# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1957

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1958

---

## [Monitoring multiple ElasticSearch Clusters for single kibana](https://discuss.elastic.co/t/monitoring-multiple-elasticsearch-clusters-for-single-kibana/239420)

<div class="topic-metadata">

**Author:** [@3c3m](https://discuss.elastic.co/u/3c3m)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 10:50pm UTC](https://discuss.elastic.co/t/monitoring-multiple-elasticsearch-clusters-for-single-kibana/239420 "2020-07-01T22:50:34Z")

</div>

Hi, In a scenario, I have 2 different clusters. Each clusters has 2 masters and 3 data nodes with 7.x Elastic version. How to I using single kibana to monitor this multiple clusters? Thanks, Ecem

---

## [\[New Visualization Plugin\] Kbn\_Aframe](https://discuss.elastic.co/t/new-visualization-plugin-kbn-aframe/239274)

<div class="topic-metadata">

**Author:** [@Camichan](https://discuss.elastic.co/u/Camichan)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 10:32pm UTC](https://discuss.elastic.co/t/new-visualization-plugin-kbn-aframe/239274 "2020-07-01T22:32:13Z")

</div>

Hi there, I'm working on creating a visualizations plugin for Kibana and I'm looking for people to test it or that may interest you. This project is called KBN\_AFRAME and allows to create VR Graphs visualizations withi…

---

## [Jolokia returns value list but not showing correctly on kibana](https://discuss.elastic.co/t/jolokia-returns-value-list-but-not-showing-correctly-on-kibana/239352)

<div class="topic-metadata">

**Author:** [@ronjonsilver](https://discuss.elastic.co/u/ronjonsilver)\
**Replies:** 7\
**Last updated:** [July 1, 2020, 10:00pm UTC](https://discuss.elastic.co/t/jolokia-returns-value-list-but-not-showing-correctly-on-kibana/239352 "2020-07-01T22:00:01Z")

</div>

Hello, I have been battling with this issue for few days now and I would like to get some opinions on the best approach to this problem. I am using metricbeat with http module to fetch a list of Health and Status from a…

---

## [Any plans to upgrade the Http Client to 5.x on the Java Rest Client?](https://discuss.elastic.co/t/any-plans-to-upgrade-the-http-client-to-5-x-on-the-java-rest-client/239540)

<div class="topic-metadata">

**Author:** [@Aquilino\_Viveiros](https://discuss.elastic.co/u/Aquilino_Viveiros)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 7:41pm UTC](https://discuss.elastic.co/t/any-plans-to-upgrade-the-http-client-to-5-x-on-the-java-rest-client/239540 "2020-07-01T19:41:34Z")

</div>

The RestClient holds a reference to a CloseableHttpAsyncClient which under version 4.x does not support retry mechanism. Any plans to upgrade the rest client to use Http Client 5.x? The new version seems to support this. …

---

## [Create Region Map Visualization on Kibana with only Iso Code](https://discuss.elastic.co/t/create-region-map-visualization-on-kibana-with-only-iso-code/239365)

<div class="topic-metadata">

**Author:** [@Fernando1](https://discuss.elastic.co/u/Fernando1)\
**Replies:** 8\
**Last updated:** [July 1, 2020, 8:40pm UTC](https://discuss.elastic.co/t/create-region-map-visualization-on-kibana-with-only-iso-code/239365 "2020-07-01T20:40:08Z")

</div>

Hello!! How is going? I'm trying to build a Map visualization here in kibana. My data only has the iso 2 letters abbreviation code, and I want to do a "region" map, without points, because our data granularity doesn't…

---

## [Could not locate that index-pattern-field (id: winlog.login.id)](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-winlog-login-id/239543)

<div class="topic-metadata">

**Author:** [@minorsatellite](https://discuss.elastic.co/u/minorsatellite)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 8:22pm UTC](https://discuss.elastic.co/t/could-not-locate-that-index-pattern-field-id-winlog-login-id/239543 "2020-07-01T20:22:30Z")

