# Latest **URL:** https://discuss.elastic.co/latest.md?page=1009 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1010 --- ## [Table Drilldown and the event.values array](https://discuss.elastic.co/t/table-drilldown-and-the-event-values-array/311968)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 3\ **Last updated:** [August 12, 2022, 2:46pm UTC](https://discuss.elastic.co/t/table-drilldown-and-the-event-values-array/311968 "2022-08-12T14:46:38Z")
Hi there! Could someone please explain to me how to use the event.values array on a drilldown? for some reason I can't not get it to work. I'm trying to add a drilldown to a Table and I want pass to the drilldown the va… --- ## [Lens - Metric Visualization - Date Histogram Support](https://discuss.elastic.co/t/lens-metric-visualization-date-histogram-support/310667)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 4\ **Last updated:** [August 12, 2022, 1:11pm UTC](https://discuss.elastic.co/t/lens-metric-visualization-date-histogram-support/310667 "2022-08-12T13:11:01Z")
Hi All, I was wondering if there was a way to use a date histogram function within the Metric visualization. I'm trying to transfer a visualization from Grafana to Kibana, but I'm unable to find the correct way to do t… --- ## [Sorting by date and score fails](https://discuss.elastic.co/t/sorting-by-date-and-score-fails/312014)
**Author:** [@pthreat](https://discuss.elastic.co/u/pthreat)\ **Replies:** 3\ **Last updated:** [August 12, 2022, 12:33pm UTC](https://discuss.elastic.co/t/sorting-by-date-and-score-fails/312014 "2022-08-12T12:33:18Z")
My mapping: { "id": { "type": "long" }, "type": { "type": "keyword", "ignore\_above": 32766 }, "text": { "type": "text" }, "image":{ "type": "text" … --- ## [Alerting: Email is not sent](https://discuss.elastic.co/t/alerting-email-is-not-sent/312013)
**Author:** [@CaMaNi](https://discuss.elastic.co/u/CaMaNi)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 12:00pm UTC](https://discuss.elastic.co/t/alerting-email-is-not-sent/312013 "2022-08-12T12:00:14Z")
Good day dear Elastic community, I have a small problem where I can not find the solution. Namely, I have defined a rule under "Alterts and Insights" in Stack Management. If this rule is set to "Active", an email should… --- ## [How to automatically change the time filter of embedded elements in Canvas](https://discuss.elastic.co/t/how-to-automatically-change-the-time-filter-of-embedded-elements-in-canvas/311901)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 3\ **Last updated:** [August 12, 2022, 11:53am UTC](https://discuss.elastic.co/t/how-to-automatically-change-the-time-filter-of-embedded-elements-in-canvas/311901 "2022-08-12T11:53:17Z")
I added the element from the saved library as : Add Element -\> Add from Kibana -\> Selected the element to add The time filter inserted from canvas has a time set to Last 90 days, as can be seen in the image below, wh… --- ## [Small geojson upload not working](https://discuss.elastic.co/t/small-geojson-upload-not-working/311991)
**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\ **Replies:** 2\ **Last updated:** [August 12, 2022, 11:15am UTC](https://discuss.elastic.co/t/small-geojson-upload-not-working/311991 "2022-08-12T11:15:58Z")
Hi There. When I upload a pretty small geojson (3.1mb) (also tried shapefile) my instance of kibana hangs and the webpage goes blank. Preview works fine, its when its indexing. It seems similar to this problem: \[Maps\] E… --- ## [Spell Check API .NET NEST Client](https://discuss.elastic.co/t/spell-check-api-net-nest-client/312007)
**Author:** [@Biplab](https://discuss.elastic.co/u/Biplab)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 11:14am UTC](https://discuss.elastic.co/t/spell-check-api-net-nest-client/312007 "2022-08-12T11:14:58Z")
Hi, I am working on spell check query by using phrase suggester, Elasticsearch query for the same is : { "suggest": { "text" : "input\_text", "simple\_phrase" : { "phrase" : { "field" : "title", … --- ## [Adding custom search results that is not in indice](https://discuss.elastic.co/t/adding-custom-search-results-that-is-not-in-indice/311843)
