# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1994

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1995

---

## [Can I contribute a datasketches aggregation plugin for elasticsearch?What should I provide?](https://discuss.elastic.co/t/can-i-contribute-a-datasketches-aggregation-plugin-for-elasticsearch-what-should-i-provide/237394)

<div class="topic-metadata">

**Author:** [@nooneuse](https://discuss.elastic.co/u/nooneuse)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 6:08am UTC](https://discuss.elastic.co/t/can-i-contribute-a-datasketches-aggregation-plugin-for-elasticsearch-what-should-i-provide/237394 "2020-06-17T06:08:51Z")

</div>

hello, I wrote a datasketch aggregation plugin for elasticsearch, I have tested it in some situations, and its performance can meet my needs. I really want to share it and contribute it to the community to make elastics…

---

## [SLM policy for elastic snapshot for 30 mins is failing](https://discuss.elastic.co/t/slm-policy-for-elastic-snapshot-for-30-mins-is-failing/237242)

<div class="topic-metadata">

**Author:** [@hello5346](https://discuss.elastic.co/u/hello5346)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 7:44am UTC](https://discuss.elastic.co/t/slm-policy-for-elastic-snapshot-for-30-mins-is-failing/237242 "2020-06-16T07:44:31Z")

</div>

I had set up a Elasticsearch snapshot to s3 and setup an SLM policy to create snapshot for every 30 mins but it's throwing an error and i'm sharing the slm policy details as well can anyone help me out curl -X GET "10.…

---

## [Column not not shown in visualize](https://discuss.elastic.co/t/column-not-not-shown-in-visualize/237070)

<div class="topic-metadata">

**Author:** [@Rgvr\_S](https://discuss.elastic.co/u/Rgvr_S)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 5:41am UTC](https://discuss.elastic.co/t/column-not-not-shown-in-visualize/237070 "2020-06-17T05:41:27Z")

</div>

I have some data with the following columns. While I'm able to view them all in Discover, the column 'Position' does not appear as an option when I try to use it a field to visualize. I have multiple files with simil…

---

## [Not able to retrieve new logs in real-time](https://discuss.elastic.co/t/not-able-to-retrieve-new-logs-in-real-time/237387)

<div class="topic-metadata">

**Author:** [@drjosephliu](https://discuss.elastic.co/u/drjosephliu)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 5:13am UTC](https://discuss.elastic.co/t/not-able-to-retrieve-new-logs-in-real-time/237387 "2020-06-17T05:13:24Z")

</div>

This is the setup: I'm running ELK locally with a java spring boot app that writes logs to a file called elk-logs.log I'm able to see the logs in kibana when I first run the java spring boot app, but after the initial …

---

## [Creating Kibana dashboard using (parameter file) and variable](https://discuss.elastic.co/t/creating-kibana-dashboard-using-parameter-file-and-variable/237269)

<div class="topic-metadata">

**Author:** [@Dhandeep\_Kumar](https://discuss.elastic.co/u/Dhandeep_Kumar)\
**Replies:** 3\
**Last updated:** [June 17, 2020, 4:58am UTC](https://discuss.elastic.co/t/creating-kibana-dashboard-using-parameter-file-and-variable/237269 "2020-06-17T04:58:20Z")

</div>

Hi There, is this possible to create a table using a parameter file in Kibana? for eg: - I have an excel file which contains all the dimension field and in the expression field I want a calculated value like - sum(Ne…

---

## [Scripted Fields - Script is invalid](https://discuss.elastic.co/t/scripted-fields-script-is-invalid/237211)

<div class="topic-metadata">

**Author:** [@jjums](https://discuss.elastic.co/u/jjums)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 4:17am UTC](https://discuss.elastic.co/t/scripted-fields-script-is-invalid/237211 "2020-06-17T04:17:51Z")

</div>

Hello, I'm not a developer, so I'm not familiar with program language. I added several scripted fields. I tried to add a new scripted field, but I can't. "Script is invalid." Following is an err. How can I solve…

---

## [Do you recommend to use a Vega or a non-Vega visualization?](https://discuss.elastic.co/t/do-you-recommend-to-use-a-vega-or-a-non-vega-visualization/237068)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 7\
**Last updated:** [June 17, 2020, 3:37am UTC](https://discuss.elastic.co/t/do-you-recommend-to-use-a-vega-or-a-non-vega-visualization/237068 "2020-06-17T03:37:28Z")

</div>

If a visualization has the same or very similar visual in Vega and non-Vega graph, which one is recommended to visualize? Are there any differences between Vega and non-Vega, such as performance behavior on dashboard?

