# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1987 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1988 --- ## [Kibana 7.7 change top left logo](https://discuss.elastic.co/t/kibana-7-7-change-top-left-logo/234449)
**Author:** [@MedAmineLazreg](https://discuss.elastic.co/u/MedAmineLazreg)\ **Replies:** 7\ **Last updated:** [June 19, 2020, 11:37am UTC](https://discuss.elastic.co/t/kibana-7-7-change-top-left-logo/234449 "2020-06-19T11:37:08Z")
Hello people, is there any solution to replace the kibana logo ? I tried many solutions for kibana 7.X but it didn't work. BTW : I'm using the extracted files to run ELK ( official source ). Thank you ! --- ## [Auditbeat Bug? - Include\_files not limiting to just those files](https://discuss.elastic.co/t/auditbeat-bug-include-files-not-limiting-to-just-those-files/237798)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 11:35am UTC](https://discuss.elastic.co/t/auditbeat-bug-include-files-not-limiting-to-just-those-files/237798 "2020-06-19T11:35:05Z")
The auditbeat reference documentation and common sense would imply that doing something like module: file\_integrity paths: C:/windows/system32 include\_files: \[ '(?i).dll$', '(?i).exe$' \] would monitor ONLY .dll a… --- ## [How to make output to two index using logstash](https://discuss.elastic.co/t/how-to-make-output-to-two-index-using-logstash/237783)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 1\ **Last updated:** [June 19, 2020, 11:25am UTC](https://discuss.elastic.co/t/how-to-make-output-to-two-index-using-logstash/237783 "2020-06-19T11:25:29Z")
Hi, I have established connection from filebeat to logstash with below configuration. It is working fine. input { beats { port =\> 5044 } } filter { } output { … --- ## ['Only JSON files are accepted' error when importing Canvas dashboard JSON](https://discuss.elastic.co/t/only-json-files-are-accepted-error-when-importing-canvas-dashboard-json/237795)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 1\ **Last updated:** [June 19, 2020, 11:20am UTC](https://discuss.elastic.co/t/only-json-files-are-accepted-error-when-importing-canvas-dashboard-json/237795 "2020-06-19T11:20:06Z")
Hello, When trying to import JSON file for a Canvas dashboard, I get the below error Couldn't upload .json Only JSON files are accepted This issue is observed on Edge and IE11 in our Live environment which is accesse… --- ## [How to change Loading Screen Logo in Kibana 7.7 version](https://discuss.elastic.co/t/how-to-change-loading-screen-logo-in-kibana-7-7-version/236340)
**Author:** [@Mayank\_Damani](https://discuss.elastic.co/u/Mayank_Damani)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 11:11am UTC](https://discuss.elastic.co/t/how-to-change-loading-screen-logo-in-kibana-7-7-version/236340 "2020-06-19T11:11:19Z")
Hello, I want to change the loading screen logo in Kibana version 7.7 with my custom Logo. I have changed that logo in version 7.6 but as i upgraded to the Elastic stack version 7.7 with OSS license i am not able to do … --- ## [What is the log ship agent for network device](https://discuss.elastic.co/t/what-is-the-log-ship-agent-for-network-device/236844)
**Author:** [@NISHANT\_KHARAT](https://discuss.elastic.co/u/NISHANT_KHARAT)\ **Replies:** 4\ **Last updated:** [June 19, 2020, 10:50am UTC](https://discuss.elastic.co/t/what-is-the-log-ship-agent-for-network-device/236844 "2020-06-19T10:50:00Z")
How we can send logs of network device to Elasticsearch any sample configuration Thanks --- ## [How do I get to see elasticsearch own logs in a dockerized elasticsearch?](https://discuss.elastic.co/t/how-do-i-get-to-see-elasticsearch-own-logs-in-a-dockerized-elasticsearch/236839)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 6\ **Last updated:** [June 19, 2020, 10:45am UTC](https://discuss.elastic.co/t/how-do-i-get-to-see-elasticsearch-own-logs-in-a-dockerized-elasticsearch/236839 "2020-06-19T10:45:11Z")
Dear community, i dockerized elasticsearch like this: esnode1: image: docker.elastic.co/elasticsearch/elasticsearch:7.7.1 container\_name: esnode1 environment: - node.name=esnode1 - cluster.name=es-on-docker - disc… --- ## [Elasticsearch.slowlog.took\_millis not being indexed](https://discuss.elastic.co/t/elasticsearch-slowlog-took-millis-not-being-indexed/237361)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 9:44am UTC](https://discuss.elastic.co/t/elasticsearch-slowlog-took-millis-not-being-indexed/237361 "2020-06-18T09:44:46Z")
