# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=894 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 895 --- ## [Adjusting the Elasticsearch logo/white labeling](https://discuss.elastic.co/t/adjusting-the-elasticsearch-logo-white-labeling/307773)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 4:42pm UTC](https://discuss.elastic.co/t/adjusting-the-elasticsearch-logo-white-labeling/307773 "2022-06-21T16:42:15Z")
Hello, Has anyone had any success white labeling Kibana? There were some previous guides for version 7.17 but with 8.0 released they no longer apply. Thanks --- ## [Logstash is running on only starts on 127.0.0.1:9600](https://discuss.elastic.co/t/logstash-is-running-on-only-starts-on-127-0-0-1-9600/307710)
**Author:** [@sugriv\_1605](https://discuss.elastic.co/u/sugriv_1605)\ **Replies:** 4\ **Last updated:** [June 21, 2022, 4:38pm UTC](https://discuss.elastic.co/t/logstash-is-running-on-only-starts-on-127-0-0-1-9600/307710 "2022-06-21T16:38:18Z")
Hi, My Logstash is running but the Port 9600 is not Listening. --- ## [Logstash index pattern error](https://discuss.elastic.co/t/logstash-index-pattern-error/307721)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 4:32pm UTC](https://discuss.elastic.co/t/logstash-index-pattern-error/307721 "2022-06-21T16:32:55Z")
Hello Team, could you please advise why data view cannot be created? conf entry input { file { start\_position =\> "beginning" path =\> "/data/KONG1/mm\_bl.log" sincedb\_path =\> "/dev/null" } } filter { json { … --- ## [Prefix Queries Using NEST API](https://discuss.elastic.co/t/prefix-queries-using-nest-api/307590)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 4:00pm UTC](https://discuss.elastic.co/t/prefix-queries-using-nest-api/307590 "2022-06-21T16:00:30Z")
Is there any way to analyze the prefix text as the same analyzer used in the indexing. For example : var searchResponse = await client.SearchAsync\(s =\> s.Index($"localities-{country.ToLower()}") … --- ## [Huge memory usage because of SnapshotShardFailure error objects on master node](https://discuss.elastic.co/t/huge-memory-usage-because-of-snapshotshardfailure-error-objects-on-master-node/307761)
**Author:** [@Vivek\_Singh1](https://discuss.elastic.co/u/Vivek_Singh1)\ **Replies:** 5\ **Last updated:** [June 21, 2022, 3:49pm UTC](https://discuss.elastic.co/t/huge-memory-usage-because-of-snapshotshardfailure-error-objects-on-master-node/307761 "2022-06-21T15:49:11Z")
We are seeing a considerable memory consumption on master nodes. ES Version: 6.5.4 The number of shards is close to 45k. The number of data nodes is 9. The memory on data nodes is 32GB, and the ES Heap size is 18GB. … --- ## [Master not discovered yet](https://discuss.elastic.co/t/master-not-discovered-yet/307752)
**Author:** [@tamis-laan](https://discuss.elastic.co/u/tamis-laan)\ **Replies:** 13\ **Last updated:** [June 21, 2022, 2:41pm UTC](https://discuss.elastic.co/t/master-not-discovered-yet/307752 "2022-06-21T14:41:09Z")
I'm trying to build a docker swarm elasticsearch cluster and I have the following compose file: elastic: # image: elasticsearch:7.14.1 image: elasticsearch:7.6.2 hostname: elastic.{{.Task.Slot}} enviro… --- ## [Upgraded to 8.2 and datastream, geo\_point set as and stuck as string in data view](https://discuss.elastic.co/t/upgraded-to-8-2-and-datastream-geo-point-set-as-and-stuck-as-string-in-data-view/306916)
**Author:** [@JSkier](https://discuss.elastic.co/u/JSkier)\ **Replies:** 6\ **Last updated:** [June 21, 2022, 2:40pm UTC](https://discuss.elastic.co/t/upgraded-to-8-2-and-datastream-geo-point-set-as-and-stuck-as-string-in-data-view/306916 "2022-06-21T14:40:34Z")
I upgraded my cluster to 8.2 last week, and started migrating over to data streams for filebeat, metricbeat, and logstash. For the most part this went okay, with the exception of geo\_points. Initially, the geo object wa… --- ## [How to get more filter in the "alarm" system](https://discuss.elastic.co/t/how-to-get-more-filter-in-the-alarm-system/307429)
**Author:** [@Zarzaparro](https://discuss.elastic.co/u/Zarzaparro)\ **Replies:** 4\ **Last updated:** [June 21, 2022, 2:16pm UTC](https://discuss.elastic.co/t/how-to-get-more-filter-in-the-alarm-system/307429 "2022-06-21T14:16:24Z")
Hello! I'm working with Kibana and I need to know if something I need can be done. I'm creating alerts from the system, and as I can see I only can create on single filter (see the screenshot attached) I would need s… --- ## [Limitation on the value of top values](https://discuss.elastic.co/t/limitation-on-the-value-of-top-values/307731)
