# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=838 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 839 --- ## [How to change/ modify kibana login landing page logo and text](https://discuss.elastic.co/t/how-to-change-modify-kibana-login-landing-page-logo-and-text/311401)
**Author:** [@Ayaan\_Shaik](https://discuss.elastic.co/u/Ayaan_Shaik)\ **Replies:** 4\ **Last updated:** [August 7, 2022, 6:23pm UTC](https://discuss.elastic.co/t/how-to-change-modify-kibana-login-landing-page-logo-and-text/311401 "2022-08-07T18:23:55Z")
Hi, I have upgraded with 8.3.3 version of ELK and As I can see in 7.1 version kibana logo and text at login page are at /usr/share/kibana/x-pack/plugins/security/target/public/security.chunk.4.js this path But I can'… --- ## [Convert String to date and compare it](https://discuss.elastic.co/t/convert-string-to-date-and-compare-it/311394)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 9\ **Last updated:** [August 7, 2022, 4:41pm UTC](https://discuss.elastic.co/t/convert-string-to-date-and-compare-it/311394 "2022-08-07T16:41:14Z")
Hi, I have two fields and I want to compare it field1: 20220720091723 field2: 07/20/22 09:17 I want to compare it so i don't know if i should convert to date then compare and how or can someone please tell me what i … --- ## [Distinct records with geo\_distance sort on aggregation ES](https://discuss.elastic.co/t/distinct-records-with-geo-distance-sort-on-aggregation-es/311606)
**Author:** [@ZulQ](https://discuss.elastic.co/u/ZulQ)\ **Replies:** 0\ **Last updated:** [August 7, 2022, 4:31pm UTC](https://discuss.elastic.co/t/distinct-records-with-geo-distance-sort-on-aggregation-es/311606 "2022-08-07T16:31:49Z")
I'm working on nearby API using elasticsearch. I'm trying to run 4 actions in ES query match condition (here running a script to get records within radius) get distinct records based on company's Key (want to get one … --- ## [Problem in yarn kbn bootstrap.Error: No module factory available for dependency type: CssDependency](https://discuss.elastic.co/t/problem-in-yarn-kbn-bootstrap-error-no-module-factory-available-for-dependency-type-cssdependency/311314)
**Author:** [@wwh2077](https://discuss.elastic.co/u/wwh2077)\ **Replies:** 2\ **Last updated:** [August 7, 2022, 4:14pm UTC](https://discuss.elastic.co/t/problem-in-yarn-kbn-bootstrap-error-no-module-factory-available-for-dependency-type-cssdependency/311314 "2022-08-07T16:14:53Z")
I am trying to setup kibana 7.16 development environment and to bootstrap Kibana and install all the dependencies, I've to use this cmd yarn kbn bootstrap . Sadly, I've this message failed \[bootstrap\] failed . $ yarn kb… --- ## [How to get file names of my Snapshot using curl?](https://discuss.elastic.co/t/how-to-get-file-names-of-my-snapshot-using-curl/310874)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 2\ **Last updated:** [August 7, 2022, 2:09pm UTC](https://discuss.elastic.co/t/how-to-get-file-names-of-my-snapshot-using-curl/310874 "2022-08-07T14:09:14Z")
Hi Elasticsearch Team! Just wondering if we do have a command to get the list of our snapshot file names using curl? Scenario: I used the step provided for snapshot and restore " Restore a snapshot | Elasticsearch Gui… --- ## [Manage\_index\_templates privilege not work in component\_template api](https://discuss.elastic.co/t/manage-index-templates-privilege-not-work-in-component-template-api/311029)
**Author:** [@Bryce\_Huang](https://discuss.elastic.co/u/Bryce_Huang)\ **Replies:** 1\ **Last updated:** [August 6, 2022, 3:18pm UTC](https://discuss.elastic.co/t/manage-index-templates-privilege-not-work-in-component-template-api/311029 "2022-08-06T15:18:09Z")
I give a test role manage\_index\_templates privilege, but it still can't put component template.kibana return 403 permission forbidden. In https://www.elastic.co/guide/en/elasticsearch/reference/7.17/indices-component-te… --- ## [Kibana Alert When No Metricbeat Data - to include hostname](https://discuss.elastic.co/t/kibana-alert-when-no-metricbeat-data-to-include-hostname/310048)
**Author:** [@abidub](https://discuss.elastic.co/u/abidub)\ **Replies:** 2\ **Last updated:** [August 6, 2022, 12:11pm UTC](https://discuss.elastic.co/t/kibana-alert-when-no-metricbeat-data-to-include-hostname/310048 "2022-08-06T12:11:54Z")
Hi there, I would like to receive an alert when any of the hosts that I have Metricbeat installed on, now longer reports in data, for whatever reason (it could be stopped, server is turned off etc.). I want to avoid ha… --- ## [Elasticsearch not forming a cluster in kubernetes](https://discuss.elastic.co/t/elasticsearch-not-forming-a-cluster-in-kubernetes/311463)
