# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=196

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 197

---

## [Can we create dashboard specific to individual user?](https://discuss.elastic.co/t/can-we-create-dashboard-specific-to-individual-user/363432)

<div class="topic-metadata">

**Author:** [@tejashree](https://discuss.elastic.co/u/tejashree)\
**Replies:** 2\
**Last updated:** [July 29, 2024, 11:08pm UTC](https://discuss.elastic.co/t/can-we-create-dashboard-specific-to-individual-user/363432 "2024-07-29T23:08:39Z")

</div>

Is it possible to give access permissions specific to only users, i want to try allow users to create their own dashboards and allow access only to them. Can anyone help me with this?

---

## [Check Remote Cluster Health from Kibana for a Cluster where CCS is enabled](https://discuss.elastic.co/t/check-remote-cluster-health-from-kibana-for-a-cluster-where-ccs-is-enabled/364014)

<div class="topic-metadata">

**Author:** [@Albatross](https://discuss.elastic.co/u/Albatross)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 11:05pm UTC](https://discuss.elastic.co/t/check-remote-cluster-health-from-kibana-for-a-cluster-where-ccs-is-enabled/364014 "2024-07-29T23:05:33Z")

</div>

We have Cross Cluster Search enabled and kibana connected to one of the clusters. I am unable to run a health API to check health of a diff remote cluster. Ex : GET /remote\_cluster2:\_cluster/state?pretty=true I get the…

---

## [Channel closed while still aggregating message](https://discuss.elastic.co/t/channel-closed-while-still-aggregating-message/363295)

<div class="topic-metadata">

**Author:** [@dsagent](https://discuss.elastic.co/u/dsagent)\
**Replies:** 3\
**Last updated:** [July 29, 2024, 9:54pm UTC](https://discuss.elastic.co/t/channel-closed-while-still-aggregating-message/363295 "2024-07-29T21:54:08Z")

</div>

Hello I have a project related to the elasticsearch database and I want to upload data to the database, but I am facing this problem: \[WARN\]\[o.e.h.AbstractHttpServerTransport\]\[node-1\] caught exception while handling cl…

---

## [Kibana(Group By Date, Get column with not '-' values](https://discuss.elastic.co/t/kibana-group-by-date-get-column-with-not-values/363716)

<div class="topic-metadata">

**Author:** [@apoorvleo](https://discuss.elastic.co/u/apoorvleo)\
**Replies:** 1\
**Last updated:** [July 29, 2024, 9:34pm UTC](https://discuss.elastic.co/t/kibana-group-by-date-get-column-with-not-values/363716 "2024-07-29T21:34:42Z")

</div>

Hi Team, I have a row let's say ProcessId, TimeStamp, isvcTransactionId, instanceId -\> a, b, c, null -\> a, b, null, d -\> a, b, null, - -\> a, b, null, e I want to create a single row in visualization or aggregation…

---

## [Kibana server is not ready yet (Docker)](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-docker/363908)

<div class="topic-metadata">

**Author:** [@g0nz0](https://discuss.elastic.co/u/g0nz0)\
**Replies:** 1\
**Last updated:** [July 29, 2024, 9:04pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-docker/363908 "2024-07-29T21:04:13Z")

</div>

Hello, I've been following this guide below and got it working at work yesterday with little problems. Today I built a new Ubuntu VM in a lab to build another instance of it, but Kibana just shows as starting and I c…

---

## [Data formatter template in TSVB](https://discuss.elastic.co/t/data-formatter-template-in-tsvb/361862)

<div class="topic-metadata">

**Author:** [@Mark\_Sarto](https://discuss.elastic.co/u/Mark_Sarto)\
**Replies:** 1\
**Last updated:** [July 29, 2024, 8:45pm UTC](https://discuss.elastic.co/t/data-formatter-template-in-tsvb/361862 "2024-07-29T20:45:41Z")

</div>

Hi I want to manipulate the template But i don't how to get it work the way I want it to work . either duration or number I want to use something like this : {{value | divide:60 | round}} hours {{value | remainder:60}}…