**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 2:06pm UTC](https://discuss.elastic.co/t/limitation-on-the-value-of-top-values/307731 "2022-06-21T14:06:37Z")
Hello, I am implementing dashboards with data that I am collecting every day through a process that loads CSV files and then processes all that data. The problem I am running into is the following. When I want to build… --- ## [How do we recover from corruption in transaction log file?](https://discuss.elastic.co/t/how-do-we-recover-from-corruption-in-transaction-log-file/307379)
**Author:** [@EVINDX](https://discuss.elastic.co/u/EVINDX)\ **Replies:** 3\ **Last updated:** [June 21, 2022, 2:01pm UTC](https://discuss.elastic.co/t/how-do-we-recover-from-corruption-in-transaction-log-file/307379 "2022-06-21T14:01:51Z")
There has been corruption of transaction log in the environment due to which the indices are in red. Because of which we are unable to move forward with indexing new items and the backlog for the items to index keep incr… --- ## [Add Reference Line missing for line chart](https://discuss.elastic.co/t/add-reference-line-missing-for-line-chart/307746)
**Author:** [@RahulWagh](https://discuss.elastic.co/u/RahulWagh)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 1:56pm UTC](https://discuss.elastic.co/t/add-reference-line-missing-for-line-chart/307746 "2022-06-21T13:56:44Z")
Hi, I am using Kibana v7.15 where I have created line charts. I want to add Reference Line but the option is missing. Is this feature not present in v7.15 because in v7.17 I am getting the option? Or is there a permiss… --- ## [Is there a way to stop auto-refresh when editing lens](https://discuss.elastic.co/t/is-there-a-way-to-stop-auto-refresh-when-editing-lens/307748)
**Author:** [@Artur\_Fijalkowski](https://discuss.elastic.co/u/Artur_Fijalkowski)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 1:55pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-stop-auto-refresh-when-editing-lens/307748 "2022-06-21T13:55:02Z")
I'm working right now a lot on building dashboards. My problem is that Elastic Cloud I'm connected to is super sloooow. Auto-refresh on editing lens is killing my productivity becuase eg. changing label of data trigger… --- ## [Index Last Modified date and time](https://discuss.elastic.co/t/index-last-modified-date-and-time/307756)
**Author:** [@kavirajansakthivel](https://discuss.elastic.co/u/kavirajansakthivel)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 1:46pm UTC](https://discuss.elastic.co/t/index-last-modified-date-and-time/307756 "2022-06-21T13:46:37Z")
Hi Team, Is there any way to find out the last modified date and time of the particular index ? we are using 7.17 version. Thanks, Kavi --- ## [Bucket sort may be wrong](https://discuss.elastic.co/t/bucket-sort-may-be-wrong/307745)
**Author:** [@NathBabs](https://discuss.elastic.co/u/NathBabs)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 1:39pm UTC](https://discuss.elastic.co/t/bucket-sort-may-be-wrong/307745 "2022-06-21T13:39:35Z")
I am trying to use bucket\_sort, but i am not sure if it's working correctly. "aggs": { "group\_by\_phone": { "terms": { "field": "phoneNumber.keyword" }, "aggs": { "totalTnxAmount": { "sum… --- ## [Logstash setting LS\_JAVA\_HOME](https://discuss.elastic.co/t/logstash-setting-ls-java-home/307538)
**Author:** [@BRosenberg](https://discuss.elastic.co/u/BRosenberg)\ **Replies:** 6\ **Last updated:** [June 21, 2022, 1:30pm UTC](https://discuss.elastic.co/t/logstash-setting-ls-java-home/307538 "2022-06-21T13:30:48Z")
Hello again! Before installing Logstash from the apt repo, I made sure java was installed and have set JAVA\_HOME and LS\_JAVA\_HOME to /usr/bin/java as well as added /usr/bin/java to my path and verified java is installed… --- ## [Elasticsearch: Project hierarchy](https://discuss.elastic.co/t/elasticsearch-project-hierarchy/307506)
