# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=943 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 944 --- ## [Ambiguous documentation for audit logs](https://discuss.elastic.co/t/ambiguous-documentation-for-audit-logs/304505)
**Author:** [@cmendez92](https://discuss.elastic.co/u/cmendez92)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 9:14pm UTC](https://discuss.elastic.co/t/ambiguous-documentation-for-audit-logs/304505 "2022-05-11T21:14:20Z")
Elasticsearch documentation is ambiguous in audit logs section. Literally says: If configured, auditing settings must be set on every node in the cluster. Is that correct? I think with only 1 node we can get all audi… --- ## [Queue Size and Threadpools](https://discuss.elastic.co/t/queue-size-and-threadpools/304414)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 3\ **Last updated:** [May 11, 2022, 10:21pm UTC](https://discuss.elastic.co/t/queue-size-and-threadpools/304414 "2022-05-11T22:21:51Z")
Hello, I was wondering something about the relation between queue sizes and threadpool sizes. For example, as of the most recent version I think write thread pool has 10000 default queue. Is this queue size for each al… --- ## [Drop agent / ecs fields from filebeat (previous solves here only partially work)](https://discuss.elastic.co/t/drop-agent-ecs-fields-from-filebeat-previous-solves-here-only-partially-work/304508)
**Author:** [@elk-user-99](https://discuss.elastic.co/u/elk-user-99)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 9:44pm UTC](https://discuss.elastic.co/t/drop-agent-ecs-fields-from-filebeat-previous-solves-here-only-partially-work/304508 "2022-05-11T21:44:37Z")
Hey all, I'm attempting to use filebeat to send documents into ES, however even though I've got a processor set up to drop fields, some are still stubbornly getting sent. in my filebeat.yml file: - drop\_fields: … --- ## [Monitoring people watching dashboards](https://discuss.elastic.co/t/monitoring-people-watching-dashboards/304499)
**Author:** [@ldibello](https://discuss.elastic.co/u/ldibello)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 7:41pm UTC](https://discuss.elastic.co/t/monitoring-people-watching-dashboards/304499 "2022-05-11T19:41:00Z")
Hi, in our company we have several users consuming different dashboards, is there a way, plugin, GTM or other solution, that I can watch how many users are watching dashboards? Hope I was clear... --- ## [Kibana Batch Reindex API - How to cancel un-started queued tasks?](https://discuss.elastic.co/t/kibana-batch-reindex-api-how-to-cancel-un-started-queued-tasks/304270)
**Author:** [@mscully](https://discuss.elastic.co/u/mscully)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 7:34pm UTC](https://discuss.elastic.co/t/kibana-batch-reindex-api-how-to-cancel-un-started-queued-tasks/304270 "2022-05-11T19:34:08Z")
I am running Elastic/Kibana 7.17.3. I am using the Upgrade Assistant APIs in Kibana to reindex indices from v6 to v7 in preparation for upgrading to v8. I am able to start the batch reindex process which enqueues tasks… --- ## [Anyone out there keeping a fork of ansible-elasticsearch alive?](https://discuss.elastic.co/t/anyone-out-there-keeping-a-fork-of-ansible-elasticsearch-alive/304498)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 6:54pm UTC](https://discuss.elastic.co/t/anyone-out-there-keeping-a-fork-of-ansible-elasticsearch-alive/304498 "2022-05-11T18:54:56Z")
I just got back from a leave of absence and found that Elastic is no longer supporting GitHub - elastic/ansible-elasticsearch: Ansible playbook for Elasticsearch. Since I rely on that role for upgrades I thought I'd ask … --- ## [It would be awesome if we could integrate Jupyter Notebooks with Kibana (more seamlessly, like a dashboard)](https://discuss.elastic.co/t/it-would-be-awesome-if-we-could-integrate-jupyter-notebooks-with-kibana-more-seamlessly-like-a-dashboard/304494)
**Author:** [@J\_Todd](https://discuss.elastic.co/u/J_Todd)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 6:18pm UTC](https://discuss.elastic.co/t/it-would-be-awesome-if-we-could-integrate-jupyter-notebooks-with-kibana-more-seamlessly-like-a-dashboard/304494 "2022-05-11T18:18:22Z")
TlDr: We think, since Kibana is, after all, a web app, that it might be feasible to have Kibana support Jupyter Notebooks and use via Voila to host them as a kind of Dashboard like Canvas. Eland is proof that Elastic un… --- ## [Moving Cloud Instances - Elastic Agent](https://discuss.elastic.co/t/moving-cloud-instances-elastic-agent/304492)
