# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=282 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 283 --- ## [Does Kibana accept using nested field data types?](https://discuss.elastic.co/t/does-kibana-accept-using-nested-field-data-types/355008)
**Author:** [@Alberto\_Jimenez1](https://discuss.elastic.co/u/Alberto_Jimenez1)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 6:32pm UTC](https://discuss.elastic.co/t/does-kibana-accept-using-nested-field-data-types/355008 "2024-03-19T18:32:31Z")
Im facing situation where i cant use all the fileds which are inside this nested data type field of type nested.... So can you confirm me its better mapping objects with Maximum 1 element \[{}\] as an object (default mapp… --- ## [Simple Problem with a duration script](https://discuss.elastic.co/t/simple-problem-with-a-duration-script/355188)
**Author:** [@Arthur\_Martins](https://discuss.elastic.co/u/Arthur_Martins)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 8:02pm UTC](https://discuss.elastic.co/t/simple-problem-with-a-duration-script/355188 "2024-03-19T20:02:13Z")
I have this two fields, Hora\_Fechamento (aka Closing\_Time) and Hora\_Abertura (aka Openning\_Time) in a same line of data. What i wish is to get and visualize the time between in seconds or milli. Tryied this script: emi… --- ## [How to combine two logs and find part of common](https://discuss.elastic.co/t/how-to-combine-two-logs-and-find-part-of-common/355069)
**Author:** [@MR98](https://discuss.elastic.co/u/MR98)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 7:57pm UTC](https://discuss.elastic.co/t/how-to-combine-two-logs-and-find-part-of-common/355069 "2024-03-19T19:57:12Z")
Hi all, I would like to create visualization based on search filter. I have two type of logs. Every log has two fields: message and objectID. Log history for example: Log1 - message: "MESSAGE.TEST.1" objectID: "123" … --- ## [Nested object fields not visible in Kibana visualizations](https://discuss.elastic.co/t/nested-object-fields-not-visible-in-kibana-visualizations/355058)
**Author:** [@SamV9](https://discuss.elastic.co/u/SamV9)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 7:51pm UTC](https://discuss.elastic.co/t/nested-object-fields-not-visible-in-kibana-visualizations/355058 "2024-03-19T19:51:58Z")
Hi guys, I am new to the ELK stack. I have been trying to build a visualization in Kibana that involves nested object fields. But have had no luck finding any information or resource on how to accomplish that. Can someo… --- ## [Saved object is failing in Kibana](https://discuss.elastic.co/t/saved-object-is-failing-in-kibana/355041)
**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 7:42pm UTC](https://discuss.elastic.co/t/saved-object-is-failing-in-kibana/355041 "2024-03-19T19:42:34Z")
Hi guys, I cannot import a saved object using Kibana ( using menu - Management - Kibana - stack Management and saved object but i have transfered the file using winscp from my desktop into the elasticsearch/kibana s… --- ## [TimeSlider in map](https://discuss.elastic.co/t/timeslider-in-map/355676)
**Author:** [@Rupa123](https://discuss.elastic.co/u/Rupa123)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 7:24pm UTC](https://discuss.elastic.co/t/timeslider-in-map/355676 "2024-03-19T19:24:21Z")
Hey, I am using Kibana map, and it has a time slider which usually is a play button for give timestamp. But this timeslider is not shown in iframe. Is there a way to see or add timeslider in the iframe? --- ## [Set up ELK stack and can only see json when I browse to it](https://discuss.elastic.co/t/set-up-elk-stack-and-can-only-see-json-when-i-browse-to-it/355658)
**Author:** [@Vickistan](https://discuss.elastic.co/u/Vickistan)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 6:54pm UTC](https://discuss.elastic.co/t/set-up-elk-stack-and-can-only-see-json-when-i-browse-to-it/355658 "2024-03-19T18:54:31Z")
Hey, I am very new to ELK, and I set up a stack using this: I am on a VM running Ubuntu 22.04. Everything comes up without errors, but when I browse to https://ubuntu.elk.mydomain.com, I don't get a Kibana dashboard b… --- ## [Configured S3 repository on multiple clusters with write-access, data corrupted](https://discuss.elastic.co/t/configured-s3-repository-on-multiple-clusters-with-write-access-data-corrupted/355602)