---

## [Discrepancy in Cost Data Between Billing API and Elastic Cloud Console](https://discuss.elastic.co/t/discrepancy-in-cost-data-between-billing-api-and-elastic-cloud-console/363656)

<div class="topic-metadata">

**Author:** [@ampdd235](https://discuss.elastic.co/u/ampdd235)\
**Replies:** 2\
**Last updated:** [July 29, 2024, 5:43pm UTC](https://discuss.elastic.co/t/discrepancy-in-cost-data-between-billing-api-and-elastic-cloud-console/363656 "2024-07-29T17:43:42Z")

</div>

Hi Elastic Community, I'm trying to understand how the Billing Endpoint works in Elastic Cloud. Specifically, I'm using the /costs/\<ORG\_ID\>/items endpoint to retrieve cost data, but the totals I'm getting from the API d…

---

## [Logs from DataFlow is streaming but not showing in Kibana](https://discuss.elastic.co/t/logs-from-dataflow-is-streaming-but-not-showing-in-kibana/364001)

<div class="topic-metadata">

**Author:** [@apsh](https://discuss.elastic.co/u/apsh)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 4:34pm UTC](https://discuss.elastic.co/t/logs-from-dataflow-is-streaming-but-not-showing-in-kibana/364001 "2024-07-29T16:34:35Z")

</div>

Certainly! Here’s an improved version of your message: Hello, I am currently using the provided documentation to create a Dataflow job that pulls our application logs into Pub/Sub. Here is the process I followed: Cr…

---

## [Read\_timeout error for url content extraction using App Search API](https://discuss.elastic.co/t/read-timeout-error-for-url-content-extraction-using-app-search-api/363859)

<div class="topic-metadata">

**Author:** [@Abhishek\_Choudhary](https://discuss.elastic.co/u/Abhishek_Choudhary)\
**Replies:** 1\
**Last updated:** [July 29, 2024, 4:22pm UTC](https://discuss.elastic.co/t/read-timeout-error-for-url-content-extraction-using-app-search-api/363859 "2024-07-29T16:22:56Z")

</div>

Hi, I'm attempting to use the App Search API for content extraction via the endpoint ${ENTERPRISE\_SEARCH\_BASE\_URL}/api/as/v1/engines/${ENGINE\_NAME}/crawler/extract\_url. However, I'm encountering a read\_timeout error wit…

---

## [ElasticSearch version 8, functionScore with TermsQueryField](https://discuss.elastic.co/t/elasticsearch-version-8-functionscore-with-termsqueryfield/363925)

<div class="topic-metadata">

**Author:** [@AMElastic](https://discuss.elastic.co/u/AMElastic)\
**Replies:** 2\
**Last updated:** [July 29, 2024, 3:28pm UTC](https://discuss.elastic.co/t/elasticsearch-version-8-functionscore-with-termsqueryfield/363925 "2024-07-29T15:28:39Z")

</div>

Hi, I am trying to use FunctionScore in ElasticsearchClient version 8. This is the code that I am using. var response = await client.SearchAsync\<Model\>(s =\> s.Query(q =\> q.FunctionScore(fs =\> …

---

## [ELK Security](https://discuss.elastic.co/t/elk-security/363722)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 4\
**Last updated:** [July 29, 2024, 3:07pm UTC](https://discuss.elastic.co/t/elk-security/363722 "2024-07-29T15:07:42Z")

</div>

Hi Team, We just upgraded the stack version on 8.14.0 and the vulnerability scan has picked up CVE-2024-27980, CVE-2024-22020, CVE-2024-36137, CVE-2024-22018 and CVE-2024-37372. Can you please let me know how it impacts…

---

## [Couldn't find any Elasticsearch data](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/363992)

<div class="topic-metadata">

**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 1:44pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/363992 "2024-07-29T13:44:23Z")

</div>

Hi all, Dockerfile -\> FROM node:20 WORKDIR /src COPY package\*.json ./ RUN npm install ADD . /src logger.js file -\> const winston = require('winston'); const logger = winston.createLogger({ format: winston.forma…

