# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=228 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 229 --- ## [Customize the dashboard panel (shade and size)](https://discuss.elastic.co/t/customize-the-dashboard-panel-shade-and-size/360432)
**Author:** [@Aryanto](https://discuss.elastic.co/u/Aryanto)\ **Replies:** 3\ **Last updated:** [May 31, 2024, 1:42pm UTC](https://discuss.elastic.co/t/customize-the-dashboard-panel-shade-and-size/360432 "2024-05-31T13:42:11Z")
Hi, I'm new here. first, I just need to know if is there any way to change the dashboard panel size (make the border or space between panels look thin) and the shadow or shade of the panel look transparent. more look li… --- ## [Go-elasticsearch Term Aggregations using Typed Client](https://discuss.elastic.co/t/go-elasticsearch-term-aggregations-using-typed-client/360628)
**Author:** [@btcarlson](https://discuss.elastic.co/u/btcarlson)\ **Replies:** 0\ **Last updated:** [May 31, 2024, 1:37pm UTC](https://discuss.elastic.co/t/go-elasticsearch-term-aggregations-using-typed-client/360628 "2024-05-31T13:37:25Z")
I've been struggling to create term aggregations using the typed client v8.13.1, and am wondering whether I've uncovered a bug. To start, I've created three simple test documents like the following: { "type": "A" }… --- ## [Aggregate documents](https://discuss.elastic.co/t/aggregate-documents/360599)
**Author:** [@reed](https://discuss.elastic.co/u/reed)\ **Replies:** 2\ **Last updated:** [May 31, 2024, 11:08am UTC](https://discuss.elastic.co/t/aggregate-documents/360599 "2024-05-31T11:08:18Z")
Hi all, I've created a pipeline that aggregate all input documents and generate a count for each group. in this moment I have two problems : at the first execution the aggregation works fine and the count is correct a… --- ## [Date parsing issue for ISO8601 in storing first line](https://discuss.elastic.co/t/date-parsing-issue-for-iso8601-in-storing-first-line/360608)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 2\ **Last updated:** [May 31, 2024, 10:12am UTC](https://discuss.elastic.co/t/date-parsing-issue-for-iso8601-in-storing-first-line/360608 "2024-05-31T10:12:38Z")
We are reading the data from csv file and storing it on elasticsearch. Below is the filter used for date date { match =\> \[ "extractTimestamp", "ISO8601"\] target =\> "extractTimestamp" tag\_on\_failure =\> \["extr… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/360062)
**Author:** [@Justo1982](https://discuss.elastic.co/u/Justo1982)\ **Replies:** 3\ **Last updated:** [May 31, 2024, 8:21am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/360062 "2024-05-31T08:21:20Z")
Hello, I'm installing ELK stack. I have installed Elasticsearch and Kibana but get the error below when I try to open the Kibana page. 'Kibana server is not ready yet' I have installed both components (Elasticsearch a… --- ## [How to make field names lower case when using dynamic mapping](https://discuss.elastic.co/t/how-to-make-field-names-lower-case-when-using-dynamic-mapping/360566)
**Author:** [@bvoros](https://discuss.elastic.co/u/bvoros)\ **Replies:** 2\ **Last updated:** [May 31, 2024, 8:00am UTC](https://discuss.elastic.co/t/how-to-make-field-names-lower-case-when-using-dynamic-mapping/360566 "2024-05-31T08:00:28Z")
Hello, Is it possible to configure logstash to make all field names lowercase when using dynamic mapping? Thanks in advance once again, --- ## [Elastic for ITSM - Servers can’t get passed proxy to our ServiceNow instance](https://discuss.elastic.co/t/elastic-for-itsm-servers-can-t-get-passed-proxy-to-our-servicenow-instance/360602)
