# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=756 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 757 --- ## [Can we restrict Dashboard view for Kibana](https://discuss.elastic.co/t/can-we-restrict-dashboard-view-for-kibana/316989)
**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 5:42pm UTC](https://discuss.elastic.co/t/can-we-restrict-dashboard-view-for-kibana/316989 "2022-10-20T17:42:37Z")
Hi , i have kibana access, but I can see multiple dashboards, can we restrict the access on specific dashbard --- ## [Changing the SSL certificate fleet server uses](https://discuss.elastic.co/t/changing-the-ssl-certificate-fleet-server-uses/315902)
**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\ **Replies:** 4\ **Last updated:** [October 20, 2022, 5:40pm UTC](https://discuss.elastic.co/t/changing-the-ssl-certificate-fleet-server-uses/315902 "2022-10-20T17:40:47Z")
Is there a way to specify a new certificate that the fleet server will use for communication over port 8220 other than re-enrolling the agent? This is the certificate that is specified in the --fleet-server-cert and --f… --- ## [Repository-s3 plugin not synching snapshots](https://discuss.elastic.co/t/repository-s3-plugin-not-synching-snapshots/315117)
**Author:** [@Vishrant\_Gupta](https://discuss.elastic.co/u/Vishrant_Gupta)\ **Replies:** 12\ **Last updated:** [October 20, 2022, 4:54pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-not-synching-snapshots/315117 "2022-10-20T16:54:55Z")
Hi there, I have two elasticsearch clusters running on two separate kubernetes clusters. Both the elasticsearch clusters have the repository-s3 plugin installed. "2": { "name": "elasticsearch-client-575db98f… --- ## [Index total\_fields \> limit](https://discuss.elastic.co/t/index-total-fields-limit/317139)
**Author:** [@nagrgk](https://discuss.elastic.co/u/nagrgk)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 4:50pm UTC](https://discuss.elastic.co/t/index-total-fields-limit/317139 "2022-10-20T16:50:18Z")
Hello ElasticTeam, we have an issue with the total\_fields limit, which is defaulted to 1000 and we have increased it to more than 1000, problem is it gets changed back to 1000 after a few days and it is not preserved w… --- ## [How to get date parsing target as a date nor string](https://discuss.elastic.co/t/how-to-get-date-parsing-target-as-a-date-nor-string/317097)
**Author:** [@sh.user](https://discuss.elastic.co/u/sh.user)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 4:03pm UTC](https://discuss.elastic.co/t/how-to-get-date-parsing-target-as-a-date-nor-string/317097 "2022-10-20T16:03:36Z")
Hello, I need to parse Field1 as date . I use date filter but when i specify target , i get target as string not date ( by default the timestamp is the target but this is not my need). date { match =\> \["Field1", "dd/M… --- ## [Show failed GDM logins on Login Dasboard](https://discuss.elastic.co/t/show-failed-gdm-logins-on-login-dasboard/317039)
**Author:** [@dredshaw](https://discuss.elastic.co/u/dredshaw)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 3:43pm UTC](https://discuss.elastic.co/t/show-failed-gdm-logins-on-login-dasboard/317039 "2022-10-20T15:43:58Z")
I am using Auditbeat on a standalone system in a closed area with no internet access. I set up Elasticsearch, Kibana, and Auditbeat to audit the system. This was easy enough. I Would like to get the Login Dashboard to… --- ## [Use ctx in if condition is always null\_pointer\_exception](https://discuss.elastic.co/t/use-ctx-in-if-condition-is-always-null-pointer-exception/317121)
**Author:** [@HiganFish](https://discuss.elastic.co/u/HiganFish)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 2:53pm UTC](https://discuss.elastic.co/t/use-ctx-in-if-condition-is-always-null-pointer-exception/317121 "2022-10-20T14:53:15Z")
PUT \_ingest/pipeline/test1 { "processors": \[ {"dissect": { "field": "message", "pattern": "%{logdata}" }} \] } POST \_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ { … --- ## [Unable to get local Kibana to read any data from remote Metricbeat](https://discuss.elastic.co/t/unable-to-get-local-kibana-to-read-any-data-from-remote-metricbeat/317056)
