# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1008

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1009

---

## [\_meta: Root mapping definition has unsupported parameters](https://discuss.elastic.co/t/meta-root-mapping-definition-has-unsupported-parameters/311024)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 5\
**Last updated:** [August 13, 2022, 12:00am UTC](https://discuss.elastic.co/t/meta-root-mapping-definition-has-unsupported-parameters/311024 "2022-08-13T00:00:27Z")

</div>

I have ES7. Currently the mapping looks like: { 'mappings': { 'properties': { 'aIndex': {'type': 'integer'}, 'AC': {'type': 'integer'}, 'AF': {'type': 'double'}, ... …

---

## [How to remove brackets on grok patterns?](https://discuss.elastic.co/t/how-to-remove-brackets-on-grok-patterns/310547)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 11:34pm UTC](https://discuss.elastic.co/t/how-to-remove-brackets-on-grok-patterns/310547 "2022-08-12T23:34:44Z")

</div>

Continuing the discussion from Remove characters in grok: On the previous post is an example of how to remove "," in grok. I was wondering if there is something to remove the "\[,\]" as well. I still don't know if is it'…

---

## [Upgrading from 7.16.1 to 7.17.5 Broke Kibana Monitoring Tab](https://discuss.elastic.co/t/upgrading-from-7-16-1-to-7-17-5-broke-kibana-monitoring-tab/311460)

<div class="topic-metadata">

**Author:** [@jouellette](https://discuss.elastic.co/u/jouellette)\
**Replies:** 2\
**Last updated:** [August 12, 2022, 10:39pm UTC](https://discuss.elastic.co/t/upgrading-from-7-16-1-to-7-17-5-broke-kibana-monitoring-tab/311460 "2022-08-12T22:39:09Z")

</div>

Earlier this week I upgraded from ES/Kibana 7.16.2 to 7.17.5. My setup consisted of a Production ES cluster and a separate single server as the monitoring cluster. The production cluster would push info to the monitoring…

---

## [Report of Total Inventory](https://discuss.elastic.co/t/report-of-total-inventory/310496)

<div class="topic-metadata">

**Author:** [@Ashish10195](https://discuss.elastic.co/u/Ashish10195)\
**Replies:** 0\
**Last updated:** [July 25, 2022, 4:57am UTC](https://discuss.elastic.co/t/report-of-total-inventory/310496 "2022-07-25T04:57:43Z")

</div>

Hi ,How can we download/Export total devices inventory on which Agent is installed .

---

## [How enable syntax error](https://discuss.elastic.co/t/how-enable-syntax-error/311270)

<div class="topic-metadata">

**Author:** [@tomASZ1](https://discuss.elastic.co/u/tomASZ1)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 10:30pm UTC](https://discuss.elastic.co/t/how-enable-syntax-error/311270 "2022-08-12T22:30:36Z")

</div>

hi i use ace in kibana but hi dont show my syntax in ace is this option \<EuiCodeEditor mode="yaml" theme={chrome.getUiSettingsClient().get('theme:darkMode') ? 'dracula' : 'github'} width="1…

---

## [Simple query giving error: Query contains too many nested clauses](https://discuss.elastic.co/t/simple-query-giving-error-query-contains-too-many-nested-clauses/310779)

<div class="topic-metadata">

**Author:** [@gabrsar](https://discuss.elastic.co/u/gabrsar)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 10:24pm UTC](https://discuss.elastic.co/t/simple-query-giving-error-query-contains-too-many-nested-clauses/310779 "2022-08-12T22:24:31Z")

</div>

Hi! A few weeks ago I started noticing that any query I made with more than one word give me the error "Query contains too many nested clauses; maxClauseCount is set to 1024". I'm doing something wrong? Example of quer…

---

## [Kibana drill-down Single click vs Context menu trigger on maps](https://discuss.elastic.co/t/kibana-drill-down-single-click-vs-context-menu-trigger-on-maps/311379)

