# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=95 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 96 --- ## [Ability to freeze a navigation panel within a dashboard](https://discuss.elastic.co/t/ability-to-freeze-a-navigation-panel-within-a-dashboard/375226)
**Author:** [@billfischermnit](https://discuss.elastic.co/u/billfischermnit)\ **Replies:** 1\ **Last updated:** [February 28, 2025, 7:54pm UTC](https://discuss.elastic.co/t/ability-to-freeze-a-navigation-panel-within-a-dashboard/375226 "2025-02-28T19:54:46Z")
Greetings, We have a series of related dashboards. Each of them has a navigation panel (simple markdown) at the bottom (to navigate to the other related dashboards). We're looking for a way to pin/freeze/float that pan… --- ## [Curator - Failed to complete action: allocation. \: 'store'](https://discuss.elastic.co/t/curator-failed-to-complete-action-allocation-class-keyerror-store/375037)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 4\ **Last updated:** [February 28, 2025, 7:45pm UTC](https://discuss.elastic.co/t/curator-failed-to-complete-action-allocation-class-keyerror-store/375037 "2025-02-28T19:45:04Z")
Elasticsearch version: 7.17.1 (yes, I know.) Curator version: 7.0.1 I'm seeing an occasional error where a Curator task about allocation fails with Failed to complete action: allocation. \: 'store' … --- ## [Unable to set username password for Elastic in azure container app](https://discuss.elastic.co/t/unable-to-set-username-password-for-elastic-in-azure-container-app/374962)
**Author:** [@chand\_techie](https://discuss.elastic.co/u/chand_techie)\ **Replies:** 7\ **Last updated:** [February 28, 2025, 7:27pm UTC](https://discuss.elastic.co/t/unable-to-set-username-password-for-elastic-in-azure-container-app/374962 "2025-02-28T19:27:39Z")
Unable to set username password for Elastic in conatiner app. As to launch the container app, I am passing below environment varibles. xpack.security.enabled = false discovery.type = single-node If I make xpack.securi… --- ## [Logstash http poller input & filter flow not working properly](https://discuss.elastic.co/t/logstash-http-poller-input-filter-flow-not-working-properly/375183)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 4\ **Last updated:** [February 28, 2025, 4:41pm UTC](https://discuss.elastic.co/t/logstash-http-poller-input-filter-flow-not-working-properly/375183 "2025-02-28T16:41:51Z")
Hello, Below is my requirement: First http call with user & password will return bearer token, token expires every 30mins. So need to call the URL every 30mins for updated token. Second: Get token from above and poll … --- ## [How do I decide if i need co-ordinator nodes for my cluster?](https://discuss.elastic.co/t/how-do-i-decide-if-i-need-co-ordinator-nodes-for-my-cluster/374747)
**Author:** [@masif2002](https://discuss.elastic.co/u/masif2002)\ **Replies:** 20\ **Last updated:** [February 28, 2025, 11:06am UTC](https://discuss.elastic.co/t/how-do-i-decide-if-i-need-co-ordinator-nodes-for-my-cluster/374747 "2025-02-28T11:06:39Z")
I have an ELK setup in my org. We're working on improving the reliability of the system. We have 22 data nodes running in the cluster Having co-ordinator nodes is something that was suggested to us. We want to make sure… --- ## [Vega - apply global time filter to time scale domain too (not only for query)](https://discuss.elastic.co/t/vega-apply-global-time-filter-to-time-scale-domain-too-not-only-for-query/375205)
**Author:** [@allatrue](https://discuss.elastic.co/u/allatrue)\ **Replies:** 0\ **Last updated:** [February 28, 2025, 10:54am UTC](https://discuss.elastic.co/t/vega-apply-global-time-filter-to-time-scale-domain-too-not-only-for-query/375205 "2025-02-28T10:54:11Z")
Hi everyone, Kibana extends the Vega data elements with global time filter, so that query returns the desired data. But what about displayed time range? Vega automatically sets it to fit all the data. I can set fixed r… --- ## [Help related to visual dashboard](https://discuss.elastic.co/t/help-related-to-visual-dashboard/374921)
