# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=669

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 670

---

## [Kibana problem visualize scripted fields](https://discuss.elastic.co/t/kibana-problem-visualize-scripted-fields/322934)

<div class="topic-metadata">

**Author:** [@Anonym123](https://discuss.elastic.co/u/Anonym123)\
**Replies:** 6\
**Last updated:** [January 12, 2023, 2:01pm UTC](https://discuss.elastic.co/t/kibana-problem-visualize-scripted-fields/322934 "2023-01-12T14:01:27Z")

</div>

Hello im trying to convert an integer field like "1,676,274,668" to an Date/Datetime field and visualize it afterwards with Kibana. I use a scripted field which can be seen on the next picture. Here everything look…

---

## [Which port is my logstash using?](https://discuss.elastic.co/t/which-port-is-my-logstash-using/323021)

<div class="topic-metadata">

**Author:** [@waitangi](https://discuss.elastic.co/u/waitangi)\
**Replies:** 3\
**Last updated:** [January 12, 2023, 1:41pm UTC](https://discuss.elastic.co/t/which-port-is-my-logstash-using/323021 "2023-01-12T13:41:15Z")

</div>

Hello all I have a running server where logstash is working. In my pipelines.yml there's a line path.config: "/etc/logstash/conf.d/\*.conf" - this points to a directory where my configuration is. The directory contains …

---

## [Kibana bar chart colours are different from saved](https://discuss.elastic.co/t/kibana-bar-chart-colours-are-different-from-saved/322767)

<div class="topic-metadata">

**Author:** [@KristinaRaja](https://discuss.elastic.co/u/KristinaRaja)\
**Replies:** 11\
**Last updated:** [January 12, 2023, 1:22pm UTC](https://discuss.elastic.co/t/kibana-bar-chart-colours-are-different-from-saved/322767 "2023-01-12T13:22:15Z")

</div>

Wondering if anyone can answer this question and maybe help guide me in the right direction... Our product leverages Kibana within an iframe and we are on version 7.17.6 cloud. In the dashboards that we've built, we a…

---

## [Kibana - Changing the color/font of Aggregation/Lens Bar Chart?](https://discuss.elastic.co/t/kibana-changing-the-color-font-of-aggregation-lens-bar-chart/322936)

<div class="topic-metadata">

**Author:** [@mohammedniyaz](https://discuss.elastic.co/u/mohammedniyaz)\
**Replies:** 3\
**Last updated:** [January 12, 2023, 1:18pm UTC](https://discuss.elastic.co/t/kibana-changing-the-color-font-of-aggregation-lens-bar-chart/322936 "2023-01-12T13:18:59Z")

</div>

Hi Team, In Kibana 8.5 Version - I'm using lens/Aggregate Bar chart to visualize my data. I want to change the color/font of those X-Axis & Y-Axis available in the widget. Is that possible to change ?

---

## [Heapdump without timeouts](https://discuss.elastic.co/t/heapdump-without-timeouts/322850)

<div class="topic-metadata">

**Author:** [@frens](https://discuss.elastic.co/u/frens)\
**Replies:** 8\
**Last updated:** [January 12, 2023, 1:12pm UTC](https://discuss.elastic.co/t/heapdump-without-timeouts/322850 "2023-01-12T13:12:32Z")

</div>

Hi! We're running nodes with a substantial amount of heap (150+Gb). I know how to take a dump the heap with jmap. However, dumping a heap this size on our machines will probably take several minutes (if I extrapolate li…

---

## [How to get ML Categorization results break down by users](https://discuss.elastic.co/t/how-to-get-ml-categorization-results-break-down-by-users/320283)

<div class="topic-metadata">

**Author:** [@CamillePapillon](https://discuss.elastic.co/u/CamillePapillon)\
**Replies:** 8\
**Last updated:** [January 12, 2023, 12:45pm UTC](https://discuss.elastic.co/t/how-to-get-ml-categorization-results-break-down-by-users/320283 "2023-01-12T12:45:33Z")