I've installed filebeat on my es boxes to ship es slowlogs to a separate elasticsearch cluster. I installed it from deb package (v7.6.0 to match my es version), activated the elasticsearch plugin, ran the setup and star… --- ## [Netflow and Syslog router data point to Logstash or to an intermediate Syslog-NG server?](https://discuss.elastic.co/t/netflow-and-syslog-router-data-point-to-logstash-or-to-an-intermediate-syslog-ng-server/237640)
**Author:** [@jelocabral](https://discuss.elastic.co/u/jelocabral)\ **Replies:** 3\ **Last updated:** [June 19, 2020, 7:34am UTC](https://discuss.elastic.co/t/netflow-and-syslog-router-data-point-to-logstash-or-to-an-intermediate-syslog-ng-server/237640 "2020-06-19T07:34:55Z")
Hi people, please I need to know this: If I want to view in Kibana the Netflow and Syslog data from a Cisco router, I need to know which of the following choices are correct: I have to send the Netflow and Syslog dat… --- ## [Filebeat Cisco-FTD: Too many dynamic script compilations](https://discuss.elastic.co/t/filebeat-cisco-ftd-too-many-dynamic-script-compilations/237434)
**Author:** [@xoh](https://discuss.elastic.co/u/xoh)\ **Replies:** 1\ **Last updated:** [June 19, 2020, 9:47am UTC](https://discuss.elastic.co/t/filebeat-cisco-ftd-too-many-dynamic-script-compilations/237434 "2020-06-19T09:47:53Z")
I want to ingest the logs of Cisco Firepowers for use within the SIEM App and custom alerting, but with just one FTD added (out of roughly 30), I'm already receiving the following error: \[script\] Too many dynamic script… --- ## [Plugin dev - callWithRequest multi\_match query](https://discuss.elastic.co/t/plugin-dev-callwithrequest-multi-match-query/233536)
**Author:** [@Kaj\_Noppen](https://discuss.elastic.co/u/Kaj_Noppen)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 9:44am UTC](https://discuss.elastic.co/t/plugin-dev-callwithrequest-multi-match-query/233536 "2020-06-19T09:44:34Z")
Hi all, I'm trying to get started on a Kibana plugin. I have managed to setup some simple data entry form and display the results in a table. However, I'm trying to perform a multi\_match query with callWithRequest, but… --- ## [Filebeat not logging to files](https://discuss.elastic.co/t/filebeat-not-logging-to-files/237777)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 9:38am UTC](https://discuss.elastic.co/t/filebeat-not-logging-to-files/237777 "2020-06-19T09:38:48Z")
My filebeat (v7.6.0) config has the following: logging.level: debug logging.to\_files: true logging.files: path: /var/log/filebeat name: filebeat keepfiles: 7 permissions: 0755 It doesn't create the files, nor d… --- ## [Dateparse failure using the date filter](https://discuss.elastic.co/t/dateparse-failure-using-the-date-filter/237692)
**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 9:34am UTC](https://discuss.elastic.co/t/dateparse-failure-using-the-date-filter/237692 "2020-06-19T09:34:22Z")
I have a log line Thu Jun 18 08:01:42 CEST 2020|{"timestamp":1592460102635,"caller":"test.customer@customer1","action":"LOGIN","message":"ID000066 User \[test.customer@customer1\] logged in successfully."} This is my fil… --- ## [Dynamic templates - Any way of accessing a field full path instead of its name?](https://discuss.elastic.co/t/dynamic-templates-any-way-of-accessing-a-field-full-path-instead-of-its-name/237774)
**Author:** [@ng.software.dev](https://discuss.elastic.co/u/ng.software.dev)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 9:29am UTC](https://discuss.elastic.co/t/dynamic-templates-any-way-of-accessing-a-field-full-path-instead-of-its-name/237774 "2020-06-19T09:29:32Z")
Hi, I am developping a search engine in which I rely quite heavily on dynamic templates, as the underlying data model is dynamic. So I'm using path\_match with regular expressions. Here's a sample example to get an idea… --- ## [502 bad gateway read ECONNRESET issue with custom plugin](https://discuss.elastic.co/t/502-bad-gateway-read-econnreset-issue-with-custom-plugin/237769)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 9:15am UTC](https://discuss.elastic.co/t/502-bad-gateway-read-econnreset-issue-with-custom-plugin/237769 "2020-06-19T09:15:42Z")
