i change the color of vertical and horizontal axis from grey to black in a visualization .

---

## [Unable to send logs to remote Logstash server. working fine in localhost](https://discuss.elastic.co/t/unable-to-send-logs-to-remote-logstash-server-working-fine-in-localhost/243628)

<div class="topic-metadata">

**Author:** [@mycloud2040](https://discuss.elastic.co/u/mycloud2040)\
**Replies:** 2\
**Last updated:** [August 5, 2020, 6:42am UTC](https://discuss.elastic.co/t/unable-to-send-logs-to-remote-logstash-server-working-fine-in-localhost/243628 "2020-08-05T06:42:23Z")

</div>

Hi, i am new to Elasticstack i configure filebeat in client machine, to send logs to logstash- it is not sending logs to logstash server. Here when I locally send logs to logstash server using filebeat its working fin…

---

## [7.0 Upgrade Assistant buggy? reindex button in Kibana does nothing](https://discuss.elastic.co/t/7-0-upgrade-assistant-buggy-reindex-button-in-kibana-does-nothing/243805)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 6:35am UTC](https://discuss.elastic.co/t/7-0-upgrade-assistant-buggy-reindex-button-in-kibana-does-nothing/243805 "2020-08-05T06:35:53Z")

</div>

Hi there, I am on version 6.8.6 and doing my first reindex of a non system index. It is a small one (150MB) and version 5.6.11. After pushing the reindex button (I know it works in the background) nothing happens afterw…

---

## [How to have the aggregate query in multi match query](https://discuss.elastic.co/t/how-to-have-the-aggregate-query-in-multi-match-query/243810)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 6:29am UTC](https://discuss.elastic.co/t/how-to-have-the-aggregate-query-in-multi-match-query/243810 "2020-08-05T06:29:03Z")

</div>

How to have the aggregate query in a multi match query ? I would like to have few facets returned as part of the search. I am looking for the aggregate functionality in multi\_match query which supports search in many f…

---

## [Create scripted field count total](https://discuss.elastic.co/t/create-scripted-field-count-total/241573)

<div class="topic-metadata">

**Author:** [@whyptrap](https://discuss.elastic.co/u/whyptrap)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 6:22am UTC](https://discuss.elastic.co/t/create-scripted-field-count-total/241573 "2020-08-05T06:22:47Z")

</div>

I have field called "My Name", there's available same value for example : \[1\] Smith \[2\] Jason \[3\] Pedro \[4\] Rossi \[5\] James \[6\] Smith \[7\] Jason \[8\] James In kibana (scripted field), how can i count the same docu…

---

## [How to change logo in Kibana 7.8.0](https://discuss.elastic.co/t/how-to-change-logo-in-kibana-7-8-0/242412)

<div class="topic-metadata">

**Author:** [@yrtqz](https://discuss.elastic.co/u/yrtqz)\
**Replies:** 8\
**Last updated:** [August 5, 2020, 5:15am UTC](https://discuss.elastic.co/t/how-to-change-logo-in-kibana-7-8-0/242412 "2020-08-05T05:15:12Z")

</div>

I've found multiple posts about how to do this in earlier versions, but none of the solutions i saw worked on kibana 7.8.0. What can i do to change the loading screen elastic logo and the kibana logo in the sidebar?

---

## [Logstash grok pattern validator](https://discuss.elastic.co/t/logstash-grok-pattern-validator/243807)

<div class="topic-metadata">

**Author:** [@ash2](https://discuss.elastic.co/u/ash2)\
**Replies:** 0\
**Last updated:** [August 5, 2020, 4:52am UTC](https://discuss.elastic.co/t/logstash-grok-pattern-validator/243807 "2020-08-05T04:52:27Z")

</div>

I am working on an application in which I am taking grok pattern as input and want to validate if the pattern is correct or not. Is there any library or any other way to validate the grok pattern in Java Spring backend?

---

## [Elasticsearch and Snapshots?](https://discuss.elastic.co/t/elasticsearch-and-snapshots/243717)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 5\
**Last updated:** [August 5, 2020, 4:44am UTC](https://discuss.elastic.co/t/elasticsearch-and-snapshots/243717 "2020-08-05T04:44:11Z")

</div>

Hi, I have very quick information about making snapshots at Elasticsearch. The documentation is here: https://www.elastic.co/guide/en/elasticsearch/reference/current/snapshots-register-repository.html However, I have…

---

## [Elastic cluster metrics](https://discuss.elastic.co/t/elastic-cluster-metrics/241259)

<div class="topic-metadata">

**Author:** [@ash2](https://discuss.elastic.co/u/ash2)\
**Replies:** 10\
**Last updated:** [August 5, 2020, 4:43am UTC](https://discuss.elastic.co/t/elastic-cluster-metrics/241259 "2020-08-05T04:43:00Z")

</div>

I want to create the dashboards in my application showing the elastic cluster data and metrics as it is shown in Kibana app monitoring. For getting most of the data I can use cluster health apis. But I not getting much o…

---

## [Enabling xpack causes errors](https://discuss.elastic.co/t/enabling-xpack-causes-errors/243601)

<div class="topic-metadata">

**Author:** [@jLemmings](https://discuss.elastic.co/u/jLemmings)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 4:35am UTC](https://discuss.elastic.co/t/enabling-xpack-causes-errors/243601 "2020-08-05T04:35:32Z")

</div>

Hello I am trying to set up a simple ELK stack using docker. While I disable xpack security it starts fine and I can access the Kibana interface. If xpack security is enabled I get an "Kibana server is not ready yet" er…

---

## [ES 7.8 X-Pack not returning whole cert chain root ca, intermediate and server cert](https://discuss.elastic.co/t/es-7-8-x-pack-not-returning-whole-cert-chain-root-ca-intermediate-and-server-cert/243475)

<div class="topic-metadata">

**Author:** [@mankuuuuu](https://discuss.elastic.co/u/mankuuuuu)\
**Replies:** 4\
**Last updated:** [August 5, 2020, 4:27am UTC](https://discuss.elastic.co/t/es-7-8-x-pack-not-returning-whole-cert-chain-root-ca-intermediate-and-server-cert/243475 "2020-08-05T04:27:56Z")

</div>

I am trying to enable TLS on the elasticsearch http layer but not able to get all the certificates in the certificate chain. Settings - xpack.security.enabled: true xpack.security.http.ssl.enabled: true xpa…

---

## [Want to aggregate and search multiple route\_path as same function](https://discuss.elastic.co/t/want-to-aggregate-and-search-multiple-route-path-as-same-function/243804)

<div class="topic-metadata">

**Author:** [@hanase](https://discuss.elastic.co/u/hanase)\
**Replies:** 1\
**Last updated:** [August 5, 2020, 3:42am UTC](https://discuss.elastic.co/t/want-to-aggregate-and-search-multiple-route-path-as-same-function/243804 "2020-08-05T03:42:34Z")

</div>

Hi, here is my DSL, GET access-2020.07.29/\_search { "query": { "match": { "route": "PIDInterface" } }, "aggs": { "route\_path": { "terms": { "field": "route\_path.keyword", "…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1885)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1887)