</div>

Hi! I have an input index with tons of different logs messages coming from many different devices (same product type = similar logs, different users). My source index is break down with : timestamp, serial\_number, messa…

---

## [Drop\_event when no value in both TargetUserName and Workstation fields (event id 4776)](https://discuss.elastic.co/t/drop-event-when-no-value-in-both-targetusername-and-workstation-fields-event-id-4776/322715)

<div class="topic-metadata">

**Author:** [@yankaiqian](https://discuss.elastic.co/u/yankaiqian)\
**Replies:** 2\
**Last updated:** [January 12, 2023, 12:18pm UTC](https://discuss.elastic.co/t/drop-event-when-no-value-in-both-targetusername-and-workstation-fields-event-id-4776/322715 "2023-01-12T12:18:28Z")

</div>

winlogbeat-7.17.0 I tried to drop the events that id is 4776 and no value in both TargetUsername and Workstation, but it doesn't work, may I know how to write the condition part and get it work? Here is the part of the…

---

## [Logstash is not ingesting data from all nodes](https://discuss.elastic.co/t/logstash-is-not-ingesting-data-from-all-nodes/322981)

<div class="topic-metadata">

**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\
**Replies:** 5\
**Last updated:** [January 12, 2023, 11:58am UTC](https://discuss.elastic.co/t/logstash-is-not-ingesting-data-from-all-nodes/322981 "2023-01-12T11:58:46Z")

</div>

I am using filebeat to ship logs to logstash and using it to ingest data to Index. From 2 days i am seeing multiple issues. from Kibana dashboard i am not seeing logs on regular basis of the particular index. // for t…

---

## [Elasticsearch, kibana server not up due to version dependency erros](https://discuss.elastic.co/t/elasticsearch-kibana-server-not-up-due-to-version-dependency-erros/317065)

<div class="topic-metadata">

**Author:** [@SUNA](https://discuss.elastic.co/u/SUNA)\
**Replies:** 9\
**Last updated:** [November 17, 2022, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-server-not-up-due-to-version-dependency-erros/317065 "2022-11-17T15:15:02Z")

</div>

Hello, Team. We have an ELK server in our digital environment, as well as production servers in AWS. We have recently encountered version dependency issues in ELK. As a result, I intend to restore ELK server from an ol…

---

## [Fixing late logs into elastic](https://discuss.elastic.co/t/fixing-late-logs-into-elastic/322888)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 6\
**Last updated:** [January 12, 2023, 10:54am UTC](https://discuss.elastic.co/t/fixing-late-logs-into-elastic/322888 "2023-01-12T10:54:18Z")

</div>

Hello there, i would like to ask about my problem here. so here is the situation. my elastic, receive log from OCP. the problem is when the log is viewed from elastic, it doesn't appear to have updated. as in the image …

---

## [Docker and System Logs/Metrics from container-based Agent](https://discuss.elastic.co/t/docker-and-system-logs-metrics-from-container-based-agent/322679)

<div class="topic-metadata">

**Author:** [@litronics](https://discuss.elastic.co/u/litronics)\
**Replies:** 13\
**Last updated:** [January 12, 2023, 10:27am UTC](https://discuss.elastic.co/t/docker-and-system-logs-metrics-from-container-based-agent/322679 "2023-01-12T10:27:52Z")

</div>

Hi, I am pretty new to the ELK Stack and have some trouble getting detailed metrics from a docker based agent. The Stack is running on also as docker container and after days playing around with TLS certificates I have…

---

## [Valores en blanco desde el modulo Netflow](https://discuss.elastic.co/t/valores-en-blanco-desde-el-modulo-netflow/323012)

<div class="topic-metadata">

**Author:** [@ZekeJ](https://discuss.elastic.co/u/ZekeJ)\
**Replies:** 0\
**Last updated:** [January 12, 2023, 10:27am UTC](https://discuss.elastic.co/t/valores-en-blanco-desde-el-modulo-netflow/323012 "2023-01-12T10:27:37Z")