</div>

I am trying to add pre-built Winlogbeat visualizations to my new dashboard but I am encountering errors when events are processed by the Windows Security module. The error is: "Could not locate that index-pattern-field (…

---

## [Custom Similarity Not Respected In Percolate Query](https://discuss.elastic.co/t/custom-similarity-not-respected-in-percolate-query/239541)

<div class="topic-metadata">

**Author:** [@vp\_tech](https://discuss.elastic.co/u/vp_tech)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 8:06pm UTC](https://discuss.elastic.co/t/custom-similarity-not-respected-in-percolate-query/239541 "2020-07-01T20:06:07Z")

</div>

I have a percolation index with a custom similarity (to ignore idf) and a mapping to use this custom similarity: { "my-index": { "settings": { "index": { "similarity": { "idfless": { …

---

## [Watcher : Email Action : How to use attributes with special characters in the name](https://discuss.elastic.co/t/watcher-email-action-how-to-use-attributes-with-special-characters-in-the-name/239532)

<div class="topic-metadata">

**Author:** [@Lalit\_Negi](https://discuss.elastic.co/u/Lalit_Negi)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 7:02pm UTC](https://discuss.elastic.co/t/watcher-email-action-how-to-use-attributes-with-special-characters-in-the-name/239532 "2020-07-01T19:02:03Z")

</div>

I have a query result where the source has some attributes with speical chars in name ctx.payload.hits.hits\[0\].\_source\['@msg'\] and I want to send these attributes in a watcher email action. however these kind of attr…

---

## [OIDC based user level authorization without Kibana](https://discuss.elastic.co/t/oidc-based-user-level-authorization-without-kibana/239530)

<div class="topic-metadata">

**Author:** [@soumendra](https://discuss.elastic.co/u/soumendra)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 6:48pm UTC](https://discuss.elastic.co/t/oidc-based-user-level-authorization-without-kibana/239530 "2020-07-01T18:48:33Z")

</div>

Please help us with the following issue. Current scenario: UI A --\> OIDC provider --\> UI B (SU) --\> Kibana dashboard We have a custom OIDC provider through which users get authenticated in Kibana. In UI B we use Angul…

---

## [Solarwinds dashboards in kibana](https://discuss.elastic.co/t/solarwinds-dashboards-in-kibana/236798)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 6:45pm UTC](https://discuss.elastic.co/t/solarwinds-dashboards-in-kibana/236798 "2020-07-01T18:45:51Z")

</div>

Hi All, Have anybody here achieved integrating solarwinds and created dashboards in kibana? If yes can you share sample of those dashboards... I actually achieved integrating solarwinds into elasticsearch by restapis t…

---

## [Custom label Date Range or Custom date](https://discuss.elastic.co/t/custom-label-date-range-or-custom-date/239181)

<div class="topic-metadata">

**Author:** [@importasapo](https://discuss.elastic.co/u/importasapo)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 6:17pm UTC](https://discuss.elastic.co/t/custom-label-date-range-or-custom-date/239181 "2020-07-01T18:17:04Z")

</div>

there is any way to add a custom label for each Date Range? (Any workaround?) OR Instead of that, any possibility to remove the "@00:00:00" date format of my legend?

