# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=744 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 745 --- ## [Filtering in lists in Bar chart](https://discuss.elastic.co/t/filtering-in-lists-in-bar-chart/317673)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 5:30pm UTC](https://discuss.elastic.co/t/filtering-in-lists-in-bar-chart/317673 "2022-11-03T17:30:04Z")
Hi all, I'm trying to filter values in lists in Bar charts. But I end up displaying all values of list in Bar Charts Example: Here I'm trying to filter with language - English Below field with list: contentepisodes… --- ## [Security vulnerability CVE-2021-46848 in Logstash base OS image](https://discuss.elastic.co/t/security-vulnerability-cve-2021-46848-in-logstash-base-os-image/318128)
**Author:** [@NeoELK](https://discuss.elastic.co/u/NeoELK)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 5:18pm UTC](https://discuss.elastic.co/t/security-vulnerability-cve-2021-46848-in-logstash-base-os-image/318128 "2022-11-03T17:18:39Z")
Hi there! I was trying to deploy Logstash by using this Docker image: docker.elastic.co/logstash/logstash:7.17.7 But my AquaSec scanner is throwing an error related to this vulnerability: CVE-2021-46848 | Ubuntu, So I … --- ## [Eland not working with cloud instance](https://discuss.elastic.co/t/eland-not-working-with-cloud-instance/318125)
**Author:** [@bruinjoe](https://discuss.elastic.co/u/bruinjoe)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 4:39pm UTC](https://discuss.elastic.co/t/eland-not-working-with-cloud-instance/318125 "2022-11-03T16:39:30Z")
I'm using a trial version of Elastic cloud. I found the Elasticsearch end point using the admin console at https://cloud.elastic.co/home. I was able to log into the endpoint with a Firefox browser using the elastic usern… --- ## [Kibana DAU/MAU ratio](https://discuss.elastic.co/t/kibana-dau-mau-ratio/317371)
**Author:** [@Bamboo\_Leylo](https://discuss.elastic.co/u/Bamboo_Leylo)\ **Replies:** 3\ **Last updated:** [November 3, 2022, 4:22pm UTC](https://discuss.elastic.co/t/kibana-dau-mau-ratio/317371 "2022-11-03T16:22:28Z")
Greetings! Faced with the problem of creating a fairly banal visualisation. I'd like to get information on the so-called stikness ratio, or dau/mau ratio (daily active users/monthly active users). Technically, it can p… --- ## [Kibana Time Series Visualization: group fields by values of another field](https://discuss.elastic.co/t/kibana-time-series-visualization-group-fields-by-values-of-another-field/318048)
**Author:** [@bgyomorei\_c](https://discuss.elastic.co/u/bgyomorei_c)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 4:06pm UTC](https://discuss.elastic.co/t/kibana-time-series-visualization-group-fields-by-values-of-another-field/318048 "2022-11-03T16:06:39Z")
Hi, Context: we have performance testing data coming from JMeter and from multiple test machines/hosts as well. So we've added a jmeter\_host\_id field to all of our samples to be able to distinguish inbetween these. Go… --- ## [Where are the elastic password?](https://discuss.elastic.co/t/where-are-the-elastic-password/318112)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 3:55pm UTC](https://discuss.elastic.co/t/where-are-the-elastic-password/318112 "2022-11-03T15:55:54Z")
i installed with sudo yum install --enablerepo=elasticsearch elasticsearch ======================================================================================================================== Package … --- ## [Kibana data visualization](https://discuss.elastic.co/t/kibana-data-visualization/318109)
**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 3:28pm UTC](https://discuss.elastic.co/t/kibana-data-visualization/318109 "2022-11-03T15:28:16Z")
Hi, I have built a dashboard. can I enforce a method, where the data is shown only after at least one filter is selected and by default the entire dashboard should be empty? --- ## [Could not configure kibana verification code in Kibana version 8.3.3](https://discuss.elastic.co/t/could-not-configure-kibana-verification-code-in-kibana-version-8-3-3/314045)
