# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=684

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 685

---

## [Restored from snapshoots 2 master nodes but several indecies are in unassigned state](https://discuss.elastic.co/t/restored-from-snapshoots-2-master-nodes-but-several-indecies-are-in-unassigned-state/322113)

<div class="topic-metadata">

**Author:** [@Dimitry\_Feigin](https://discuss.elastic.co/u/Dimitry_Feigin)\
**Replies:** 3\
**Last updated:** [December 28, 2022, 4:57pm UTC](https://discuss.elastic.co/t/restored-from-snapshoots-2-master-nodes-but-several-indecies-are-in-unassigned-state/322113 "2022-12-28T16:57:03Z")

</div>

We had 3 node cluster where all nodes were masters. We accidently deleted 2 master nodes. We restore them from snapshots. However we have several indecies in unassign state:| externalkeyhandler-000005 4 p START…

---

## [Exiting: Failed to start crawler: creating module reloader failed:](https://discuss.elastic.co/t/exiting-failed-to-start-crawler-creating-module-reloader-failed/321604)

<div class="topic-metadata">

**Author:** [@ant2ne](https://discuss.elastic.co/u/ant2ne)\
**Replies:** 9\
**Last updated:** [December 28, 2022, 4:37pm UTC](https://discuss.elastic.co/t/exiting-failed-to-start-crawler-creating-module-reloader-failed/321604 "2022-12-28T16:37:42Z")

</div>

using: https://www.elastic.co/guide/en/elastic-stack/current/installing-elastic-stack.html Versions on ubuntu 22.04. /usr/share/logstash/bin/logstash -V Using bundled JDK: /usr/share/logstash/jdk logstash 8.5.3 /usr…

---

## [Beats instance detected Click 'Set up monitoring' below to start monitoring this instance](https://discuss.elastic.co/t/beats-instance-detected-click-set-up-monitoring-below-to-start-monitoring-this-instance/322008)

<div class="topic-metadata">

**Author:** [@ant2ne](https://discuss.elastic.co/u/ant2ne)\
**Replies:** 7\
**Last updated:** [December 28, 2022, 4:27pm UTC](https://discuss.elastic.co/t/beats-instance-detected-click-set-up-monitoring-below-to-start-monitoring-this-instance/322008 "2022-12-28T16:27:41Z")

</div>

All services are running. I log into 5601, click the drop down hamburger | Management | Stack Monitoring But there is no 'Set up monitoring' to click on. root@ub2204elk:/etc# cat metricbeat/metricbeat.yml | grep -v …

---

## [Has anyone worked with Language Analyzers, Arabic analyzer in specific?](https://discuss.elastic.co/t/has-anyone-worked-with-language-analyzers-arabic-analyzer-in-specific/316611)

<div class="topic-metadata">

**Author:** [@Hassan\_Abbas](https://discuss.elastic.co/u/Hassan_Abbas)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 3:41pm UTC](https://discuss.elastic.co/t/has-anyone-worked-with-language-analyzers-arabic-analyzer-in-specific/316611 "2022-12-28T15:41:37Z")

</div>

I'm finding difficulties implementing the analyzer on a certain field that will be used in a search function for an Arabic news platform

---

## [(413) Request Entity Too Large Error In Filebeat Logs](https://discuss.elastic.co/t/413-request-entity-too-large-error-in-filebeat-logs/322108)

<div class="topic-metadata">

**Author:** [@vijaykumar](https://discuss.elastic.co/u/vijaykumar)\
**Replies:** 0\
**Last updated:** [December 28, 2022, 3:32pm UTC](https://discuss.elastic.co/t/413-request-entity-too-large-error-in-filebeat-logs/322108 "2022-12-28T15:32:42Z")

</div>

I setup EFK Stack Using Helm Chart and versions of Elasticsearch Kibana and filebeat are 7.17.3 Helm Chart Link: Used default values.yaml file across all three components Installation is successful Filebeat indexe…