---

## [Enable TLS on 6.8.6 for Oauth Integration](https://discuss.elastic.co/t/enable-tls-on-6-8-6-for-oauth-integration/237545)

<div class="topic-metadata">

**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\
**Replies:** 6\
**Last updated:** [July 1, 2020, 5:05pm UTC](https://discuss.elastic.co/t/enable-tls-on-6-8-6-for-oauth-integration/237545 "2020-07-01T17:05:26Z")

</div>

Hi, I need to integrate an ELK cluster running in K8 with keycloak for User Authentication. Seems first i need to enable TLS security for which i have already created the certificates and copied them. Also i have set a…

---

## [Generate Certificates For TLS Encryption for cluster in Kubernetes](https://discuss.elastic.co/t/generate-certificates-for-tls-encryption-for-cluster-in-kubernetes/238577)

<div class="topic-metadata">

**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 5:00pm UTC](https://discuss.elastic.co/t/generate-certificates-for-tls-encryption-for-cluster-in-kubernetes/238577 "2020-07-01T17:00:13Z")

</div>

Hi There, i have a elastic 7.7.1 cluster with following architecture: Ingest nodes - These are kubernetes deployment with a service called elastic-client running on port 9200 Data nodes - These are kubernetes stateful…

---

## [MongoDB-Elasticsearch Integration Via Logstash Infinite Loop](https://discuss.elastic.co/t/mongodb-elasticsearch-integration-via-logstash-infinite-loop/239460)

<div class="topic-metadata">

**Author:** [@leoper](https://discuss.elastic.co/u/leoper)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 4:47pm UTC](https://discuss.elastic.co/t/mongodb-elasticsearch-integration-via-logstash-infinite-loop/239460 "2020-07-01T16:47:36Z")

</div>

Hi everyone. I am trying to make an integration between MongoDB (Version 4.2.7) and Elasticsearch (Version 7.7.0) via Logstash (Version 7.8.0). The goal is to synchronize data from MongoDB to Elasticsearch. The scenar…

---

## [Installing from the APT repository](https://discuss.elastic.co/t/installing-from-the-apt-repository/239391)

<div class="topic-metadata">

**Author:** [@Anthony\_Allen](https://discuss.elastic.co/u/Anthony_Allen)\
**Replies:** 2\
**Last updated:** [July 1, 2020, 4:32pm UTC](https://discuss.elastic.co/t/installing-from-the-apt-repository/239391 "2020-07-01T16:32:14Z")

</div>

I have been unable to install ES 7.8 per the instructions here Steps: wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add - sudo apt-get install apt-transport-https echo "deb https://arti…

---

## [Nodes go out of memory in domino effect](https://discuss.elastic.co/t/nodes-go-out-of-memory-in-domino-effect/239489)

<div class="topic-metadata">

**Author:** [@vurus](https://discuss.elastic.co/u/vurus)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 4:29pm UTC](https://discuss.elastic.co/t/nodes-go-out-of-memory-in-domino-effect/239489 "2020-07-01T16:29:57Z")

</div>

Hi fellas, I got an elasticsearch cluster (6.4.2) with hundreds of monthly indices each of which has a varying size between 500 gigabytes and 1 terabyte consisting of 5 primary and 5 replica shards (default). The quest…

---

## [Extended\_stats with nested buckets](https://discuss.elastic.co/t/extended-stats-with-nested-buckets/239470)

<div class="topic-metadata">

**Author:** [@Camilo\_Salomon](https://discuss.elastic.co/u/Camilo_Salomon)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 11:25am UTC](https://discuss.elastic.co/t/extended-stats-with-nested-buckets/239470 "2020-07-01T11:25:50Z")

</div>

Hi everyone, I'm new to elastic, so this question could be quite trivial for you, but here I go: I'm using kibana\_sample\_data\_ecommerce, which documents have a mapping like this { ... "order\_date" : \<datetime\> "tax…

---

## [Embeddable factory \[embeddableFactoryId = search\] does not exist](https://discuss.elastic.co/t/embeddable-factory-embeddablefactoryid-search-does-not-exist/239270)

<div class="topic-metadata">

**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 3:59pm UTC](https://discuss.elastic.co/t/embeddable-factory-embeddablefactoryid-search-does-not-exist/239270 "2020-07-01T15:59:17Z")

</div>

Hi Team, Recently i have implemented the ELK setup version 7.8 and some times(intermittently) while loading the dashboards (for the search one's) i could see the below error in the dashboards. Can any please help on th…

