# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=733 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 734 --- ## [Several filebeat installations on a Kibana / Elasticsearch server in one log file](https://discuss.elastic.co/t/several-filebeat-installations-on-a-kibana-elasticsearch-server-in-one-log-file/318754)
**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\ **Replies:** 3\ **Last updated:** [November 14, 2022, 8:32pm UTC](https://discuss.elastic.co/t/several-filebeat-installations-on-a-kibana-elasticsearch-server-in-one-log-file/318754 "2022-11-14T20:32:01Z")
Hello, I have filebeat installed on a host and all syslog data is sent to Elasticsearch / Kibana. Visible via (Discover / Dashboard). Now I would like to install filebeat on another host and also transfer the syslog da… --- ## [Generate alert for error message in metrics dataset](https://discuss.elastic.co/t/generate-alert-for-error-message-in-metrics-dataset/318888)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [November 14, 2022, 5:48pm UTC](https://discuss.elastic.co/t/generate-alert-for-error-message-in-metrics-dataset/318888 "2022-11-14T17:48:44Z")
We have a situation where dockerd will periodically crash on a host, creating issues with jobs running in a timely fashion. Our application team would like to be notified when dockerd goes down. Unfortunately, we do not … --- ## [Agent List](https://discuss.elastic.co/t/agent-list/318673)
**Author:** [@branden.heifner](https://discuss.elastic.co/u/branden.heifner)\ **Replies:** 4\ **Last updated:** [November 14, 2022, 6:21pm UTC](https://discuss.elastic.co/t/agent-list/318673 "2022-11-14T18:21:40Z")
Hello, Is there an API or some other method to export a list of agents enrolled with the fleet server and their status (Healthy, Offline, etc.)? What I need to do is audit the agents currently enrolled with fleet with o… --- ## [Elastic\_agent.process not found](https://discuss.elastic.co/t/elastic-agent-process-not-found/317804)
**Author:** [@Xigrealf](https://discuss.elastic.co/u/Xigrealf)\ **Replies:** 5\ **Last updated:** [November 14, 2022, 6:21pm UTC](https://discuss.elastic.co/t/elastic-agent-process-not-found/317804 "2022-11-14T18:21:22Z")
Hello, I am currently trying to set up Elastic Stack. After i've installed elasticsearch, kibana and enrolled my elastic-agent to the fleet server i can see that my agent looks healthy in kibana but when i click view ag… --- ## [ELK On Prem License](https://discuss.elastic.co/t/elk-on-prem-license/318884)
**Author:** [@akrog79](https://discuss.elastic.co/u/akrog79)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 5:28pm UTC](https://discuss.elastic.co/t/elk-on-prem-license/318884 "2022-11-14T17:28:12Z")
I want to integrate the ELK that I have On Premise with my Active Directory. However, I don't know what license I have to acquire or where I should buy it since the information I find is usually from Elastic Cloud. Som… --- ## [Filebeat does not read field when it includes a new line](https://discuss.elastic.co/t/filebeat-does-not-read-field-when-it-includes-a-new-line/318886)
**Author:** [@arhodoula](https://discuss.elastic.co/u/arhodoula)\ **Replies:** 0\ **Last updated:** [November 14, 2022, 4:46pm UTC](https://discuss.elastic.co/t/filebeat-does-not-read-field-when-it-includes-a-new-line/318886 "2022-11-14T16:46:24Z")
I have the following data which filebeat cannot process due to the new line "field\_1","field\_2","field\_3","field\_4","field\_5", "921122.27872"," 34905888319","FRGG","2022-09-23","XYZ" What I need is that the second fi… --- ## [Problem adding document field to alert's webhook body](https://discuss.elastic.co/t/problem-adding-document-field-to-alerts-webhook-body/318794)
