# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=715 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 716 --- ## [Visualization Color change from 6.0 to 7.0](https://discuss.elastic.co/t/visualization-color-change-from-6-0-to-7-0/319868)
**Author:** [@MorpheusPgh](https://discuss.elastic.co/u/MorpheusPgh)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 11:20am UTC](https://discuss.elastic.co/t/visualization-color-change-from-6-0-to-7-0/319868 "2022-11-30T11:20:47Z")
I am importing my Visualizations from a Previous version of Kibana. Red was the Default first color, and in the latest release (7.17.4) the color schemes are completely different. How do I get a return to the colors I … --- ## [ILM, conditions field is empty](https://discuss.elastic.co/t/ilm-conditions-field-is-empty/319570)
**Author:** [@vitkon](https://discuss.elastic.co/u/vitkon)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 8:17am UTC](https://discuss.elastic.co/t/ilm-conditions-field-is-empty/319570 "2022-11-30T08:17:08Z")
Hi, team! I created an ILM PUT \_ilm/policy/120-days-default { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": { "max\_primary\_shard\_size": "… --- ## [Logstash Scheduled Task](https://discuss.elastic.co/t/logstash-scheduled-task/319822)
**Author:** [@smam](https://discuss.elastic.co/u/smam)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 11:04am UTC](https://discuss.elastic.co/t/logstash-scheduled-task/319822 "2022-11-30T11:04:33Z")
I read this post: Running Logstash on Windows | Logstash Reference \[8.5\] | Elastic And configured my Server to run Logstash every day. First question: I know that you can run logstash once and then just wait for new d… --- ## [Auditbeat get package vendor](https://discuss.elastic.co/t/auditbeat-get-package-vendor/320139)
**Author:** [@robdiluca](https://discuss.elastic.co/u/robdiluca)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 10:56am UTC](https://discuss.elastic.co/t/auditbeat-get-package-vendor/320139 "2022-11-30T10:56:49Z")
Hi all, I'm trying to use Auditbeat's system module to get currently installed packages on monitored hosts. While being very useful, I noticed it does not send any information about the package vendor. Here what I obta… --- ## [Unable to see Timeline Section](https://discuss.elastic.co/t/unable-to-see-timeline-section/320070)
**Author:** [@milos1](https://discuss.elastic.co/u/milos1)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 10:49am UTC](https://discuss.elastic.co/t/unable-to-see-timeline-section/320070 "2022-11-30T10:49:33Z")
Trying to visualize the Timeline Section under Security Menu, it automatically redirects me on Get Started page, as you can see from the image in attachment. --- ## [Elasticsearch Kibana API - Case Management filtering via API requests](https://discuss.elastic.co/t/elasticsearch-kibana-api-case-management-filtering-via-api-requests/320136)
**Author:** [@yzaritskyi](https://discuss.elastic.co/u/yzaritskyi)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-api-case-management-filtering-via-api-requests/320136 "2022-11-30T10:30:12Z")
Hey all! I'm investigating the REST API of Kibana. I'm interested in the implementation of some automatization processes using our SOAR. I have configured the Webhook for Case Management, and now I get the Cases when s… --- ## [How to create a polar plot with degree (0-360 ° )](https://discuss.elastic.co/t/how-to-create-a-polar-plot-with-degree-0-360/320134)
**Author:** [@Lolo](https://discuss.elastic.co/u/Lolo)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 9:51am UTC](https://discuss.elastic.co/t/how-to-create-a-polar-plot-with-degree-0-360/320134 "2022-11-30T09:51:42Z")
Hi I want to create a polar chart using data with degree 0-360° and plot some line (aggregated as heatmap line). then, I would like to filter on it (for example in the North, from 330° to 30°). how can I create someth… --- ## [Index mapping limit](https://discuss.elastic.co/t/index-mapping-limit/320127)
**Author:** [@gjahagir](https://discuss.elastic.co/u/gjahagir)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 9:25am UTC](https://discuss.elastic.co/t/index-mapping-limit/320127 "2022-11-30T09:25:00Z")
Hi, I'm new to elastic and exploring its possibilities to incorporate into our application. Ours is a multi tenant application and based on several blogs we narrowed down to use Shared index model of elastic where all … --- ## [Unable to connect to logstash from filebeat](https://discuss.elastic.co/t/unable-to-connect-to-logstash-from-filebeat/320131)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 9:21am UTC](https://discuss.elastic.co/t/unable-to-connect-to-logstash-from-filebeat/320131 "2022-11-30T09:21:47Z")