**Author:** [@nola](https://discuss.elastic.co/u/nola)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 2:54pm UTC](https://discuss.elastic.co/t/unable-to-get-local-kibana-to-read-any-data-from-remote-metricbeat/317056 "2022-10-20T14:54:52Z")
I have Kibana installed on my local machine and have Elasticsearch and Metricbeat installed on a remote AWS EC2 instance. For simplicity, let's say the public IP address of the AWS box is http://1.2.3.4. In my local ki… --- ## [Prometheus module remote\_write metricset](https://discuss.elastic.co/t/prometheus-module-remote-write-metricset/317114)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 1:02pm UTC](https://discuss.elastic.co/t/prometheus-module-remote-write-metricset/317114 "2022-10-20T13:02:24Z")
Hello, We are scraping metrics from some 30+ Kafka clusters running in Confluent Cloud. We are scraping the metrics api using prometheus. Prometheus is configured to remote\_write to an elastic agent running among othe… --- ## [Kibana - monitors .. which index is in use](https://discuss.elastic.co/t/kibana-monitors-which-index-is-in-use/317111)
**Author:** [@joannejackson](https://discuss.elastic.co/u/joannejackson)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 12:51pm UTC](https://discuss.elastic.co/t/kibana-monitors-which-index-is-in-use/317111 "2022-10-20T12:51:54Z")
Hi - I'm new to kibana and we set up our first http monitor. My question -for visualization purposes .. what index does that monitor write to? --- ## [Run a "lite" elasticsearch](https://discuss.elastic.co/t/run-a-lite-elasticsearch/317033)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 12:36pm UTC](https://discuss.elastic.co/t/run-a-lite-elasticsearch/317033 "2022-10-20T12:36:05Z")
We are using elasticsearch in CI jobs, so we want it as liter as possible. With only the desired features: "search" ! This is very serious problem, elasticsearch is looking too "big" and I see many people leaving it for … --- ## [Filebeat not respect order of file?](https://discuss.elastic.co/t/filebeat-not-respect-order-of-file/317011)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 6\ **Last updated:** [October 20, 2022, 12:35pm UTC](https://discuss.elastic.co/t/filebeat-not-respect-order-of-file/317011 "2022-10-20T12:35:00Z")
filebeat at indexed at last to "server.log.2022-07-27" but the last is server.log why? not respect the name of file but the size of file? -rw-r--r--. 1 wildfly wildfly 0 Apr 20 18:25 audit.log -rw-r--r--. 1 wi… --- ## [Run same script in multiple environments](https://discuss.elastic.co/t/run-same-script-in-multiple-environments/316937)
**Author:** [@Kris\_MacKay](https://discuss.elastic.co/u/Kris_MacKay)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 12:34pm UTC](https://discuss.elastic.co/t/run-same-script-in-multiple-environments/316937 "2022-10-20T12:34:26Z")
I'd like to reuse the same script for different environments. The opening URL is dependent on passed in parameter. For each Fleet agent policy, I'd like the passed in parameter to apply to just that script, but not shar… --- ## [Can I use the values from the timepicker into aggregations?](https://discuss.elastic.co/t/can-i-use-the-values-from-the-timepicker-into-aggregations/317067)
**Author:** [@JimClark](https://discuss.elastic.co/u/JimClark)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 12:19pm UTC](https://discuss.elastic.co/t/can-i-use-the-values-from-the-timepicker-into-aggregations/317067 "2022-10-20T12:19:47Z")
My usecase is as follows: I have a network resource that I need to track the usage of. Every usage of the resource is recorded into a separate document with the total usage @timestamp -\> End of usage @id -\> resour… --- ## [Custom Fields Cannot Process by Filebeat](https://discuss.elastic.co/t/custom-fields-cannot-process-by-filebeat/317103)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 11:50am UTC](https://discuss.elastic.co/t/custom-fields-cannot-process-by-filebeat/317103 "2022-10-20T11:50:40Z")
Hi Team, I successfully able to dissect log.original field in my cisco module and turn it into a custom field host.name. When I try to make indices using this custom field host.name, the indices where not created. Tha… --- ## [Migrating Elastic Cloud to Elastic Hosted on Windows Server](https://discuss.elastic.co/t/migrating-elastic-cloud-to-elastic-hosted-on-windows-server/316792)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 11:24am UTC](https://discuss.elastic.co/t/migrating-elastic-cloud-to-elastic-hosted-on-windows-server/316792 "2022-10-20T11:24:52Z")