<div class="topic-metadata">

**Author:** [@petersedivec](https://discuss.elastic.co/u/petersedivec)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 10:18pm UTC](https://discuss.elastic.co/t/kibana-drill-down-single-click-vs-context-menu-trigger-on-maps/311379 "2022-08-12T22:18:20Z")

</div>

We're using 7.17 and I'm trying to understand in Kibana drilldowns the option between Single click and Context menu when creating a drill-down. I am using drill-downs on maps and I have a working "Go to URL" drill down …

---

## [Configuring Correct Monitor Schedule in Kibana: Have Schedule Set as 24 Hours or Throttle Action for 24 Hours?](https://discuss.elastic.co/t/configuring-correct-monitor-schedule-in-kibana-have-schedule-set-as-24-hours-or-throttle-action-for-24-hours/311157)

<div class="topic-metadata">

**Author:** [@ccsisko](https://discuss.elastic.co/u/ccsisko)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 10:09pm UTC](https://discuss.elastic.co/t/configuring-correct-monitor-schedule-in-kibana-have-schedule-set-as-24-hours-or-throttle-action-for-24-hours/311157 "2022-08-12T22:09:34Z")

</div>

Hello! I have a simple question that I can't seem to find the answer to. If I select 24 hours as the Kibana monitor schedule, when the extraction query for the alert is run, will it catch everything that met the conditi…

---

## [Need a customize scale for showing colors & labels in Heat Map](https://discuss.elastic.co/t/need-a-customize-scale-for-showing-colors-labels-in-heat-map/311365)

<div class="topic-metadata">

**Author:** [@SunderRajan](https://discuss.elastic.co/u/SunderRajan)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 10:02pm UTC](https://discuss.elastic.co/t/need-a-customize-scale-for-showing-colors-labels-in-heat-map/311365 "2022-08-12T22:02:20Z")

</div>

Hi Team, We're exploring the possibilities for using ELK for one of our requirement. We need the heat map visualization as part of our Dashboard. Currently in HeatMap, Labels are displayed based on Data Aggregation and…

---

## [Drill-down URLs don't appear to work without protocol](https://discuss.elastic.co/t/drill-down-urls-dont-appear-to-work-without-protocol/311388)

<div class="topic-metadata">

**Author:** [@petersedivec](https://discuss.elastic.co/u/petersedivec)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 10:00pm UTC](https://discuss.elastic.co/t/drill-down-urls-dont-appear-to-work-without-protocol/311388 "2022-08-12T22:00:07Z")

</div>

We have a field in our dataset that contains a full URL (e.g. https:\\\\example.com). Unfortunately using "Go To URL" drill-down doesn't work if we specify it as {{event.value}}. I've managed to work around this by using…

---

## [Link in markdown to a different page on same Canvas, strange behavior](https://discuss.elastic.co/t/link-in-markdown-to-a-different-page-on-same-canvas-strange-behavior/310666)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 9:41pm UTC](https://discuss.elastic.co/t/link-in-markdown-to-a-different-page-on-same-canvas-strange-behavior/310666 "2022-08-12T21:41:45Z")

</div>

Hi this is my markdown: \[Test\](https://my-site/s/my-client/app/canvas/workpad/workpad-d362ae7b-7f31-4ca8-9e66-0eb02759b566/page/2?\_\_fullScreen=true) When I click a link to go to another page in the same Canvas, it seem…

---

## [Canvas timeline](https://discuss.elastic.co/t/canvas-timeline/311403)

<div class="topic-metadata">

**Author:** [@79g](https://discuss.elastic.co/u/79g)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 9:38pm UTC](https://discuss.elastic.co/t/canvas-timeline/311403 "2022-08-12T21:38:36Z")

</div>

Hello, I'm working on a canvas now, and I see that the data represented on it is not complete. As you can see in the screenshot, in the graph there are more than 500 users, but in the right side the counter counts only…