Hi I've setup filebeat on the machine A elasticsearch and kibana on machine B and logstash on machine C. When i try to send logs from filebeat to logstash i am getting a connection refused error in status. all the servi… --- ## [Rollup Jobs losing data](https://discuss.elastic.co/t/rollup-jobs-losing-data/320072)
**Author:** [@nicfr9](https://discuss.elastic.co/u/nicfr9)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 9:09am UTC](https://discuss.elastic.co/t/rollup-jobs-losing-data/320072 "2022-11-30T09:09:01Z")
Hi everybody, I have a big problem with rollup jobs. When I try to execute a rollup job of 51 million recors, I don't get the expected result. I have various terms and metrics to aggregate; down below you can check th… --- ## [Bulk Observable giving refresh error on inserting documents](https://discuss.elastic.co/t/bulk-observable-giving-refresh-error-on-inserting-documents/319726)
**Author:** [@ali\_haider](https://discuss.elastic.co/u/ali_haider)\ **Replies:** 3\ **Last updated:** [November 30, 2022, 9:01am UTC](https://discuss.elastic.co/t/bulk-observable-giving-refresh-error-on-inserting-documents/319726 "2022-11-30T09:01:06Z")
Hi, I am using Elastic Cloud Elastic Stack version : 7.17 NEST Nuget Package : 7.17 I am consuming bulk Observable indexing with and trying to insert records in bulk and facing the following error The Exception mes… --- ## [How do I write correct query in nested document?](https://discuss.elastic.co/t/how-do-i-write-correct-query-in-nested-document/320065)
**Author:** [@john2022](https://discuss.elastic.co/u/john2022)\ **Replies:** 0\ **Last updated:** [November 29, 2022, 3:45pm UTC](https://discuss.elastic.co/t/how-do-i-write-correct-query-in-nested-document/320065 "2022-11-29T15:45:08Z")
I have two indices: country and person PUT person { "mappings": { "properties": { "info": { "type": "nested", "properties": { "int\_val": {"type": "integer"}, "str\_val": {… --- ## [Metricbeat docker host process - permission denied](https://discuss.elastic.co/t/metricbeat-docker-host-process-permission-denied/320015)
**Author:** [@Harm](https://discuss.elastic.co/u/Harm)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 8:51am UTC](https://discuss.elastic.co/t/metricbeat-docker-host-process-permission-denied/320015 "2022-11-30T08:51:30Z")
Hi, I'm trying to use a docker container to monitor my host os processes. It looked quited straightforward by mapping the /proc filesystem to the container and pointing the module hostfs setting to the correct directory… --- ## [KafkaException javax.security.auth.login.LoginException on latest logstash version](https://discuss.elastic.co/t/kafkaexception-javax-security-auth-login-loginexception-on-latest-logstash-version/320126)
**Author:** [@Ganesh4](https://discuss.elastic.co/u/Ganesh4)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 8:42am UTC](https://discuss.elastic.co/t/kafkaexception-javax-security-auth-login-loginexception-on-latest-logstash-version/320126 "2022-11-30T08:42:13Z")
ssl.truststore.password = null ssl.truststore.type = JKS transaction.timeout.ms = 60000 transactional.id = null value.serializer = class org.apache.kafka.common.serialization.StringSerializer \[2022-1… --- ## [I cannot sort the aggregation result by the values of the grouped set](https://discuss.elastic.co/t/i-cannot-sort-the-aggregation-result-by-the-values-of-the-grouped-set/320121)
**Author:** [@Emanuel\_Zienecker](https://discuss.elastic.co/u/Emanuel_Zienecker)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 8:36am UTC](https://discuss.elastic.co/t/i-cannot-sort-the-aggregation-result-by-the-values-of-the-grouped-set/320121 "2022-11-30T08:36:11Z")
Example: I have a parent/child relation. The parent are devices, the children are data points. The data points have e.g. temperature values. Now I want to make an aggregation in which I determine the maximum temperature … --- ## [How to use QueryBuilders class for MultiMatchQuery in Elasticsearch 8.x](https://discuss.elastic.co/t/how-to-use-querybuilders-class-for-multimatchquery-in-elasticsearch-8-x/319765)