**Author:** [@willsc](https://discuss.elastic.co/u/willsc)\ **Replies:** 1\ **Last updated:** [August 6, 2022, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-not-forming-a-cluster-in-kubernetes/311463 "2022-08-06T08:29:53Z")
Can anyone assist with trying to work out why an es cluster doesnt discover it nodes in kubernetes. Currently deploying 7.17.4 in an rke2 cluster, that claims to have no network policy. Elastic is being deployed as a s… --- ## [Logstash showing error when executed from python but executes from terminal](https://discuss.elastic.co/t/logstash-showing-error-when-executed-from-python-but-executes-from-terminal/311508)
**Author:** [@Morning\_Star](https://discuss.elastic.co/u/Morning_Star)\ **Replies:** 4\ **Last updated:** [August 6, 2022, 6:15am UTC](https://discuss.elastic.co/t/logstash-showing-error-when-executed-from-python-but-executes-from-terminal/311508 "2022-08-06T06:15:49Z")
I'm new to ELK stack and any help would be appriciated I have tried both os and subprocess both are giving same error This is getting executed from terminal \` /usr/share/logstash/bin/logstash -f /root/folder1/folder… --- ## [Aggregated Logs and Reformatting for QRADAR](https://discuss.elastic.co/t/aggregated-logs-and-reformatting-for-qradar/311557)
**Author:** [@ombit](https://discuss.elastic.co/u/ombit)\ **Replies:** 1\ **Last updated:** [August 6, 2022, 5:28am UTC](https://discuss.elastic.co/t/aggregated-logs-and-reformatting-for-qradar/311557 "2022-08-06T05:28:03Z")
Hi all, I'm currently researching logstash (along with filebeat) as a possible solution for a problem we're seeing. We currently have a log server that is acting as a central manager, with a bunch of different Linux an… --- ## [Logstash port 5044 is not listening after logstash Installation](https://discuss.elastic.co/t/logstash-port-5044-is-not-listening-after-logstash-installation/311472)
**Author:** [@Nilesh1997](https://discuss.elastic.co/u/Nilesh1997)\ **Replies:** 2\ **Last updated:** [August 6, 2022, 4:56am UTC](https://discuss.elastic.co/t/logstash-port-5044-is-not-listening-after-logstash-installation/311472 "2022-08-06T04:56:52Z")
Dear all, I would like to receive log from remote server through file beat .However I find the port 5044 is not listening but status of logstash is active and enable. I did all the configuration needed for logstash.any … --- ## [I created a plugin in kibana, and I wanted to rename its header](https://discuss.elastic.co/t/i-created-a-plugin-in-kibana-and-i-wanted-to-rename-its-header/311441)
**Author:** [@Gabriel\_Vasconcelos](https://discuss.elastic.co/u/Gabriel_Vasconcelos)\ **Replies:** 1\ **Last updated:** [August 5, 2022, 8:46pm UTC](https://discuss.elastic.co/t/i-created-a-plugin-in-kibana-and-i-wanted-to-rename-its-header/311441 "2022-08-05T20:46:24Z")
Hi guys, I wanted to ask for your help. I created a plugin in kibana, but when I access it, in its header is the name "Kibana" and I would like to rename it to the name of my application, could you help me? Here is the i… --- ## [Issue with gsub and regex not affecting the resulting strings](https://discuss.elastic.co/t/issue-with-gsub-and-regex-not-affecting-the-resulting-strings/311570)
**Author:** [@I\_need\_an\_adult](https://discuss.elastic.co/u/I_need_an_adult)\ **Replies:** 4\ **Last updated:** [August 5, 2022, 8:45pm UTC](https://discuss.elastic.co/t/issue-with-gsub-and-regex-not-affecting-the-resulting-strings/311570 "2022-08-05T20:45:23Z")
Hello, I'm attempting to remove specific items of a return string so that I have accurate aggregated filetypes within elasticsearch. The general format of the TrID output is this: 34.2% (.DLL) Win32 Dynamic Link Librar… --- ## [Repeat field extraction and aggregation](https://discuss.elastic.co/t/repeat-field-extraction-and-aggregation/311558)
**Author:** [@RitzMak](https://discuss.elastic.co/u/RitzMak)\ **Replies:** 6\ **Last updated:** [August 5, 2022, 7:49pm UTC](https://discuss.elastic.co/t/repeat-field-extraction-and-aggregation/311558 "2022-08-05T19:49:17Z")
Hello All, I have some logs as below and I would like to get a total of all CACHE\_TIMING and DATABASE\_TIMING fields. I am thinking to create an array of these fields using gsub replacement and kv filter and then add the… --- ## [Subfield query not returning any data](https://discuss.elastic.co/t/subfield-query-not-returning-any-data/311561)