</div>

Hola, aquí un novato de elastic stack. Estoy intentando monitorizar los interfaces de mi palo alto a través del modulo NetFlow. En principio parece que llegan logs, pero todos los campos relativos a NetFlow ( por ejempl…

---

## [Netflow Module sends null fields](https://discuss.elastic.co/t/netflow-module-sends-null-fields/323011)

<div class="topic-metadata">

**Author:** [@ZekeJ](https://discuss.elastic.co/u/ZekeJ)\
**Replies:** 0\
**Last updated:** [January 12, 2023, 10:25am UTC](https://discuss.elastic.co/t/netflow-module-sends-null-fields/323011 "2023-01-12T10:25:32Z")

</div>

Hello, this is an elastic stack newbie. I am trying to monitor the interfaces of my Palo Alto through the NetFlow module. At first it seems that logs arrive, but all the fields related to NetFlow (for example the netflo…

---

## [Integration for IBM App Connect Enterprise or IIB](https://discuss.elastic.co/t/integration-for-ibm-app-connect-enterprise-or-iib/323004)

<div class="topic-metadata">

**Author:** [@PetervH](https://discuss.elastic.co/u/PetervH)\
**Replies:** 0\
**Last updated:** [January 12, 2023, 9:43am UTC](https://discuss.elastic.co/t/integration-for-ibm-app-connect-enterprise-or-iib/323004 "2023-01-12T09:43:59Z")

</div>

Is there an integration available for displaying event data emitted from IBM App Connect Enterprise or IIB?

---

## [Max\_docs\_per\_index exceeded](https://discuss.elastic.co/t/max-docs-per-index-exceeded/322994)

<div class="topic-metadata">

**Author:** [@Dimitri\_F](https://discuss.elastic.co/u/Dimitri_F)\
**Replies:** 7\
**Last updated:** [January 12, 2023, 9:25am UTC](https://discuss.elastic.co/t/max-docs-per-index-exceeded/322994 "2023-01-12T09:25:07Z")

</div>

Hello. I use Elasticsearch with Graylog. During this week I noticed that my Elasticsearch server is running out of disk space. It’s configured to store 240 indices. Max\_docs\_per\_index is 20 million documents. Having che…

---

## [The Plan to support SNMP Traps version 3 as input plugin?](https://discuss.elastic.co/t/the-plan-to-support-snmp-traps-version-3-as-input-plugin/322907)

<div class="topic-metadata">

**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\
**Replies:** 2\
**Last updated:** [January 12, 2023, 8:50am UTC](https://discuss.elastic.co/t/the-plan-to-support-snmp-traps-version-3-as-input-plugin/322907 "2023-01-12T08:50:00Z")

</div>

Plant to support SNMP Traps version 3 as input plugin? So far V3 not supported if there is plan and info you can everyone to add me, please don't hesitate. thank you

---

## [Kibana Webhook to Ansible Tower Doesn't work](https://discuss.elastic.co/t/kibana-webhook-to-ansible-tower-doesnt-work/322998)

<div class="topic-metadata">

**Author:** [@dxcr](https://discuss.elastic.co/u/dxcr)\
**Replies:** 0\
**Last updated:** [January 12, 2023, 8:08am UTC](https://discuss.elastic.co/t/kibana-webhook-to-ansible-tower-doesnt-work/322998 "2023-01-12T08:08:27Z")

</div>

I am trying to run an Ansible tower with Kibana webhook connector but it's not working. This playbook works fine by using "curl -X POST -u username:password https://mytower.company.com/api/v2/job\_templates/99/launch/ an…

---

## [ELasticsearch 7.3.2 on ubuntu 20.04](https://discuss.elastic.co/t/elasticsearch-7-3-2-on-ubuntu-20-04/322984)

<div class="topic-metadata">

**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\
**Replies:** 3\
**Last updated:** [January 12, 2023, 6:47am UTC](https://discuss.elastic.co/t/elasticsearch-7-3-2-on-ubuntu-20-04/322984 "2023-01-12T06:47:40Z")