**Author:** [@notladr](https://discuss.elastic.co/u/notladr)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 5:03pm UTC](https://discuss.elastic.co/t/moving-cloud-instances-elastic-agent/304492 "2022-05-11T17:03:45Z")
Firstly, I apologize if this is an elementary question, but didn't see anything with search results. I have Elastic Cloud deployed in my lab - not any production environments. When deploying the Windows Elastic Agent, … --- ## [ECE Fundamentals : Lesson 4 (Features) Proxy issue](https://discuss.elastic.co/t/ece-fundamentals-lesson-4-features-proxy-issue/303430)
**Author:** [@alombard](https://discuss.elastic.co/u/alombard)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 4:41pm UTC](https://discuss.elastic.co/t/ece-fundamentals-lesson-4-features-proxy-issue/303430 "2022-05-11T16:41:17Z")
Hello, I'm currently training through Elasticsearch learning center but I'm having trouble at the Lesson 4's lab. I was required to update my cluster from v7.17.1 to v8.1.0, this part went fine, but after that, everytim… --- ## [How to obtain socket information for particular applications/processes using metricbeat?](https://discuss.elastic.co/t/how-to-obtain-socket-information-for-particular-applications-processes-using-metricbeat/304484)
**Author:** [@sangameshcs](https://discuss.elastic.co/u/sangameshcs)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 3:55pm UTC](https://discuss.elastic.co/t/how-to-obtain-socket-information-for-particular-applications-processes-using-metricbeat/304484 "2022-05-11T15:55:04Z")
Hi, I am using metric-beat to collect information about processes running on remote hosts which use sockets, and I am able to collect the metrics/information about the processes and socket data is one of them but I am no… --- ## [How to remove additional comma in part of message](https://discuss.elastic.co/t/how-to-remove-additional-comma-in-part-of-message/304472)
**Author:** [@royalE](https://discuss.elastic.co/u/royalE)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 3:36pm UTC](https://discuss.elastic.co/t/how-to-remove-additional-comma-in-part-of-message/304472 "2022-05-11T15:36:38Z")
I have string between quotation marks that is separated by comma example :"hello ,world" logstash separate them in different column which is not the output that I want I would like to remove the quotation and remove t… --- ## [Geoip pipeline setting for Netflow (Map on Geo Location Dashboard)](https://discuss.elastic.co/t/geoip-pipeline-setting-for-netflow-map-on-geo-location-dashboard/304454)
**Author:** [@IMagalashvili](https://discuss.elastic.co/u/IMagalashvili)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 2:30pm UTC](https://discuss.elastic.co/t/geoip-pipeline-setting-for-netflow-map-on-geo-location-dashboard/304454 "2022-05-11T14:30:46Z")
Hi, we had added Netflow module to analyze traffic with Filebeat netflow module. Everything works but cant activate Map settings. As i found, we have to add new pipeline ( "geoip-info", for example) ad add "final\_pipel… --- ## [Monitoring/Alerting a windows service by Elastic Agent and Fleet](https://discuss.elastic.co/t/monitoring-alerting-a-windows-service-by-elastic-agent-and-fleet/304275)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 2:26pm UTC](https://discuss.elastic.co/t/monitoring-alerting-a-windows-service-by-elastic-agent-and-fleet/304275 "2022-05-11T14:26:31Z")
This topic will be regarding the post I made few days ago on monitoring a windows service, this time in the Elastic Cloud. Not really a problem but a new solution I found while exploring the things arround Elastic-Agent … --- ## [Query cache vs search rate](https://discuss.elastic.co/t/query-cache-vs-search-rate/304468)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 2:25pm UTC](https://discuss.elastic.co/t/query-cache-vs-search-rate/304468 "2022-05-11T14:25:32Z")
We had a search spike in our cluster, the search rate almost tripled. But when checking the metrics it shows that query cache increased almost tenfold. What's the explanation for this? --- ## [Kibana high values with short interval as explicit growing line](https://discuss.elastic.co/t/kibana-high-values-with-short-interval-as-explicit-growing-line/304130)