**Author:** [@rt\_888](https://discuss.elastic.co/u/rt_888)\ **Replies:** 3\ **Last updated:** [November 3, 2022, 3:10pm UTC](https://discuss.elastic.co/t/could-not-configure-kibana-verification-code-in-kibana-version-8-3-3/314045 "2022-11-03T15:10:14Z")
I started the Kibana where it required enrollment token. Once i filled in the enrollment token from running the elastic bin with this path " /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token ", then it a… --- ## [Logstash ack and persistent queue checkpoint order](https://discuss.elastic.co/t/logstash-ack-and-persistent-queue-checkpoint-order/317699)
**Author:** [@bonyolult](https://discuss.elastic.co/u/bonyolult)\ **Replies:** 2\ **Last updated:** [November 3, 2022, 2:38pm UTC](https://discuss.elastic.co/t/logstash-ack-and-persistent-queue-checkpoint-order/317699 "2022-11-03T14:38:24Z")
Hi, read the documentation forth and back and it's not obvious when a message is acked (e.g. consuming from RabbitMQ) . Is the message acked after written to Logstash PQ or acked after reading the input source but befor… --- ## [Elasticsearch Reindexing Benchmark](https://discuss.elastic.co/t/elasticsearch-reindexing-benchmark/318106)
**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 1:26pm UTC](https://discuss.elastic.co/t/elasticsearch-reindexing-benchmark/318106 "2022-11-03T13:26:24Z")
Hello, I have 2 Elasticsearch clusters i.e with version 7.5.1 and 8.4.3. I am migrating the data from a lower version to a higher version using ReIndexing with a remote server approach. Question: Is there any better… --- ## [Elastic 8 on centos 7 is possible?](https://discuss.elastic.co/t/elastic-8-on-centos-7-is-possible/318085)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [November 3, 2022, 1:16pm UTC](https://discuss.elastic.co/t/elastic-8-on-centos-7-is-possible/318085 "2022-11-03T13:16:35Z")
hello i see this guide Install Elasticsearch with RPM | Elasticsearch Guide \[8.4\] | Elastic but when starting have the error fatal exception while booting Elasticsearch org.elasticsearch.ElasticsearchSecurityExceptio… --- ## [How can i insert the history data into TSDB](https://discuss.elastic.co/t/how-can-i-insert-the-history-data-into-tsdb/318075)
**Author:** [@bo8888](https://discuss.elastic.co/u/bo8888)\ **Replies:** 6\ **Last updated:** [November 3, 2022, 12:02pm UTC](https://discuss.elastic.co/t/how-can-i-insert-the-history-data-into-tsdb/318075 "2022-11-03T12:02:40Z")
I study Set up a time series data stream (TSDS) | Elasticsearch Guide \[8.5\] | Elastic but i insert the data ,found a error PUT metrics-weather\_sensors-dev/\_bulk { "create":{ } } { "@timestamp": "2099-05-06T16:21:15.00… --- ## [Increase of memory in logstash when certificate reload time is kept as 5min](https://discuss.elastic.co/t/increase-of-memory-in-logstash-when-certificate-reload-time-is-kept-as-5min/317870)
**Author:** [@teja\_tata](https://discuss.elastic.co/u/teja_tata)\ **Replies:** 6\ **Last updated:** [November 3, 2022, 11:36am UTC](https://discuss.elastic.co/t/increase-of-memory-in-logstash-when-certificate-reload-time-is-kept-as-5min/317870 "2022-11-03T11:36:07Z")
When certificate rotations time is kept as 5min will there be any increase in memory in logstash? --- ## [AutoRun multiple config file from nssm in windows](https://discuss.elastic.co/t/autorun-multiple-config-file-from-nssm-in-windows/318099)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 10:51am UTC](https://discuss.elastic.co/t/autorun-multiple-config-file-from-nssm-in-windows/318099 "2022-11-03T10:51:36Z")
Hello, I am using nssm to autostart my logstash configs when the system starts. what i have done is, download nssm -\> nssm install logstash -\> added logstash application paths and arguments -\> start the service. It is … --- ## [Two Filter at The Same Time (Kibana)](https://discuss.elastic.co/t/two-filter-at-the-same-time-kibana/318063)
**Author:** [@Xenial](https://discuss.elastic.co/u/Xenial)\ **Replies:** 2\ **Last updated:** [November 3, 2022, 9:54am UTC](https://discuss.elastic.co/t/two-filter-at-the-same-time-kibana/318063 "2022-11-03T09:54:20Z")
Hello, I want to use two filter at the same time. how to scoring total alert with filter, source.ip and destination.ip at the same time? Thankyou --- ## [How to regex urls with Grok](https://discuss.elastic.co/t/how-to-regex-urls-with-grok/318011)