**Author:** [@zain.jutt](https://discuss.elastic.co/u/zain.jutt)\ **Replies:** 4\ **Last updated:** [June 21, 2022, 1:20pm UTC](https://discuss.elastic.co/t/elasticsearch-project-hierarchy/307506 "2022-06-21T13:20:32Z")
Hi, I am new to ElK stack. i am using it to centralize logs for the test runs. I have a suite of 50 test cases which runs on the nightly basis and generate some tests and system-side data. I want to store this data into… --- ## [Python, Elasticsearch and Apache Spark, Simple data reading](https://discuss.elastic.co/t/python-elasticsearch-and-apache-spark-simple-data-reading/307715)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 1:14pm UTC](https://discuss.elastic.co/t/python-elasticsearch-and-apache-spark-simple-data-reading/307715 "2022-06-21T13:14:50Z")
I'm trying to read data from Elasticsearch using Apache Spark, the Hadoop conector and Python language. And it's give me a really true headache. The Python Code is: conf = SparkConf() conf.setMaster("local") conf.setAp… --- ## [Huge fields - Mapping best practice](https://discuss.elastic.co/t/huge-fields-mapping-best-practice/307261)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 6\ **Last updated:** [June 21, 2022, 1:08pm UTC](https://discuss.elastic.co/t/huge-fields-mapping-best-practice/307261 "2022-06-21T13:08:05Z")
Hey all :wave: I'm wondering what the best practice and recommendation would be for handling huge fields at scale? The situation I have is that I need to include an XML document (which is almost always massive) in the K… --- ## [Master and data nodes have different cluster UUIDs](https://discuss.elastic.co/t/master-and-data-nodes-have-different-cluster-uuids/307652)
**Author:** [@Faisal\_Umer](https://discuss.elastic.co/u/Faisal_Umer)\ **Replies:** 4\ **Last updated:** [June 21, 2022, 12:06pm UTC](https://discuss.elastic.co/t/master-and-data-nodes-have-different-cluster-uuids/307652 "2022-06-21T12:06:32Z")
Hi team, We have a cluster hosted on AWS EC2 instances having 1 kibana (8GB root volume, non persistent) 3 master (8GB root volume, non-persistent) 12 data nodes (200GB persistent disk is attached per node) We are u… --- ## [Wrong regions shown for Administrative regions in elastic maps](https://discuss.elastic.co/t/wrong-regions-shown-for-administrative-regions-in-elastic-maps/302289)
**Author:** [@Sinchana\_P](https://discuss.elastic.co/u/Sinchana_P)\ **Replies:** 5\ **Last updated:** [June 21, 2022, 10:59am UTC](https://discuss.elastic.co/t/wrong-regions-shown-for-administrative-regions-in-elastic-maps/302289 "2022-06-21T10:59:03Z")
The region shown for Telangana is Andhra Pradesh and the region shown for Andhra Pradesh is Telangana. Shown in the screenshots below. The region name and ISO code is of Andhra Pradesh but the map shows Telangana region… --- ## [My array of objects has different keys, How can I chenged them to the same name?](https://discuss.elastic.co/t/my-array-of-objects-has-different-keys-how-can-i-chenged-them-to-the-same-name/307683)
**Author:** [@jvinacio](https://discuss.elastic.co/u/jvinacio)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 10:53am UTC](https://discuss.elastic.co/t/my-array-of-objects-has-different-keys-how-can-i-chenged-them-to-the-same-name/307683 "2022-06-21T10:53:33Z")
Hello, I have the following array: { "by\_hour" : \[ { "hour06" : "06", "nr\_artigos06" : 0, "caixa\_aberta06" : 0, "nr\_taloes06" : 1, "vendas\_liquidas06" : 0, "service\_time06" : null }, { "nr\_taloes10" : 6, "s… --- ## [This version of Kibana (v8.4.0) is incompatible](https://discuss.elastic.co/t/this-version-of-kibana-v8-4-0-is-incompatible/307531)
**Author:** [@Emir\_Sener](https://discuss.elastic.co/u/Emir_Sener)\ **Replies:** 3\ **Last updated:** [June 21, 2022, 9:04am UTC](https://discuss.elastic.co/t/this-version-of-kibana-v8-4-0-is-incompatible/307531 "2022-06-21T09:04:53Z")
Hi, i forked kibana 8.2 from repo and installed on my ubuntu 22.04 LTS. When I try to run kibana with "yarn start" it gives error written below. I tried to upgrade my elastic from 8.2 to 8.4 but couldn't find it. What… --- ## [Need osquery table name which keeps track of successful and failed root user logging information](https://discuss.elastic.co/t/need-osquery-table-name-which-keeps-track-of-successful-and-failed-root-user-logging-information/307174)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 8:43am UTC](https://discuss.elastic.co/t/need-osquery-table-name-which-keeps-track-of-successful-and-failed-root-user-logging-information/307174 "2022-06-21T08:43:08Z")