**Author:** [@Gvr\_Kartik](https://discuss.elastic.co/u/Gvr_Kartik)\ **Replies:** 4\ **Last updated:** [February 28, 2025, 10:02am UTC](https://discuss.elastic.co/t/help-related-to-visual-dashboard/374921 "2025-02-28T10:02:37Z")
Hi I want to add a dashboard such that it should give me an URL if the dataview I want has two values it in which I want them to have. For example if the search query on one of the index pattern present in that data view… --- ## [Minor code cleanup (unused imports & static/final order) — OK to submit PR?](https://discuss.elastic.co/t/minor-code-cleanup-unused-imports-static-final-order-ok-to-submit-pr/375167)
**Author:** [@LTS2](https://discuss.elastic.co/u/LTS2)\ **Replies:** 3\ **Last updated:** [February 28, 2025, 6:55am UTC](https://discuss.elastic.co/t/minor-code-cleanup-unused-imports-static-final-order-ok-to-submit-pr/375167 "2025-02-28T06:55:31Z")
Dear developers, I found a few places in the code where there are unused imports and static final modifiers out of the recommended order. I'd like to open a PR to clean these up to align with the code style and remove … --- ## [Search UI: Remove "" from Facet component options](https://discuss.elastic.co/t/search-ui-remove-from-facet-component-options/375178)
**Author:** [@tanza-s](https://discuss.elastic.co/u/tanza-s)\ **Replies:** 0\ **Last updated:** [February 27, 2025, 10:16pm UTC](https://discuss.elastic.co/t/search-ui-remove-from-facet-component-options/375178 "2025-02-27T22:16:57Z")
Hello, I am building out the Facet components for a search index where some of the indexed items will have a blank field. I want to exclude the "" option from the facet display. Ideally something like: \ **Author:** [@Ahmad3](https://discuss.elastic.co/u/Ahmad3)\ **Replies:** 3\ **Last updated:** [February 27, 2025, 8:36pm UTC](https://discuss.elastic.co/t/object-hasown/372687 "2025-02-27T20:36:48Z") whats the solution? i have cleared browser cache y --- ## [Migrating Rules to another space](https://discuss.elastic.co/t/migrating-rules-to-another-space/375177)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [February 27, 2025, 8:19pm UTC](https://discuss.elastic.co/t/migrating-rules-to-another-space/375177 "2025-02-27T20:19:20Z")
Hello, I am in the process of consolidating spaces. Is there a way to move the alerts from one space to another? I also would prefer if they were disabled to avoid alerting twice while migrating, --- ## [Locked out after closing indexes to enable compression. :-(](https://discuss.elastic.co/t/locked-out-after-closing-indexes-to-enable-compression/375173)
**Author:** [@JimKeating](https://discuss.elastic.co/u/JimKeating)\ **Replies:** 6\ **Last updated:** [February 27, 2025, 8:14pm UTC](https://discuss.elastic.co/t/locked-out-after-closing-indexes-to-enable-compression/375173 "2025-02-27T20:14:29Z")
We have an Elasticsearch 7.17 4 node cluster and we were running low on space so I found an article on how to enable high compression on the indexes. The first step was to close the indexes. Big mistake because as soon… --- ## [Order dificulities for exact match](https://discuss.elastic.co/t/order-dificulities-for-exact-match/375159)
**Author:** [@shrm](https://discuss.elastic.co/u/shrm)\ **Replies:** 5\ **Last updated:** [February 27, 2025, 7:11pm UTC](https://discuss.elastic.co/t/order-dificulities-for-exact-match/375159 "2025-02-27T19:11:56Z")
Hi, I used exact match for a list of numbers. the output order is not the same as input. I tried multiple methods but there some issues. mydb is my database, the input is an array of integers to be matched to "my\_id" an… --- ## [Pipeline not found for AWS integration on Agent managed by Fleet](https://discuss.elastic.co/t/pipeline-not-found-for-aws-integration-on-agent-managed-by-fleet/375156)