</div>

Hi Team, Can we install elasticsearch 7.3.2 in ubunutu 20.04. In the support matrix elasticsearch team no supported in to install on ubunut 20.04 But for our need shall we install 7.3.2 in ubuntu 20.0.4. is this cause…

---

## [Unable to access elasticsearch on a particular network](https://discuss.elastic.co/t/unable-to-access-elasticsearch-on-a-particular-network/322878)

<div class="topic-metadata">

**Author:** [@Jay\_Ostwal](https://discuss.elastic.co/u/Jay_Ostwal)\
**Replies:** 8\
**Last updated:** [January 12, 2023, 6:40am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-on-a-particular-network/322878 "2023-01-12T06:40:48Z")

</div>

I am using elasticsearch since more than one year on a particular wifi network. Suddenly since 2 days I am unable to access the data from elasticsearch on this particular network and I am getting error as ConnectionError…

---

## [Elasticsearch not starting after RHEL kernel upgrade](https://discuss.elastic.co/t/elasticsearch-not-starting-after-rhel-kernel-upgrade/322076)

<div class="topic-metadata">

**Author:** [@hasith-adl](https://discuss.elastic.co/u/hasith-adl)\
**Replies:** 7\
**Last updated:** [January 12, 2023, 6:22am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-rhel-kernel-upgrade/322076 "2023-01-12T06:22:42Z")

</div>

Hi, Elasticsearch (v7.5.2) does not start after performing a kernel upgrade from 3.10.0-957.el7 to 3.10.0-1160.80.1.el7. \[2022-12-28T12:30:27,741\]\[INFO \]\[o.e.b.BootstrapChecks \] \[igw-edb3\] bound or publishing to a n…

---

## [Controls - Option List - "Dynamic Options" not working/understood?](https://discuss.elastic.co/t/controls-option-list-dynamic-options-not-working-understood/321138)

<div class="topic-metadata">

**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\
**Replies:** 3\
**Last updated:** [December 15, 2022, 7:29am UTC](https://discuss.elastic.co/t/controls-option-list-dynamic-options-not-working-understood/321138 "2022-12-15T07:29:27Z")

</div>

Hi! I'm working with a few Option Lists in the same visualization, and either I don't understand what "Dynamic Options" does or I'm doing something wrong. Let's say I have a dataset like: { "person": "A", "house": "ho…

---

## [Error: Could not find or load main class org.elasticsearch.launcher.CliToolLauncher](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-launcher-clitoollauncher/321572)

<div class="topic-metadata">

**Author:** [@dziugitaz](https://discuss.elastic.co/u/dziugitaz)\
**Replies:** 3\
**Last updated:** [January 12, 2023, 3:26am UTC](https://discuss.elastic.co/t/error-could-not-find-or-load-main-class-org-elasticsearch-launcher-clitoollauncher/321572 "2023-01-12T03:26:27Z")

</div>

I'm using windows and when I'm trying to run any other command than bin/elasticsearch.bat I get this strange error, maybe do you know why? I've checked the logs but I didn't found anything other than this dziugas@DESKTO…

---

## [Configure multiple logs location on filebeat](https://discuss.elastic.co/t/configure-multiple-logs-location-on-filebeat/322971)

<div class="topic-metadata">

**Author:** [@vassiliy.vins](https://discuss.elastic.co/u/vassiliy.vins)\
**Replies:** 10\
**Last updated:** [January 12, 2023, 1:36am UTC](https://discuss.elastic.co/t/configure-multiple-logs-location-on-filebeat/322971 "2023-01-12T01:36:53Z")

</div>

Hi! let's say I need to send logs from a few directories to elasticsearch, like this: /var/log/logfolder1/server.log /var/log/logfolder2/server.log /var/log/logfolder3/server.log /var/log/logfolder4/server.log wha…