---

## [How can I return results having a unique id field (i.e. no duplicates) when requesting a multisearch or search?](https://discuss.elastic.co/t/how-can-i-return-results-having-a-unique-id-field-i-e-no-duplicates-when-requesting-a-multisearch-or-search/237346)

<div class="topic-metadata">

**Author:** [@aorona](https://discuss.elastic.co/u/aorona)\
**Replies:** 1\
**Last updated:** [June 17, 2020, 3:25am UTC](https://discuss.elastic.co/t/how-can-i-return-results-having-a-unique-id-field-i-e-no-duplicates-when-requesting-a-multisearch-or-search/237346 "2020-06-17T03:25:19Z")

</div>

I am running a query against my index and when I do a multisearch or search, I get duplicate results. I have specified the \_id with a unique value, but I am still seeing duplicates. Is there a filter aggregation, or ot…

---

## [Bar Graph Not Showing Up Using Vega](https://discuss.elastic.co/t/bar-graph-not-showing-up-using-vega/237321)

<div class="topic-metadata">

**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 2:40pm UTC](https://discuss.elastic.co/t/bar-graph-not-showing-up-using-vega/237321 "2020-06-16T14:40:17Z")

</div>

Need help with Vega, my bar graph is not showing and i dont get why. Whilst on the job, I plan to manipulate "Align\_Distance\_To\_Go\_mm" to extract the counts of the number of its values within +/-300 and assign it to a …

---

## [Multiple analyzers with stemmed synonyms](https://discuss.elastic.co/t/multiple-analyzers-with-stemmed-synonyms/237317)

<div class="topic-metadata">

**Author:** [@Kushikawa](https://discuss.elastic.co/u/Kushikawa)\
**Replies:** 2\
**Last updated:** [June 17, 2020, 12:48am UTC](https://discuss.elastic.co/t/multiple-analyzers-with-stemmed-synonyms/237317 "2020-06-17T00:48:06Z")

</div>

I want to create an index with a stemmer analyzer to generalize my synonyms and apply it in other analyzers. For a simplified example: I want to use all these synonyms \[beautiful, pretty, beauteous, gorgeous\] in multipl…

---

## [How to offset the visualization graph in Kibana to the right](https://discuss.elastic.co/t/how-to-offset-the-visualization-graph-in-kibana-to-the-right/237375)

<div class="topic-metadata">

**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\
**Replies:** 0\
**Last updated:** [June 17, 2020, 12:13am UTC](https://discuss.elastic.co/t/how-to-offset-the-visualization-graph-in-kibana-to-the-right/237375 "2020-06-17T00:13:52Z")

</div>

Hi all, Attached please see my visualization. I want to shift the graph along the X axis to the right otherwise the largest DOT does not display completely Thanks sanjay

---

## [Are there any best practices for the migration of saved objects between different versions?](https://discuss.elastic.co/t/are-there-any-best-practices-for-the-migration-of-saved-objects-between-different-versions/236443)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 8\
**Last updated:** [June 17, 2020, 12:10am UTC](https://discuss.elastic.co/t/are-there-any-best-practices-for-the-migration-of-saved-objects-between-different-versions/236443 "2020-06-17T00:10:31Z")

</div>

I want to migrate the "saved objects" from ELK 7.6.2 version to 7.4.2 version. what data must be consistent? what needs attention? how to move safely, steadily and quickly?

---

## [How to get all results from Elastic Search Index using Powershell and save them locally](https://discuss.elastic.co/t/how-to-get-all-results-from-elastic-search-index-using-powershell-and-save-them-locally/237332)

<div class="topic-metadata">

**Author:** [@Vikas10](https://discuss.elastic.co/u/Vikas10)\
**Replies:** 3\
**Last updated:** [June 16, 2020, 11:25pm UTC](https://discuss.elastic.co/t/how-to-get-all-results-from-elastic-search-index-using-powershell-and-save-them-locally/237332 "2020-06-16T23:25:13Z")

</div>

At present I'm getting only 10 results form content .but the total shows 12000..i want to get all 12000 results one time. Is there a way to do it?

---

## [Do we need LB to cluster Kibana nodes](https://discuss.elastic.co/t/do-we-need-lb-to-cluster-kibana-nodes/237359)

<div class="topic-metadata">

**Author:** [@snambu5878](https://discuss.elastic.co/u/snambu5878)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 11:00pm UTC](https://discuss.elastic.co/t/do-we-need-lb-to-cluster-kibana-nodes/237359 "2020-06-16T23:00:34Z")

</div>

Hi Team, We are in the process of procuring Enterprise ELK license and we are doing a POC while the procurement in progress. We have 2 kibana nodes, 2 master nodes, 3 HOT data nodes, 2 WARM data nodes and other needed …

---

## [How does loadbalancing and "talking to a cluster" work?](https://discuss.elastic.co/t/how-does-loadbalancing-and-talking-to-a-cluster-work/237253)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 14\
**Last updated:** [June 16, 2020, 10:48pm UTC](https://discuss.elastic.co/t/how-does-loadbalancing-and-talking-to-a-cluster-work/237253 "2020-06-16T22:48:31Z")