**Author:** [@Olayode\_possible](https://discuss.elastic.co/u/Olayode_possible)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 7:43am UTC](https://discuss.elastic.co/t/how-to-use-querybuilders-class-for-multimatchquery-in-elasticsearch-8-x/319765 "2022-11-30T07:43:58Z")
Hi everyone, I am a newbie in Elasticseach and am trying out stuff in order to gain more knowledge. I need help converting the below line of code written in Elasticseach 7.x to 8.x standard. any pointers to resources… --- ## [Eliminate Kibana Maps refresh blink](https://discuss.elastic.co/t/eliminate-kibana-maps-refresh-blink/319887)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 4\ **Last updated:** [November 30, 2022, 7:46am UTC](https://discuss.elastic.co/t/eliminate-kibana-maps-refresh-blink/319887 "2022-11-30T07:46:57Z")
Hi, I know it's probably not possible, but is there a way to disable the 'blink' when Kibana Maps does a refresh? If for not all layers, maybe just for selected layers? It would be awesome! --- ## [Elasticsearch ingestnode crashes on a specific document?](https://discuss.elastic.co/t/elasticsearch-ingestnode-crashes-on-a-specific-document/319723)
**Author:** [@shanke](https://discuss.elastic.co/u/shanke)\ **Replies:** 2\ **Last updated:** [November 30, 2022, 6:42am UTC](https://discuss.elastic.co/t/elasticsearch-ingestnode-crashes-on-a-specific-document/319723 "2022-11-30T06:42:07Z")
Hey! I wrote a small application for our company which indexes all documents on our file server with the ingest attachment processor. In 7.x (as an extra plugin) it was working fine, since the change to 8.x (buildin inge… --- ## [Elasti Search failed to connect local host port:9200](https://discuss.elastic.co/t/elasti-search-failed-to-connect-local-host-port-9200/319958)
**Author:** [@Naga\_rajan](https://discuss.elastic.co/u/Naga_rajan)\ **Replies:** 4\ **Last updated:** [November 30, 2022, 6:23am UTC](https://discuss.elastic.co/t/elasti-search-failed-to-connect-local-host-port-9200/319958 "2022-11-30T06:23:22Z")
Hi Everyone, I Installed eck-operator, elasticsearch and kibana using this chart - \[helm-charts/elasticsearch at main · elastic/helm-charts · GitHub\] successfully deployed. kibana ui user page also coming. But while ex… --- ## [Dropdown filter does not apply on chart created using timelion](https://discuss.elastic.co/t/dropdown-filter-does-not-apply-on-chart-created-using-timelion/320109)
**Author:** [@Zaid\_Raza](https://discuss.elastic.co/u/Zaid_Raza)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 6:18am UTC](https://discuss.elastic.co/t/dropdown-filter-does-not-apply-on-chart-created-using-timelion/320109 "2022-11-30T06:18:11Z")
Hi, I have created a chart using Timelion on canvas. kibana |filters | timelion query=".es(index='traces-apm\*,apm-\*,logs-apm\*,apm-\*,metrics-apm\*,apm-\*',metric=avg:transaction.duration.us, timefield=@timestamp,q=' \_e… --- ## [Unable to start logstash service Windows server 64 bit](https://discuss.elastic.co/t/unable-to-start-logstash-service-windows-server-64-bit/319363)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 8\ **Last updated:** [November 30, 2022, 5:26am UTC](https://discuss.elastic.co/t/unable-to-start-logstash-service-windows-server-64-bit/319363 "2022-11-30T05:26:05Z")
Hi, I have downloaded and unzipped logstash and tried to install it as service using nssm. Logstash gets successfully installed but when i try to start the service it is showing as below screenshot. This is the erro… --- ## [Disk storage per node](https://discuss.elastic.co/t/disk-storage-per-node/319551)
**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:18am UTC](https://discuss.elastic.co/t/disk-storage-per-node/319551 "2022-11-30T01:18:22Z")
I read this article (Benchmarking and sizing your Elasticsearch cluster for logs and metrics | Elastic Blog) It introduced how to calculate total data, total storage and the number of data nodes in my cluster \* Total D… --- ## [Create Python elasticsearch connection](https://discuss.elastic.co/t/create-python-elasticsearch-connection/319690)
**Author:** [@3482bd7cf80a5a43e5a9](https://discuss.elastic.co/u/3482bd7cf80a5a43e5a9)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:17am UTC](https://discuss.elastic.co/t/create-python-elasticsearch-connection/319690 "2022-11-30T01:17:29Z")
Hi I'm using python client:Python Elasticsearch Client — Elasticsearch 8.0.0 documentation to initiate API calls to my ES hosted behind AWS API gateway. Can i use the SDK to talk to my ES stack if mTLS has been enabled… --- ## [The first request on my java application the search is slow but took is small and then it become quick](https://discuss.elastic.co/t/the-first-request-on-my-java-application-the-search-is-slow-but-took-is-small-and-then-it-become-quick/319715)