---

## [Multiple lines in Vega](https://discuss.elastic.co/t/multiple-lines-in-vega/311603)

<div class="topic-metadata">

**Author:** [@Itamar](https://discuss.elastic.co/u/Itamar)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 9:17pm UTC](https://discuss.elastic.co/t/multiple-lines-in-vega/311603 "2022-08-12T21:17:09Z")

</div>

I want to create a graph with multiple line like this: and the data set look like that: "buckets": \[ { "key": 0, "height": { "buckets": \[ { "heig…

---

## [Time Slider disappears in Dashboards or with non-time based data](https://discuss.elastic.co/t/time-slider-disappears-in-dashboards-or-with-non-time-based-data/311647)

<div class="topic-metadata">

**Author:** [@petersedivec](https://discuss.elastic.co/u/petersedivec)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 9:09pm UTC](https://discuss.elastic.co/t/time-slider-disappears-in-dashboards-or-with-non-time-based-data/311647 "2022-08-12T21:09:55Z")

</div>

Love the time slider functionality that was released in 7.14 and have been trying to use and integrate it into our dashboards. I'm running into 2 problems Time slider doesn't seem supported in Dashboards - I've creat…

---

## [Kibana Error: Cannot read properties of undefined (reading 'id')](https://discuss.elastic.co/t/kibana-error-cannot-read-properties-of-undefined-reading-id/311817)

<div class="topic-metadata">

**Author:** [@godhand](https://discuss.elastic.co/u/godhand)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 8:55pm UTC](https://discuss.elastic.co/t/kibana-error-cannot-read-properties-of-undefined-reading-id/311817 "2022-08-12T20:55:31Z")

</div>

Hello, when I open Integrations -\> Installed integrations -\> Apache HTTP Server -\> Integration policies Tab, then this error message show up. I've tried restarting Elasticsearch and Kibana, but it doesn't work. Please he…

---

## [Stack Monitoring unstable and problems with logstash pipelines](https://discuss.elastic.co/t/stack-monitoring-unstable-and-problems-with-logstash-pipelines/311851)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 8:52pm UTC](https://discuss.elastic.co/t/stack-monitoring-unstable-and-problems-with-logstash-pipelines/311851 "2022-08-12T20:52:11Z")

</div>

We have been on 8.2.2 for awhile, monitoring was setup and working. I was working on updating some logstash pipelines, adding some filters (with ID's) and wanted to look at pipeline monitoring for a single logstash node…

---

## [How to controlling the log flow](https://discuss.elastic.co/t/how-to-controlling-the-log-flow/312019)

<div class="topic-metadata">

**Author:** [@bala56](https://discuss.elastic.co/u/bala56)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 8:35pm UTC](https://discuss.elastic.co/t/how-to-controlling-the-log-flow/312019 "2022-08-12T20:35:03Z")

</div>

Hi Team, During performance testing, we receive many log files at a moment. We are facing logs lagging in our environment. So, that it takes too much time to reach the normal flow. So, our concern is, we have to control…

---

## [Elastic agent Unhealthy](https://discuss.elastic.co/t/elastic-agent-unhealthy/311426)

<div class="topic-metadata">

**Author:** [@MAPER](https://discuss.elastic.co/u/MAPER)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 8:34pm UTC](https://discuss.elastic.co/t/elastic-agent-unhealthy/311426 "2022-08-12T20:34:48Z")

</div>

HI, I have my Elastic cluster , Kibana and Fleet up and running. Now I created New Agent-policy it has Endpoint and system integration. When I am Adding the agent client system the Agent installed successfully and Hea…

---

## [Visualization with fixed "floating" position inside a dashboard](https://discuss.elastic.co/t/visualization-with-fixed-floating-position-inside-a-dashboard/312020)