---

## [Increase ignore above threshold - Kibana UI](https://discuss.elastic.co/t/increase-ignore-above-threshold-kibana-ui/319880)

<div class="topic-metadata">

**Author:** [@Murali\_Y](https://discuss.elastic.co/u/Murali_Y)\
**Replies:** 4\
**Last updated:** [December 28, 2022, 3:30pm UTC](https://discuss.elastic.co/t/increase-ignore-above-threshold-kibana-ui/319880 "2022-12-28T15:30:15Z")

</div>

Hello all, We are using Kibana for logging/viewing/reporting our UiPath BOT logs. But we are unable to view one field on Kibana due to the 256 characters threshold that is set on that field mapping. From How to set the…

---

## [Unhealthy status yet sending events - agent via logstash](https://discuss.elastic.co/t/unhealthy-status-yet-sending-events-agent-via-logstash/321801)

<div class="topic-metadata">

**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\
**Replies:** 6\
**Last updated:** [December 28, 2022, 3:21pm UTC](https://discuss.elastic.co/t/unhealthy-status-yet-sending-events-agent-via-logstash/321801 "2022-12-28T15:21:04Z")

</div>

We have converted an agent policy to use the Logstash ingest path instead of direct to the cluster. Events are being received by the logstash, and they appear in Elastic, so the end to end path is working ok. However t…

---

## [JVM heap recommendations on k8s cluster](https://discuss.elastic.co/t/jvm-heap-recommendations-on-k8s-cluster/322017)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 5\
**Last updated:** [December 28, 2022, 3:02pm UTC](https://discuss.elastic.co/t/jvm-heap-recommendations-on-k8s-cluster/322017 "2022-12-28T15:02:05Z")

</div>

Hi, I would like to know what is the recommendation about the heap size when operating ES nodes in a k8s cluster. I have referred this and it is not fully clear what is the recommendation. Manage compute resources | Ela…

---

## [Kibana import error in python](https://discuss.elastic.co/t/kibana-import-error-in-python/320643)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 2:22pm UTC](https://discuss.elastic.co/t/kibana-import-error-in-python/320643 "2022-12-28T14:22:17Z")

</div>

This is the error I'm getting while I'm trying to create a data view in Kibana using python. I'm trying to create a data view in Kibana cloud. ImportError: cannot import name 'Kibana' from 'kibana'. Can someone help me w…

---

## [Sql where condition with case is not converting to bool query](https://discuss.elastic.co/t/sql-where-condition-with-case-is-not-converting-to-bool-query/322071)

<div class="topic-metadata">

**Author:** [@Alok.Singh](https://discuss.elastic.co/u/Alok.Singh)\
**Replies:** 0\
**Last updated:** [December 28, 2022, 6:47am UTC](https://discuss.elastic.co/t/sql-where-condition-with-case-is-not-converting-to-bool-query/322071 "2022-12-28T06:47:49Z")

</div>

Hello @elastic I have a view called V1, I want to filter data based on role. If role is 1 or 2 then role can see all record else for other role they can see only those record which is assign to them. sql query: select…

---

## [Is there any way to add custom date like financial year (01 April to 31 March) in Time filter quick ranges in Kibana 8.5](https://discuss.elastic.co/t/is-there-any-way-to-add-custom-date-like-financial-year-01-april-to-31-march-in-time-filter-quick-ranges-in-kibana-8-5/321977)

<div class="topic-metadata">

**Author:** [@ysattvik](https://discuss.elastic.co/u/ysattvik)\
**Replies:** 4\
**Last updated:** [December 28, 2022, 1:37pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-add-custom-date-like-financial-year-01-april-to-31-march-in-time-filter-quick-ranges-in-kibana-8-5/321977 "2022-12-28T13:37:34Z")

</div>

{ "from": "now-1y/d", "to": "now", "display": "Last 1 year" } Here, can we add a date range like (01 April to 31 March) as Financial Year?