Hello, We have a Cloud(Elasticcloud) Instance hosted on AWS, and i would like to migrate the instance into a private Windows server. I couldn't find any instructions on the same could you please point me to the right r… --- ## [Export Kibana Dashboards from One server to another](https://discuss.elastic.co/t/export-kibana-dashboards-from-one-server-to-another/317101)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 11:23am UTC](https://discuss.elastic.co/t/export-kibana-dashboards-from-one-server-to-another/317101 "2022-10-20T11:23:01Z")
Hello, I have a dashboard created on Kibana 7.8 version I am trying to export and import it onto a different server which is ruining Kibana 8.4 version based on this Saved Objects | Kibana Guide \[7.8\] | Elastic steps … --- ## [Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch](https://discuss.elastic.co/t/exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch/317060)
**Author:** [@Joao\_Malebo](https://discuss.elastic.co/u/Joao_Malebo)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 10:14am UTC](https://discuss.elastic.co/t/exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch/317060 "2022-10-20T10:14:29Z")
Hello dears, I'm getting errors when running filebeats on a remote server to test the Elasticsearch connection Below is the error image and description. sudo filebeat setup -E output.logstash.enabled=false -E output.e… --- ## [Logstash sometimes ignoring datastream configuration in elasticsearch output](https://discuss.elastic.co/t/logstash-sometimes-ignoring-datastream-configuration-in-elasticsearch-output/317089)
**Author:** [@hti](https://discuss.elastic.co/u/hti)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 10:21am UTC](https://discuss.elastic.co/t/logstash-sometimes-ignoring-datastream-configuration-in-elasticsearch-output/317089 "2022-10-20T10:21:06Z")
Hello, we are running logstash 8.4.0 with multiple pipelines outputting to elasticsearch. Most of the time this works fine, but sometimes logstash will ignore the datastream configuration on startup and tries to write … --- ## [Index Creation for Fortinet Devices Fail](https://discuss.elastic.co/t/index-creation-for-fortinet-devices-fail/316116)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 10:19am UTC](https://discuss.elastic.co/t/index-creation-for-fortinet-devices-fail/316116 "2022-10-20T10:19:45Z")
Hello Elastic Team, I would like to ask for help for I my filebeat seems like to fail creating index for my fortinet firewall (I use Fortinet filebeat module). Filebeat version is 7.17.15. However, the fortigate logs fa… --- ## [Kibana user profile with specific index?](https://discuss.elastic.co/t/kibana-user-profile-with-specific-index/317096)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 10:14am UTC](https://discuss.elastic.co/t/kibana-user-profile-with-specific-index/317096 "2022-10-20T10:14:50Z")
hello is possible create multi user with same user have a group of index and other is not visible for all? example have 3 index index1 =\>user1 index2 =\>user2 index3 =\>user3 now all index is visible --- ## [Systemd\[1\]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE](https://discuss.elastic.co/t/systemd-1-elasticsearch-service-main-process-exited-code-exited-status-1-failure/317015)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 7:47am UTC](https://discuss.elastic.co/t/systemd-1-elasticsearch-service-main-process-exited-code-exited-status-1-failure/317015 "2022-10-20T07:47:14Z")
Hello, i have an 8.4.x Elastic's version. After editing the .yml file, setting IP address, cluster name and http port, the service doesn't start. jourcnalcte -xeu elasticsearch.service ott 19 16:05:54 ubuntu-linux-2… --- ## [Kibana not respect order by date why?](https://discuss.elastic.co/t/kibana-not-respect-order-by-date-why/317046)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 9:47am UTC](https://discuss.elastic.co/t/kibana-not-respect-order-by-date-why/317046 "2022-10-20T09:47:48Z")