<div class="topic-metadata">

**Author:** [@APA](https://discuss.elastic.co/u/APA)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 8:31pm UTC](https://discuss.elastic.co/t/visualization-with-fixed-floating-position-inside-a-dashboard/312020 "2022-08-12T20:31:02Z")

</div>

How can a visualization have a fixed "floating" position inside a dashboard? Imagine a "switch space" markdown with a link on the top of the dashboard that when you scroll down it maintains itself always visible like fl…

---

## [Unable to get issuer certificate](https://discuss.elastic.co/t/unable-to-get-issuer-certificate/310299)

<div class="topic-metadata">

**Author:** [@AGiles102](https://discuss.elastic.co/u/AGiles102)\
**Replies:** 4\
**Last updated:** [August 12, 2022, 7:58pm UTC](https://discuss.elastic.co/t/unable-to-get-issuer-certificate/310299 "2022-08-12T19:58:34Z")

</div>

Hi all, I have setup HTTPS for Elasticsearch Cluster (using a third party certificate etc..). This seems to work fine, as shown below. However, when trying to connect Kibana, I get the following error message "Unab…

---

## [ERROR in latest version of kibana configuration: {"message":"\[config validation of \[xpack.security\].http\]: definition for this key is missing"](https://discuss.elastic.co/t/error-in-latest-version-of-kibana-configuration-message-config-validation-of-xpack-security-http-definition-for-this-key-is-missing/309832)

<div class="topic-metadata">

**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\
**Replies:** 3\
**Last updated:** [August 12, 2022, 7:57pm UTC](https://discuss.elastic.co/t/error-in-latest-version-of-kibana-configuration-message-config-validation-of-xpack-security-http-definition-for-this-key-is-missing/309832 "2022-08-12T19:57:36Z")

</div>

I have install latest version of kibana in my Ubuntu 20.04. But while i start the kibana it get stops after few seconds. I got this in kibana logs "error":{"message":"\[config validation of \[xpack.security\].http\]: definit…

---

## [Stroke Dash on Vega printing error](https://discuss.elastic.co/t/stroke-dash-on-vega-printing-error/311808)

<div class="topic-metadata">

**Author:** [@Itamar](https://discuss.elastic.co/u/Itamar)\
**Replies:** 1\
**Last updated:** [August 12, 2022, 7:29pm UTC](https://discuss.elastic.co/t/stroke-dash-on-vega-printing-error/311808 "2022-08-12T19:29:12Z")

</div>

I'm trying to make a stroke dash on Vega. when I tried it on their website it worked fine. but when I tried it on Vega it printed this error: Failed to execute 'setLineDash' on 'CanvasRenderingContext2D': The provide…

---

## [Filebeat not connecting to elasticsearch over ssl](https://discuss.elastic.co/t/filebeat-not-connecting-to-elasticsearch-over-ssl/311940)

<div class="topic-metadata">

**Author:** [@pauldon2](https://discuss.elastic.co/u/pauldon2)\
**Replies:** 6\
**Last updated:** [August 12, 2022, 7:22pm UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-elasticsearch-over-ssl/311940 "2022-08-12T19:22:17Z")

</div>

I installed elasticsearch 8.3.3 on ubuntu 18.04 and allowed xpack. curl --cacert /etc/elasticsearch/certs/http\_ca.crt -u elastic https://localhost:9200 after entering the password gives the result { "name" : "mgmt-…

---

## [Complex filters in app searchui](https://discuss.elastic.co/t/complex-filters-in-app-searchui/311922)

<div class="topic-metadata">

**Author:** [@Daniel\_Kozlowski](https://discuss.elastic.co/u/Daniel_Kozlowski)\
**Replies:** 6\
**Last updated:** [August 12, 2022, 5:58pm UTC](https://discuss.elastic.co/t/complex-filters-in-app-searchui/311922 "2022-08-12T17:58:06Z")

</div>

I have a complex quiery that I have working find in the search API via post to elastic app search. Basically its a nested all and any query like so I have a very complex nested query filter that i can get working in th…