**Author:** [@Tariq\_Yahya](https://discuss.elastic.co/u/Tariq_Yahya)\ **Replies:** 9\ **Last updated:** [March 19, 2024, 6:34pm UTC](https://discuss.elastic.co/t/configured-s3-repository-on-multiple-clusters-with-write-access-data-corrupted/355602 "2024-03-19T18:34:05Z")
I added the same S3 repository used by one of my cluster to another cluster and I forgot to give it read-only access. It states in the documentation that this action could cause data corruption : "If you register the sa… --- ## [How create a datamart or datawarehouse in elasticsearch](https://discuss.elastic.co/t/how-create-a-datamart-or-datawarehouse-in-elasticsearch/354995)
**Author:** [@Monia\_Louati](https://discuss.elastic.co/u/Monia_Louati)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 6:14pm UTC](https://discuss.elastic.co/t/how-create-a-datamart-or-datawarehouse-in-elasticsearch/354995 "2024-03-19T18:14:33Z")
how to create a datamart or datawarehouse in elasticsearch ? --- ## [Elasticsearch broken pipe exception](https://discuss.elastic.co/t/elasticsearch-broken-pipe-exception/355755)
**Author:** [@Joao\_Cardoso](https://discuss.elastic.co/u/Joao_Cardoso)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 6:10pm UTC](https://discuss.elastic.co/t/elasticsearch-broken-pipe-exception/355755 "2024-03-19T18:10:18Z")
Using elasticsearch v8 client for .net 8, while performing load tests (arround 5000 in one minute), having a lot of exceptions regarding the connection: Invalid Elasticsearch response built from a unsuccessful () low le… --- ## [Groupby on pre-filtered values](https://discuss.elastic.co/t/groupby-on-pre-filtered-values/354961)
**Author:** [@kassof](https://discuss.elastic.co/u/kassof)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 6:06pm UTC](https://discuss.elastic.co/t/groupby-on-pre-filtered-values/354961 "2024-03-19T18:06:21Z")
Hello, I aim to create a visualization in Kibana that mirrors the output obtained with the following Python pandas code. Please note that while the example code is in Python, my data resides within an Elasticsearch inde… --- ## [Segregate the Server based on type like Windows host on one Group and Linux on another group in Kibana Dashboard](https://discuss.elastic.co/t/segregate-the-server-based-on-type-like-windows-host-on-one-group-and-linux-on-another-group-in-kibana-dashboard/354946)
**Author:** [@nkreddyp](https://discuss.elastic.co/u/nkreddyp)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 5:58pm UTC](https://discuss.elastic.co/t/segregate-the-server-based-on-type-like-windows-host-on-one-group-and-linux-on-another-group-in-kibana-dashboard/354946 "2024-03-19T17:58:35Z")
Dear All, I have setup ELK stack and integrated Windows& Linux Server and F5 Fortinet and VMware now my requirement is we have multiple clients in our private cloud environment so we want to make separate group or cate… --- ## [Redirect URLs that detect vulnerabilities to kibana HomePage or change their content to 404](https://discuss.elastic.co/t/redirect-urls-that-detect-vulnerabilities-to-kibana-homepage-or-change-their-content-to-404/354689)
**Author:** [@Septianingrum.17](https://discuss.elastic.co/u/Septianingrum.17)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 5:39pm UTC](https://discuss.elastic.co/t/redirect-urls-that-detect-vulnerabilities-to-kibana-homepage-or-change-their-content-to-404/354689 "2024-03-19T17:39:16Z")
Dear All, I have 3 elasticsearh, 2 kibana and 2 logtsash in 1 cluster with versions elasticsearch and kibana 8.11.3 after carrying out a VA scan on the ELK cluster, the vulnerabilities "Web Server Misconfiguration: Unp… --- ## [Looking for a json samples to configure csv share reporting](https://discuss.elastic.co/t/looking-for-a-json-samples-to-configure-csv-share-reporting/354753)
**Author:** [@nmurilo](https://discuss.elastic.co/u/nmurilo)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 5:34pm UTC](https://discuss.elastic.co/t/looking-for-a-json-samples-to-configure-csv-share-reporting/354753 "2024-03-19T17:34:31Z")
According to the documentation: Reporting settings in Kibana | Kibana Guide \[8.12\] | Elastic I have to add "xpack.reporting.roles.enabled: false" on kibana yaml file. But I already have a xpack definition on json file … --- ## [Having problem in login login?msg=unauthenticated](https://discuss.elastic.co/t/having-problem-in-login-login-msg-unauthenticated/354154)
**Author:** [@TUSHAR\_YADAV](https://discuss.elastic.co/u/TUSHAR_YADAV)\ **Replies:** 1\ **Last updated:** [March 19, 2024, 5:27pm UTC](https://discuss.elastic.co/t/having-problem-in-login-login-msg-unauthenticated/354154 "2024-03-19T17:27:54Z")
when i login through my nginx reverse proxy and i put my nginx username and password then i am forwarded to elastic login page when i fill my elastic username and password then automatically i got log out then i notice o… --- ## [Query cache is always empty](https://discuss.elastic.co/t/query-cache-is-always-empty/355582)