---

## [How to enable and disable slow logs in Elasticsearch](https://discuss.elastic.co/t/how-to-enable-and-disable-slow-logs-in-elasticsearch/363978)

<div class="topic-metadata">

**Author:** [@Test\_Test3](https://discuss.elastic.co/u/Test_Test3)\
**Replies:** 2\
**Last updated:** [July 29, 2024, 1:40pm UTC](https://discuss.elastic.co/t/how-to-enable-and-disable-slow-logs-in-elasticsearch/363978 "2024-07-29T13:40:39Z")

</div>

Using Elastic 8.10.4 version. How to enable slow logs for existing indices and future indices? Also how to skip the system level indices? If i need to disable slow logs after testing, how to disable it?

---

## [Migrating settings and dashboards from an offline instance (Kibana/Metricbeat/Winlogbeat)](https://discuss.elastic.co/t/migrating-settings-and-dashboards-from-an-offline-instance-kibana-metricbeat-winlogbeat/363948)

<div class="topic-metadata">

**Author:** [@Shaakxuur](https://discuss.elastic.co/u/Shaakxuur)\
**Replies:** 3\
**Last updated:** [July 29, 2024, 1:33pm UTC](https://discuss.elastic.co/t/migrating-settings-and-dashboards-from-an-offline-instance-kibana-metricbeat-winlogbeat/363948 "2024-07-29T13:33:01Z")

</div>

Hi My Test single Node Cluster is offline due a data corruption. (Shard Allocation Failed) However, I would like to export the created dashboards and settings from Kibana (and if possible Metricbeat and WInlogbeat) so…

---

## [Better way to remove nested objects to simplify the index](https://discuss.elastic.co/t/better-way-to-remove-nested-objects-to-simplify-the-index/363985)

<div class="topic-metadata">

**Author:** [@minionback](https://discuss.elastic.co/u/minionback)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 12:47pm UTC](https://discuss.elastic.co/t/better-way-to-remove-nested-objects-to-simplify-the-index/363985 "2024-07-29T12:47:17Z")

</div>

Hey there! I have some performance problems with a relatively small index (20,576,135 docs). I believe that the issue is due to the way we defined the mapping. Here is the mapping: properties: i…

---

## [How to scale Filebeat output in sync mode](https://discuss.elastic.co/t/how-to-scale-filebeat-output-in-sync-mode/363834)

<div class="topic-metadata">

**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\
**Replies:** 2\
**Last updated:** [July 29, 2024, 11:42am UTC](https://discuss.elastic.co/t/how-to-scale-filebeat-output-in-sync-mode/363834 "2024-07-29T11:42:40Z")

</div>

Hey everyone, I'm using Filebeat in sync mode (pipelining disabled) and TTL set, as I have a simple loadbalancer as a host. If I use this configuration on a host that has a high log rate, I end up with a bottleneck on …

---

## [Index name when using an index template](https://discuss.elastic.co/t/index-name-when-using-an-index-template/363926)

<div class="topic-metadata">

**Author:** [@andre22](https://discuss.elastic.co/u/andre22)\
**Replies:** 6\
**Last updated:** [July 29, 2024, 11:13am UTC](https://discuss.elastic.co/t/index-name-when-using-an-index-template/363926 "2024-07-29T11:13:11Z")

</div>

Hi, I want to set up an index template for data coming from Zenarmor (using Elasticsearch 8.14.3) When the indices are created without an index template, the names are like this "zen2\_conn-240726", where 240726 represen…

---

## [Searching less fields result into slower search time](https://discuss.elastic.co/t/searching-less-fields-result-into-slower-search-time/363970)

<div class="topic-metadata">

**Author:** [@Sajad\_Soltanian](https://discuss.elastic.co/u/Sajad_Soltanian)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 10:56am UTC](https://discuss.elastic.co/t/searching-less-fields-result-into-slower-search-time/363970 "2024-07-29T10:56:47Z")

</div>

Based on the document "tune for search speed", searching fewer fields should result into faster search response time. But, actually it does not .... We have previously used a multiMatch query on 4 fileds. After a rein…