**Author:** [@MonkAscetic](https://discuss.elastic.co/u/MonkAscetic)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:14am UTC](https://discuss.elastic.co/t/the-first-request-on-my-java-application-the-search-is-slow-but-took-is-small-and-then-it-become-quick/319715 "2022-11-30T01:14:37Z")
the first request on my java application the search is slow but took is small and then it become quick, reponse took between 10ms and 20ms but actually is 2s,I used elasticseach 7.17.2,and client is ElasticsearchClient … --- ## [Can any one help me out for my cluster, It one node as this error](https://discuss.elastic.co/t/can-any-one-help-me-out-for-my-cluster-it-one-node-as-this-error/319731)
**Author:** [@Dhrumil\_Sakhreliya](https://discuss.elastic.co/u/Dhrumil_Sakhreliya)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:12am UTC](https://discuss.elastic.co/t/can-any-one-help-me-out-for-my-cluster-it-one-node-as-this-error/319731 "2022-11-30T01:12:31Z")
\[2022-11-24T04:38:53,120\]\[WARN \]\[r.suppressed \] \[cybernode01\] path: /\_cluster/health, params: {} org.elasticsearch.discovery.MasterNotDiscoveredException: null at org.elasticsearch.action.support.master.Tra… --- ## [Change the Certificate](https://discuss.elastic.co/t/change-the-certificate/319804)
**Author:** [@sa002](https://discuss.elastic.co/u/sa002)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:12am UTC](https://discuss.elastic.co/t/change-the-certificate/319804 "2022-11-30T01:12:05Z")
we have an Elasticsearch cluster with the version "7.17.5" The certificate has expired. I have renewed the certificate but somehow the cluster does not accept the certificate. It still has the old certificate because th… --- ## [Is it safe to modify system index template settings?](https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894)
**Author:** [@windows95](https://discuss.elastic.co/u/windows95)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 1:03am UTC](https://discuss.elastic.co/t/is-it-safe-to-modify-system-index-template-settings/319894 "2022-11-30T01:03:56Z")
I have a single node installation. This leads to an yellow/unhealthy status when indices have replication configured. In my case there are these system indices which cause problems: .internal.alerts-observability.logs.a… --- ## [Need help on creating a Watcher Alert for Packetbeat](https://discuss.elastic.co/t/need-help-on-creating-a-watcher-alert-for-packetbeat/319986)
**Author:** [@AKCG23](https://discuss.elastic.co/u/AKCG23)\ **Replies:** 0\ **Last updated:** [November 29, 2022, 3:27am UTC](https://discuss.elastic.co/t/need-help-on-creating-a-watcher-alert-for-packetbeat/319986 "2022-11-29T03:27:12Z")
Hi , i have configured Packetbeats in some of my Application servers. I am able to get data in my dashboards. Currently i am looking at creating some Alerts for the network traffic . Is there a template or an example wh… --- ## [How to Stop Deletion of a Specific Index?](https://discuss.elastic.co/t/how-to-stop-deletion-of-a-specific-index/320032)
**Author:** [@Jdman647](https://discuss.elastic.co/u/Jdman647)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:58am UTC](https://discuss.elastic.co/t/how-to-stop-deletion-of-a-specific-index/320032 "2022-11-30T00:58:45Z")
Hello, Using Securityonion's 'advanced clustering' which means us managing it's cluster. Our delete time is set to 15 days for our so-\* indices. If I want to stop specific index: so-zeek-11232022 from being deleted af… --- ## [cURL command to create the snapshot (cURL PUT) is showing empty response](https://discuss.elastic.co/t/curl-command-to-create-the-snapshot-curl-put-is-showing-empty-response/320041)
**Author:** [@thulsidosskrishnan](https://discuss.elastic.co/u/thulsidosskrishnan)\ **Replies:** 1\ **Last updated:** [November 30, 2022, 12:58am UTC](https://discuss.elastic.co/t/curl-command-to-create-the-snapshot-curl-put-is-showing-empty-response/320041 "2022-11-30T00:58:07Z")
Hello All, Greetings. I have a script that does the process for creating a repo on S3 AWS . I get all the indices and use the ES PUT CURL command to create the snapshot . For some time now the process is not completin… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=714) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=716)