**Author:** [@Minh\_S\_D](https://discuss.elastic.co/u/Minh_S_D)\ **Replies:** 5\ **Last updated:** [March 19, 2024, 5:26pm UTC](https://discuss.elastic.co/t/query-cache-is-always-empty/355582 "2024-03-19T17:26:04Z")
In setting of index: "queries": { "cache": { "enabled": "true" } }, GET products/\_search { "query": { "bool" : { "must": \[ { "match": { "product\_flat.name":… --- ## [Saved object api on with remote host](https://discuss.elastic.co/t/saved-object-api-on-with-remote-host/355741)
**Author:** [@griffer98](https://discuss.elastic.co/u/griffer98)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 3:51pm UTC](https://discuss.elastic.co/t/saved-object-api-on-with-remote-host/355741 "2024-03-19T15:51:26Z")
Hello, When I use the saved object api to search for a dashboard, it works fine, but when I try this on a remote host, I get a failed uri handler error. Is there any way to search for a dashboard that exists on a remote … --- ## [Any doc regarding setting up elk on ecs](https://discuss.elastic.co/t/any-doc-regarding-setting-up-elk-on-ecs/355731)
**Author:** [@Paras\_Madaan](https://discuss.elastic.co/u/Paras_Madaan)\ **Replies:** 4\ **Last updated:** [March 19, 2024, 3:30pm UTC](https://discuss.elastic.co/t/any-doc-regarding-setting-up-elk-on-ecs/355731 "2024-03-19T15:30:04Z")
Need any documentation which can help in setting up an elk cluster having 2 datanodes and 3 dedicated master nodes (ecs on ec2) --- ## [Nodes Cant Communicate to eachother](https://discuss.elastic.co/t/nodes-cant-communicate-to-eachother/355729)
**Author:** [@fatima1](https://discuss.elastic.co/u/fatima1)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 2:15pm UTC](https://discuss.elastic.co/t/nodes-cant-communicate-to-eachother/355729 "2024-03-19T14:15:47Z")
Could you please review the configurations I've provided for both machines? I'm encountering an issue where I'm unable to establish communication between the two nodes in Elasticsearch. Machine 1 ======================… --- ## [One filebeat instance marking output cnx failed](https://discuss.elastic.co/t/one-filebeat-instance-marking-output-cnx-failed/355485)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 2:51pm UTC](https://discuss.elastic.co/t/one-filebeat-instance-marking-output-cnx-failed/355485 "2024-03-19T14:51:28Z")
Hi Got multiple filebeat instance +50, all deployed from same home built rpm, now suddenly one instance are failing to ingest it filestreams, complaining like this: {"log.level":"error","@timestamp":"2024-03-15T12:44:5… --- ## [Metricbeat - how to see the usage of all CPU cores](https://discuss.elastic.co/t/metricbeat-how-to-see-the-usage-of-all-cpu-cores/355592)
**Author:** [@Kamil2](https://discuss.elastic.co/u/Kamil2)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 2:50pm UTC](https://discuss.elastic.co/t/metricbeat-how-to-see-the-usage-of-all-cpu-cores/355592 "2024-03-19T14:50:51Z")
Is it possible to monitor the usage of individual CPU cores on linux? I need to monitor the usage of individual processor cores and compare them to running applications. None of the system.core options include percentag… --- ## [Upgraded to Elasticsearch 7.10 on AWS, enabled HTTPS only. Logstash is not connecting](https://discuss.elastic.co/t/upgraded-to-elasticsearch-7-10-on-aws-enabled-https-only-logstash-is-not-connecting/355709)
**Author:** [@scolilay](https://discuss.elastic.co/u/scolilay)\ **Replies:** 5\ **Last updated:** [March 19, 2024, 2:45pm UTC](https://discuss.elastic.co/t/upgraded-to-elasticsearch-7-10-on-aws-enabled-https-only-logstash-is-not-connecting/355709 "2024-03-19T14:45:48Z")
Hello I recentl upgraded Elasticsearch to 7.10 on my AWS account. I also upgraded logstash to 7.17.18. I also enabled the following settings because of my customer request. Required HTTPS Node-to-node encryption Enc… --- ## [Automatic Deletion of Snooze Schedules in Kibana UI for Elastic Cloud](https://discuss.elastic.co/t/automatic-deletion-of-snooze-schedules-in-kibana-ui-for-elastic-cloud/355735)
**Author:** [@VKs](https://discuss.elastic.co/u/VKs)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 2:44pm UTC](https://discuss.elastic.co/t/automatic-deletion-of-snooze-schedules-in-kibana-ui-for-elastic-cloud/355735 "2024-03-19T14:44:33Z")
Snooze schedules for rules in Kibana UI for Elastic Cloud are being deleted automatically, even though I didn't delete them manually. Kibana version : v 8.8.1 I created schedules by clicking the "Notify" option under ru… --- ## [How to calculate a month's projection in a TSVB's math field](https://discuss.elastic.co/t/how-to-calculate-a-months-projection-in-a-tsvbs-math-field/355732)