---

## [Is there any way to make some changes in available time picker format or disable some option in Kibana?](https://discuss.elastic.co/t/is-there-any-way-to-make-some-changes-in-available-time-picker-format-or-disable-some-option-in-kibana/322090)

<div class="topic-metadata">

**Author:** [@ysattvik](https://discuss.elastic.co/u/ysattvik)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 1:34pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-make-some-changes-in-available-time-picker-format-or-disable-some-option-in-kibana/322090 "2022-12-28T13:34:12Z")

</div>

In the given image if we want only absolute date not relative section, now section and time section. Is it possible to do this? If possible, then please suggest the way. My second requirement is that in the below …

---

## [API intgrations](https://discuss.elastic.co/t/api-intgrations/321627)

<div class="topic-metadata">

**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\
**Replies:** 4\
**Last updated:** [December 28, 2022, 1:08pm UTC](https://discuss.elastic.co/t/api-intgrations/321627 "2022-12-28T13:08:46Z")

</div>

hello everyone, What is the best way to exploit Elasticsearch RESTful API to integrate with other services can supported APIs?

---

## [How to add an analyzer that can remove duplicate tokens from the analyzed field?](https://discuss.elastic.co/t/how-to-add-an-analyzer-that-can-remove-duplicate-tokens-from-the-analyzed-field/322098)

<div class="topic-metadata">

**Author:** [@hemangr8](https://discuss.elastic.co/u/hemangr8)\
**Replies:** 0\
**Last updated:** [December 28, 2022, 12:45pm UTC](https://discuss.elastic.co/t/how-to-add-an-analyzer-that-can-remove-duplicate-tokens-from-the-analyzed-field/322098 "2022-12-28T12:45:00Z")

</div>

I want to add a token filter in my custom analyzer to remove duplicate tokens in the text field while matching. Eg: Input: "random petrol pump, beside random2 petrol pump" After analyzer: \["random", "petrol", "pump", "…

---

## [Building Kibana Dashboard Dynamically](https://discuss.elastic.co/t/building-kibana-dashboard-dynamically/33713)

<div class="topic-metadata">

**Author:** [@Asad\_Rehman](https://discuss.elastic.co/u/Asad_Rehman)\
**Replies:** 9\
**Last updated:** [June 13, 2017, 12:55am UTC](https://discuss.elastic.co/t/building-kibana-dashboard-dynamically/33713 "2017-06-13T00:55:07Z")

</div>

Hi All, I have some indexes in elasticsearch and I have build my required dashboard with required visualizations in Kibana. My index contains data from different shops regarding their sales and revenues and visualization…

---

## [Kibana canvas metrics font not working](https://discuss.elastic.co/t/kibana-canvas-metrics-font-not-working/320262)

<div class="topic-metadata">

**Author:** [@erloti](https://discuss.elastic.co/u/erloti)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 12:30pm UTC](https://discuss.elastic.co/t/kibana-canvas-metrics-font-not-working/320262 "2022-12-28T12:30:16Z")

</div>

Hello, I'm trying to create very simple metrics in canvas. I correctly set the data source et the SQL (data preview is showing the correct data). But whenever I try to add font in the expression, the value becomes '0'…

---

## [Make filter using own data in Vega Lite](https://discuss.elastic.co/t/make-filter-using-own-data-in-vega-lite/320223)

<div class="topic-metadata">

**Author:** [@Irwan\_Kurniawan](https://discuss.elastic.co/u/Irwan_Kurniawan)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 12:19pm UTC](https://discuss.elastic.co/t/make-filter-using-own-data-in-vega-lite/320223 "2022-12-28T12:19:48Z")

</div>

I want to make heat map from this data that show date as x-axis and y-axis as y-axis.. I want to do filter that show only last week data.. Can help me about this? Thank you!