**Author:** [@Naushad](https://discuss.elastic.co/u/Naushad)\ **Replies:** 0\ **Last updated:** [May 31, 2024, 7:55am UTC](https://discuss.elastic.co/t/elastic-for-itsm-servers-can-t-get-passed-proxy-to-our-servicenow-instance/360602 "2024-05-31T07:55:54Z")
Hi all, We are having an issue while connecting to ServiceNow Instance where MARS(elastic) servers can’t get passed proxy to our ServiceNow DEV instance which would need a path out. The current configuration does not h… --- ## [Trying to deploy statefulSet of Elasticsearch, persisting config and keystore not work](https://discuss.elastic.co/t/trying-to-deploy-statefulset-of-elasticsearch-persisting-config-and-keystore-not-work/360595)
**Author:** [@dan\_kim](https://discuss.elastic.co/u/dan_kim)\ **Replies:** 0\ **Last updated:** [May 31, 2024, 6:19am UTC](https://discuss.elastic.co/t/trying-to-deploy-statefulset-of-elasticsearch-persisting-config-and-keystore-not-work/360595 "2024-05-31T06:19:52Z")
Hello , i need help to persist config file and keystore in k8s stateful set . this version is 8.13, and somehow it is really okay to persist data directory but, it not works when trying to persist config directory. … --- ## [Whitelisting URL || ElasticAgent || APM Agent || JAVA](https://discuss.elastic.co/t/whitelisting-url-elasticagent-apm-agent-java/360594)
**Author:** [@Yogesh\_AS](https://discuss.elastic.co/u/Yogesh_AS)\ **Replies:** 0\ **Last updated:** [May 31, 2024, 6:05am UTC](https://discuss.elastic.co/t/whitelisting-url-elasticagent-apm-agent-java/360594 "2024-05-31T06:05:34Z")
Hi Team , We are in airgap environment without any internent connectvitiy we need to install the elk , elk agent and elk APM agent what are the URL need to be whitelisted please let us know Thanks in advance!!! --- ## [Create index in which one field as an Object of not same structure](https://discuss.elastic.co/t/create-index-in-which-one-field-as-an-object-of-not-same-structure/360593)
**Author:** [@Parameshwar\_Wankhede](https://discuss.elastic.co/u/Parameshwar_Wankhede)\ **Replies:** 0\ **Last updated:** [May 31, 2024, 5:37am UTC](https://discuss.elastic.co/t/create-index-in-which-one-field-as-an-object-of-not-same-structure/360593 "2024-05-31T05:37:53Z")
So i need some suggestion , in my project there is existing sql table .in which i have some fields and one nested object. that nested object i am storing as json string and i am querying on that. and main thing is that o… --- ## [Call a Value of a Field in alert message](https://discuss.elastic.co/t/call-a-value-of-a-field-in-alert-message/360589)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 0\ **Last updated:** [May 31, 2024, 3:12am UTC](https://discuss.elastic.co/t/call-a-value-of-a-field-in-alert-message/360589 "2024-05-31T03:12:33Z")
Hi there, I'm using ELK 8.11.2 I have a use case about alerting and I found the type rule that matches perfectly with my use case, now I have created an alert using a custom threshold type rule but the problem is I can… --- ## [Need to use {index} placeholder with index\_state\_management.rollover\_alias in index template](https://discuss.elastic.co/t/need-to-use-index-placeholder-with-index-state-management-rollover-alias-in-index-template/360547)
**Author:** [@Jahanvi\_Patel](https://discuss.elastic.co/u/Jahanvi_Patel)\ **Replies:** 2\ **Last updated:** [May 31, 2024, 12:38am UTC](https://discuss.elastic.co/t/need-to-use-index-placeholder-with-index-state-management-rollover-alias-in-index-template/360547 "2024-05-31T00:38:24Z")
I have multiple indices with same name pattern and I need to rollover about 100 indices using Index life cycle management. I am unable to use same template for all. It is very tedious to generate 100 templates for same i… --- ## [Filbeat not showing json outputs](https://discuss.elastic.co/t/filbeat-not-showing-json-outputs/360586)
