# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1979 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1980 --- ## [How to build visualization for average bandwidth utilization of a an interface/port](https://discuss.elastic.co/t/how-to-build-visualization-for-average-bandwidth-utilization-of-a-an-interface-port/234459)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 7:27pm UTC](https://discuss.elastic.co/t/how-to-build-visualization-for-average-bandwidth-utilization-of-a-an-interface-port/234459 "2020-06-23T19:27:16Z")
I am snmp polling WAN interface of firewall getting input and output bytes. How do i create average of 5 minute, 1 hour and 1day average graphs? i have the snmp polling and netflow 9 interface utilization data. --- ## [Help with Kibana displaying percentage by group](https://discuss.elastic.co/t/help-with-kibana-displaying-percentage-by-group/236372)
**Author:** [@bob\_herdsman](https://discuss.elastic.co/u/bob_herdsman)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 7:16pm UTC](https://discuss.elastic.co/t/help-with-kibana-displaying-percentage-by-group/236372 "2020-06-23T19:16:06Z")
Hi! I'd like to visualize my data in a certain way with Kibana and I don't know if it is possible or how to do it. I'd appreciate any help because I'm new to Kibana. I've attached a screenshot covering my current and, o… --- ## [HELP - decreasing date depending visual](https://discuss.elastic.co/t/help-decreasing-date-depending-visual/235987)
**Author:** [@julianf19](https://discuss.elastic.co/u/julianf19)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 7:13pm UTC](https://discuss.elastic.co/t/help-decreasing-date-depending-visual/235987 "2020-06-23T19:13:28Z")
Hi, I am trying to build a visualization in kibana: I have a set of data that have an end date or not yet (work still to be acomplished) I want to visualize how fast the work load is decreasing. Lets say i am looking… --- ## [Snapshot failed due to connection timeout to S3](https://discuss.elastic.co/t/snapshot-failed-due-to-connection-timeout-to-s3/238325)
**Author:** [@feiwhomai](https://discuss.elastic.co/u/feiwhomai)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 7:08pm UTC](https://discuss.elastic.co/t/snapshot-failed-due-to-connection-timeout-to-s3/238325 "2020-06-23T19:08:02Z")
Hi All, I am trying to make a snapshot, but it always fails after around 1.5 hours. The exception shows the connection to S3 timeouts. The cluster version is 6.8.2 It used to work fine, but starting from 2 weeks back,… --- ## [Kibana left pan menu - 7.8](https://discuss.elastic.co/t/kibana-left-pan-menu-7-8/237821)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [June 23, 2020, 7:04pm UTC](https://discuss.elastic.co/t/kibana-left-pan-menu-7-8/237821 "2020-06-23T19:04:10Z")
in kibana 7.8 menu which was on left pan has change and they have put it under separate category. kibana - observability - management then once you click on it it will expand that further. don't like a bit at all. as … --- ## [Records not showing when filter using scripted field in kibana control](https://discuss.elastic.co/t/records-not-showing-when-filter-using-scripted-field-in-kibana-control/235699)
**Author:** [@Ankit\_S](https://discuss.elastic.co/u/Ankit_S)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 6:59pm UTC](https://discuss.elastic.co/t/records-not-showing-when-filter-using-scripted-field-in-kibana-control/235699 "2020-06-23T18:59:31Z")
Hello, I have created a kibana control which is loading the records from \_source and also created scripted field. Now this main control is a parent to scripted field control. On selection main field control option it l… --- ## [Kibana Docker Login issues](https://discuss.elastic.co/t/kibana-docker-login-issues/233462)
**Author:** [@Darryn\_Cornish](https://discuss.elastic.co/u/Darryn_Cornish)\ **Replies:** 4\ **Last updated:** [June 23, 2020, 6:38pm UTC](https://discuss.elastic.co/t/kibana-docker-login-issues/233462 "2020-06-23T18:38:32Z")
I seem to be having a redirect issue with my kibana's login page on my elk stack. Below is my yml for the docker-compose. After starting this up I added myself as a user on the elasticsearch api and the user exists. Wh… --- ## [Grok custom pattern for space delimited file](https://discuss.elastic.co/t/grok-custom-pattern-for-space-delimited-file/238291)