---

## [Filter for fields that are present in Data Views](https://discuss.elastic.co/t/filter-for-fields-that-are-present-in-data-views/363685)

<div class="topic-metadata">

**Author:** [@DataBjorn](https://discuss.elastic.co/u/DataBjorn)\
**Replies:** 4\
**Last updated:** [July 29, 2024, 10:55am UTC](https://discuss.elastic.co/t/filter-for-fields-that-are-present-in-data-views/363685 "2024-07-29T10:55:38Z")

</div>

When our users are going through the various data sources present in our Elastic stack, they often struggle to know which fields are present in order to build dashboards and alerts. For example: For Metricbeat data, the…

---

## [There are about 800000 log files in my environment, and now logstash is stuck after starting. Is there any solution? You can collect the latest files](https://discuss.elastic.co/t/there-are-about-800000-log-files-in-my-environment-and-now-logstash-is-stuck-after-starting-is-there-any-solution-you-can-collect-the-latest-files/363963)

<div class="topic-metadata">

**Author:** [@Alexis-cmyk-a11y](https://discuss.elastic.co/u/Alexis-cmyk-a11y)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 10:08am UTC](https://discuss.elastic.co/t/there-are-about-800000-log-files-in-my-environment-and-now-logstash-is-stuck-after-starting-is-there-any-solution-you-can-collect-the-latest-files/363963 "2024-07-29T10:08:27Z")

</div>

There are about 800000 log files in my environment, and now logstash is stuck after starting. Is there any solution? You can collect the latest files

---

## [Fault in IFrame embeded visualization](https://discuss.elastic.co/t/fault-in-iframe-embeded-visualization/363952)

<div class="topic-metadata">

**Author:** [@StefanC](https://discuss.elastic.co/u/StefanC)\
**Replies:** 3\
**Last updated:** [July 29, 2024, 10:07am UTC](https://discuss.elastic.co/t/fault-in-iframe-embeded-visualization/363952 "2024-07-29T10:07:48Z")

</div>

We have a dashboard visualisation from Kibane 8.8.3 running running in an IFrame. Since a few weeks (using Google chrome or edge version) When inspecting the data of a chart in csv form there is a red overlay over the t…

---

## [Using FluentD as a log collector with Elastic](https://discuss.elastic.co/t/using-fluentd-as-a-log-collector-with-elastic/363817)

<div class="topic-metadata">

**Author:** [@SandeshS](https://discuss.elastic.co/u/SandeshS)\
**Replies:** 1\
**Last updated:** [July 29, 2024, 9:51am UTC](https://discuss.elastic.co/t/using-fluentd-as-a-log-collector-with-elastic/363817 "2024-07-29T09:51:10Z")

</div>

Hi all, New to this community and very excited to start my journey in the realm of Elastic. Wondering if anyone of you out here is using Fluentd as a log collector instead of logstash? If I can get any starting tips it …

---

## [Filebeat Metrics Spiking and Returning to Normal Despite Ongoing Network Block to Logstash](https://discuss.elastic.co/t/filebeat-metrics-spiking-and-returning-to-normal-despite-ongoing-network-block-to-logstash/363951)

<div class="topic-metadata">

**Author:** [@germain\_nganko](https://discuss.elastic.co/u/germain_nganko)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 7:58am UTC](https://discuss.elastic.co/t/filebeat-metrics-spiking-and-returning-to-normal-despite-ongoing-network-block-to-logstash/363951 "2024-07-29T07:58:36Z")

</div>

I am experiencing an issue with Filebeat in our Kubernetes cluster and would like to know if others have encountered a similar situation or have any insights into this behavior. Issue: I have observed that when there is…

---

## [Shard Allocation Failed](https://discuss.elastic.co/t/shard-allocation-failed/363881)

<div class="topic-metadata">

**Author:** [@Shaakxuur](https://discuss.elastic.co/u/Shaakxuur)\
**Replies:** 4\
**Last updated:** [July 29, 2024, 7:07am UTC](https://discuss.elastic.co/t/shard-allocation-failed/363881 "2024-07-29T07:07:36Z")