---

## [ElasticS Billing API](https://discuss.elastic.co/t/elastics-billing-api/321385)

<div class="topic-metadata">

**Author:** [@bh03](https://discuss.elastic.co/u/bh03)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 10:43am UTC](https://discuss.elastic.co/t/elastics-billing-api/321385 "2022-12-28T10:43:59Z")

</div>

Hi all, Currently, i am trying to fetch the billing details of my organization using the below API call curl -XGET https://api.elastic-cloud.com/api/v1/billing/costs/{organization\_id} \\ -H "Authorization: ApiKey $EC\_AP…

---

## [Limit number of rows count](https://discuss.elastic.co/t/limit-number-of-rows-count/322069)

<div class="topic-metadata">

**Author:** [@ayush-srivastava-ev](https://discuss.elastic.co/u/ayush-srivastava-ev)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 9:42am UTC](https://discuss.elastic.co/t/limit-number-of-rows-count/322069 "2022-12-28T09:42:44Z")

</div>

How we can limit number of rows per page so that we can get horizontal scroll bar. We don't want to limit no. of searches. We are using version 7.5

---

## [Do I need track\_total\_hits for reindex java api command?](https://discuss.elastic.co/t/do-i-need-track-total-hits-for-reindex-java-api-command/322058)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 8:36am UTC](https://discuss.elastic.co/t/do-i-need-track-total-hits-for-reindex-java-api-command/322058 "2022-12-28T08:36:20Z")

</div>

The title says it all. I have a query for time range within the reindex command. Just wondering if "track\_total\_hits" is necessary. My doc size will be in the millions.

---

## [Unable to export actions](https://discuss.elastic.co/t/unable-to-export-actions/320118)

<div class="topic-metadata">

**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\
**Replies:** 0\
**Last updated:** [November 30, 2022, 8:13am UTC](https://discuss.elastic.co/t/unable-to-export-actions/320118 "2022-11-30T08:13:23Z")

</div>

Hi all, when trying to export some (5) actions using the Kibana Saved Objects UI, we receive the following unspecific error: Unable to generate export: Error transforming objects to export This error does not occur wi…

---

## [Iptables events not being published in elasticsearch](https://discuss.elastic.co/t/iptables-events-not-being-published-in-elasticsearch/320994)

<div class="topic-metadata">

**Author:** [@jasongil](https://discuss.elastic.co/u/jasongil)\
**Replies:** 3\
**Last updated:** [December 28, 2022, 4:02am UTC](https://discuss.elastic.co/t/iptables-events-not-being-published-in-elasticsearch/320994 "2022-12-28T04:02:25Z")

</div>

Beginner / intermediate Elastic user here. I have filebeat configured to listen on port 9001/UDP for iptables events that are sent to it via syslogd by my firewall. This has worked fine for years. I recently noticed th…

---

## [FATAL CLI ERROR YAMLException: can not read a block mapping entry; a multiline key may not be an implicit](https://discuss.elastic.co/t/fatal-cli-error-yamlexception-can-not-read-a-block-mapping-entry-a-multiline-key-may-not-be-an-implicit/317644)

<div class="topic-metadata">

**Author:** [@Vitoria\_De\_Lara](https://discuss.elastic.co/u/Vitoria_De_Lara)\
**Replies:** 1\
**Last updated:** [November 2, 2022, 11:20pm UTC](https://discuss.elastic.co/t/fatal-cli-error-yamlexception-can-not-read-a-block-mapping-entry-a-multiline-key-may-not-be-an-implicit/317644 "2022-11-02T23:20:46Z")

</div>

I'm not able to run kibana

---

## [Logstash - Schedule files](https://discuss.elastic.co/t/logstash-schedule-files/322057)

<div class="topic-metadata">

**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\
**Replies:** 6\
**Last updated:** [December 28, 2022, 1:59am UTC](https://discuss.elastic.co/t/logstash-schedule-files/322057 "2022-12-28T01:59:29Z")

</div>

Hello, I need read new files inside one directory. I have a script that every 10 minutes send news files for this directory. I created this setup in my pipeline: When the first files were insert in the directory ev…