---

## [Update by query with params](https://discuss.elastic.co/t/update-by-query-with-params/239413)

<div class="topic-metadata">

**Author:** [@AsfK](https://discuss.elastic.co/u/AsfK)\
**Replies:** 2\
**Last updated:** [July 1, 2020, 2:19pm UTC](https://discuss.elastic.co/t/update-by-query-with-params/239413 "2020-07-01T14:19:56Z")

</div>

\[ESK 7.6.2\] We're set country name by phone prefix. if for some reason we hanve't the prefix we're putting "Missing Country Name" string. I built a simple update by query in Kiban dev-tool and it's worked, now I want t…

---

## [Error in logstash date filter in kibana](https://discuss.elastic.co/t/error-in-logstash-date-filter-in-kibana/238872)

<div class="topic-metadata">

**Author:** [@falconpurple](https://discuss.elastic.co/u/falconpurple)\
**Replies:** 1\
**Last updated:** [July 1, 2020, 3:49pm UTC](https://discuss.elastic.co/t/error-in-logstash-date-filter-in-kibana/238872 "2020-07-01T15:49:08Z")

</div>

Hi, I am parsing log file and one of my field is : 2020-06-26 12:56:15.258 A part of conf file in logstash is : grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:logdates}" } } date { matc…

---

## [Multiple Filebeats from multiple sources to multiple pipelines?](https://discuss.elastic.co/t/multiple-filebeats-from-multiple-sources-to-multiple-pipelines/239517)

<div class="topic-metadata">

**Author:** [@Asinus1223](https://discuss.elastic.co/u/Asinus1223)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 3:47pm UTC](https://discuss.elastic.co/t/multiple-filebeats-from-multiple-sources-to-multiple-pipelines/239517 "2020-07-01T15:47:18Z")

</div>

Let me see if I am doing this right. I have two logs from two different servers that I want to process in Logstash then pass on to Elasticsearch. Both files contain different information. I want to use the Filebeats sh…

---

## [Tutorials or webinar links for developing chatbot](https://discuss.elastic.co/t/tutorials-or-webinar-links-for-developing-chatbot/239516)

<div class="topic-metadata">

**Author:** [@Sushant\_Sawant](https://discuss.elastic.co/u/Sushant_Sawant)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 3:44pm UTC](https://discuss.elastic.co/t/tutorials-or-webinar-links-for-developing-chatbot/239516 "2020-07-01T15:44:06Z")

</div>

I have packetbeat and winlogbeat data in elastic search and kibana. Now I have to create the chatbot for querying on the data. If any one know how to create anything like this that would be helpful.

---

## [Keeping same log events once instead of multiple time](https://discuss.elastic.co/t/keeping-same-log-events-once-instead-of-multiple-time/239301)

<div class="topic-metadata">

**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\
**Replies:** 5\
**Last updated:** [July 1, 2020, 3:36pm UTC](https://discuss.elastic.co/t/keeping-same-log-events-once-instead-of-multiple-time/239301 "2020-07-01T15:36:03Z")

</div>

Hello, I have a running ELK stack, and I am collecting the logs from various source using beats and parsing them using Logstash and finally visualizing in Kibana through elasticsearch. It is working fine. I have one que…

---

## [ES ingest pipeline does not working as expected](https://discuss.elastic.co/t/es-ingest-pipeline-does-not-working-as-expected/239513)

<div class="topic-metadata">

**Author:** [@sfenman](https://discuss.elastic.co/u/sfenman)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 3:08pm UTC](https://discuss.elastic.co/t/es-ingest-pipeline-does-not-working-as-expected/239513 "2020-07-01T15:08:40Z")

</div>

Hello, I created an ingest pipeline for my filebeat logs: POST /\_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ { "dissect": { "field": "message", "pattern": "%{\*p1}=…

