# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=952 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 953 --- ## [Configure Dashboard Only Mode](https://discuss.elastic.co/t/configure-dashboard-only-mode/303373)
**Author:** [@vuhai\_fo4](https://discuss.elastic.co/u/vuhai_fo4)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 4:37pm UTC](https://discuss.elastic.co/t/configure-dashboard-only-mode/303373 "2022-05-04T16:37:53Z")
Hi, I am learning about Dashboard Only Mode in Kibana. I'm currently having a problem where this mode in Advance Setting is deprecated. Please guide me how to fix this issue and share me more documents about this mode … --- ## [Exclude fields Kibana Discover](https://discuss.elastic.co/t/exclude-fields-kibana-discover/303930)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 4:34pm UTC](https://discuss.elastic.co/t/exclude-fields-kibana-discover/303930 "2022-05-04T16:34:16Z")
Hi there, I wonder if it's possible in Kibana discover to exclude certain fields from the result set (not just hide the columns). In other words I onder if is possible to user the \_source filtering in Kibana. Thank you… --- ## [Logstash Json Split Filter](https://discuss.elastic.co/t/logstash-json-split-filter/303955)
**Author:** [@elknick](https://discuss.elastic.co/u/elknick)\ **Replies:** 5\ **Last updated:** [May 4, 2022, 4:17pm UTC](https://discuss.elastic.co/t/logstash-json-split-filter/303955 "2022-05-04T16:17:12Z")
I am trying to use the Split filter in Logstash to separate my Json data into separate documents in elastic. I have used this same Split filter in another case and did not have this problem. I have tried targeting a few … --- ## [Multi tenancy PDF reports generation using Kibana / Canvas](https://discuss.elastic.co/t/multi-tenancy-pdf-reports-generation-using-kibana-canvas/303016)
**Author:** [@nicolas.brasey](https://discuss.elastic.co/u/nicolas.brasey)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 4:05pm UTC](https://discuss.elastic.co/t/multi-tenancy-pdf-reports-generation-using-kibana-canvas/303016 "2022-05-04T16:05:42Z")
Hi, I'm new here and I'm investigating how I can use Canvas to generate nice looking PDF reports for different tenants. I'm new to Kibana and I'm not sure if what I'm trying to achieve is even possible . I'm using the v… --- ## [How can I send alerts to telegram?](https://discuss.elastic.co/t/how-can-i-send-alerts-to-telegram/303652)
**Author:** [@perea870724](https://discuss.elastic.co/u/perea870724)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 3:51pm UTC](https://discuss.elastic.co/t/how-can-i-send-alerts-to-telegram/303652 "2022-05-04T15:51:38Z")
Hello community, how can I send alerts to telegram? --- ## [Sum table and sum scorecard does not match](https://discuss.elastic.co/t/sum-table-and-sum-scorecard-does-not-match/303940)
**Author:** [@PaulaCM](https://discuss.elastic.co/u/PaulaCM)\ **Replies:** 4\ **Last updated:** [May 4, 2022, 3:23pm UTC](https://discuss.elastic.co/t/sum-table-and-sum-scorecard-does-not-match/303940 "2022-05-04T15:23:24Z")
Hello! Using the kibana dashboard, I have this table with visit duration values, and at the bottom we can see the sum of all values Then I try to show this sum value in an scorecard using the same function sum(visitD… --- ## [Can't build Kibana: yarn build](https://discuss.elastic.co/t/cant-build-kibana-yarn-build/303750)
**Author:** [@MichelPitz](https://discuss.elastic.co/u/MichelPitz)\ **Replies:** 5\ **Last updated:** [May 4, 2022, 2:58pm UTC](https://discuss.elastic.co/t/cant-build-kibana-yarn-build/303750 "2022-05-04T14:58:22Z")
Hello, I created a custom connector like Pargerduty, the connector is working localhost perfectly. However I cannot build the projectm I got the following error. Actually, even if git clone the project and do not chan… --- ## [Aggregating on two filter terms or more](https://discuss.elastic.co/t/aggregating-on-two-filter-terms-or-more/302385)