</div>

Hi I have a test server that is operated as a single cluster node. However, I don't want to lose the information I have collected. I'm just not experienced enough with Elastic to figure out the root cause :frowning: H…

---

## [Insert Document to Index alias](https://discuss.elastic.co/t/insert-document-to-index-alias/363820)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 4\
**Last updated:** [July 29, 2024, 6:46am UTC](https://discuss.elastic.co/t/insert-document-to-index-alias/363820 "2024-07-29T06:46:03Z")

</div>

Hi Team, Is there a method to ingest data into an Index alias, allowing the Elasticsearch engine to determine the specific index for insertion. Likewise in RDBMS, while inserting into partition table , RDBMS engine au…

---

## [Java API Client toString](https://discuss.elastic.co/t/java-api-client-tostring/363934)

<div class="topic-metadata">

**Author:** [@jungsoo](https://discuss.elastic.co/u/jungsoo)\
**Replies:** 1\
**Last updated:** [July 29, 2024, 5:35am UTC](https://discuss.elastic.co/t/java-api-client-tostring/363934 "2024-07-29T05:35:51Z")

</div>

Hello, I am using Java API client, and making searchRequest. SearchRequest searchRequest = SearchRequest.Builder.index("indexName").. otherBuilder ..build(); String queryCheck = searchRequest.toString(); toString of …

---

## [Elasticsearch cloudtrail](https://discuss.elastic.co/t/elasticsearch-cloudtrail/363944)

<div class="topic-metadata">

**Author:** [@bhuvanesh\_ammisetty](https://discuss.elastic.co/u/bhuvanesh_ammisetty)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 4:51am UTC](https://discuss.elastic.co/t/elasticsearch-cloudtrail/363944 "2024-07-29T04:51:55Z")

</div>

Hi Team,i am using Elasticsearch trail version.i have installed agents in 10 systems and i want to move the logs collecting from those to agents to personal server for backup.i want those communications to continously to…

---

## [Scroll API is dropping records](https://discuss.elastic.co/t/scroll-api-is-dropping-records/361237)

<div class="topic-metadata">

**Author:** [@jerry\_jacob](https://discuss.elastic.co/u/jerry_jacob)\
**Replies:** 9\
**Last updated:** [July 29, 2024, 4:44am UTC](https://discuss.elastic.co/t/scroll-api-is-dropping-records/361237 "2024-07-29T04:44:21Z")

</div>

ES version: 7.5.1 { "query": { "range": { "columnName": { "gt": "2024-05-28T16:00:25Z", "lte": "2024-05-28T19:00:24Z" } } } } I have a program that runs above query to pull recor…

---

## [Transforms keep falling behind / not processing any documents](https://discuss.elastic.co/t/transforms-keep-falling-behind-not-processing-any-documents/363596)

<div class="topic-metadata">

**Author:** [@Liam\_Young](https://discuss.elastic.co/u/Liam_Young)\
**Replies:** 2\
**Last updated:** [July 24, 2024, 9:20pm UTC](https://discuss.elastic.co/t/transforms-keep-falling-behind-not-processing-any-documents/363596 "2024-07-24T21:20:19Z")

</div>

Hi, I have a datastream that receives 1000s of requests a minute. I am testing with a script to make logs, it makes 1000 requests in a minute. I am very new to Elasticsearch. The datastream works fine. I set up a transfo…

---

## [ElasticSearch application hosted on separate server stops responding to Liferay Server](https://discuss.elastic.co/t/elasticsearch-application-hosted-on-separate-server-stops-responding-to-liferay-server/363935)

<div class="topic-metadata">

**Author:** [@DineshA](https://discuss.elastic.co/u/DineshA)\
**Replies:** 0\
**Last updated:** [July 29, 2024, 1:58am UTC](https://discuss.elastic.co/t/elasticsearch-application-hosted-on-separate-server-stops-responding-to-liferay-server/363935 "2024-07-29T01:58:43Z")

</div>

Elastic Search services which are hosted on another server stops responding to Liferay application Server and it is intermittent and then have to restart Elasticsearch Service and then liferay application server is able …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=195)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=197)