**Author:** [@lamdba](https://discuss.elastic.co/u/lamdba)\ **Replies:** 2\ **Last updated:** [November 3, 2022, 9:46am UTC](https://discuss.elastic.co/t/how-to-regex-urls-with-grok/318011 "2022-11-03T09:46:21Z")
Hello there, Sorry to bother but I'm slowly working my way to fully use and understand the stack and right now I'm blocked with a (I guess) simple problem with Logstash. I parse multiple events through Logstash and eve… --- ## [Node down alert](https://discuss.elastic.co/t/node-down-alert/317946)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [November 3, 2022, 9:27am UTC](https://discuss.elastic.co/t/node-down-alert/317946 "2022-11-03T09:27:52Z")
Hi Community, I am using ELK cluster version 7.17. I need to get alert if a node goes down for a particular duration like 5 minute. I am using metricbeat to monitor cluster. How can we achieve this. --- ## [Proximity with Boolean operators?](https://discuss.elastic.co/t/proximity-with-boolean-operators/318083)
**Author:** [@Broccolimon](https://discuss.elastic.co/u/Broccolimon)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 9:08am UTC](https://discuss.elastic.co/t/proximity-with-boolean-operators/318083 "2022-11-03T09:08:46Z")
I would like to run queries with the format: query = { "size": limit, "query": { "query\_string": {"query": query, "default\_operator":"AND"} } } Where my query … --- ## [Possibility of Duplicate Value in Field](https://discuss.elastic.co/t/possibility-of-duplicate-value-in-field/318077)
**Author:** [@haikal.azaim](https://discuss.elastic.co/u/haikal.azaim)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 9:12am UTC](https://discuss.elastic.co/t/possibility-of-duplicate-value-in-field/318077 "2022-11-03T09:12:13Z")
Hi, i am new to elastic and really enjoy exploring elastic stack so far. For the background, i still developing log normalization for my monitoring assets and classify them into specific event.category and specific even… --- ## [How to import customized dashboard gist to Kibana?](https://discuss.elastic.co/t/how-to-import-customized-dashboard-gist-to-kibana/37088)
**Author:** [@thyfere](https://discuss.elastic.co/u/thyfere)\ **Replies:** 4\ **Last updated:** [June 13, 2017, 12:35pm UTC](https://discuss.elastic.co/t/how-to-import-customized-dashboard-gist-to-kibana/37088 "2017-06-13T12:35:11Z")
Hi, I am running Kibana Version 4.1.1 Build 7489. I want to import the following gist to Kibana, how can I do it? https://gist.githubusercontent.com/elijahpaul/4b9cd98715c0ba2a75de/raw/9324f7c637e486fb53c8e66e1552595… --- ## [Java API client 8.x with Elasticsearch 7.x](https://discuss.elastic.co/t/java-api-client-8-x-with-elasticsearch-7-x/318000)
**Author:** [@YNikolay](https://discuss.elastic.co/u/YNikolay)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 9:00am UTC](https://discuss.elastic.co/t/java-api-client-8-x-with-elasticsearch-7-x/318000 "2022-11-03T09:00:10Z")
Hello, Can the Java API client 8.x be used with Elasticsearch server 7.x? --- ## [Multiline codec not expected bulk](https://discuss.elastic.co/t/multiline-codec-not-expected-bulk/318052)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 6:55am UTC](https://discuss.elastic.co/t/multiline-codec-not-expected-bulk/318052 "2022-11-03T06:55:11Z")
My case is that I have a separate pipelines for each file. Here for "Numbers\*" files, it doesn't work properly for me to put data into elastic. On input side I have files divided into 50\_000 lines and with a name that is… --- ## [Regarding ignore fieds](https://discuss.elastic.co/t/regarding-ignore-fieds/317803)
**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\ **Replies:** 9\ **Last updated:** [November 3, 2022, 7:48am UTC](https://discuss.elastic.co/t/regarding-ignore-fieds/317803 "2022-11-03T07:48:42Z")
Hi team, We would like to explore the ignore fields in Filebeat. Our purpose is to deleted the older files after denoted the value looks below. After implemented the ignore\_older as 2h in filebeat. The logs has stop… --- ## [Elasticsearch 8.4.3 enable remote access](https://discuss.elastic.co/t/elasticsearch-8-4-3-enable-remote-access/317842)