**Author:** [@Radoslaw\_Sieprawski](https://discuss.elastic.co/u/Radoslaw_Sieprawski)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 2:02pm UTC](https://discuss.elastic.co/t/kibana-high-values-with-short-interval-as-explicit-growing-line/304130 "2022-05-11T14:02:36Z")
Hi guys, I'm looking for solution how to present in Kibana constantly growing high values as growing line graph. This what I have now is completely flat line especialy when choosen time span is low, eg 1h. I'll apprecia… --- ## [Found "Kibana server is not ready yet" after configured kibana](https://discuss.elastic.co/t/found-kibana-server-is-not-ready-yet-after-configured-kibana/304268)
**Author:** [@fanfan01127](https://discuss.elastic.co/u/fanfan01127)\ **Replies:** 7\ **Last updated:** [May 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/found-kibana-server-is-not-ready-yet-after-configured-kibana/304268 "2022-05-11T13:32:58Z")
After setup of kibana and configure the yml file in my linux box, I got message "Kibana server is not ready yet" once I access to http://myipaddress:5601 And here is my kibana.yml config file. Many thanks all. … --- ## [Fleet server install failed on fresh ELK stack 8.2.0](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465)
**Author:** [@Peter\_Bodnar](https://discuss.elastic.co/u/Peter_Bodnar)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465 "2022-05-11T13:32:43Z")
Hello, i have problem to install Fleet server on fresh ELK stack 8.2.0 (RHEL 8) Elasticsearch and kibana working fine, but when tried to install fleet server (enroll agent as fleet server, based on provided instructions… --- ## [Logstash configuration to load next pages automatically](https://discuss.elastic.co/t/logstash-configuration-to-load-next-pages-automatically/304457)
**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 1:05pm UTC](https://discuss.elastic.co/t/logstash-configuration-to-load-next-pages-automatically/304457 "2022-05-11T13:05:47Z")
I am new with ELK. I apologize for mistake I have to configure logstash in order to import data from an external source using an oai-pmh API. I try it using the following configuration. input{ http\_poller{ urls =\>{… --- ## [Data Table in Dashboard](https://discuss.elastic.co/t/data-table-in-dashboard/303478)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 17\ **Last updated:** [May 11, 2022, 12:45pm UTC](https://discuss.elastic.co/t/data-table-in-dashboard/303478 "2022-05-11T12:45:55Z")
Hello, i want to create a basic data table in a Kibana Dashboard with employees. I tried using the Table Lens but there is always a requirement for a metric like count, sum,.. which i do not need, as i only want to dis… --- ## [Search cretiria with TermSet](https://discuss.elastic.co/t/search-cretiria-with-termset/304459)
**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 12:38pm UTC](https://discuss.elastic.co/t/search-cretiria-with-termset/304459 "2022-05-11T12:38:28Z")
Hi All, I have requirement to search Elastic with following details . This is part of security implementation you can assume for my website. I have different Grouptypes with each group type having set of Groups . these… --- ## [Pipeline simulation](https://discuss.elastic.co/t/pipeline-simulation/304391)
**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\ **Replies:** 5\ **Last updated:** [May 11, 2022, 12:33pm UTC](https://discuss.elastic.co/t/pipeline-simulation/304391 "2022-05-11T12:33:15Z")
Hi Elastic community, I'm having a hard time figuring out what is wrong with my pipeline simulation. I'm trying to simulate this way GET /\_ingest/pipeline/test-pipeline/\_simulate { "docs": \[ { "\_source": { … --- ## [Convert two repeated values in array into a string](https://discuss.elastic.co/t/convert-two-repeated-values-in-array-into-a-string/304429)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 12:21pm UTC](https://discuss.elastic.co/t/convert-two-repeated-values-in-array-into-a-string/304429 "2022-05-11T12:21:49Z")
Hello, I have some old documents where a field has an array of two vales repeated, something like this: "task" : \[ "first\_task", "first\_task" \], I'm trying to convert this a… --- ## [Can not extract the "value" from the Aggregation](https://discuss.elastic.co/t/can-not-extract-the-value-from-the-aggregation/304281)
**Author:** [@cugo](https://discuss.elastic.co/u/cugo)\ **Replies:** 3\ **Last updated:** [May 11, 2022, 11:51am UTC](https://discuss.elastic.co/t/can-not-extract-the-value-from-the-aggregation/304281 "2022-05-11T11:51:22Z")
I have a list of Buckets (parentSalaries) that has a list of Aggregations of size 2. One of the Aggregations (average\_salary) has the following fields; value, name, valueAsString and metadata. I am trying to extract the … --- ## [Elasticsearch Term suggester is not returning correct suggestions when one character is missing (instead of misspelling)](https://discuss.elastic.co/t/elasticsearch-term-suggester-is-not-returning-correct-suggestions-when-one-character-is-missing-instead-of-misspelling/304369)