hi, I have issues with my custom search plugin. I have made search plugin to change scoring. It was okay till I have installed my plugin and start ES. But when I searched query, ES just shut down without any returning … --- ## [Logs geeting stored in default filebeat 7.7.1 index and custom index not getting created](https://discuss.elastic.co/t/logs-geeting-stored-in-default-filebeat-7-7-1-index-and-custom-index-not-getting-created/236953)
**Author:** [@Avinash\_sanapala](https://discuss.elastic.co/u/Avinash_sanapala)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 9:11am UTC](https://discuss.elastic.co/t/logs-geeting-stored-in-default-filebeat-7-7-1-index-and-custom-index-not-getting-created/236953 "2020-06-19T09:11:43Z")
Hi all, I am trying to send my log data from filebeat to Elasticsearch directly in .log format.It is not going to the custom index I created and getting stored under the default indice filebeat 7.7.1 . Also I could not … --- ## [Filtering and output the first item to elastic](https://discuss.elastic.co/t/filtering-and-output-the-first-item-to-elastic/237630)
**Author:** [@kileou78](https://discuss.elastic.co/u/kileou78)\ **Replies:** 4\ **Last updated:** [June 19, 2020, 8:51am UTC](https://discuss.elastic.co/t/filtering-and-output-the-first-item-to-elastic/237630 "2020-06-19T08:51:59Z")
Hi everybody I'm collecting using an API and filebeat a list of computer's status OK or KO I would like to store on elastic a global status for this group of computer My list is sorted by state, "0" for OK and "2" for… --- ## [Aws network loadblancer metrics not captured](https://discuss.elastic.co/t/aws-network-loadblancer-metrics-not-captured/237698)
**Author:** [@Abhishek\_Tanwar](https://discuss.elastic.co/u/Abhishek_Tanwar)\ **Replies:** 1\ **Last updated:** [June 19, 2020, 8:34am UTC](https://discuss.elastic.co/t/aws-network-loadblancer-metrics-not-captured/237698 "2020-06-19T08:34:40Z")
I am using metricbeat 7.8, elasticsearch 7.8 and kibana 7.8. module: aws period: 1m regions: eu-central-1 metricsets: elb With the above configuration, only application load balancers are getting captured. Netwo… --- ## [Alerting within Kibana - ES 7.7](https://discuss.elastic.co/t/alerting-within-kibana-es-7-7/237681)
**Author:** [@Sinnott](https://discuss.elastic.co/u/Sinnott)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 8:30am UTC](https://discuss.elastic.co/t/alerting-within-kibana-es-7-7/237681 "2020-06-19T08:30:45Z")
Hi Elastic Community! I am testing out Alerting from Kibana within Elasticsearch 7.7 (feature currently in Beta). Does anyone know if it is possible to pull specific field information from an Index when an alert, setup… --- ## [Max\_bucket exception from elasticsearch](https://discuss.elastic.co/t/max-bucket-exception-from-elasticsearch/237732)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 3\ **Last updated:** [June 19, 2020, 8:20am UTC](https://discuss.elastic.co/t/max-bucket-exception-from-elasticsearch/237732 "2020-06-19T08:20:00Z")
Hi, I have made a control visualization (option list) with 4 options-fields (let's say A, B, C & D). The "size" field of each option is 10000 and search.max\_buckets setting is 10000 too. In ElasticSearch, for field A … --- ## [Synonym in Query\_string not working as expected](https://discuss.elastic.co/t/synonym-in-query-string-not-working-as-expected/236269)
**Author:** [@Lalit\_Kumar](https://discuss.elastic.co/u/Lalit_Kumar)\ **Replies:** 1\ **Last updated:** [June 19, 2020, 8:12am UTC](https://discuss.elastic.co/t/synonym-in-query-string-not-working-as-expected/236269 "2020-06-19T08:12:10Z")
Hey, Thank you in advance, any help would be greatly appreciated. I am not clear why this happening. when i execute the given(below) query its return 200. but the synonym created for the query is not correct. so result… --- ## [Create scripted field](https://discuss.elastic.co/t/create-scripted-field/237666)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 8:10am UTC](https://discuss.elastic.co/t/create-scripted-field/237666 "2020-06-19T08:10:22Z")
Hi , how can i create this scripted field. i want to calculate the avg of "price". any help please! --- ## [Is it possible to use a scripted field for the timefield parameter in timelion queries](https://discuss.elastic.co/t/is-it-possible-to-use-a-scripted-field-for-the-timefield-parameter-in-timelion-queries/237760)
