# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=678 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 679 --- ## [How to include external css and js files into kibana plugin?](https://discuss.elastic.co/t/how-to-include-external-css-and-js-files-into-kibana-plugin/322378)
**Author:** [@Joe\_Kuan](https://discuss.elastic.co/u/Joe_Kuan)\ **Replies:** 1\ **Last updated:** [January 4, 2023, 4:32pm UTC](https://discuss.elastic.co/t/how-to-include-external-css-and-js-files-into-kibana-plugin/322378 "2023-01-04T16:32:07Z")
Hi I need to include some css and js files into my kibana plugin. I have tried adding the "files" option (explicit path without using wildcards) to package.json and run "yarn build ...". However, I can't see any file si… --- ## [Multiple SLM Policies, same Snapshot Repository and same Elasticsearch Cluster?](https://discuss.elastic.co/t/multiple-slm-policies-same-snapshot-repository-and-same-elasticsearch-cluster/322484)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 3:51pm UTC](https://discuss.elastic.co/t/multiple-slm-policies-same-snapshot-repository-and-same-elasticsearch-cluster/322484 "2023-01-04T15:51:30Z")
Hi All, I wasn't able to find much about this topic in the Elasticsearch documentation, so thought I'd ask here to see if anyone has the answer. Question: Is it safe to have multiple SLM policies pointing to the same … --- ## [Embedding external plugin under analytics section](https://discuss.elastic.co/t/embedding-external-plugin-under-analytics-section/322439)
**Author:** [@anik-27](https://discuss.elastic.co/u/anik-27)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 3:51pm UTC](https://discuss.elastic.co/t/embedding-external-plugin-under-analytics-section/322439 "2023-01-04T15:51:15Z")
Hello there ! I have created an external plugin, I want it to be a part of the Analytics dropdown list similar to Dashboard, Canvas, Map etc. Please refer to image for better understanding How can I achieve this ? --- ## [Logstash service keep on restarting](https://discuss.elastic.co/t/logstash-service-keep-on-restarting/322370)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 12\ **Last updated:** [January 4, 2023, 3:27pm UTC](https://discuss.elastic.co/t/logstash-service-keep-on-restarting/322370 "2023-01-04T15:27:28Z")
Hi Team , Logstash service keeps on restarting and this is the message found in logs . Tried doing pqcheck and pqrepair, removed the problematic queue etc.. No issues related to user access , memory, disk Any suggest… --- ## [Compatibility with grafana](https://discuss.elastic.co/t/compatibility-with-grafana/322469)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 3:27pm UTC](https://discuss.elastic.co/t/compatibility-with-grafana/322469 "2023-01-04T15:27:28Z")
hello everyone. Is there compatibility Grafana version 9.2 and ELK 7.2.11 as data source? --- ## [Add image in visualization](https://discuss.elastic.co/t/add-image-in-visualization/322472)
**Author:** [@Alice\_Ionescu](https://discuss.elastic.co/u/Alice_Ionescu)\ **Replies:** 1\ **Last updated:** [January 4, 2023, 3:12pm UTC](https://discuss.elastic.co/t/add-image-in-visualization/322472 "2023-01-04T15:12:31Z")
Hello, I would like to display pictures in visualizations, the pictures are stored in in eleasticsearch in a base64 format. So I have a field on an index that is the base64 format of an image and I want to display it i… --- ## [Installing Elasticsearch - archive vs DEB](https://discuss.elastic.co/t/installing-elasticsearch-archive-vs-deb/322478)
**Author:** [@Evram\_Yousef](https://discuss.elastic.co/u/Evram_Yousef)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 3:04pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-archive-vs-deb/322478 "2023-01-04T15:04:59Z")
Hello All, Now I've been using this ES on linux machines - Azure machines simply by downloading archive - tar - and install Now I wanted to move to multiple nodes. I found that I can't communicate between two nodes… --- ## [JSON parse error, original data now in message field {:message=\>"Unexpected character ('\<' (code 60)): expected a valid value (number, String, array, object, 'true', 'false' or 'null')\\n at \[Source: (String)](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field-message-unexpected-character-code-60-expected-a-valid-value-number-string-array-object-true-false-or-null-n-at-source-string/322015)