</div>

Hi, I have learned a lot about clusteres in the past 2 weeks but one thing which I dont get the hang of is how to talk to the cluster. What i mean is that I have a Redis Database and I would like to ingest data into a H…

---

## [Map - can you customise Controls? (range slider on Group By, add bespoke values)](https://discuss.elastic.co/t/map-can-you-customise-controls-range-slider-on-group-by-add-bespoke-values/233875)

<div class="topic-metadata">

**Author:** [@unclezoot](https://discuss.elastic.co/u/unclezoot)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 10:46pm UTC](https://discuss.elastic.co/t/map-can-you-customise-controls-range-slider-on-group-by-add-bespoke-values/233875 "2020-06-16T22:46:51Z")

</div>

More map questions! Is it possible to make a range slider use the aggregated metric (from a terms aggregation/right join), e.g. SUM(sales) rather than just sales? Is it possible to create your own bespoke Controls…

---

## [Kibana unable to start (validation error cookie\_session\_storage.js)](https://discuss.elastic.co/t/kibana-unable-to-start-validation-error-cookie-session-storage-js/233787)

<div class="topic-metadata">

**Author:** [@kumar\_k](https://discuss.elastic.co/u/kumar_k)\
**Replies:** 2\
**Last updated:** [June 16, 2020, 10:41pm UTC](https://discuss.elastic.co/t/kibana-unable-to-start-validation-error-cookie-session-storage-js/233787 "2020-06-16T22:41:35Z")

</div>

Hi, Below error preventing kibana to start. please guide. ''' log \[17:00:36.724\] \[fatal\]\[root\] { ValidationError: child "path" fails because \["path" is not allowed to be empty\] at Object.exports.process (D:\\Kibana\_…

---

## [Suricata rulsets updates and Kibana](https://discuss.elastic.co/t/suricata-rulsets-updates-and-kibana/233809)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 9:56pm UTC](https://discuss.elastic.co/t/suricata-rulsets-updates-and-kibana/233809 "2020-06-16T21:56:24Z")

</div>

Hi, Running ELK 6.8.8 on premises I've defined a number of visualizations in Kibana, which use the signature IDs from Suricata. Initially I made a series of manual filters by ID and the visualizations look good, show…

---

## [I want to know the Roles setting for CSV output with Kibana](https://discuss.elastic.co/t/i-want-to-know-the-roles-setting-for-csv-output-with-kibana/234649)

<div class="topic-metadata">

**Author:** [@yokoyoko](https://discuss.elastic.co/u/yokoyoko)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 9:43pm UTC](https://discuss.elastic.co/t/i-want-to-know-the-roles-setting-for-csv-output-with-kibana/234649 "2020-06-16T21:43:04Z")

</div>

I want to create an account dedicated to CSV output from Kibana. To perform the following CSV output operation, What kind of setting should be made in "Management\> Security\> Roles"? ■ CSV output procedure Discover\> …

---

## [Breadcrumbs with drill down](https://discuss.elastic.co/t/breadcrumbs-with-drill-down/233780)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 9:31pm UTC](https://discuss.elastic.co/t/breadcrumbs-with-drill-down/233780 "2020-06-16T21:31:50Z")

</div>

Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s…

---

## [Coordinating node recommendation](https://discuss.elastic.co/t/coordinating-node-recommendation/237364)

<div class="topic-metadata">

**Author:** [@newkidtopc](https://discuss.elastic.co/u/newkidtopc)\
**Replies:** 0\
**Last updated:** [June 16, 2020, 9:25pm UTC](https://discuss.elastic.co/t/coordinating-node-recommendation/237364 "2020-06-16T21:25:50Z")

</div>

Hello, We have a ES cluster of 10 data nodes with additional 5 master nodes. We are exploring the idea of adding co-ordinating node to the cluster to help with query performance, especially aggregation queries. The dat…

---

## [The following Java JRE installation is unsupported](https://discuss.elastic.co/t/the-following-java-jre-installation-is-unsupported/237339)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 9:21pm UTC](https://discuss.elastic.co/t/the-following-java-jre-installation-is-unsupported/237339 "2020-06-16T21:21:42Z")

</div>

Hi all! I am running a 3 node, 7.6.2 cluster and came across the following critical alert during my latest Nessus scan on each: The following Java JRE installation is unsupported : Path : /usr/share/ela…

---

## [Kibana 7.5.0 - Unable to generate report Error: Failed to decrypt report job data](https://discuss.elastic.co/t/kibana-7-5-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/233824)