**Author:** [@bilgicsin](https://discuss.elastic.co/u/bilgicsin)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 10:43am UTC](https://discuss.elastic.co/t/adding-custom-search-results-that-is-not-in-indice/311843 "2022-08-12T10:43:53Z")
Hello Everyone! I am trying to set up site search for my company's web site. I am using elastic crawler to get data from web site and I can do basic search. (I did not set up, booster or suggesters yet). Our company's… --- ## [Searching with lithuanian letters](https://discuss.elastic.co/t/searching-with-lithuanian-letters/311980)
**Author:** [@Kimblis](https://discuss.elastic.co/u/Kimblis)\ **Replies:** 3\ **Last updated:** [August 12, 2022, 10:21am UTC](https://discuss.elastic.co/t/searching-with-lithuanian-letters/311980 "2022-08-12T10:21:23Z")
Hey y'all, I need some help- I'm implementing search which is being mainly used by Lithuanians (but not only), and as you probably know we have letters like ą, č, ž and etc, which a lot of us don't always use haha, we of… --- ## [Store visualizations/dashboards as code and deploy them on the elasti stack environment](https://discuss.elastic.co/t/store-visualizations-dashboards-as-code-and-deploy-them-on-the-elasti-stack-environment/311892)
**Author:** [@stefaaan123](https://discuss.elastic.co/u/stefaaan123)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 9:43am UTC](https://discuss.elastic.co/t/store-visualizations-dashboards-as-code-and-deploy-them-on-the-elasti-stack-environment/311892 "2022-08-12T09:43:21Z")
Hi, I have an interesting use case and I would like to know if it's possible to avoid creating the same visualizations/dashboards multiple times. I have two elastic stack environments. One environment will be only for … --- ## [Referring a multi level field in Logstash](https://discuss.elastic.co/t/referring-a-multi-level-field-in-logstash/311999)
**Author:** [@yuanchuan](https://discuss.elastic.co/u/yuanchuan)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 9:36am UTC](https://discuss.elastic.co/t/referring-a-multi-level-field-in-logstash/311999 "2022-08-12T09:36:49Z")
Hi, I would like to to do an output to a syslog when a fieldname with the name symantec\_endpoint.log.event\_description equals to "The....successfully" The way that I refer the field in my code is not working, need help… --- ## [Filebeat irregularly restarts and crashes](https://discuss.elastic.co/t/filebeat-irregularly-restarts-and-crashes/311819)
**Author:** [@aleaesaest](https://discuss.elastic.co/u/aleaesaest)\ **Replies:** 18\ **Last updated:** [August 12, 2022, 9:32am UTC](https://discuss.elastic.co/t/filebeat-irregularly-restarts-and-crashes/311819 "2022-08-12T09:32:28Z")
Hello, we are using wazuh installed on a VM. Unfortunately, the filebeat service crashes at irregular intervals - after running for a while. I reviewed all the logs I could, but was unable to find the cause of the iss… --- ## [Please help with querying geospatial data -- geopoint and geoshape with NEST API](https://discuss.elastic.co/t/please-help-with-querying-geospatial-data-geopoint-and-geoshape-with-nest-api/311546)
**Author:** [@Dragana](https://discuss.elastic.co/u/Dragana)\ **Replies:** 3\ **Last updated:** [August 12, 2022, 9:31am UTC](https://discuss.elastic.co/t/please-help-with-querying-geospatial-data-geopoint-and-geoshape-with-nest-api/311546 "2022-08-12T09:31:19Z")
I am working with data ingested via Logstash, which has these fields among others: "location\_center": \[ 20.4222935, 44.815367 \], "location": { "type": "envelope", "coordinates": \[ … --- ## [Problem with my personal index creation for platform logs](https://discuss.elastic.co/t/problem-with-my-personal-index-creation-for-platform-logs/311998)