**Author:** [@Baerswords](https://discuss.elastic.co/u/Baerswords)\ **Replies:** 4\ **Last updated:** [August 5, 2022, 6:44pm UTC](https://discuss.elastic.co/t/subfield-query-not-returning-any-data/311561 "2022-08-05T18:44:21Z")
New to Elasticsearch, so please bear with me if this is a simple question that I should know. I have an index with fairly simple documents. When I try to query against anything in AppDataDict, though, I don't ever get … --- ## [Elasticsearch 8.3 intermittent snapshot issues with AWS S3 on EKS](https://discuss.elastic.co/t/elasticsearch-8-3-intermittent-snapshot-issues-with-aws-s3-on-eks/311566)
**Author:** [@cannoli](https://discuss.elastic.co/u/cannoli)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 6:08pm UTC](https://discuss.elastic.co/t/elasticsearch-8-3-intermittent-snapshot-issues-with-aws-s3-on-eks/311566 "2022-08-05T18:08:38Z")
Hello, I'm having difficulties with snapshotting with S3 on AWS. After an undetermined amount of ES snapshots to AWS S3 fail with an access denied error. The only resolution appears to be to restart all data and master … --- ## [Logstash filter verifier - daemon mode in Docker](https://discuss.elastic.co/t/logstash-filter-verifier-daemon-mode-in-docker/311556)
**Author:** [@rilcy](https://discuss.elastic.co/u/rilcy)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 3:54pm UTC](https://discuss.elastic.co/t/logstash-filter-verifier-daemon-mode-in-docker/311556 "2022-08-05T15:54:05Z")
Hi everyone, I use this great project from Magnus Bäck GitHub - magnusbaeck/logstash-filter-verifier to validate my Logstash filters in a Gitlab CI. It runs the version 1.6.3 in a Docker container to validate filters f… --- ## [Enforcing events to be outputted in order](https://discuss.elastic.co/t/enforcing-events-to-be-outputted-in-order/311552)
**Author:** [@ebram96](https://discuss.elastic.co/u/ebram96)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 3:27pm UTC](https://discuss.elastic.co/t/enforcing-events-to-be-outputted-in-order/311552 "2022-08-05T15:27:07Z")
I've a pipeline like this: input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/logstash-core/lib/jars/postgresql-42.2.6.jar" jdbc\_driver\_class =\> "org.postgresql.Driver" jdbc\_connection\_string =\> "$… --- ## [Filebeat writing to its own index](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 48\ **Last updated:** [August 5, 2022, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842 "2022-08-05T15:24:51Z")
\###################### Filebeat Configuration ######################### # You can find the full configuration reference here: # https://www.elastic.co/guide/en/beats/filebeat/index.html #===========================… --- ## [Do data streams require rollover\_alias setting](https://discuss.elastic.co/t/do-data-streams-require-rollover-alias-setting/311437)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 3\ **Last updated:** [August 5, 2022, 3:21pm UTC](https://discuss.elastic.co/t/do-data-streams-require-rollover-alias-setting/311437 "2022-08-05T15:21:43Z")
Whilst setting up a new heartbeat-8.3.2 I've noticed that the automatically created template has only index.lifecycle.name setting but not the rollover\_alias. Does that mean it's not required when using data streams? The… --- ## [Error on filebeat](https://discuss.elastic.co/t/error-on-filebeat/311330)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 10\ **Last updated:** [August 5, 2022, 3:19pm UTC](https://discuss.elastic.co/t/error-on-filebeat/311330 "2022-08-05T15:19:57Z")
My elasticsearch and kibana is ok but by filebeat doesn't work but when i do filebeat test config say its ok. Any suggestions for resolve this problem? Thank you. --- ## [Elastic search machine learning/ pattern recognition version 7.10.2](https://discuss.elastic.co/t/elastic-search-machine-learning-pattern-recognition-version-7-10-2/311202)
**Author:** [@zain.jutt](https://discuss.elastic.co/u/zain.jutt)\ **Replies:** 5\ **Last updated:** [August 5, 2022, 3:12pm UTC](https://discuss.elastic.co/t/elastic-search-machine-learning-pattern-recognition-version-7-10-2/311202 "2022-08-05T15:12:14Z")
Hi, I have a question to find the root cause of a failed test. In 1st step, we have centralized the data in the Elasticsearch(7.10.2) index which contains the test id and the message(log event). For the failed tests to … --- ## [FsCrawler add script to \_settings.yaml file](https://discuss.elastic.co/t/fscrawler-add-script-to-settings-yaml-file/311524)