<div class="topic-metadata">

**Author:** [@Zabulon](https://discuss.elastic.co/u/Zabulon)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 9:19pm UTC](https://discuss.elastic.co/t/kibana-7-5-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/233824 "2020-06-16T21:19:39Z")

</div>

Hello, I'm trying to run reports and get stock with that message in the reporting console: \`Unable to generate report Error: Failed to decrypt report job data. Please ensure that xpack.reporting.encryptionKey is set a…

---

## [Kibana Web Console shows zero records when some docs don't have timestamp](https://discuss.elastic.co/t/kibana-web-console-shows-zero-records-when-some-docs-dont-have-timestamp/237355)

<div class="topic-metadata">

**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\
**Replies:** 5\
**Last updated:** [June 16, 2020, 9:07pm UTC](https://discuss.elastic.co/t/kibana-web-console-shows-zero-records-when-some-docs-dont-have-timestamp/237355 "2020-06-16T21:07:39Z")

</div>

Hi ES and Kibana versions 7.7.0 In this example I have three docs that are loaded into ElasticSearch. The mapping has a timestamp However one doc does not have a timestamp field { "browser\_type": "Firefox", "ts": …

---

## [CSV report downloaded is not giving the correct date data](https://discuss.elastic.co/t/csv-report-downloaded-is-not-giving-the-correct-date-data/234117)

<div class="topic-metadata">

**Author:** [@vijayaag](https://discuss.elastic.co/u/vijayaag)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 8:54pm UTC](https://discuss.elastic.co/t/csv-report-downloaded-is-not-giving-the-correct-date-data/234117 "2020-06-16T20:54:32Z")

</div>

Hi Team, I am trying to generate a CSV report, YTD. But the data after downloading is giving report only for April. I choose the absolute time range (Jan 2020 to till date) and i could see data from Jan in the UI. Once …

---

## [Remove message center icon from Kibana](https://discuss.elastic.co/t/remove-message-center-icon-from-kibana/234442)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 8:48pm UTC](https://discuss.elastic.co/t/remove-message-center-icon-from-kibana/234442 "2020-06-16T20:48:50Z")

</div>

Hi, I would like to remove this icon because it is confusing for my end users because they think that these messages are for them, but in fact these are just overall messages for the ELK stack. Is there a way to remove …

---

## [Not able to see elastic index to create index pattern](https://discuss.elastic.co/t/not-able-to-see-elastic-index-to-create-index-pattern/234558)

<div class="topic-metadata">

**Author:** [@kunal\_patil](https://discuss.elastic.co/u/kunal_patil)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 8:45pm UTC](https://discuss.elastic.co/t/not-able-to-see-elastic-index-to-create-index-pattern/234558 "2020-06-16T20:45:38Z")

</div>

I have created an index in ECE using filebeat as well as logstash. I am able to see the index in kibana in elasticseacrh index management. However, not able to create index pattern as the the indices are not available wh…

---

## [Can't Use Field (Float) in Visualization](https://discuss.elastic.co/t/cant-use-field-float-in-visualization/233445)

<div class="topic-metadata">

**Author:** [@ntwrk80](https://discuss.elastic.co/u/ntwrk80)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 8:36pm UTC](https://discuss.elastic.co/t/cant-use-field-float-in-visualization/233445 "2020-06-16T20:36:21Z")

</div>

I've verified that my index is showing the right type for the field I want to make a line graph with, but it does not show up as an option for the Y-Axis if I choose an aggregation type. My data is a simple number groke…

---

## [\[savedobjects-service\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/233548)

<div class="topic-metadata">

**Author:** [@jpnorenam](https://discuss.elastic.co/u/jpnorenam)\
**Replies:** 1\
**Last updated:** [June 16, 2020, 8:23pm UTC](https://discuss.elastic.co/t/savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/233548 "2020-06-16T20:23:50Z")

</div>

Hi, I'am setting up the new ELK (7.7.0) in debian/buster64 OS. And Kibana is unable to connect to ES. The console log: log \[13:32:01.586\] \[info\]\[savedobjects-service\] Starting saved objects migrations log \[13:32:01…

---

## [Kibana 7.7 tls enabling with ssl cert from let's encrypt](https://discuss.elastic.co/t/kibana-7-7-tls-enabling-with-ssl-cert-from-lets-encrypt/237205)

<div class="topic-metadata">

**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\
**Replies:** 2\
**Last updated:** [June 16, 2020, 8:03pm UTC](https://discuss.elastic.co/t/kibana-7-7-tls-enabling-with-ssl-cert-from-lets-encrypt/237205 "2020-06-16T20:03:18Z")

</div>

Hello, In my kibana setup I've secured using elastic ca certs. Chrome, firefox don't like them. Chrome refuses to allow login to my app. I would like to know how to generate certificate from let's encrypt using the car…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1993)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1995)