**Author:** [@SOFIA\_FERNANDEZ\_MORE](https://discuss.elastic.co/u/SOFIA_FERNANDEZ_MORE)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 9:08am UTC](https://discuss.elastic.co/t/problem-with-my-personal-index-creation-for-platform-logs/311998 "2022-08-12T09:08:11Z")
Hello, i'm trying to deploy the ECK with Beat (Filebeat) to ingest logs and Logstah to collect, for example platform logs or namespaces logs of Kubernetes cluster. I'm using eck-operator 2.3.0 and Elastic stack in 8.3.3… --- ## [Delete function not working since update 8.0](https://discuss.elastic.co/t/delete-function-not-working-since-update-8-0/311987)
**Author:** [@JoasFastory](https://discuss.elastic.co/u/JoasFastory)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 7:58am UTC](https://discuss.elastic.co/t/delete-function-not-working-since-update-8-0/311987 "2022-08-12T07:58:39Z")
Hi, In our React project, we use the npm package "@elastic/elasticsearch". Since 8.0 migration, delete function is not working. We implement it this way: // 1) Declaration of client instance import { Client } from '@… --- ## [Reducing heap size increases query speed](https://discuss.elastic.co/t/reducing-heap-size-increases-query-speed/311850)
**Author:** [@sbruinsje](https://discuss.elastic.co/u/sbruinsje)\ **Replies:** 6\ **Last updated:** [August 12, 2022, 8:43am UTC](https://discuss.elastic.co/t/reducing-heap-size-increases-query-speed/311850 "2022-08-12T08:43:30Z")
I have recently upgraded from ES 6.8 to ES 8.3. One of the queries with heavy aggregations take significantly longer now compared to before. After some searching I found that in the new version ES sets the heap size auto… --- ## [Implicit versus explicit definition of the fast vector highlighter](https://discuss.elastic.co/t/implicit-versus-explicit-definition-of-the-fast-vector-highlighter/311990)
**Author:** [@sbruinsje](https://discuss.elastic.co/u/sbruinsje)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 8:40am UTC](https://discuss.elastic.co/t/implicit-versus-explicit-definition-of-the-fast-vector-highlighter/311990 "2022-08-12T08:40:31Z")
Hi there, I was under the impression that if the mappings of a field set the term\_vector to term\_vector: 'with\_positions\_offsets', that for that field the fast vector highlighter will be used automatically. I thought so… --- ## [Issue Making TSVB in kibana](https://discuss.elastic.co/t/issue-making-tsvb-in-kibana/311825)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [August 12, 2022, 8:25am UTC](https://discuss.elastic.co/t/issue-making-tsvb-in-kibana/311825 "2022-08-12T08:25:25Z")
Hello All, How can TSVB visual can be made for below image? , want to dispaly the values for processes,alive,dead wrt to monitor time.As it can be seen the value fluctuate wrt to monitor time. How can this be achieved … --- ## [How do I stop automatic rollover upgrades](https://discuss.elastic.co/t/how-do-i-stop-automatic-rollover-upgrades/311190)
**Author:** [@zjh](https://discuss.elastic.co/u/zjh)\ **Replies:** 2\ **Last updated:** [August 12, 2022, 8:08am UTC](https://discuss.elastic.co/t/how-do-i-stop-automatic-rollover-upgrades/311190 "2022-08-12T08:08:42Z")
Continuing the discussion from How do I stop automatic rollover upgrades: --- ## [How do I stop automatic rollover upgrades](https://discuss.elastic.co/t/how-do-i-stop-automatic-rollover-upgrades/310240)
**Author:** [@zjh](https://discuss.elastic.co/u/zjh)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 8:07am UTC](https://discuss.elastic.co/t/how-do-i-stop-automatic-rollover-upgrades/310240 "2022-08-12T08:07:44Z")
i change es version from 7.7.0 to 7.17.5 and i apply -f the es.yaml elastic-operator help me to automatic rollover upgrades,but if i want to stop it,what should i do? --- ## [Kibana table sum of count and timeseries count for given host](https://discuss.elastic.co/t/kibana-table-sum-of-count-and-timeseries-count-for-given-host/310629)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 8:03am UTC](https://discuss.elastic.co/t/kibana-table-sum-of-count-and-timeseries-count-for-given-host/310629 "2022-08-12T08:03:48Z")