**Author:** [@Jack6128](https://discuss.elastic.co/u/Jack6128)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 2:58pm UTC](https://discuss.elastic.co/t/aggregating-on-two-filter-terms-or-more/302385 "2022-05-04T14:58:17Z")
How can I aggregate on two filter terms (strings) or more based on values stored in the same value column?, at the moment I'm trying to make a dashboard warning lamp based on two alarm events e.g. "door-tamper-1" and "do… --- ## [How to parse flatten json logs in logstash?](https://discuss.elastic.co/t/how-to-parse-flatten-json-logs-in-logstash/303802)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 4\ **Last updated:** [May 4, 2022, 2:57pm UTC](https://discuss.elastic.co/t/how-to-parse-flatten-json-logs-in-logstash/303802 "2022-05-04T14:57:19Z")
Getting error :- \[2022-05-03T22:21:09,874\]\[INFO \]\[logstash.filters.flattenjson\]\[main\] Running flatten\_json filter {:event=\>#LogStash::Event:0x246b5df6} \[2022-05-03T22:21:09,880\]\[ERROR\]\[org.logstash.execution.WorkerLoop… --- ## [Stale master elected in elastic version \< 7](https://discuss.elastic.co/t/stale-master-elected-in-elastic-version-7/303882)
**Author:** [@johny1](https://discuss.elastic.co/u/johny1)\ **Replies:** 7\ **Last updated:** [May 4, 2022, 2:52pm UTC](https://discuss.elastic.co/t/stale-master-elected-in-elastic-version-7/303882 "2022-05-04T14:52:16Z")
running version 6.x which relies on minimum master node config for quorum. the cluster has three master eligible nodes (1,2,3) and active master was (1). One master node (3) left the cluster due to an unknown error and … --- ## [Logstash parse windows event nxlog](https://discuss.elastic.co/t/logstash-parse-windows-event-nxlog/303138)
**Author:** [@Chloe\_Boissavy](https://discuss.elastic.co/u/Chloe_Boissavy)\ **Replies:** 7\ **Last updated:** [May 4, 2022, 2:52pm UTC](https://discuss.elastic.co/t/logstash-parse-windows-event-nxlog/303138 "2022-05-04T14:52:15Z")
Hello, I am using nxlog to send windows data at my ELK. I would like to parse the "message" part. An example below : "message": \[ "2022-04-25 10:54:13 - DESKTOP-QMCS5UA - Security - INFO - 4672 - Privilèges… --- ## [Observability -\> metrics -\> inventory. dashboards, where the data is stored?](https://discuss.elastic.co/t/observability-metrics-inventory-dashboards-where-the-data-is-stored/301888)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 2:19pm UTC](https://discuss.elastic.co/t/observability-metrics-inventory-dashboards-where-the-data-is-stored/301888 "2022-05-04T14:19:17Z")
Hi, I need to create dashboards identically to the ones in the kibana section, Observability -\> metrics -\> inventory. Where this data is stored for this dashboards? --- ## [Is it safe to run a problematic node (possible corrupt data folder) while other nodes are working properly](https://discuss.elastic.co/t/is-it-safe-to-run-a-problematic-node-possible-corrupt-data-folder-while-other-nodes-are-working-properly/303906)
**Author:** [@elaskibuser](https://discuss.elastic.co/u/elaskibuser)\ **Replies:** 5\ **Last updated:** [May 4, 2022, 2:01pm UTC](https://discuss.elastic.co/t/is-it-safe-to-run-a-problematic-node-possible-corrupt-data-folder-while-other-nodes-are-working-properly/303906 "2022-05-04T14:01:03Z")
I have a three node setup and one of them had a hard drive fail and a long the data snapshots were gone (bad planning). Now, we have two nodes running well (given the circumstances) and the third node is offline with th… --- ## [Geopoint Help](https://discuss.elastic.co/t/geopoint-help/303946)
**Author:** [@AmyMCollins](https://discuss.elastic.co/u/AmyMCollins)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 1:48pm UTC](https://discuss.elastic.co/t/geopoint-help/303946 "2022-05-04T13:48:16Z")
Hi, I am trying to create some dummy data. I want to add a geopoint using the dev tools but I am struggling. I am using the below api: PUT my\_index/\_doc/1 { "text": "Geo-point as an object", "location": { "la… --- ## [Logstash filter plugin install No \`java.exe' executable found on PATH](https://discuss.elastic.co/t/logstash-filter-plugin-install-no-java-exe-executable-found-on-path/303534)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 8\ **Last updated:** [May 4, 2022, 1:12pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-install-no-java-exe-executable-found-on-path/303534 "2022-05-04T13:12:25Z")