in my index have this "message": "2022-10-08 19:36:24,452 INFO \[org.springframework.web.servlet.DispatcherServlet\] (default task-1) Completed initialization in 15 ms", "@timestamp": "2022-10-19T19:07:49.010Z", … --- ## [Ca certification error](https://discuss.elastic.co/t/ca-certification-error/317092)
**Author:** [@Siva\_Priya](https://discuss.elastic.co/u/Siva_Priya)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 9:46am UTC](https://discuss.elastic.co/t/ca-certification-error/317092 "2022-10-20T09:46:44Z")
I have installed Elasticsearch 7.14.1 .The Elasticsearch is working fine. Then i have deployed Logstash.The issue is logstash cannot communicate with Elasticsearch My elasticsearch.yaml file is apiVersion: elasticsearc… --- ## [Sum of last complete Bucket as a single metric](https://discuss.elastic.co/t/sum-of-last-complete-bucket-as-a-single-metric/314936)
**Author:** [@smueller](https://discuss.elastic.co/u/smueller)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 9:41am UTC](https://discuss.elastic.co/t/sum-of-last-complete-bucket-as-a-single-metric/314936 "2022-10-20T09:41:16Z")
hi, im looking for a way to display the sum of all values from the last complete bucket of a timeseries. the idea is to display the current sum of all memory ,cores ,requests,disk space, etc. used for a server farm in … --- ## [Reading json array with filebeat](https://discuss.elastic.co/t/reading-json-array-with-filebeat/317090)
**Author:** [@Steve666](https://discuss.elastic.co/u/Steve666)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 9:41am UTC](https://discuss.elastic.co/t/reading-json-array-with-filebeat/317090 "2022-10-20T09:41:09Z")
Hi all, Is there any possible way to extract a json array as follow with filebeat ? \ { "processingData" : { "tiffs" : \[ { "tiffName" : "blabla", "tiffHeight\_mm" : 1, "tiffWidth\_mm" … --- ## [Problem with filestream access denied on windows](https://discuss.elastic.co/t/problem-with-filestream-access-denied-on-windows/317086)
**Author:** [@drbytes](https://discuss.elastic.co/u/drbytes)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 9:06am UTC](https://discuss.elastic.co/t/problem-with-filestream-access-denied-on-windows/317086 "2022-10-20T09:06:48Z")
Hello I'm running into a problem with filebeat, an access denied. I have a directory located on c:\\DIR1\\DIR2\\LOG\_DIR, LOG\_DIR contains the log files which are read by filebeat using a filestream glob. The user running f… --- ## [Records missing from Elastic Index when running our Talend ETL process](https://discuss.elastic.co/t/records-missing-from-elastic-index-when-running-our-talend-etl-process/317085)
**Author:** [@BroJo](https://discuss.elastic.co/u/BroJo)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 8:57am UTC](https://discuss.elastic.co/t/records-missing-from-elastic-index-when-running-our-talend-etl-process/317085 "2022-10-20T08:57:00Z")
Hi there, In our application we decided to use elasticsearch create a daily snapshot of some critical application data for visualizations. The issue we are facing is that we are getting missing records in out etl proce… --- ## [How to do mathematical operations on 2 variables in tsvb markdown](https://discuss.elastic.co/t/how-to-do-mathematical-operations-on-2-variables-in-tsvb-markdown/317062)
**Author:** [@eleven\_e](https://discuss.elastic.co/u/eleven_e)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-do-mathematical-operations-on-2-variables-in-tsvb-markdown/317062 "2022-10-20T06:29:39Z")
I have 2 variables 'a' and 'b' where i need to perform (b-a)/b operation, how should i achieve it in the markdown? thanks. --- ## [Index doesn't rollover](https://discuss.elastic.co/t/index-doesnt-rollover/316837)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 5:55am UTC](https://discuss.elastic.co/t/index-doesnt-rollover/316837 "2022-10-20T05:55:15Z")
Hi, My server restarted, so I restarted my Filebeat, ES and Kibana. Initially, filebeat was giving the error of no write index is defined for alias \[filebeat-7.14.0\]. So I resolved it by using the Update Index Aliases A… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=755) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=757)