**Author:** [@Junner](https://discuss.elastic.co/u/Junner)\ **Replies:** 0\ **Last updated:** [May 30, 2024, 11:20pm UTC](https://discuss.elastic.co/t/filbeat-not-showing-json-outputs/360586 "2024-05-30T23:20:43Z")
Elastic running, Kibana running but now im trying to transform a test.log into Json using Filebeats, but when im running ./filebeat -c filebeat.yml starts but never ends like if it was a listening service and im not reci… --- ## [Multiline Parsing- Elastic Agent/Fleet](https://discuss.elastic.co/t/multiline-parsing-elastic-agent-fleet/360580)
**Author:** [@bigmike19](https://discuss.elastic.co/u/bigmike19)\ **Replies:** 1\ **Last updated:** [May 30, 2024, 10:34pm UTC](https://discuss.elastic.co/t/multiline-parsing-elastic-agent-fleet/360580 "2024-05-30T22:34:17Z")
Hello Everyone, We are new to Elastic. We are using the Elastic Agent and are using Fleet management. We have a number of logs events coming in as separate documents. We are interested in setting up multiline parsing. I… --- ## [Microsoft Entra ID Entity Analytics vs Azure](https://discuss.elastic.co/t/microsoft-entra-id-entity-analytics-vs-azure/360498)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 2\ **Last updated:** [May 30, 2024, 7:40pm UTC](https://discuss.elastic.co/t/microsoft-entra-id-entity-analytics-vs-azure/360498 "2024-05-30T19:40:19Z")
Hello, I been leveraging Azure Logs - Audit Logs to collect Azure AD data. This is have been alright but I wanted to test out the Microsoft Entra ID Entity Analytics, wondering if others' experience with the latter int… --- ## [Kibana doesn't show field with values that logstash is getting correctly](https://discuss.elastic.co/t/kibana-doesnt-show-field-with-values-that-logstash-is-getting-correctly/360098)
**Author:** [@german](https://discuss.elastic.co/u/german)\ **Replies:** 6\ **Last updated:** [May 30, 2024, 6:01pm UTC](https://discuss.elastic.co/t/kibana-doesnt-show-field-with-values-that-logstash-is-getting-correctly/360098 "2024-05-30T18:01:17Z")
Hi guys! Long ago that I haven't used elk. Now that I want to use the same conf with same elk versions that it worked for me back then, I haven't been able to show the info with Kibana this time, because it says: "Lens … --- ## [Annotation API in elasticsearch in kibana for transactions](https://discuss.elastic.co/t/annotation-api-in-elasticsearch-in-kibana-for-transactions/360398)
**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\ **Replies:** 2\ **Last updated:** [May 30, 2024, 5:06pm UTC](https://discuss.elastic.co/t/annotation-api-in-elasticsearch-in-kibana-for-transactions/360398 "2024-05-30T17:06:02Z")
Need help on Annotation API on transactions in Elasticsearch. I have tried to create for one of my .Net service below is the code I run in kibana dev tools: POST /api/apm/service/1ACT/annotation { -H 'Content-Type: appl… --- ## [Date Range Searching With epoch\_seconds](https://discuss.elastic.co/t/date-range-searching-with-epoch-seconds/360516)
**Author:** [@deedubbs](https://discuss.elastic.co/u/deedubbs)\ **Replies:** 3\ **Last updated:** [May 30, 2024, 4:39pm UTC](https://discuss.elastic.co/t/date-range-searching-with-epoch-seconds/360516 "2024-05-30T16:39:45Z")
I'm not sure if this counts as a feature request or a bug but I've noticed a conflict within the documentation which is reflected in the functionality. I've also noticed several other threads that talk about this but the… --- ## [X-Enterprise-Search-Analytics Header with Elastic Search](https://discuss.elastic.co/t/x-enterprise-search-analytics-header-with-elastic-search/360572)