**Author:** [@NeilSmith](https://discuss.elastic.co/u/NeilSmith)\ **Replies:** 3\ **Last updated:** [February 27, 2025, 2:23pm UTC](https://discuss.elastic.co/t/pipeline-not-found-for-aws-integration-on-agent-managed-by-fleet/375156 "2025-02-27T14:23:50Z")
Using Fleet to manage an agent with the AWS integration. Ingest and indexing is OK, getting tens of millions of logs from Transit Gateway via Cloudwatch, but they are not being processed through the ingest pipeline creat… --- ## [Keep copy of file sent by Logstash to Google Cloud Storage bucket](https://discuss.elastic.co/t/keep-copy-of-file-sent-by-logstash-to-google-cloud-storage-bucket/375160)
**Author:** [@Taz](https://discuss.elastic.co/u/Taz)\ **Replies:** 0\ **Last updated:** [February 27, 2025, 1:28pm UTC](https://discuss.elastic.co/t/keep-copy-of-file-sent-by-logstash-to-google-cloud-storage-bucket/375160 "2025-02-27T13:28:21Z")
Hi. We have a requirement to keep a copy of each log file sent to Google Cloud Storage bucket for a couple of days (crazy business requirement). Sending the log files to Google Cloud works great. Can't figure out how t… --- ## [Aggregation rule](https://discuss.elastic.co/t/aggregation-rule/375011)
**Author:** [@cybersc\_1](https://discuss.elastic.co/u/cybersc_1)\ **Replies:** 7\ **Last updated:** [February 27, 2025, 1:30pm UTC](https://discuss.elastic.co/t/aggregation-rule/375011 "2025-02-27T13:30:10Z")
Hi there! I have plenty of events that look like that: Feb 25 15:05:50 xfirewall CEF:0|infotecs|xf|5.4|62|Non-encrypted forwarded IP packet passed|5|start=1740477743000 end=1740477743000 src=\*\*\* dst=\*\*\* spt=53 dpt=3882… --- ## [What is the latest and most stable version recommended for migration, which has been on the market long enough, for a cluster with dozens of nodes?](https://discuss.elastic.co/t/what-is-the-latest-and-most-stable-version-recommended-for-migration-which-has-been-on-the-market-long-enough-for-a-cluster-with-dozens-of-nodes/375038)
**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\ **Replies:** 8\ **Last updated:** [February 27, 2025, 12:08pm UTC](https://discuss.elastic.co/t/what-is-the-latest-and-most-stable-version-recommended-for-migration-which-has-been-on-the-market-long-enough-for-a-cluster-with-dozens-of-nodes/375038 "2025-02-27T12:08:07Z")
Hello, What is the latest and most stable ELK version recommended for migration, which has been on the market long enough, for a cluster with dozens of nodes? --- ## [Elastic Agent - Metricbeat events being dropped with status code 400](https://discuss.elastic.co/t/elastic-agent-metricbeat-events-being-dropped-with-status-code-400/375141)
**Author:** [@Muhammadh\_Zakir\_Huss](https://discuss.elastic.co/u/Muhammadh_Zakir_Huss)\ **Replies:** 0\ **Last updated:** [February 27, 2025, 9:23am UTC](https://discuss.elastic.co/t/elastic-agent-metricbeat-events-being-dropped-with-status-code-400/375141 "2025-02-27T09:23:57Z")
I am trying to install a fleet managed elastic agent on a freshly installed ubuntu server. Elastic agent installation is successfull but I am not getting any events to Kibana. When I went through the logs, I was able to… --- ## [Unable to add expand action button in custom logs table](https://discuss.elastic.co/t/unable-to-add-expand-action-button-in-custom-logs-table/375118)