**Author:** [@TXBigDawg1836](https://discuss.elastic.co/u/TXBigDawg1836)\ **Replies:** 3\ **Last updated:** [November 14, 2022, 4:23pm UTC](https://discuss.elastic.co/t/problem-adding-document-field-to-alerts-webhook-body/318794 "2022-11-14T16:23:49Z")
New to ES and having an issue with adding details in the body of a webhook. I am wanting to add the field information (ex: city) so that it will be included in the alert details. I have tried adding "City": "{{\_source.… --- ## [Rate limit processor not working as it should](https://discuss.elastic.co/t/rate-limit-processor-not-working-as-it-should/318882)
**Author:** [@NejcK](https://discuss.elastic.co/u/NejcK)\ **Replies:** 0\ **Last updated:** [November 14, 2022, 3:32pm UTC](https://discuss.elastic.co/t/rate-limit-processor-not-working-as-it-should/318882 "2022-11-14T15:32:37Z")
Hi. We've been using ES for a while now and saw that some apps are producing duplicate logs we'd like to limit the rate of (not drop them entirely) and have thus started using the rate\_limit processor (Rate limit the fl… --- ## [Kibana 7.17 Hide/Collapse Filter View](https://discuss.elastic.co/t/kibana-7-17-hide-collapse-filter-view/318678)
**Author:** [@kibanauser2022](https://discuss.elastic.co/u/kibanauser2022)\ **Replies:** 2\ **Last updated:** [November 14, 2022, 3:48pm UTC](https://discuss.elastic.co/t/kibana-7-17-hide-collapse-filter-view/318678 "2022-11-14T15:48:54Z")
Where can I find the setting to collapse the filters? If I add 15-20 filters then there is barely any space to view the chart and the log output. --- ## [Interactive legend doesn't work with orient type 'none'](https://discuss.elastic.co/t/interactive-legend-doesnt-work-with-orient-type-none/316652)
**Author:** [@karlanakamura](https://discuss.elastic.co/u/karlanakamura)\ **Replies:** 2\ **Last updated:** [October 18, 2022, 6:02pm UTC](https://discuss.elastic.co/t/interactive-legend-doesnt-work-with-orient-type-none/316652 "2022-10-18T18:02:10Z")
Hello, I'm using version 8.4.3 of elastic cloud. I'm having problems with the legends, I need to use the 'none' orient type because the legend was not getting the position I would like. After I changed it to 'none', th… --- ## [Add leading zeroes in sort script](https://discuss.elastic.co/t/add-leading-zeroes-in-sort-script/318870)
**Author:** [@undefined\_Undefined](https://discuss.elastic.co/u/undefined_Undefined)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 3:08pm UTC](https://discuss.elastic.co/t/add-leading-zeroes-in-sort-script/318870 "2022-11-14T15:08:54Z")
Hello, im use elastic 7.10.1 and i need help I wanna sort my numbers, but i can't use number type, so i decide sort it with leading zeroes { "sort": { "\_script": { "type": "string", "order": "asc", … --- ## [Fingerprint for kafka output](https://discuss.elastic.co/t/fingerprint-for-kafka-output/318878)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 0\ **Last updated:** [November 14, 2022, 3:01pm UTC](https://discuss.elastic.co/t/fingerprint-for-kafka-output/318878 "2022-11-14T15:01:59Z")
Hello! is there any option to use fingerprint in kafka output ? we have three nodes in high availability and we are tripling data. How can we avoid it ? Thank you in advanced! --- ## [Click On Kibana visual to navigate to associated dashboardkibana](https://discuss.elastic.co/t/click-on-kibana-visual-to-navigate-to-associated-dashboardkibana/318615)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 3\ **Last updated:** [November 14, 2022, 2:46pm UTC](https://discuss.elastic.co/t/click-on-kibana-visual-to-navigate-to-associated-dashboardkibana/318615 "2022-11-14T14:46:24Z")