**Author:** [@kshobhit](https://discuss.elastic.co/u/kshobhit)\ **Replies:** 0\ **Last updated:** [May 30, 2024, 4:20pm UTC](https://discuss.elastic.co/t/x-enterprise-search-analytics-header-with-elastic-search/360572 "2024-05-30T16:20:19Z")
We are using the Elastic Search endpoints rather than using a App Search? Can we still use the X-Enterprise-Search-Analytics in header to generate the analytics for Elastic Search queries or is it restricted to App Sear… --- ## [Creating P12 certificates in a github workflow](https://discuss.elastic.co/t/creating-p12-certificates-in-a-github-workflow/358838)
**Author:** [@tdvo1996](https://discuss.elastic.co/u/tdvo1996)\ **Replies:** 8\ **Last updated:** [May 30, 2024, 2:05pm UTC](https://discuss.elastic.co/t/creating-p12-certificates-in-a-github-workflow/358838 "2024-05-30T14:05:45Z")
Hi, we would like to implement a rotation of P12-certificates using github workflows. Let's say you have a CA certificate. Would it be possible, in a github workflow, to use a public Elasticsearch docker image to create… --- ## [API call that allows to close ELK alert](https://discuss.elastic.co/t/api-call-that-allows-to-close-elk-alert/360156)
**Author:** [@cyber-urvesh](https://discuss.elastic.co/u/cyber-urvesh)\ **Replies:** 2\ **Last updated:** [May 30, 2024, 11:36am UTC](https://discuss.elastic.co/t/api-call-that-allows-to-close-elk-alert/360156 "2024-05-30T11:36:44Z")
Hi Team, I am looking for API call that allows to close an alert or multiple alerts - that are generated in Security Module. We are not leveraging Elastic Security or agent. We have KQL rule-based alerts and looking for… --- ## [How to append source system data into INDEX name Dynamically during push data from Logstash to ElasticSearch](https://discuss.elastic.co/t/how-to-append-source-system-data-into-index-name-dynamically-during-push-data-from-logstash-to-elasticsearch/360544)
**Author:** [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\ **Replies:** 1\ **Last updated:** [May 30, 2024, 10:24am UTC](https://discuss.elastic.co/t/how-to-append-source-system-data-into-index-name-dynamically-during-push-data-from-logstash-to-elasticsearch/360544 "2024-05-30T10:24:02Z")
output { elasticsearch { hosts =\>"http://localhost:9200" index =\> "control\_tower\_poc\_-%{+YYYY.MM.dd}" user =\> "elastic" password =\> "\*\*\*\*\*\*" } stdout { codec =\> rubydebug } } How to add … --- ## [Gc logs written to multiple locations](https://discuss.elastic.co/t/gc-logs-written-to-multiple-locations/360542)
**Author:** [@kg.sterneberg](https://discuss.elastic.co/u/kg.sterneberg)\ **Replies:** 3\ **Last updated:** [May 30, 2024, 9:30am UTC](https://discuss.elastic.co/t/gc-logs-written-to-multiple-locations/360542 "2024-05-30T09:30:18Z")
Just upgraded to Elasticsearch 8. and gc logs are now written to two locations. As specified in \\\jvm.options.d\\jvm.options, but also to default location elasticsearch-8.13.4\\logs\\. In the location specified… --- ## [Troubleshooting pipeline used in Elastic Agent Agent policy](https://discuss.elastic.co/t/troubleshooting-pipeline-used-in-elastic-agent-agent-policy/360541)
**Author:** [@eenthusiast](https://discuss.elastic.co/u/eenthusiast)\ **Replies:** 0\ **Last updated:** [May 30, 2024, 8:27am UTC](https://discuss.elastic.co/t/troubleshooting-pipeline-used-in-elastic-agent-agent-policy/360541 "2024-05-30T08:27:23Z")
I have added the Custom Logs integration to a policy active for one Agent. I have added a simple pipeline to this Agent policy using the " Ingest pipelines" setting under "Change defaults". But after adding the Ingest … --- ## [New Java API Client throws JsonpMappingException](https://discuss.elastic.co/t/new-java-api-client-throws-jsonpmappingexception/360345)