**Author:** [@Julien70](https://discuss.elastic.co/u/Julien70)\ **Replies:** 2\ **Last updated:** [August 5, 2022, 3:05pm UTC](https://discuss.elastic.co/t/fscrawler-add-script-to-settings-yaml-file/311524 "2022-08-05T15:05:06Z")
Hi everyone, I have a lot of geotagged photos (among other geodata). I have imported them into Elastic (v7.11) with FsCrawler (v2.9 for es7). It's working pretty well. But, the fields "latitude" "longitude" taken from… --- ## [How can i extract timestamp from my log in logstash](https://discuss.elastic.co/t/how-can-i-extract-timestamp-from-my-log-in-logstash/311484)
**Author:** [@Akumar22](https://discuss.elastic.co/u/Akumar22)\ **Replies:** 1\ **Last updated:** [August 5, 2022, 2:41pm UTC](https://discuss.elastic.co/t/how-can-i-extract-timestamp-from-my-log-in-logstash/311484 "2022-08-05T14:41:59Z")
Below is the format of my logs 05-08-2022 13:20:13,468 INFO \[stdout\] (151\_bYD2+EULzJ\_SLR\_124219\_-\_mymailfc@mailinator.com) Subject: Products Offer exceeded threshold limit of 10% I want to extract the timestamp from t… --- ## [Can I use conditionals inside json {} filter?](https://discuss.elastic.co/t/can-i-use-conditionals-inside-json-filter/311547)
**Author:** [@mfloris](https://discuss.elastic.co/u/mfloris)\ **Replies:** 1\ **Last updated:** [August 5, 2022, 2:40pm UTC](https://discuss.elastic.co/t/can-i-use-conditionals-inside-json-filter/311547 "2022-08-05T14:40:07Z")
My input does not always contain some fields and I want to parse it accordingly, like this: filter { json { source =\> "message" if "thisField" in \[message\] { add\_field =\> { "MyField" =\> "%{\[message\]\[this… --- ## [Error when installing @elastic/synthetics](https://discuss.elastic.co/t/error-when-installing-elastic-synthetics/311497)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 1\ **Last updated:** [August 5, 2022, 2:18pm UTC](https://discuss.elastic.co/t/error-when-installing-elastic-synthetics/311497 "2022-08-05T14:18:38Z")
Hello, I'm trying to install npm install -g @elastic/synthetics on my local server but getting an error when running the command: loadCurrentTree ▀ ╢█████████████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░… --- ## [Compare fields value](https://discuss.elastic.co/t/compare-fields-value/311387)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 2\ **Last updated:** [August 5, 2022, 2:12pm UTC](https://discuss.elastic.co/t/compare-fields-value/311387 "2022-08-05T14:12:53Z")
Hi, I would like if it is possible how to compare this value of two fields field1 : 123456XXXXXX1234 field2 : 1234567890001234 I mean i want to do if first 6 chars and last 4 chars of field1 are similar to field2 the… --- ## [Compare two fields with different documents](https://discuss.elastic.co/t/compare-two-fields-with-different-documents/311529)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 5\ **Last updated:** [August 5, 2022, 1:59pm UTC](https://discuss.elastic.co/t/compare-two-fields-with-different-documents/311529 "2022-08-05T13:59:45Z")
Hi, I want to compare two fields but not in the same document is that possible ? for example : if date.document1 == date.document2 and x.document1 == y.document2 { #DO somthing } Any help would be sincerely appre… --- ## [Range filter in should match query](https://discuss.elastic.co/t/range-filter-in-should-match-query/311435)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 3\ **Last updated:** [August 5, 2022, 1:41pm UTC](https://discuss.elastic.co/t/range-filter-in-should-match-query/311435 "2022-08-05T13:41:14Z")
Hi, let's say I have 3 documents, id=1, "text" = "my name is john", "date" = "2021" id=2, "text" = "my name is alice", "date" = "2017" id=3, "text" = "my name is steven", "date" = "2019" I want to find all documents th… --- ## [How to pass url query string value into the elasticsearch SQL query in kibana canvas](https://discuss.elastic.co/t/how-to-pass-url-query-string-value-into-the-elasticsearch-sql-query-in-kibana-canvas/311540)
**Author:** [@sarvshresht6561](https://discuss.elastic.co/u/sarvshresht6561)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 1:24pm UTC](https://discuss.elastic.co/t/how-to-pass-url-query-string-value-into-the-elasticsearch-sql-query-in-kibana-canvas/311540 "2022-08-05T13:24:06Z")
I am new to ELK stack. I am making line graphs in kibana canvas with elastic SQL query as a data source. I am trying to fetch the query string value from the url to the SQL query, but the result of the query is "no docum… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=837) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=839)