Hello All, Is there a way in kibana visualization to Navigate to associated dashboarb after clicking on visualization.Currently work around I did i created seperate markdown custom CSS and navigate,but ideal requirement… --- ## [Term vectors for nested fields](https://discuss.elastic.co/t/term-vectors-for-nested-fields/318348)
**Author:** [@gioele](https://discuss.elastic.co/u/gioele)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 2:31pm UTC](https://discuss.elastic.co/t/term-vectors-for-nested-fields/318348 "2022-11-14T14:31:48Z")
Hi everyone. I'm trying to use the mtermvectors api to get the term vectors (with term\_statistics) for an artificial document having several nested fields. I noticed however that, while for standard fields this works wi… --- ## [Unable to get Elasticsearch console](https://discuss.elastic.co/t/unable-to-get-elasticsearch-console/318534)
**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\ **Replies:** 7\ **Last updated:** [November 14, 2022, 2:08pm UTC](https://discuss.elastic.co/t/unable-to-get-elasticsearch-console/318534 "2022-11-14T14:08:49Z")
Hi, We are not able to get Elasticsearch web console even if we check https://xxx.xxx.xx.xxx:9200 it shows nothing but all the services are running fine. Please find below logs from Elasticsearch. \[2022-11-09T16:22:4… --- ## [Kibana Visualization \[Line Chart\] How to Split By "Filters" and "Terms" in single visualization](https://discuss.elastic.co/t/kibana-visualization-line-chart-how-to-split-by-filters-and-terms-in-single-visualization/318226)
**Author:** [@kshamaz](https://discuss.elastic.co/u/kshamaz)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 2:01pm UTC](https://discuss.elastic.co/t/kibana-visualization-line-chart-how-to-split-by-filters-and-terms-in-single-visualization/318226 "2022-11-14T14:01:29Z")
Hi all, I have a ES dataset containing a term uri\_path, which can contain a mix of static strings and dynamic strings. Ex: Static values (i.e they don't contain dynamic parts in the path): /api/user/ /api/profile/ D… --- ## [How to (easiily) set time period to end of a day](https://discuss.elastic.co/t/how-to-easiily-set-time-period-to-end-of-a-day/318208)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 1:50pm UTC](https://discuss.elastic.co/t/how-to-easiily-set-time-period-to-end-of-a-day/318208 "2022-11-14T13:50:27Z")
Kibana 7.17 Very often I want to look at data for a certain day, so I need to set the time period as, E.g. Nov 3, 2022 @ 00:00:00.000 to Nov 3, 2022 @ 23:59:59.999. How can I easily do that? The only way I can find to … --- ## [How to Count repeated values in Kibana](https://discuss.elastic.co/t/how-to-count-repeated-values-in-kibana/318872)
**Author:** [@phil\_hcs\_tech](https://discuss.elastic.co/u/phil_hcs_tech)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 1:00pm UTC](https://discuss.elastic.co/t/how-to-count-repeated-values-in-kibana/318872 "2022-11-14T13:00:19Z")
I have an index storing family data. One of the properties is "childrenAges" which stores a list of the ages of the children in the family, see sample data below. I need to be able to count the ages of children across t… --- ## [Can I use ES roles with security disabled?](https://discuss.elastic.co/t/can-i-use-es-roles-with-security-disabled/318861)