I want to get the fingerprint plugin for logstash on an airgapped windows system. For this I need to download and install it on a system, which has internet access and continue from there? Like in this shown. https://www… --- ## [\[threatintel Filebeat module\] MISP , not filtering attribites](https://discuss.elastic.co/t/threatintel-filebeat-module-misp-not-filtering-attribites/303668)
**Author:** [@ibra\_013](https://discuss.elastic.co/u/ibra_013)\ **Replies:** 4\ **Last updated:** [May 4, 2022, 1:09pm UTC](https://discuss.elastic.co/t/threatintel-filebeat-module-misp-not-filtering-attribites/303668 "2022-05-04T13:09:42Z")
Hi team, i'm using the below config to filters some attributes type, but when i look at my index i find all the attributes types , is something i'm doing it wrong ? Filebeat 7.17.3 misp: enabled: true # Input… --- ## [Querying for a empty array](https://discuss.elastic.co/t/querying-for-a-empty-array/303813)
**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\ **Replies:** 5\ **Last updated:** [May 4, 2022, 12:54pm UTC](https://discuss.elastic.co/t/querying-for-a-empty-array/303813 "2022-05-04T12:54:24Z")
I have a ES index with a nested field called “relations”. In the mapping, it is defined as: "relations": { "type": "nested", "properties": { "primaryWordIndex": { "type": "… --- ## [Exclude with pattern matching on a field](https://discuss.elastic.co/t/exclude-with-pattern-matching-on-a-field/303942)
**Author:** [@scrouet](https://discuss.elastic.co/u/scrouet)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 12:38pm UTC](https://discuss.elastic.co/t/exclude-with-pattern-matching-on-a-field/303942 "2022-05-04T12:38:29Z")
Hello, I've enabled AppLocker on Windows and I want to exclude some false positive based on a field named data.win.ruleAndFileData.filePath when it contains strings like "%OSDRIVE%\\USERS\\SAM\_ACCOUNT\_NAME\\APPDATA\\LOCAL\\T… --- ## [More Like This Searches - an analogy?](https://discuss.elastic.co/t/more-like-this-searches-an-analogy/303929)
**Author:** [@sandydesu](https://discuss.elastic.co/u/sandydesu)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 12:33pm UTC](https://discuss.elastic.co/t/more-like-this-searches-an-analogy/303929 "2022-05-04T12:33:14Z")
I'm using 'More Like This' (MLT) searches for a problem I have and I have found them to be really well suited for the types of searches I need. I need to explain how MLT searches work in a meeting and I'm after an analog… --- ## [How to create kibana plugin and render \`Hello World\`](https://discuss.elastic.co/t/how-to-create-kibana-plugin-and-render-hello-world/303154)
**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\ **Replies:** 7\ **Last updated:** [May 3, 2022, 9:12am UTC](https://discuss.elastic.co/t/how-to-create-kibana-plugin-and-render-hello-world/303154 "2022-05-03T09:12:00Z")
I started kibana and elastic search a few days ago just trying to create the kibana plugin and render hello world on a page I went to mixuan sun website for a guide but I couldn't get it even I watched the official vi… --- ## [White space in numeric field kibana 8.1.1](https://discuss.elastic.co/t/white-space-in-numeric-field-kibana-8-1-1/301932)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 10:58am UTC](https://discuss.elastic.co/t/white-space-in-numeric-field-kibana-8-1-1/301932 "2022-05-04T10:58:08Z")
Hi I saw some differences between kibana 7 and 8 in visible fields. How can I change the display format without spaces for multiple number halves for ex. id\_mts 3 467 857 678 and the second topic How can I define … --- ## [Transforms failed status with runtime fields](https://discuss.elastic.co/t/transforms-failed-status-with-runtime-fields/303444)
**Author:** [@Ann\_Abbott](https://discuss.elastic.co/u/Ann_Abbott)\ **Replies:** 3\ **Last updated:** [May 4, 2022, 10:48am UTC](https://discuss.elastic.co/t/transforms-failed-status-with-runtime-fields/303444 "2022-05-04T10:48:12Z")
Hi, I am trying to create a transforms index with runtime-fields called adoption\_time\_stamp that's in a date format. Every time I try to create a transforms index with this adoption\_time\_stamp runtime\_field, I get t… --- ## [Filter data in kibana based on begin date and end date](https://discuss.elastic.co/t/filter-data-in-kibana-based-on-begin-date-and-end-date/303905)