Hi Experts, Can someone please assist me with the osquery table name which keeps track of successful and failed root user logging information? Note: I already checked users, logged\_in\_users, but no luck. Thanks, Nive… --- ## [Multilingual Search](https://discuss.elastic.co/t/multilingual-search/307734)
**Author:** [@ts90](https://discuss.elastic.co/u/ts90)\ **Replies:** 0\ **Last updated:** [June 21, 2022, 8:38am UTC](https://discuss.elastic.co/t/multilingual-search/307734 "2022-06-21T08:38:53Z")
Hi, I am working on a project to perform multilingual full-text search using Elasticsearch. one field can contain a word combination of different languages or transliteration. for example in the English text may contain… --- ## [No matching index template found for data streamd](https://discuss.elastic.co/t/no-matching-index-template-found-for-data-streamd/307485)
**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 8:29am UTC](https://discuss.elastic.co/t/no-matching-index-template-found-for-data-streamd/307485 "2022-06-21T08:29:47Z")
Hello, i am trying to run metricbeat setup command to create datastream but i am getting an error ./metricbeat setup --index-management -E output.logstash.enabled=false -E 'output.elasticsearch.hosts=\["https://${ES\_URL}… --- ## [SMTP Host is not validated in manage email senders page in alerting](https://discuss.elastic.co/t/smtp-host-is-not-validated-in-manage-email-senders-page-in-alerting/307725)
**Author:** [@Kanmani\_R](https://discuss.elastic.co/u/Kanmani_R)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 8:26am UTC](https://discuss.elastic.co/t/smtp-host-is-not-validated-in-manage-email-senders-page-in-alerting/307725 "2022-06-21T08:26:11Z")
SMTP Host is not validated in manage email senders page in alerting In manage email sender is not validating the smtp host. Expected Result: It should validate the SMTP host for manage email sender. --- ## [Import Saved objects throws 415 status code](https://discuss.elastic.co/t/import-saved-objects-throws-415-status-code/306789)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 2\ **Last updated:** [June 21, 2022, 8:06am UTC](https://discuss.elastic.co/t/import-saved-objects-throws-415-status-code/306789 "2022-06-21T08:06:07Z")
Hi Team, Greetings...! I Want to provide the dashboard as part of application . So I used export saved objects Api and ship my ndjson file as part of application. Finally I will use import saved Objects API. But when I… --- ## [I want to extract logs with more than a certain number of specific values in a message](https://discuss.elastic.co/t/i-want-to-extract-logs-with-more-than-a-certain-number-of-specific-values-in-a-message/307018)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [June 21, 2022, 7:48am UTC](https://discuss.elastic.co/t/i-want-to-extract-logs-with-more-than-a-certain-number-of-specific-values-in-a-message/307018 "2022-06-21T07:48:23Z")
I am using filebeat to get the logs for each server. Some of the logs are outputting the processing times of various methods, which are commonly formatted as "elaps:\*\*\*\*". In Kibana, the elapsed time is displayed by us… --- ## [Controls - 2 option lists in OR condition](https://discuss.elastic.co/t/controls-2-option-lists-in-or-condition/307727)
**Author:** [@eddieyee](https://discuss.elastic.co/u/eddieyee)\ **Replies:** 0\ **Last updated:** [June 21, 2022, 7:25am UTC](https://discuss.elastic.co/t/controls-2-option-lists-in-or-condition/307727 "2022-06-21T07:25:20Z")
Hi is there anyway to configure 2 drop-down controls that are in OR and not the default AND condition. It'll be as below I want to filter by 2 fields using KQL: fieldA: "a" or fieldB: "b" --- ## [Logstash-output-azure\_event\_hub](https://discuss.elastic.co/t/logstash-output-azure-event-hub/307726)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 0\ **Last updated:** [June 21, 2022, 7:22am UTC](https://discuss.elastic.co/t/logstash-output-azure-event-hub/307726 "2022-06-21T07:22:13Z")
Hello All, Here is high-level structure of our environment: Metricbeat, Winlogbeat, Syslog -\> Logstash (on-prem) -\> Azure Event Hub -\> Logstash (Azure Cloud) -\> Elasticsearch Recently I upgraded logstash to 8.2 versio… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=893) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=895)