**Author:** [@powerful\_clouds](https://discuss.elastic.co/u/powerful_clouds)\ **Replies:** 3\ **Last updated:** [November 14, 2022, 11:18am UTC](https://discuss.elastic.co/t/can-i-use-es-roles-with-security-disabled/318861 "2022-11-14T11:18:47Z")
I'm trying to use field-level security with ES. I have successfully created an index and populated it with some data. I have also defined a roles.yml file: regular: cluster: all indices: - names: \['log-index'\] … --- ## [Elastic agents not showing up data for custom UDP integration](https://discuss.elastic.co/t/elastic-agents-not-showing-up-data-for-custom-udp-integration/318853)
**Author:** [@Pablo\_Sagrera\_Garcia](https://discuss.elastic.co/u/Pablo_Sagrera_Garcia)\ **Replies:** 0\ **Last updated:** [November 14, 2022, 10:23am UTC](https://discuss.elastic.co/t/elastic-agents-not-showing-up-data-for-custom-udp-integration/318853 "2022-11-14T10:23:11Z")
Hi I have a Fleet of Elastic Agents running on a fresh k8s cluster (running ECK 8.5.0). I added Custom UDP log integration (default namespace ,Listen port 9512 and Listen address 0.0.0.0,Dataset name: udp.generic) via K… --- ## [Running functional tests from examples on Kibana 7.10.2 falls to errors](https://discuss.elastic.co/t/running-functional-tests-from-examples-on-kibana-7-10-2-falls-to-errors/316906)
**Author:** [@i\_sysa](https://discuss.elastic.co/u/i_sysa)\ **Replies:** 0\ **Last updated:** [October 18, 2022, 2:17pm UTC](https://discuss.elastic.co/t/running-functional-tests-from-examples-on-kibana-7-10-2-falls-to-errors/316906 "2022-10-18T14:17:07Z")
Hi team, may anybody help with issue? I'm running test server for 'examples' plugins and it falls to error Corrupted database, /kibana7.10.2/data/node\_auto\_transpilation\_cache/7.10 attempting to delete the store file a… --- ## [CSV to Elasticsearch via Python - Not able to see documents in Dashboard / Discover](https://discuss.elastic.co/t/csv-to-elasticsearch-via-python-not-able-to-see-documents-in-dashboard-discover/318820)
**Author:** [@erwinl10](https://discuss.elastic.co/u/erwinl10)\ **Replies:** 2\ **Last updated:** [November 14, 2022, 10:14am UTC](https://discuss.elastic.co/t/csv-to-elasticsearch-via-python-not-able-to-see-documents-in-dashboard-discover/318820 "2022-11-14T10:14:32Z")
Hi everyone, Good day! I am trying to do ingest csv to elasticsearch and hopefully to be able to visualize it in Kibana. Index is created via UI\[upload CSV\]. I've used a simple Python code for the succeeding upload of … --- ## [Field \[event.ingested\] of type \[keyword\] does not support custom formats](https://discuss.elastic.co/t/field-event-ingested-of-type-keyword-does-not-support-custom-formats/318850)
**Author:** [@tegerei](https://discuss.elastic.co/u/tegerei)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 10:06am UTC](https://discuss.elastic.co/t/field-event-ingested-of-type-keyword-does-not-support-custom-formats/318850 "2022-11-14T10:06:30Z")
I am using elasticsearch 7.10. On Friday night, one of the indices threw the error llegal\_argument\_exception at shard 0index xx.yynode FNZgMx35SGBsn8a1rs0WKQ Field \[event.ingested\] of type \[keyword\] does not support cu… --- ## [INCREASE RAM USAGE FOR KIBANA INSTANCE](https://discuss.elastic.co/t/increase-ram-usage-for-kibana-instance/318836)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 8\ **Last updated:** [November 14, 2022, 9:27am UTC](https://discuss.elastic.co/t/increase-ram-usage-for-kibana-instance/318836 "2022-11-14T09:27:22Z")
Kibana instance in the stack monitoring section shows Memory: 1.9/4.0 GB Is that the memory given to the entire kibana instance???? Can I increase this limit as the total RAM server got is 64 GB.... --- ## [Replace old Cold Node by a new one and migrate data](https://discuss.elastic.co/t/replace-old-cold-node-by-a-new-one-and-migrate-data/318410)