---

## [Field type (Mapping) conflicts](https://discuss.elastic.co/t/field-type-mapping-conflicts/311967)

<div class="topic-metadata">

**Author:** [@ELKcgnuser](https://discuss.elastic.co/u/ELKcgnuser)\
**Replies:** 2\
**Last updated:** [August 12, 2022, 5:48pm UTC](https://discuss.elastic.co/t/field-type-mapping-conflicts/311967 "2022-08-12T17:48:38Z")

</div>

I got this error message: 4 fields are defined as several types (string, integer, etc) across the indices that match this pattern. You may still be able to use these conflict fields in parts of Kibana, but they will be …

---

## [I want to configure agent APM Python Django with Elastic Agent](https://discuss.elastic.co/t/i-want-to-configure-agent-apm-python-django-with-elastic-agent/312029)

<div class="topic-metadata">

**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\
**Replies:** 0\
**Last updated:** [August 12, 2022, 5:24pm UTC](https://discuss.elastic.co/t/i-want-to-configure-agent-apm-python-django-with-elastic-agent/312029 "2022-08-12T17:24:03Z")

</div>

I want to configure agent APM Python Django with Elastic Agent, but don't know where this configuration goes, what es the file or filepath please? // Add the agent to the installed apps INSTALLED\_APPS = ( 'elasticapm.…

---

## [Fleet managed Lifecycle Policies](https://discuss.elastic.co/t/fleet-managed-lifecycle-policies/310505)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 5\
**Last updated:** [August 12, 2022, 5:30pm UTC](https://discuss.elastic.co/t/fleet-managed-lifecycle-policies/310505 "2022-08-12T17:30:26Z")

</div>

Hi, Lifecycle policies for logs (name: Logs) are managed by Fleet. It is recommended not too edit this policy. But data in the logs will stay forever (see screenshot) and not deleted after x days, as usual. So eventual…

---

## [Logstash-to-Logstash Communication, Beats input?](https://discuss.elastic.co/t/logstash-to-logstash-communication-beats-input/312022)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 2\
**Last updated:** [August 12, 2022, 5:29pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-communication-beats-input/312022 "2022-08-12T17:29:33Z")

</div>

I see that Logstash has a lumberjack input plug-in. I would have thought that the standard way for one logstash server to send logs to another logstash server would be to setup a lumberjack output and a lumberjack input.…

---

## [Data allways stack in field.keyword than field](https://discuss.elastic.co/t/data-allways-stack-in-field-keyword-than-field/311937)

<div class="topic-metadata">

**Author:** [@Dreinale](https://discuss.elastic.co/u/Dreinale)\
**Replies:** 8\
**Last updated:** [August 12, 2022, 4:04pm UTC](https://discuss.elastic.co/t/data-allways-stack-in-field-keyword-than-field/311937 "2022-08-12T16:04:59Z")

</div>

Hi, I try to install & configure elk 8.3.3 without security on the docker "host" and filebeat on another docker. All works, i have the live logs, i imported my dashboards, but i have this: and the problem is because…

---

## [Geopoint type fields cannot be created correctly](https://discuss.elastic.co/t/geopoint-type-fields-cannot-be-created-correctly/312002)

<div class="topic-metadata">

**Author:** [@5k\_pwc](https://discuss.elastic.co/u/5k_pwc)\
**Replies:** 7\
**Last updated:** [August 12, 2022, 3:00pm UTC](https://discuss.elastic.co/t/geopoint-type-fields-cannot-be-created-correctly/312002 "2022-08-12T15:00:47Z")

</div>

Hi all, my goal is to create a table and then load it by logstash, the geopoint field is the only one that doesn't want to be created correctly, do you have any idea?

[Previous page](https://discuss.elastic.co/latest.md?page=1007)

[Next page](https://discuss.elastic.co/latest.md?page=1009)