**Author:** [@atchyuth](https://discuss.elastic.co/u/atchyuth)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:23pm UTC](https://discuss.elastic.co/t/grok-custom-pattern-for-space-delimited-file/238291 "2020-06-23T17:23:15Z")
I'm trying to load a file to structured table in Athena. I am using GROK pattern to load it to the table but not able to find the correct pattern. The file format is as below: L1127 ACTUALS 214171 ON 27649075 -000000000… --- ## [Best way to look for a doc across multiple indices?](https://discuss.elastic.co/t/best-way-to-look-for-a-doc-across-multiple-indices/238168)
**Author:** [@ishanjain](https://discuss.elastic.co/u/ishanjain)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:36pm UTC](https://discuss.elastic.co/t/best-way-to-look-for-a-doc-across-multiple-indices/238168 "2020-06-23T17:36:24Z")
Hello everyone! Kibana saves alerts in a index .opendistro-alerting-alerts and when the alert completes, It moves it to .opendistro-alerting-alert-history.yyyy.mm. I have a check-incident function in a step-function on… --- ## [Send all routers, switches and access points logs to ELK server](https://discuss.elastic.co/t/send-all-routers-switches-and-access-points-logs-to-elk-server/238289)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 5:30pm UTC](https://discuss.elastic.co/t/send-all-routers-switches-and-access-points-logs-to-elk-server/238289 "2020-06-23T17:30:18Z")
Hi people, I have several routers, switches and acces points in my network and I want to send all their logs to a syslog service implemented in my ELK server. Is this possible to implement a syslog server listening on … --- ## [Kibana editor vis issue](https://discuss.elastic.co/t/kibana-editor-vis-issue/235373)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:22pm UTC](https://discuss.elastic.co/t/kibana-editor-vis-issue/235373 "2020-06-23T17:22:54Z")
hi team, i create custom vis and have issue while updating my default state. this is my editor script: export class StandardDeviationFilterEditor extends React.Component { onChange = (selectedOptions) =\> { this.… --- ## [How to update an existing es document and add a new value received from logstash event, to the existing array field at es at indexing time](https://discuss.elastic.co/t/how-to-update-an-existing-es-document-and-add-a-new-value-received-from-logstash-event-to-the-existing-array-field-at-es-at-indexing-time/238112)
**Author:** [@darkwarrior](https://discuss.elastic.co/u/darkwarrior)\ **Replies:** 6\ **Last updated:** [June 23, 2020, 5:12pm UTC](https://discuss.elastic.co/t/how-to-update-an-existing-es-document-and-add-a-new-value-received-from-logstash-event-to-the-existing-array-field-at-es-at-indexing-time/238112 "2020-06-23T17:12:46Z")
Hello guys, I am running logstash with es as output and my logstash input looks like this: Date time \[some-fields\] country\_name city\_name sample input values=\> 22-06-2020 02:19:27 \[some-fields\] US NewYork 22-06-202… --- ## [Kibana keeps crashing after enabling Xpack](https://discuss.elastic.co/t/kibana-keeps-crashing-after-enabling-xpack/235076)
**Author:** [@beingnurd](https://discuss.elastic.co/u/beingnurd)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:13pm UTC](https://discuss.elastic.co/t/kibana-keeps-crashing-after-enabling-xpack/235076 "2020-06-23T17:13:08Z")
Hi Team, We have Kibana 6.8.6 (single node) connected with a coordinating only node of Elastic search (we have 3 data nodes). We are not using any proxy etc. and access Kibana directly over 5601 using self signed certi… --- ## [Gelf in Kafka out for logstash](https://discuss.elastic.co/t/gelf-in-kafka-out-for-logstash/238294)
**Author:** [@pointonj](https://discuss.elastic.co/u/pointonj)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:06pm UTC](https://discuss.elastic.co/t/gelf-in-kafka-out-for-logstash/238294 "2020-06-23T17:06:16Z")
Im trying to use Logstash with a GELF input and outputting to Kafka and not getting any logs. My config file looks like this - input { udp { host =\> "ip of loadbalancer" port =\> 9900 type =\> gelf … --- ## [Kibana 6.x.x load balancing issue behind an F5 appliance](https://discuss.elastic.co/t/kibana-6-x-x-load-balancing-issue-behind-an-f5-appliance/234714)