**Author:** [@Jalil\_Sayarh](https://discuss.elastic.co/u/Jalil_Sayarh)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 2:18pm UTC](https://discuss.elastic.co/t/how-to-calculate-a-months-projection-in-a-tsvbs-math-field/355732 "2024-03-19T14:18:44Z")
I want to use TSVB's math field to have a simple projection of one variable's data to have a projection of that variable over to the month. but I can't seem to figure it out, I tried using timestamp like this : 31-((par… --- ## ['query\_string' does not return records when using wildcard since 8.9 (wilcard query does)](https://discuss.elastic.co/t/query-string-does-not-return-records-when-using-wildcard-since-8-9-wilcard-query-does/355481)
**Author:** [@pawel.kupka-trojak](https://discuss.elastic.co/u/pawel.kupka-trojak)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 1:38pm UTC](https://discuss.elastic.co/t/query-string-does-not-return-records-when-using-wildcard-since-8-9-wilcard-query-does/355481 "2024-03-19T13:38:54Z")
Hi, We are testing server upgrade to 8.12.2 and we found that some of our queries stopped to works. We use 'query\_string' with wildcard to search for user requested data. I have prepared some test data to show the cha… --- ## [New to ELK cant get logstash to work](https://discuss.elastic.co/t/new-to-elk-cant-get-logstash-to-work/355639)
**Author:** [@elastic\_user2](https://discuss.elastic.co/u/elastic_user2)\ **Replies:** 3\ **Last updated:** [March 19, 2024, 1:33pm UTC](https://discuss.elastic.co/t/new-to-elk-cant-get-logstash-to-work/355639 "2024-03-19T13:33:02Z")
Hello, I have an elk on an on prem cluster on VMs. One is running norconex web crawler (windows) which is working and creating logs and filebeats. The other is running logstash (RHEL). I installed the lastest versions… --- ## [Assigned roles \[create\_doc\] were not found) on indices](https://discuss.elastic.co/t/assigned-roles-create-doc-were-not-found-on-indices/355470)
**Author:** [@kra28](https://discuss.elastic.co/u/kra28)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 1:03pm UTC](https://discuss.elastic.co/t/assigned-roles-create-doc-were-not-found-on-indices/355470 "2024-03-19T13:03:44Z")
Hello, I have some troubles to add a document into an index. Thank you for your answer. I have created a user kra28 and index pdbs\_index and add the privileges using: { "indices": \[ { "names": \[ "p… --- ## [Is it expected that filestream input picks up all documents again when file is updated again after close.on\_state\_change.inactive is exceeded?](https://discuss.elastic.co/t/is-it-expected-that-filestream-input-picks-up-all-documents-again-when-file-is-updated-again-after-close-on-state-change-inactive-is-exceeded/355514)
**Author:** [@jori-be](https://discuss.elastic.co/u/jori-be)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 12:49pm UTC](https://discuss.elastic.co/t/is-it-expected-that-filestream-input-picks-up-all-documents-again-when-file-is-updated-again-after-close-on-state-change-inactive-is-exceeded/355514 "2024-03-19T12:49:03Z")
Hey all, I'm using Filebeat 8.11.3 and I noticed that it sometimes resubmits documents that it already handled before. So I'm wondering what the expected behaviour is of Filebeat. There is a setting filestream input |… --- ## [Hyperlinks in Kibana data table](https://discuss.elastic.co/t/hyperlinks-in-kibana-data-table/355717)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 0\ **Last updated:** [March 19, 2024, 11:06am UTC](https://discuss.elastic.co/t/hyperlinks-in-kibana-data-table/355717 "2024-03-19T11:06:51Z")
We have a Data table that has hyperlinks to Host Overview dashboard. When the link is clicked, the Host Overview dashboard will open filtered by the agent.hostname field. When a host does not have data, the dashboard sa… --- ## [Resource usage / Elasticsearch on virtual machine / single node](https://discuss.elastic.co/t/resource-usage-elasticsearch-on-virtual-machine-single-node/355554)
**Author:** [@FrankyR](https://discuss.elastic.co/u/FrankyR)\ **Replies:** 2\ **Last updated:** [March 19, 2024, 10:51am UTC](https://discuss.elastic.co/t/resource-usage-elasticsearch-on-virtual-machine-single-node/355554 "2024-03-19T10:51:52Z")
Dear community, I am trying to run Elasticsearch for a very small task ( I need to only visualize dmarc data with a couple of records a day so far). I configured single node in elasticsearch.yml by: network.host: 127.… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=281) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=283)