**Author:** [@Ishnoor\_Khroud](https://discuss.elastic.co/u/Ishnoor_Khroud)\ **Replies:** 0\ **Last updated:** [February 27, 2025, 7:08am UTC](https://discuss.elastic.co/t/unable-to-add-expand-action-button-in-custom-logs-table/375118 "2025-02-27T07:08:25Z")
I have built a severity dashboard which has multiple panels, one of which need a expand button integrated into the table which will provide a JSON output of all the unique information on the log. Coding it in Vega has no… --- ## [Connection error caused by: ConnectionError(Connection error caused by: NameResolutionError(\: Failed to resolve \ (\[Errno 11002\] getaddrinfo failed)))](https://discuss.elastic.co/t/connection-error-caused-by-connectionerror-connection-error-caused-by-nameresolutionerror-elastic-transport-node-urllib3-chain-certs-httpsconnection-object-at-0x0000026d04448ed0-failed-to-resolve-url-errno-11002-getaddrinfo-failed/375052)
**Author:** [@Prateek\_Agrawal](https://discuss.elastic.co/u/Prateek_Agrawal)\ **Replies:** 2\ **Last updated:** [February 27, 2025, 4:08am UTC](https://discuss.elastic.co/t/connection-error-caused-by-connectionerror-connection-error-caused-by-nameresolutionerror-elastic-transport-node-urllib3-chain-certs-httpsconnection-object-at-0x0000026d04448ed0-failed-to-resolve-url-errno-11002-getaddrinfo-failed/375052 "2025-02-27T04:08:22Z")
I am getting the above error intermittently. Below is how I am connecting with Elasticsearch. can anyone help in this es = Elasticsearch(cloud\_id=\), api\_key=\)… --- ## [How to setup security/SSL on ElasticSearch?](https://discuss.elastic.co/t/how-to-setup-security-ssl-on-elasticsearch/375049)
**Author:** [@chung](https://discuss.elastic.co/u/chung)\ **Replies:** 1\ **Last updated:** [February 27, 2025, 3:45am UTC](https://discuss.elastic.co/t/how-to-setup-security-ssl-on-elasticsearch/375049 "2025-02-27T03:45:16Z")
I am in the middle part upgrading Elastic 7 to 8 and ran into an SSL issue. Currently SSL is disabled curl -k https://10.152.0.5:9200 -u elastic:somepassword curl: (35) error:1408F10B:SSL routines:ssl3\_get\_record:wrong… --- ## [Unable to login, forced in to onboarding](https://discuss.elastic.co/t/unable-to-login-forced-in-to-onboarding/375006)
**Author:** [@Tom\_Maxwell](https://discuss.elastic.co/u/Tom_Maxwell)\ **Replies:** 1\ **Last updated:** [February 27, 2025, 3:34am UTC](https://discuss.elastic.co/t/unable-to-login-forced-in-to-onboarding/375006 "2025-02-27T03:34:13Z")
Our IT have added me to our account but I can't login with my google gmail account I'm being forced down onboarding with no way to cancel out. Same as this, but with google \> Login Issues --- ## [Multiple Syslog Sources Configuration on Single Elastic Agent Port, port 514](https://discuss.elastic.co/t/multiple-syslog-sources-configuration-on-single-elastic-agent-port-port-514/375109)
**Author:** [@IsaacZhu](https://discuss.elastic.co/u/IsaacZhu)\ **Replies:** 6\ **Last updated:** [February 27, 2025, 12:47am UTC](https://discuss.elastic.co/t/multiple-syslog-sources-configuration-on-single-elastic-agent-port-port-514/375109 "2025-02-27T00:47:45Z")
Current Setup: Elastic Agent collecting syslog messages from: Aruba access points and switches (Custom UDP integration) F5 VPN (Custom UDP integration) Fortigate firewalls (Fortigate Syslog integration) All configur… --- ## [Filebeat CEL input blames timeout while debug shows proper response](https://discuss.elastic.co/t/filebeat-cel-input-blames-timeout-while-debug-shows-proper-response/374776)
**Author:** [@rlevitsky](https://discuss.elastic.co/u/rlevitsky)\ **Replies:** 13\ **Last updated:** [February 26, 2025, 10:04pm UTC](https://discuss.elastic.co/t/filebeat-cel-input-blames-timeout-while-debug-shows-proper-response/374776 "2025-02-26T22:04:35Z")
Hi community, I'm trying to fetch the Symantec's Event Stream (Broadcom Enterprise Security Group - API Documentation) with filebeat. First of all, to check if Symantec's side works properly, I wrote this script to fet… --- ## [While using httpjson input in filebeat getting error Exiting: Failed to start crawler](https://discuss.elastic.co/t/while-using-httpjson-input-in-filebeat-getting-error-exiting-failed-to-start-crawler/374873)