**Author:** [@ThSPT](https://discuss.elastic.co/u/ThSPT)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:01pm UTC](https://discuss.elastic.co/t/kibana-6-x-x-load-balancing-issue-behind-an-f5-appliance/234714 "2020-06-23T17:01:43Z")
Hi all, I'd like to know if there is a specific configuration/recommendation to be done on the F5 appliance which is used to load balance the HTTP traffic between 2 kibana nodes ? I'm not using the xpack and don't want… --- ## [Is it possible to make snapshot of specific user's query result and dashboard?](https://discuss.elastic.co/t/is-it-possible-to-make-snapshot-of-specific-users-query-result-and-dashboard/234446)
**Author:** [@Taewoo](https://discuss.elastic.co/u/Taewoo)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-snapshot-of-specific-users-query-result-and-dashboard/234446 "2020-06-23T17:00:00Z")
Hello? I'm big fan of Elasticsearch and Kibana. I found that I can add user to Kibana and add role to each user. I have questions here. Is that user function is like give each user to different Kibana? For example… --- ## [Template based Elastic stack deployment for AWS](https://discuss.elastic.co/t/template-based-elastic-stack-deployment-for-aws/238248)
**Author:** [@Naresh\_Babu1](https://discuss.elastic.co/u/Naresh_Babu1)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 4:58pm UTC](https://discuss.elastic.co/t/template-based-elastic-stack-deployment-for-aws/238248 "2020-06-23T16:58:48Z")
Hi, Used below template based solution from Azure market place to deploy EFK solution. Do we have similar template based solution to deploy Elastic stack on AWS cloud. Thanks --- ## [Embed kibana Automatic Login](https://discuss.elastic.co/t/embed-kibana-automatic-login/235817)
**Author:** [@RafaelZurlo](https://discuss.elastic.co/u/RafaelZurlo)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 4:53pm UTC](https://discuss.elastic.co/t/embed-kibana-automatic-login/235817 "2020-06-23T16:53:11Z")
Hello guys! I'm having some problems with the ELK stack, version 7.6.0. I'm developing an application and I'm embedding Kibana's dashboards in this application. However, whenever someone tries to access it, it opens the… --- ## [Where's the % coming from?](https://discuss.elastic.co/t/wheres-the-coming-from/238277)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 2\ **Last updated:** [June 23, 2020, 4:46pm UTC](https://discuss.elastic.co/t/wheres-the-coming-from/238277 "2020-06-23T16:46:20Z")
I'm using the following to add an ingestion timestamp to my records: ruby { code =\> 'event.set("ingest\_time", Time.now.strftime("%Y-%m-%d %H:%M:%S.%3"))' } What I'm getting in my data, thought, is: ingest\_tim… --- ## [Logstash not pushing logs to elasticsearch in aws](https://discuss.elastic.co/t/logstash-not-pushing-logs-to-elasticsearch-in-aws/238255)
**Author:** [@Bharath\_reddy](https://discuss.elastic.co/u/Bharath_reddy)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 4:31pm UTC](https://discuss.elastic.co/t/logstash-not-pushing-logs-to-elasticsearch-in-aws/238255 "2020-06-23T16:31:26Z")
In logs I didnt find any errors ,but I can't able to see the output line in logs for my pipelines --- ## [Async Search Issue: FORBIDDEN/8/index write (api)](https://discuss.elastic.co/t/async-search-issue-forbidden-8-index-write-api/238221)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 4:25pm UTC](https://discuss.elastic.co/t/async-search-issue-forbidden-8-index-write-api/238221 "2020-06-23T16:25:49Z")
Since upgrading our cluster from 7.6 to 7.8 we are experiencing problems with kibana. We are using elasticsearch for our central logging, we have a logstash index for every single day. If I do a empty kibana search (usin… --- ## [Systemd service status visualization](https://discuss.elastic.co/t/systemd-service-status-visualization/235121)
**Author:** [@nabeel\_ahmed](https://discuss.elastic.co/u/nabeel_ahmed)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 4:00pm UTC](https://discuss.elastic.co/t/systemd-service-status-visualization/235121 "2020-06-23T16:00:04Z")
Hi, I am new to Kibana, and using kibana 7.7 I setup metricbeat and using service metricset for montioring of systemd services. I wan to visualize the service status of each service as 1 (active) or 0 (inactive) with … --- ## [Logstash Performance Tuning](https://discuss.elastic.co/t/logstash-performance-tuning/238088)
**Author:** [@Jib\_Suwanachote](https://discuss.elastic.co/u/Jib_Suwanachote)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 3:48pm UTC](https://discuss.elastic.co/t/logstash-performance-tuning/238088 "2020-06-23T15:48:22Z")
Hi all Currently our team use logstash run over container with K8S cluster for purpose consume data from KAFKA messaging and push data to Elasticsearch .As we're testing performance not good enough. we're setup only 3… --- ## [Growth over time using "metric" and "table" visualizations](https://discuss.elastic.co/t/growth-over-time-using-metric-and-table-visualizations/234717)