**Author:** [@Alice\_Ionescu](https://discuss.elastic.co/u/Alice_Ionescu)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 10:41am UTC](https://discuss.elastic.co/t/filter-data-in-kibana-based-on-begin-date-and-end-date/303905 "2022-05-04T10:41:53Z")
Hello, I have a table with information and a begin date and an end date. I want to be able to filter data that are valid in the given interval. Do you have an idea on how to do this? Thanks! --- ## [Elasticsearch do not create index from Filebeat](https://discuss.elastic.co/t/elasticsearch-do-not-create-index-from-filebeat/303862)
**Author:** [@Hoa\_Nguy\_n\_Van](https://discuss.elastic.co/u/Hoa_Nguy_n_Van)\ **Replies:** 3\ **Last updated:** [May 4, 2022, 10:25am UTC](https://discuss.elastic.co/t/elasticsearch-do-not-create-index-from-filebeat/303862 "2022-05-04T10:25:20Z")
Hello, I have a problem in creating index json in filebeat. It can not parse log file. This is my log file: This is my filebeat config: This is announcement from filebeat: How can I solve this ? Please. And… --- ## [Split filter logstash](https://discuss.elastic.co/t/split-filter-logstash/303925)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 9:45am UTC](https://discuss.elastic.co/t/split-filter-logstash/303925 "2022-05-04T09:45:16Z")
Hi, Split filter works fine but i have a problem here my log looks like 2312-15:44:07:813|V2.5.4|DOW |WooalsewD6/TTxrff==|ss|ss|0110006|0Succeed| 1110-14:17:40:282|V2.5.1|G|1212|444|||EXCEPTION : System.ServiceModel.… --- ## [How to forward logs from specific file to Logstash](https://discuss.elastic.co/t/how-to-forward-logs-from-specific-file-to-logstash/303922)
**Author:** [@kirankatkar](https://discuss.elastic.co/u/kirankatkar)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 9:24am UTC](https://discuss.elastic.co/t/how-to-forward-logs-from-specific-file-to-logstash/303922 "2022-05-04T09:24:06Z")
Hello All, I want help in below scenario: We want to integrate one SAAS based application with ELK. For that, using API calls we collected logs and dump into one \*.json file. (on Ubuntu server). Now we want to forward… --- ## [Runtime field scoring with decay](https://discuss.elastic.co/t/runtime-field-scoring-with-decay/303836)
**Author:** [@Vikas\_Verma](https://discuss.elastic.co/u/Vikas_Verma)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 9:19am UTC](https://discuss.elastic.co/t/runtime-field-scoring-with-decay/303836 "2022-05-04T09:19:34Z")
Hi, I've been facing an issue regarding runtime fields scoring using decay functions. Let me share a snippet of my code for the refrence: Runtime Field "runtime\_mappings": { "price": { "type": "dou… --- ## [Connecting elastic agents over internet](https://discuss.elastic.co/t/connecting-elastic-agents-over-internet/303915)
**Author:** [@Kevin\_Hemelrijk](https://discuss.elastic.co/u/Kevin_Hemelrijk)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 8:42am UTC](https://discuss.elastic.co/t/connecting-elastic-agents-over-internet/303915 "2022-05-04T08:42:45Z")
Hello, We have a question about connecting elastic agents on remote networks over the internet to our internal fleet server/elastic cluster. Is it possible to connect a remote elastic agent (on a different network) ove… --- ## [Unable to login to kibana](https://discuss.elastic.co/t/unable-to-login-to-kibana/303863)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 8:32am UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana/303863 "2022-05-04T08:32:35Z")
Hi Team, I have installed es cluster v 7.16.2. kibana is installed on two servers. If kibana service is running on both servers, then i am not able to login to kibana. If its stopped on one of the server, then able to… --- ## [How to handle grok optional pattern (?:)](https://discuss.elastic.co/t/how-to-handle-grok-optional-pattern/303796)
**Author:** [@marwen](https://discuss.elastic.co/u/marwen)\ **Replies:** 6\ **Last updated:** [May 4, 2022, 7:36am UTC](https://discuss.elastic.co/t/how-to-handle-grok-optional-pattern/303796 "2022-05-04T07:36:37Z")
Hi everyone I'm new to Elastick Stack, I set grok custom pattern using RegEx: MODULE\_NAME (?:((?\<=\[\\\[\])\\/\\S\[^\\\]\]+)) the problem is it's optional pattern so I want the "module\_name" field to be empty instead of showing … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=951) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=953)