**Author:** [@shafiwebsphere](https://discuss.elastic.co/u/shafiwebsphere)\ **Replies:** 11\ **Last updated:** [January 4, 2023, 2:26pm UTC](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field-message-unexpected-character-code-60-expected-a-valid-value-number-string-array-object-true-false-or-null-n-at-source-string/322015 "2023-01-04T14:26:44Z")
Same code worked in previous version 7 but i have updated to latest version Elasticsearch logstash and kibana 7.17 , the logstash code is not working and getting error, i have been trying this from 15 days , When i have … --- ## ["stream page" in "observability" and "discover page"](https://discuss.elastic.co/t/stream-page-in-observability-and-discover-page/319867)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 3:41pm UTC](https://discuss.elastic.co/t/stream-page-in-observability-and-discover-page/319867 "2022-12-07T15:41:33Z")
what's the difference between "stream page" in "observability" and "discover page" of kibana? thanks. --- ## [Error sending logs to Elastic from UIPATH system](https://discuss.elastic.co/t/error-sending-logs-to-elastic-from-uipath-system/322471)
**Author:** [@aviadhaim18](https://discuss.elastic.co/u/aviadhaim18)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 1:53pm UTC](https://discuss.elastic.co/t/error-sending-logs-to-elastic-from-uipath-system/322471 "2023-01-04T13:53:35Z")
Hi, When I try to send logs to Elastic, I get the following error: Elasticsearch: Bulk item failed: index:rpa\_test-2023.01.04 result: type:logEvent error:Type: illegal\_argument\_exception Reason: "Invalid type: expectin… --- ## [What happens to \>5GB segments?](https://discuss.elastic.co/t/what-happens-to-5gb-segments/322460)
**Author:** [@sezuan](https://discuss.elastic.co/u/sezuan)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 12:33pm UTC](https://discuss.elastic.co/t/what-happens-to-5gb-segments/322460 "2023-01-04T12:33:43Z")
Hello, I'm wondering what happens to segments that are larger than 5gb (index.merge.policy.max\_merged\_segment ) and the index has more than 33% deleted documents (index.merge.policy.deletes\_pct\_allowed) and it's no poss… --- ## [Key with dot notation in rank features of ES v8.4.0](https://discuss.elastic.co/t/key-with-dot-notation-in-rank-features-of-es-v8-4-0/322424)
**Author:** [@Chen\_Bright](https://discuss.elastic.co/u/Chen_Bright)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 11:42am UTC](https://discuss.elastic.co/t/key-with-dot-notation-in-rank-features-of-es-v8-4-0/322424 "2023-01-04T11:42:36Z")
ENV: Elasticsearch v8.4.0 operation steps(very simple): what i wanna know is, how can i insert this kind of data in the rank features field?(i tested in es v7.10.2, it works, so maybe es changed the way to treat the… --- ## [existsAlias returns false](https://discuss.elastic.co/t/existsalias-returns-false/322455)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 11:37am UTC](https://discuss.elastic.co/t/existsalias-returns-false/322455 "2023-01-04T11:37:26Z")
Hi, Using RestHighLevelClient with Elasticsearch 7.17.7 both client and server. For new records coming in I check wether an expected alias exists. boolean exists = client.indices().existsAlias(requestWithAlias, Reques… --- ## [Sending logs from splunk forward to logstash](https://discuss.elastic.co/t/sending-logs-from-splunk-forward-to-logstash/322454)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 11:37am UTC](https://discuss.elastic.co/t/sending-logs-from-splunk-forward-to-logstash/322454 "2023-01-04T11:37:17Z")
Hi team, we are trying to send data from splunk to logstash and kibana . we are getting data but data is not in proper format. We have tested below codec but now luck. Every time data changing but no original data is c… --- ## [How to get the JSON for a BoolQuery](https://discuss.elastic.co/t/how-to-get-the-json-for-a-boolquery/322452)
**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 11:32am UTC](https://discuss.elastic.co/t/how-to-get-the-json-for-a-boolquery/322452 "2023-01-04T11:32:18Z")
Given an instance of BoolQuery, how can I find out the JSON string that will be sent to the ES server? --- ## [Kibana 7.17.3 - serverBasePath result in 404 Status](https://discuss.elastic.co/t/kibana-7-17-3-serverbasepath-result-in-404-status/322449)