**Author:** [@ChristopherHS](https://discuss.elastic.co/u/ChristopherHS)\ **Replies:** 12\ **Last updated:** [November 3, 2022, 6:59am UTC](https://discuss.elastic.co/t/elasticsearch-8-4-3-enable-remote-access/317842 "2022-11-03T06:59:06Z")
Hello, We took a server to test Elasticsearch version 8.4.3 and do some tests. We followed the installation steps: Elasticsearch starts fine and responds to: curl -X GET http://localhost:9200 We are trying to make … --- ## [Send output to elastic search specific index with ilm\_rollover?](https://discuss.elastic.co/t/send-output-to-elastic-search-specific-index-with-ilm-rollover/317818)
**Author:** [@Linux\_Artists](https://discuss.elastic.co/u/Linux_Artists)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 6:49am UTC](https://discuss.elastic.co/t/send-output-to-elastic-search-specific-index-with-ilm-rollover/317818 "2022-11-03T06:49:20Z")
Hello, Running elasticsearch kibana and filebeat I will like to make an index and pattern with ILM. On Elasticsearch I did while \[\[ "$(curl -s -o /dev/null -w '%{http\_code}\\n' $ES\_URL)" != "200" \]\]; do sleep… --- ## [Elastic Agent installation error on Azure Windows VM](https://discuss.elastic.co/t/elastic-agent-installation-error-on-azure-windows-vm/318067)
**Author:** [@mitchelldemol](https://discuss.elastic.co/u/mitchelldemol)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 6:28am UTC](https://discuss.elastic.co/t/elastic-agent-installation-error-on-azure-windows-vm/318067 "2022-11-03T06:28:30Z")
I have come across a bug when trying to install the elastic agent (8.4.0) on Windows Server 2019 VMs on Azure via the instructions provided in the fleet documentation. The startup script on the VM runs the following co… --- ## [Index RED with Error This version of Lucene only supports indexes created with release 6.0 and later](https://discuss.elastic.co/t/index-red-with-error-this-version-of-lucene-only-supports-indexes-created-with-release-6-0-and-later/317975)
**Author:** [@vishalbhandari](https://discuss.elastic.co/u/vishalbhandari)\ **Replies:** 3\ **Last updated:** [November 3, 2022, 5:31am UTC](https://discuss.elastic.co/t/index-red-with-error-this-version-of-lucene-only-supports-indexes-created-with-release-6-0-and-later/317975 "2022-11-03T05:31:21Z")
Hi I have Elastic search version 7.16.3, in this one index is showing RED and when i tried recover it using CheckIndex command "java -cp lucene-core-8.10.1.jar -ea:org.apache.lucene… org.apache.lucene.index.CheckIndex C… --- ## [How to get sum of some last values correctly in KIBANA](https://discuss.elastic.co/t/how-to-get-sum-of-some-last-values-correctly-in-kibana/317878)
**Author:** [@Joko\_Eliyanto](https://discuss.elastic.co/u/Joko_Eliyanto)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 4:37am UTC](https://discuss.elastic.co/t/how-to-get-sum-of-some-last-values-correctly-in-kibana/317878 "2022-11-03T04:37:25Z")
I am a new user in KIBANA dashboard, I just want to create a card that contain sum of certain days last value(for example 1day, 2day, 3day or so on). I think I can get the result I need by change the last value interval … --- ## [Cluster breaks very frequently](https://discuss.elastic.co/t/cluster-breaks-very-frequently/317967)
**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\ **Replies:** 9\ **Last updated:** [November 3, 2022, 4:35am UTC](https://discuss.elastic.co/t/cluster-breaks-very-frequently/317967 "2022-11-03T04:35:57Z")
I have a 3-node cluster, all are master eligible. I am facing a weird issue of cluster breaks since last month and it's very frequent. I've tried a lot of things to make it stable but nothing works. I am using ES 5.6.16 … --- ## [Not able to connect Kafka server in output kafka plugin using SASL\_SSL](https://discuss.elastic.co/t/not-able-to-connect-kafka-server-in-output-kafka-plugin-using-sasl-ssl/318062)
**Author:** [@danishbit09](https://discuss.elastic.co/u/danishbit09)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 3:53am UTC](https://discuss.elastic.co/t/not-able-to-connect-kafka-server-in-output-kafka-plugin-using-sasl-ssl/318062 "2022-11-03T03:53:23Z")
I am not able to publish log into Kafka topic. Below error is showing. Kindly suggest for the below error log. be removed in future version. Please use 'use\_all\_dns\_ips' or another non-deprecated value. \[2022-11-03T11:… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=743) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=745)