**Author:** [@rajaram.patil](https://discuss.elastic.co/u/rajaram.patil)\ **Replies:** 5\ **Last updated:** [February 26, 2025, 9:53pm UTC](https://discuss.elastic.co/t/while-using-httpjson-input-in-filebeat-getting-error-exiting-failed-to-start-crawler/374873 "2025-02-26T21:53:05Z")
While using httpjson input in filebeat getting below error Exiting: Failed to start crawler: starting input failed: error while initializing input: template: :1: bad character U+0040 '@' accessing 'filebeat.inputs.0.cur… --- ## [Documents not updating in Elasticsearch despite successful API requests](https://discuss.elastic.co/t/documents-not-updating-in-elasticsearch-despite-successful-api-requests/374976)
**Author:** [@chaq3l](https://discuss.elastic.co/u/chaq3l)\ **Replies:** 3\ **Last updated:** [February 26, 2025, 6:00pm UTC](https://discuss.elastic.co/t/documents-not-updating-in-elasticsearch-despite-successful-api-requests/374976 "2025-02-26T18:00:33Z")
I am trying to update elasticsearch documents with additional fields.I don't get any errors, but there is no change in documents. I use Elasticsearch 7.10.0 and NEST 7.17.5 using System; using System.Collections.Generic… --- ## [Sending and Filtering Logs to Syslog Server](https://discuss.elastic.co/t/sending-and-filtering-logs-to-syslog-server/375100)
**Author:** [@kleioemre](https://discuss.elastic.co/u/kleioemre)\ **Replies:** 2\ **Last updated:** [February 26, 2025, 4:41pm UTC](https://discuss.elastic.co/t/sending-and-filtering-logs-to-syslog-server/375100 "2025-02-26T16:41:11Z")
Hi, I'm trying send logs to syslog server using output plugin but couldn't get any success. I want to send only certain pod logs and add the labels. Is this config accurate? output { if \[kubernetes\]\[pod\]\[name\] =~ /^p… --- ## [Understanding if a filter is active](https://discuss.elastic.co/t/understanding-if-a-filter-is-active/375090)
**Author:** [@Luca\_Adezati](https://discuss.elastic.co/u/Luca_Adezati)\ **Replies:** 1\ **Last updated:** [February 26, 2025, 3:29pm UTC](https://discuss.elastic.co/t/understanding-if-a-filter-is-active/375090 "2025-02-26T15:29:46Z")
HI! I have two panels. One it's a bar graphic aggregation. The other one it's a table with details. I need a filter that fullfill the table with detail ONLY if the first one is filtered. If not filtered the second p… --- ## [Unable to upgrade Elastic Agents installed on Azure AKS which are managed by Fleet](https://discuss.elastic.co/t/unable-to-upgrade-elastic-agents-installed-on-azure-aks-which-are-managed-by-fleet/375066)
**Author:** [@mattyanyan.work](https://discuss.elastic.co/u/mattyanyan.work)\ **Replies:** 2\ **Last updated:** [February 26, 2025, 2:44pm UTC](https://discuss.elastic.co/t/unable-to-upgrade-elastic-agents-installed-on-azure-aks-which-are-managed-by-fleet/375066 "2025-02-26T14:44:19Z")
I have an AKS cluster and I have installed Elastic Agents on the cluster by following this documentation: Run Elastic Agent on Azure AKS managed by Fleet | Fleet and Elastic Agent Guide \[8.17\] | Elastic Recently, I trie… --- ## [Metricbeat MSSQL - Secure pwd keystore not working](https://discuss.elastic.co/t/metricbeat-mssql-secure-pwd-keystore-not-working/375096)
**Author:** [@giomlux](https://discuss.elastic.co/u/giomlux)\ **Replies:** 0\ **Last updated:** [February 26, 2025, 2:03pm UTC](https://discuss.elastic.co/t/metricbeat-mssql-secure-pwd-keystore-not-working/375096 "2025-02-26T14:03:00Z")
Hi Everyone, I would like to connect the Metricbeat MSSQL using a secure password into a keystore. I have created a keystore, define the password into mssql.yml as described below: metricbeat keystore create metricbe… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=94) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=96)