**Author:** [@sanzcans](https://discuss.elastic.co/u/sanzcans)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 3:42pm UTC](https://discuss.elastic.co/t/growth-over-time-using-metric-and-table-visualizations/234717 "2020-06-23T15:42:49Z")
Hello! Is there any way to calculate the growth over time in the "metric" and "table" visualizations? I only have two fields in my index: timestamp and sales, and I would like to get something like this: I know tha… --- ## [How to change the percentage data label in pie chart to 1dec place accuracy](https://discuss.elastic.co/t/how-to-change-the-percentage-data-label-in-pie-chart-to-1dec-place-accuracy/236614)
**Author:** [@DeniseLow](https://discuss.elastic.co/u/DeniseLow)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 3:38pm UTC](https://discuss.elastic.co/t/how-to-change-the-percentage-data-label-in-pie-chart-to-1dec-place-accuracy/236614 "2020-06-23T15:38:31Z")
hi , is there a way to change the percentage from 2 to 1 d.p? --- ## [Elasticserach bootstrap fail if elasticsearch.keystore.tmp already exists](https://discuss.elastic.co/t/elasticserach-bootstrap-fail-if-elasticsearch-keystore-tmp-already-exists/237087)
**Author:** [@gab.bernasconi](https://discuss.elastic.co/u/gab.bernasconi)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 3:28pm UTC](https://discuss.elastic.co/t/elasticserach-bootstrap-fail-if-elasticsearch-keystore-tmp-already-exists/237087 "2020-06-23T15:28:23Z")
Environment Elasticsearch version: 7.4.2 (docker) Problem Summary If Elasticsearch already finds the file /usr/share/elasticsearch/config/elasticsearch.keystore.tmp during bootstrap checks, it fails to start Steps t… --- ## [Filebeat 7.8 Azure module issue](https://discuss.elastic.co/t/filebeat-7-8-azure-module-issue/237727)
**Author:** [@sera123k](https://discuss.elastic.co/u/sera123k)\ **Replies:** 4\ **Last updated:** [June 23, 2020, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-7-8-azure-module-issue/237727 "2020-06-23T15:24:03Z")
Testing out the Azure module and leveraging the exact same configuration from a working 7.7 install generates the following error: 2020-06-18T23:19:14.508-0500 INFO cfgfile/reload.go:224 Loading of config files complete… --- ## [All of the primary shards are on 1 node. Would that bottlenecks our writes?](https://discuss.elastic.co/t/all-of-the-primary-shards-are-on-1-node-would-that-bottlenecks-our-writes/237418)
**Author:** [@Jehu\_T](https://discuss.elastic.co/u/Jehu_T)\ **Replies:** 5\ **Last updated:** [June 23, 2020, 3:17pm UTC](https://discuss.elastic.co/t/all-of-the-primary-shards-are-on-1-node-would-that-bottlenecks-our-writes/237418 "2020-06-23T15:17:31Z")
Hi, We see that almost all of the primary shards are on 1 node out of the 3 nodes. Would that bottlenecks our writes? Our ES Indexing Service has code to catch what's basically a "queue full" state on the server and res… --- ## ["index.mapper.dynamic" not working as intended on Elasticsearch 6.8](https://discuss.elastic.co/t/index-mapper-dynamic-not-working-as-intended-on-elasticsearch-6-8/238290)
**Author:** [@egibrajshori](https://discuss.elastic.co/u/egibrajshori)\ **Replies:** 0\ **Last updated:** [June 23, 2020, 2:58pm UTC](https://discuss.elastic.co/t/index-mapper-dynamic-not-working-as-intended-on-elasticsearch-6-8/238290 "2020-06-23T14:58:36Z")
Hi, We have some indexes we would like to disable dynamic mapping for, I'm testing disabling the dynamic mapping by putting : index.mapper.dynamic : false or null in the settings for said indexes. The request is acknow… --- ## [Detecting anomalies in metricbeats data](https://discuss.elastic.co/t/detecting-anomalies-in-metricbeats-data/237846)
**Author:** [@Jaskaran123](https://discuss.elastic.co/u/Jaskaran123)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 2:16pm UTC](https://discuss.elastic.co/t/detecting-anomalies-in-metricbeats-data/237846 "2020-06-22T14:16:57Z")
Hello, I am pretty new to ES ML and metric beats, so please excuse if my question seems a bit unusual. So I setup a a job to detect anomalies in the field "system.cpu.user.pct", I am successfully able to detect anomali… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1978) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1980)