**Author:** [@zenzedoon](https://discuss.elastic.co/u/zenzedoon)\ **Replies:** 8\ **Last updated:** [November 14, 2022, 9:39am UTC](https://discuss.elastic.co/t/replace-old-cold-node-by-a-new-one-and-migrate-data/318410 "2022-11-14T09:39:16Z")
Hello, I have an ELK cluster with 3 nodes (debian 11 and ELK 7.17.0) : node1 (master+hot+ingest+content) 2Tb node2 (master+worm) 3Tb node3 (master+cold) 4Tb the cluster now is on red status cause the node3 is full ,… --- ## [Configure index template with custom fields](https://discuss.elastic.co/t/configure-index-template-with-custom-fields/318777)
**Author:** [@Ganapati\_Basimsetti](https://discuss.elastic.co/u/Ganapati_Basimsetti)\ **Replies:** 8\ **Last updated:** [November 13, 2022, 4:00pm UTC](https://discuss.elastic.co/t/configure-index-template-with-custom-fields/318777 "2022-11-13T16:00:07Z")
Hello Team, I am trying to configure an index template using custom fields with filebeat 8.2.0. I tried various combinations and read through various topics on the forum and the docs, but I couldn't make it work. The e… --- ## [Estimated bandwidth for normal operation](https://discuss.elastic.co/t/estimated-bandwidth-for-normal-operation/318840)
**Author:** [@Zay\_Lin\_Htun](https://discuss.elastic.co/u/Zay_Lin_Htun)\ **Replies:** 2\ **Last updated:** [November 14, 2022, 9:04am UTC](https://discuss.elastic.co/t/estimated-bandwidth-for-normal-operation/318840 "2022-11-14T09:04:40Z")
Hi all, I am the new to ELK stack and I would like to calculate the bandwidth for normal operation. "Based on my understanding, There's a number of consumers of bandwidth in an Elasticsearch cluster. The main two in no… --- ## [Newline character not processed by logback logstash JSON appender in Spring boot logger](https://discuss.elastic.co/t/newline-character-not-processed-by-logback-logstash-json-appender-in-spring-boot-logger/318841)
**Author:** [@jayanth91](https://discuss.elastic.co/u/jayanth91)\ **Replies:** 0\ **Last updated:** [November 14, 2022, 9:00am UTC](https://discuss.elastic.co/t/newline-character-not-processed-by-logback-logstash-json-appender-in-spring-boot-logger/318841 "2022-11-14T09:00:58Z")
So i'm trying to format my json string but somehow the newline characters are not being processed and get printed as-is. --- ## [Elasticsearch index data not found in directory data.path](https://discuss.elastic.co/t/elasticsearch-index-data-not-found-in-directory-data-path/318835)
**Author:** [@suresh\_chaudhari](https://discuss.elastic.co/u/suresh_chaudhari)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 8:20am UTC](https://discuss.elastic.co/t/elasticsearch-index-data-not-found-in-directory-data-path/318835 "2022-11-14T08:20:55Z")
Hi in .yml file i have mentioned data.path=custom directory.The index has approximate 500 mb data . when i CD to the custom directory and do \>\> ls -lh its only 4.kb I wonder where all the data resides of elasticsearch… --- ## [(Issue) Kibana Sending PlainText HTTP Traffic to ElasticSearch \[8.5.0\] (Fresh Install) (RHEL 7)](https://discuss.elastic.co/t/issue-kibana-sending-plaintext-http-traffic-to-elasticsearch-8-5-0-fresh-install-rhel-7/318829)
**Author:** [@scanlan](https://discuss.elastic.co/u/scanlan)\ **Replies:** 3\ **Last updated:** [November 14, 2022, 8:17am UTC](https://discuss.elastic.co/t/issue-kibana-sending-plaintext-http-traffic-to-elasticsearch-8-5-0-fresh-install-rhel-7/318829 "2022-11-14T08:17:26Z")
Hi All, Having an issue and was hoping someone would be able to assist. I have deployed a fresh instance of Elastic & Kibana (separate hosts) via RPM on RHEL 7.9. No issues during deployment. Everything seems to work f… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=732) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=734)