---

## [Query does not return any information -- Problem with Kibana Query Language](https://discuss.elastic.co/t/query-does-not-return-any-information-problem-with-kibana-query-language/239476)

<div class="topic-metadata">

**Author:** [@cleared\_blue\_sky](https://discuss.elastic.co/u/cleared_blue_sky)\
**Replies:** 2\
**Last updated:** [July 1, 2020, 3:08pm UTC](https://discuss.elastic.co/t/query-does-not-return-any-information-problem-with-kibana-query-language/239476 "2020-07-01T15:08:28Z")

</div>

Hi all, I'm struggling with KQL recently. I have tried so many different styles of queries but I cannot, for some reason, get this query to match logs that do exist. I am trying to match all logs that contain the word …

---

## [Export Kibana dashboard as pmg](https://discuss.elastic.co/t/export-kibana-dashboard-as-pmg/239509)

<div class="topic-metadata">

**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\
**Replies:** 3\
**Last updated:** [July 1, 2020, 3:05pm UTC](https://discuss.elastic.co/t/export-kibana-dashboard-as-pmg/239509 "2020-07-01T15:05:49Z")

</div>

Hello there! I would like to export some of my dashboards as a png file but the only options I see after clicking on "Share" are "\_Embed code" and "permalink"; why? Thank you in advance for your support! PS.: I'm usin…

---

## [Kibana usage monitoring](https://discuss.elastic.co/t/kibana-usage-monitoring/239485)

<div class="topic-metadata">

**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\
**Replies:** 4\
**Last updated:** [July 1, 2020, 3:03pm UTC](https://discuss.elastic.co/t/kibana-usage-monitoring/239485 "2020-07-01T15:03:51Z")

</div>

Hi, Is something exist into Kibana to get users usage ? I mean : Authentication success/failure by users, role and by teams Dashboard consulted/created/modified Best regards, Thomas R.

---

## [Watcher action returns some payload, but not others](https://discuss.elastic.co/t/watcher-action-returns-some-payload-but-not-others/236365)

<div class="topic-metadata">

**Author:** [@ptamba](https://discuss.elastic.co/u/ptamba)\
**Replies:** 2\
**Last updated:** [July 1, 2020, 2:57pm UTC](https://discuss.elastic.co/t/watcher-action-returns-some-payload-but-not-others/236365 "2020-07-01T14:57:59Z")

</div>

Hi , I have the following watcher action : "send\_email": { "transform": { "script": { "source": """ def documents = ctx.payload.hits.hits.stream(…

---

## [Kibana - Syslog and Winlogbeat are not visible](https://discuss.elastic.co/t/kibana-syslog-and-winlogbeat-are-not-visible/239457)

<div class="topic-metadata">

**Author:** [@Phillip](https://discuss.elastic.co/u/Phillip)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 10:26am UTC](https://discuss.elastic.co/t/kibana-syslog-and-winlogbeat-are-not-visible/239457 "2020-07-01T10:26:03Z")

</div>

Hey, I configured logstash to get data from beats and syslog like here: input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/logstash.crt" ssl\_key =\> "/etc/pki/tls/private/l…

---

## [Nest Bulk Delete With Retry and Size Like BulkAllObservable](https://discuss.elastic.co/t/nest-bulk-delete-with-retry-and-size-like-bulkallobservable/239508)

<div class="topic-metadata">

**Author:** [@dary](https://discuss.elastic.co/u/dary)\
**Replies:** 0\
**Last updated:** [July 1, 2020, 2:47pm UTC](https://discuss.elastic.co/t/nest-bulk-delete-with-retry-and-size-like-bulkallobservable/239508 "2020-07-01T14:47:14Z")

</div>

Hello, I am trying to delete using the bulk api and DeleteMany method (using NEST) something like this var response = \_elasticClient.Bulk(b =\> b .DeleteMany(products) but i want to add retry and size to divide in chun…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1956)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1958)