**Author:** [@vijaykumar](https://discuss.elastic.co/u/vijaykumar)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 10:52am UTC](https://discuss.elastic.co/t/kibana-7-17-3-serverbasepath-result-in-404-status/322449 "2023-01-04T10:52:10Z")
I setup EFK Stack Using Helm Chart and versions of Elasticsearch Kibana and filebeat are 7.17.3 Helm Chart Link: Installation is success Able to access kibana UI (When exposed as service type Loadbalancer) now wh… --- ## [New data ingestion from index patterns is not happening in transform job](https://discuss.elastic.co/t/new-data-ingestion-from-index-patterns-is-not-happening-in-transform-job/322421)
**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 9:23am UTC](https://discuss.elastic.co/t/new-data-ingestion-from-index-patterns-is-not-happening-in-transform-job/322421 "2023-01-04T09:23:34Z")
Hi @AlessandroKP , I have created some transform jobs on Kibana 7.16.2 and I have selected delay time as 1d and running job on continuously mode. Few of them jobs are working fine but I found that one job is not ingest … --- ## ["Search as you type" and elasticsearch](https://discuss.elastic.co/t/search-as-you-type-and-elasticsearch/322438)
**Author:** [@Rhh](https://discuss.elastic.co/u/Rhh)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 9:05am UTC](https://discuss.elastic.co/t/search-as-you-type-and-elasticsearch/322438 "2023-01-04T09:05:00Z")
Hi I have a text field with the type set to "search as you type". When I request data I get all data corresponding to BLAKER OR 288 in the street field. ( the street field contains the streetname + house number ) But … --- ## ["NOT Empty" KQL query returns records with empty fields](https://discuss.elastic.co/t/not-empty-kql-query-returns-records-with-empty-fields/320193)
**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 10:02am UTC](https://discuss.elastic.co/t/not-empty-kql-query-returns-records-with-empty-fields/320193 "2022-12-07T10:02:24Z")
My records have a text field called "My Field". For some records these are the empty string and for others they have a value. I want to find all the ones for which "My Field" is not the empty string. In the KQL query bar… --- ## [Zoom into trace/transaction time interval](https://discuss.elastic.co/t/zoom-into-trace-transaction-time-interval/321774)
**Author:** [@zvrastil](https://discuss.elastic.co/u/zvrastil)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 7:51am UTC](https://discuss.elastic.co/t/zoom-into-trace-transaction-time-interval/321774 "2023-01-04T07:51:31Z")
Hello, is there any way to zoom into time interval within a single trace/transaction view? Let's say I want to zoom into the time interval of some particular span because it is relatively short with respect to the whole… --- ## [Issue with Log4J @timestamp format](https://discuss.elastic.co/t/issue-with-log4j-timestamp-format/322088)
**Author:** [@vincent2mots](https://discuss.elastic.co/u/vincent2mots)\ **Replies:** 1\ **Last updated:** [January 4, 2023, 7:49am UTC](https://discuss.elastic.co/t/issue-with-log4j-timestamp-format/322088 "2023-01-04T07:49:17Z")
Hello there! I'm trying to ship log files from Filebeat into Logstash but I got an issue with @timestamp format Here is one example of line Filebeat read from the file : {"@timestamp":"2022-12-28T01:03:16,911Z","hostN… --- ## [Restore to a different cluster](https://discuss.elastic.co/t/restore-to-a-different-cluster/322357)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 7\ **Last updated:** [January 4, 2023, 7:04am UTC](https://discuss.elastic.co/t/restore-to-a-different-cluster/322357 "2023-01-04T07:04:09Z")
Hi, Good day! I have a Production Environment (3 Nodes) and a DR Environment (3 Nodes). I received the error "snapshot does not exist" on the DR Environment after trying to restore the snapshot of the Production on the… --- ## [Role mapping API is not visible in Kibana dashboard](https://discuss.elastic.co/t/role-mapping-api-is-not-visible-in-kibana-dashboard/322399)