**Author:** [@PodarcisMuralis](https://discuss.elastic.co/u/PodarcisMuralis)\ **Replies:** 8\ **Last updated:** [May 30, 2024, 7:49am UTC](https://discuss.elastic.co/t/new-java-api-client-throws-jsonpmappingexception/360345 "2024-05-30T07:49:08Z")
Hi, I am currently migrating from High Rest API Client to Java APi Client and I got an error which I can not solve. This is my code: @Override public Optional\ findById(String id, List\ customerIds… --- ## [Filebeat with MSSQL - text not decode properly - utf-16le](https://discuss.elastic.co/t/filebeat-with-mssql-text-not-decode-properly-utf-16le/360536)
**Author:** [@seymanurmutlu](https://discuss.elastic.co/u/seymanurmutlu)\ **Replies:** 0\ **Last updated:** [May 30, 2024, 6:51am UTC](https://discuss.elastic.co/t/filebeat-with-mssql-text-not-decode-properly-utf-16le/360536 "2024-05-30T06:51:21Z")
Hello, I am using filebeat on Windows 10 sending logs to a remote server. But lines are not decoded correctly. Files are on hex format if I use this configuration on filebeat.yaml ; # ------------- MSSQL -------------… --- ## [Retrieve and Paginate Elasticsearch Results by Specific Categories](https://discuss.elastic.co/t/retrieve-and-paginate-elasticsearch-results-by-specific-categories/360531)
**Author:** [@Rajesh03](https://discuss.elastic.co/u/Rajesh03)\ **Replies:** 1\ **Last updated:** [May 30, 2024, 6:09am UTC](https://discuss.elastic.co/t/retrieve-and-paginate-elasticsearch-results-by-specific-categories/360531 "2024-05-30T06:09:11Z")
I have an Elasticsearch index that contains documents with company and subscription fields. The subscription field can have values like platinum, silver, and gold. For every search by company name, I need to retrieve re… --- ## [Tomcat identity error log is not getting parsed](https://discuss.elastic.co/t/tomcat-identity-error-log-is-not-getting-parsed/360298)
**Author:** [@sudhir\_singh](https://discuss.elastic.co/u/sudhir_singh)\ **Replies:** 2\ **Last updated:** [May 30, 2024, 5:01am UTC](https://discuss.elastic.co/t/tomcat-identity-error-log-is-not-getting-parsed/360298 "2024-05-30T05:01:45Z")
Hello Everyone below is my log and when I'm trying to parse with multiline in logstash either it is getting all the events in one message field or the every line one events getting ingested in separate message. 05-27-20… --- ## ["yarn build" - haven't created \`zip\` archive in kibana/plugins/my\_plugin\_name/build/ folder](https://discuss.elastic.co/t/yarn-build-havent-created-zip-archive-in-kibana-plugins-my-plugin-name-build-folder/360370)
**Author:** [@Sunil\_Jagtap](https://discuss.elastic.co/u/Sunil_Jagtap)\ **Replies:** 1\ **Last updated:** [May 30, 2024, 5:01am UTC](https://discuss.elastic.co/t/yarn-build-havent-created-zip-archive-in-kibana-plugins-my-plugin-name-build-folder/360370 "2024-05-30T05:01:26Z")
Hi Everyone, I followed below documentation to build custom plugin, Build plugin distributable : yarn build but It has't created the zip archive in kibana/plugins/my\_plugin\_name/build/ folder. Last few execution ou… --- ## [Context length is bigger than maximum allowed string](https://discuss.elastic.co/t/context-length-is-bigger-than-maximum-allowed-string/356985)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 4\ **Last updated:** [May 30, 2024, 4:14am UTC](https://discuss.elastic.co/t/context-length-is-bigger-than-maximum-allowed-string/356985 "2024-05-30T04:14:49Z")
Hi Team, We are trying to fetch log events on the discover tab and getting the following error. The log events consists of large Java stacks. We are using ELK version 8.10. I tried updating the server.maxPayload to… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=227) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=229)