---

## [Checksum confirmation during kibana installation for rpm](https://discuss.elastic.co/t/checksum-confirmation-during-kibana-installation-for-rpm/320425)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [December 28, 2022, 1:28am UTC](https://discuss.elastic.co/t/checksum-confirmation-during-kibana-installation-for-rpm/320425 "2022-12-28T01:28:35Z")

</div>

Hello . Walking through the document and came up with below thought. NIT though. Kibana doc suggest user to MANUALLY to compare checksum ,where elasticsearch doc do this automatically in shasum command . I thought it …

---

## [Questions about terms aggregations and too many buckets exception](https://discuss.elastic.co/t/questions-about-terms-aggregations-and-too-many-buckets-exception/322060)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 0\
**Last updated:** [December 28, 2022, 12:35am UTC](https://discuss.elastic.co/t/questions-about-terms-aggregations-and-too-many-buckets-exception/322060 "2022-12-28T00:35:25Z")

</div>

A question about internals, so hopefully I can get some response regarding some vague questions. :slight\_smile: Do not actually have access to the cluster to test out hypothesis. First of all, according to the docs "…

---

## [Kibana - Data Format didn't see at discover](https://discuss.elastic.co/t/kibana-data-format-didnt-see-at-discover/321929)

<div class="topic-metadata">

**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\
**Replies:** 2\
**Last updated:** [December 27, 2022, 9:34pm UTC](https://discuss.elastic.co/t/kibana-data-format-didnt-see-at-discover/321929 "2022-12-27T21:34:57Z")

</div>

Hello, I was receiving log with this date format Dec 20 12:58:00, for instance. I used SYSLOGTIMESTAMP and it working well. However when I use this field in Kibana to timestamp field I didn't see nothing at discover. …

---

## [Kibana issues](https://discuss.elastic.co/t/kibana-issues/322022)

<div class="topic-metadata">

**Author:** [@Biswajit](https://discuss.elastic.co/u/Biswajit)\
**Replies:** 2\
**Last updated:** [December 27, 2022, 9:32pm UTC](https://discuss.elastic.co/t/kibana-issues/322022 "2022-12-27T21:32:39Z")

</div>

I have kibana 7.5 its running but when i installed 8.5 in same server i started but in browser its showing server is not ready yet. Another thing is in kibana 7.5 i want request & response of a visualisation. Im unable …

---

## [Add the data from a table in a watcher](https://discuss.elastic.co/t/add-the-data-from-a-table-in-a-watcher/317689)

<div class="topic-metadata">

**Author:** [@Nalin](https://discuss.elastic.co/u/Nalin)\
**Replies:** 4\
**Last updated:** [November 2, 2022, 6:21pm UTC](https://discuss.elastic.co/t/add-the-data-from-a-table-in-a-watcher/317689 "2022-11-02T18:21:28Z")

</div>

Hi All, We are able to generate data in a tabular format through a watcher IndexName StoreSize(in MB) DocumentCount index1 23 220 index-2 20 129 index-3 26 178 Is there any way in which we could add the …

---

## [Unable to Parse response body for response bla... bla... from TicketService(module) in Java Spring Data Elasticsearch](https://discuss.elastic.co/t/unable-to-parse-response-body-for-response-bla-bla-from-ticketservice-module-in-java-spring-data-elasticsearch/322052)

<div class="topic-metadata">

**Author:** [@Davut](https://discuss.elastic.co/u/Davut)\
**Replies:** 0\
**Last updated:** [December 27, 2022, 7:12pm UTC](https://discuss.elastic.co/t/unable-to-parse-response-body-for-response-bla-bla-from-ticketservice-module-in-java-spring-data-elasticsearch/322052 "2022-12-27T19:12:54Z")

</div>

I m take same error. I have account-service,ticket-service,notification-service,eureka-service.(Java spring cloud microservice app) Ticket-service is using elasticsearch. Ticket-service database is mysql 8.0.31 on docker…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=683)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=685)