**Author:** [@hesamrasouli](https://discuss.elastic.co/u/hesamrasouli)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 11:24am UTC](https://discuss.elastic.co/t/elasticsearch-term-suggester-is-not-returning-correct-suggestions-when-one-character-is-missing-instead-of-misspelling/304369 "2022-05-11T11:24:19Z")
I'm using Elasticsearch term suggester for spell correction. my index contains huge list of ads. Each ad has subject and body fields. I've found a problematic example for which the suggester is not suggesting correct sug… --- ## [Explain diff\_from\_typical meaning in custom rules](https://discuss.elastic.co/t/explain-diff-from-typical-meaning-in-custom-rules/304419)
**Author:** [@ixperdomo](https://discuss.elastic.co/u/ixperdomo)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 11:19am UTC](https://discuss.elastic.co/t/explain-diff-from-typical-meaning-in-custom-rules/304419 "2022-05-11T11:19:40Z")
Hi, When configuring Machine Learning jobs in ES, you can customise your detectors by using custom\_rules. I'm wondering about the actual meaning of the applies\_to value diff\_from\_typical. My main question is if diff\_fr… --- ## [How can I have multiple kibana URLs for each server while my ELK is setup on the same centralised machine?](https://discuss.elastic.co/t/how-can-i-have-multiple-kibana-urls-for-each-server-while-my-elk-is-setup-on-the-same-centralised-machine/304413)
**Author:** [@Yash\_garg](https://discuss.elastic.co/u/Yash_garg)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 10:49am UTC](https://discuss.elastic.co/t/how-can-i-have-multiple-kibana-urls-for-each-server-while-my-elk-is-setup-on-the-same-centralised-machine/304413 "2022-05-11T10:49:27Z")
Hi there, I am using ELK stack with filebeat. filebeat is sending logs from multiple servers and logstash is collecting logs and sending them to Elasticsearch , then it is sending it to kibana. But I am looking for a so… --- ## [Certificate revocation list checking](https://discuss.elastic.co/t/certificate-revocation-list-checking/303939)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 10:19am UTC](https://discuss.elastic.co/t/certificate-revocation-list-checking/303939 "2022-05-11T10:19:24Z")
Hi, I didn't find any topic that would give me a definitive answer. Also, I'm not that good at how certifications work at this level. I was thinking about creating a new set of certificates for my Elastic cluster and I… --- ## [Adding data to Elasticsearch datastreams using nodejs](https://discuss.elastic.co/t/adding-data-to-elasticsearch-datastreams-using-nodejs/304449)
**Author:** [@Aisha\_Deshmukh](https://discuss.elastic.co/u/Aisha_Deshmukh)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 10:11am UTC](https://discuss.elastic.co/t/adding-data-to-elasticsearch-datastreams-using-nodejs/304449 "2022-05-11T10:11:58Z")
Hi, can someone help me with inserting logs into datastream using nodejs? Thanks in advance. --- ## [How to limit the storage size of my indeces and automatically generate new index after reaching the assign storage size?](https://discuss.elastic.co/t/how-to-limit-the-storage-size-of-my-indeces-and-automatically-generate-new-index-after-reaching-the-assign-storage-size/303092)
**Author:** [@renatoa12](https://discuss.elastic.co/u/renatoa12)\ **Replies:** 11\ **Last updated:** [May 11, 2022, 9:39am UTC](https://discuss.elastic.co/t/how-to-limit-the-storage-size-of-my-indeces-and-automatically-generate-new-index-after-reaching-the-assign-storage-size/303092 "2022-05-11T09:39:37Z")
Good Day ELK masters, just want to ask on how can i limit my indeces/day storage size into i.e. 2gb? Please can somene help me i already created index life cycle policy but still it doesn't generate new index when exceed… --- ## [Index sizing dashboard creation](https://discuss.elastic.co/t/index-sizing-dashboard-creation/304380)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 9:34am UTC](https://discuss.elastic.co/t/index-sizing-dashboard-creation/304380 "2022-05-11T09:34:00Z")
Hi Team, We are creating daily rotating indices in our Elasticsearch cluster. Our cluster is on elastic cloud and we have enabled monitoring Elasticsearch. Now i have a requirement to create a dashboard for index sizes… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=942) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=944)