---

## [How to hide toolbar in dashboard?](https://discuss.elastic.co/t/how-to-hide-toolbar-in-dashboard/317000)

<div class="topic-metadata">

**Author:** [@papilocheg1992](https://discuss.elastic.co/u/papilocheg1992)\
**Replies:** 2\
**Last updated:** [October 20, 2022, 9:08am UTC](https://discuss.elastic.co/t/how-to-hide-toolbar-in-dashboard/317000 "2022-10-20T09:08:24Z")

</div>

Hello! Can I completely hide this area for a specific userspace? If yes, how can I do it? Thanks for the answer

---

## [Patch management](https://discuss.elastic.co/t/patch-management/322887)

<div class="topic-metadata">

**Author:** [@calm\_silence](https://discuss.elastic.co/u/calm_silence)\
**Replies:** 1\
**Last updated:** [January 11, 2023, 11:30pm UTC](https://discuss.elastic.co/t/patch-management/322887 "2023-01-11T23:30:44Z")

</div>

Can we do patch management of multiple servers running in any cloud Using ELK stack? if yes then how?

---

## [No results found](https://discuss.elastic.co/t/no-results-found/322957)

<div class="topic-metadata">

**Author:** [@Ellisson](https://discuss.elastic.co/u/Ellisson)\
**Replies:** 2\
**Last updated:** [January 11, 2023, 10:50pm UTC](https://discuss.elastic.co/t/no-results-found/322957 "2023-01-11T22:50:34Z")

</div>

It receives the flow only to assemble the dashboards

---

## [Snapshot multiple indexes on cold tier only](https://discuss.elastic.co/t/snapshot-multiple-indexes-on-cold-tier-only/322923)

<div class="topic-metadata">

**Author:** [@ShubhamKumarJena](https://discuss.elastic.co/u/ShubhamKumarJena)\
**Replies:** 1\
**Last updated:** [January 11, 2023, 10:28pm UTC](https://discuss.elastic.co/t/snapshot-multiple-indexes-on-cold-tier-only/322923 "2023-01-11T22:28:08Z")

</div>

Hello guys, we have couple of our end users requesting to store their data in Elasticsearch for auditing purpose for 3 years. As data grows we have the bottleneck in our resources, so we have decided snapshot the data …

---

## [Cannot form cluster of Elasticsearch on EKS](https://discuss.elastic.co/t/cannot-form-cluster-of-elasticsearch-on-eks/322186)

<div class="topic-metadata">

**Author:** [@Zeynal\_Hajili](https://discuss.elastic.co/u/Zeynal_Hajili)\
**Replies:** 2\
**Last updated:** [January 11, 2023, 9:58pm UTC](https://discuss.elastic.co/t/cannot-form-cluster-of-elasticsearch-on-eks/322186 "2023-01-11T21:58:43Z")

</div>

Hello, dear community, I am very new to Elasticsearch. I have been asked to deploy the ELK stack on AWS EKS and unfortunately, I am facing some issues. I am deploying the ELK stack in the following order via Helm chart…

---

## [How to Mask Card Number](https://discuss.elastic.co/t/how-to-mask-card-number/322914)

<div class="topic-metadata">

**Author:** [@Anil0110](https://discuss.elastic.co/u/Anil0110)\
**Replies:** 2\
**Last updated:** [January 11, 2023, 9:55pm UTC](https://discuss.elastic.co/t/how-to-mask-card-number/322914 "2023-01-11T21:55:35Z")

</div>

How to Mask Card Number OF XML MESSAGE

---

## [Checksum failed (hardware problem?)](https://discuss.elastic.co/t/checksum-failed-hardware-problem/322500)

<div class="topic-metadata">

**Author:** [@yang\_peng](https://discuss.elastic.co/u/yang_peng)\
**Replies:** 2\
**Last updated:** [January 11, 2023, 9:11pm UTC](https://discuss.elastic.co/t/checksum-failed-hardware-problem/322500 "2023-01-11T21:11:03Z")

</div>

A two-node cluster was restarted. The shard of one index failed to merge. The error is as follows： failed shard on node \[VosGChW1QTudYo9Tcl5sqg\]: shard failure, reason \[merge failed\], failure NotSerializableExceptionWra…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=668)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=670)