**Author:** [@anagha03](https://discuss.elastic.co/u/anagha03)\ **Replies:** 3\ **Last updated:** [January 4, 2023, 7:03am UTC](https://discuss.elastic.co/t/role-mapping-api-is-not-visible-in-kibana-dashboard/322399 "2023-01-04T07:03:41Z")
I configured Elastic and kibana using ansible playbook. Elastic and kibana are working fine but on kibana dashboard I am not able to see the role mapping section under security tab and logstash pipeline under ingest tab… --- ## [Best way to make a consistent copy of data](https://discuss.elastic.co/t/best-way-to-make-a-consistent-copy-of-data/322418)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 1\ **Last updated:** [January 4, 2023, 7:03am UTC](https://discuss.elastic.co/t/best-way-to-make-a-consistent-copy-of-data/322418 "2023-01-04T07:03:16Z")
I have a system containing billions of documents. I have a requirement to have a consistent point in time copy of a subset of fields from 1 year's worth of data (eg 200M documents). The documents are subject to change, i… --- ## [Usage of filestream](https://discuss.elastic.co/t/usage-of-filestream/320009)
**Author:** [@anon90868141](https://discuss.elastic.co/u/anon90868141)\ **Replies:** 7\ **Last updated:** [January 4, 2023, 6:24am UTC](https://discuss.elastic.co/t/usage-of-filestream/320009 "2023-01-04T06:24:54Z")
Hello, I have a few question about the topic filestream and it's difference to the input log. Do I only need an id when using multiple filebeat inputs in a single yml or always? Currently im not using any ids but im … --- ## [Issue with ElasticSearch Highlighter](https://discuss.elastic.co/t/issue-with-elasticsearch-highlighter/322340)
**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\ **Replies:** 0\ **Last updated:** [January 3, 2023, 6:18am UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-highlighter/322340 "2023-01-03T06:18:28Z")
Hi Team, We are getting response time issue with elasticsearch highlighter. In Mapping we are using copy field with store: true parameter. When we are trying to fetch copy field in highlighter query it is taking around… --- ## [Filebeat service wont start even after 'test output' and 'setup -e' shows positive results](https://discuss.elastic.co/t/filebeat-service-wont-start-even-after-test-output-and-setup-e-shows-positive-results/322416)
**Author:** [@Hari\_Krishnan1](https://discuss.elastic.co/u/Hari_Krishnan1)\ **Replies:** 5\ **Last updated:** [January 4, 2023, 6:03am UTC](https://discuss.elastic.co/t/filebeat-service-wont-start-even-after-test-output-and-setup-e-shows-positive-results/322416 "2023-01-04T06:03:59Z")
Hello community! , I am quite new to filebeat and logstash and I am looking to append logs from a node application into kibana using filebeat and logstash. I have tried the following steps from the documentation provid… --- ## [How to prevent duplicate log](https://discuss.elastic.co/t/how-to-prevent-duplicate-log/322279)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 4\ **Last updated:** [January 4, 2023, 5:53am UTC](https://discuss.elastic.co/t/how-to-prevent-duplicate-log/322279 "2023-01-04T05:53:04Z")
Hi there, I have found something odd in my elastic cluster. I found the exact same log showing up twice in the message field as you can see. the logs have the same timestamp, same X-Request-ID all the same. but wh… --- ## [Horizontal scroll not visible in kibana dashboard](https://discuss.elastic.co/t/horizontal-scroll-not-visible-in-kibana-dashboard/322068)
**Author:** [@ayush-srivastava-ev](https://discuss.elastic.co/u/ayush-srivastava-ev)\ **Replies:** 20\ **Last updated:** [January 4, 2023, 4:43am UTC](https://discuss.elastic.co/t/horizontal-scroll-not-visible-in-kibana-dashboard/322068 "2023-01-04T04:43:41Z")
When i am seeing the data through kibana search. This horizontal scrollbar issue is big trouble for us especially when there are more number of columns and rows. While seeing the data, horizontal scroll bar is appearin… --- ## [Which visualisation type is best 2 layer histogram with time offset?](https://discuss.elastic.co/t/which-visualisation-type-is-best-2-layer-histogram-with-time-offset/314574)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [October 12, 2022, 1:00pm UTC](https://discuss.elastic.co/t/which-visualisation-type-is-best-2-layer-histogram-with-time-offset/314574 "2022-10-12T13:00:26Z")
Hi, I want to create a time based histogram visualization which shows two lines. Some performance curves like processing time. For that processing time I want to have two lines. One for the current time window and one … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=677) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=679)