**Author:** [@Naveen\_Kumar3](https://discuss.elastic.co/u/Naveen_Kumar3)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 8:07am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-a-scripted-field-for-the-timefield-parameter-in-timelion-queries/237760 "2020-06-19T08:07:39Z")
Hi, The Kibana version I am using is 7.4.2 Initially, while creating my ElasticSearch domain, I had made a mistake of not mapping my index with a field of the 'date' type. I am using a Kinesis firehose to send data to … --- ## [How logstash receive multiple topics from kafka](https://discuss.elastic.co/t/how-logstash-receive-multiple-topics-from-kafka/237605)
**Author:** [@Lan\_Lynn](https://discuss.elastic.co/u/Lan_Lynn)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 6:51am UTC](https://discuss.elastic.co/t/how-logstash-receive-multiple-topics-from-kafka/237605 "2020-06-19T06:51:47Z")
I'm trying to use logstash to receive data from kafka. I'm having this configurations in Kafka below, two topics and one groupID. "DeviceTopic": "device", //Topic for device-gruoped messages "TaskTopic": "task", //Top… --- ## [Logstash doesn't start](https://discuss.elastic.co/t/logstash-doesnt-start/236919)
**Author:** [@Uzzi](https://discuss.elastic.co/u/Uzzi)\ **Replies:** 50\ **Last updated:** [June 19, 2020, 6:47am UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919 "2020-06-19T06:47:45Z")
Hi,I'm debugging Logstash istance: /usr/share/logstash/bin/logstash --config.test\_and\_exit --path.settings --config.debug -f /etc/logstash/conf.d/01-wazuh.conf ---\> Config Validation Result: OK. Exiting Logstash /us… --- ## [Sorting in TSVB](https://discuss.elastic.co/t/sorting-in-tsvb/237737)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 0\ **Last updated:** [June 19, 2020, 6:35am UTC](https://discuss.elastic.co/t/sorting-in-tsvb/237737 "2020-06-19T06:35:54Z")
Hi All, Not sure if this is a bug or if I have done something fundamentally wrong. Trying to sort by column from highest to lowest but the order is all over the place. If i sort by PPSN, it works as expected. Running K… --- ## [Autodiscover drop default filebeat index](https://discuss.elastic.co/t/autodiscover-drop-default-filebeat-index/237237)
**Author:** [@Shiny\_Hou](https://discuss.elastic.co/u/Shiny_Hou)\ **Replies:** 9\ **Last updated:** [June 19, 2020, 6:05am UTC](https://discuss.elastic.co/t/autodiscover-drop-default-filebeat-index/237237 "2020-06-19T06:05:14Z")
I don't want need filbeat-version-%{+yyyy.MM.dd} Index, my config don't have the config ， but the container log still input to filbeat-version-%{+yyyy.MM.dd} --- filebeat.autodiscover: providers: - type… --- ## [Is it possiable to create Variable in Kibana](https://discuss.elastic.co/t/is-it-possiable-to-create-variable-in-kibana/237607)
**Author:** [@Dhandeep\_Kumar](https://discuss.elastic.co/u/Dhandeep_Kumar)\ **Replies:** 2\ **Last updated:** [June 19, 2020, 5:13am UTC](https://discuss.elastic.co/t/is-it-possiable-to-create-variable-in-kibana/237607 "2020-06-19T05:13:45Z")
hi There, please help me to solve this one Thanks --- ## [How to efficiently return most recent documents using index pattern by date](https://discuss.elastic.co/t/how-to-efficiently-return-most-recent-documents-using-index-pattern-by-date/237712)
**Author:** [@fletcherd](https://discuss.elastic.co/u/fletcherd)\ **Replies:** 1\ **Last updated:** [June 19, 2020, 4:28am UTC](https://discuss.elastic.co/t/how-to-efficiently-return-most-recent-documents-using-index-pattern-by-date/237712 "2020-06-19T04:28:20Z")
I am having trouble doing what I feel like should be really simple. I want to return the most recent 500 documents that match a query, using the JSON query language. I tried just sorting on the date and then setting a … --- ## [Mappings of different types in one index](https://discuss.elastic.co/t/mappings-of-different-types-in-one-index/237717)
**Author:** [@lec\_ssmi](https://discuss.elastic.co/u/lec_ssmi)\ **Replies:** 4\ **Last updated:** [June 19, 2020, 4:26am UTC](https://discuss.elastic.co/t/mappings-of-different-types-in-one-index/237717 "2020-06-19T04:26:35Z")
Excuse me, if there are two types in the same index, these two types have their own mapping. These two mappings use some fields with the same name, but the field types are different. Will there be conflict? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1986) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1988)