Hello All, I want to display above two visuals based on below table.As for now above two visuals are wrong,but desired in same style. Whenever there is an error it should display the translator name and total count of … --- ## [Control visualization apply filter for two or multiple index](https://discuss.elastic.co/t/control-visualization-apply-filter-for-two-or-multiple-index/310821)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 7:41am UTC](https://discuss.elastic.co/t/control-visualization-apply-filter-for-two-or-multiple-index/310821 "2022-08-12T07:41:42Z")
Hello, can I use the control type to filter 2/multiple index at the same time? both index has the same field name. --- ## [Error in visualisation; \[esaggs\] \> when trying to load a dashboard](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/310594)
**Author:** [@BalajeP](https://discuss.elastic.co/u/BalajeP)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 7:30am UTC](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/310594 "2022-08-12T07:30:51Z")
I'm using kibana version 7.10.2. Getting error \[essaggs\]-502 bad gateway ,when trying to load a dashboard for more than 7 days, Thanks. --- ## [Error when exporting Visualize in Kibana](https://discuss.elastic.co/t/error-when-exporting-visualize-in-kibana/311593)
**Author:** [@istef](https://discuss.elastic.co/u/istef)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 7:25am UTC](https://discuss.elastic.co/t/error-when-exporting-visualize-in-kibana/311593 "2022-08-12T07:25:55Z")
I have an error when I tried exporting a Visualize in another ES. The VisState type is invalid. May I know if I missed something? Where should this VisState type be defined? Both (source and destination) have the sam… --- ## [I would like to generate multiple narrowing criteria in Kibana's Lens](https://discuss.elastic.co/t/i-would-like-to-generate-multiple-narrowing-criteria-in-kibanas-lens/310622)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 7:23am UTC](https://discuss.elastic.co/t/i-would-like-to-generate-multiple-narrowing-criteria-in-kibanas-lens/310622 "2022-08-12T07:23:00Z")
I want to display aggregated metrics on a Kibana dashboard. I can easily create a graph of totals for specific fields, but can I put conditions on these? For example, if I am collecting access logs and want to create a… --- ## [Ship Cloudwatch logs to Self hosted elastic stack](https://discuss.elastic.co/t/ship-cloudwatch-logs-to-self-hosted-elastic-stack/311982)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 6:46am UTC](https://discuss.elastic.co/t/ship-cloudwatch-logs-to-self-hosted-elastic-stack/311982 "2022-08-12T06:46:29Z")
Want to ship AWS cloudwatch logs to our self-hosted Elastic Stack. How can i achieve this? --- ## [How to move data from cold to warm tier](https://discuss.elastic.co/t/how-to-move-data-from-cold-to-warm-tier/311767)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 7\ **Last updated:** [August 12, 2022, 6:35am UTC](https://discuss.elastic.co/t/how-to-move-data-from-cold-to-warm-tier/311767 "2022-08-12T06:35:22Z")
Hi I need to remove cold data tiers, then in this action I thought about shifting data tier from cold to warm? How I can handle such case? --- ## [Kibana Watcher actions html body if list exists condition](https://discuss.elastic.co/t/kibana-watcher-actions-html-body-if-list-exists-condition/311934)
**Author:** [@mirokrastev](https://discuss.elastic.co/u/mirokrastev)\ **Replies:** 1\ **Last updated:** [August 12, 2022, 6:10am UTC](https://discuss.elastic.co/t/kibana-watcher-actions-html-body-if-list-exists-condition/311934 "2022-08-12T06:10:22Z")
I have the following ES response: { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : { "value" : 10, … --- ## [Issues with Cisco Umbrella integration - Cisco-managed s3 bucket url's getting leading "s3." appended after https](https://discuss.elastic.co/t/issues-with-cisco-umbrella-integration-cisco-managed-s3-bucket-urls-getting-leading-s3-appended-after-https/311978)
**Author:** [@ethhack](https://discuss.elastic.co/u/ethhack)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 5:29am UTC](https://discuss.elastic.co/t/issues-with-cisco-umbrella-integration-cisco-managed-s3-bucket-urls-getting-leading-s3-appended-after-https/311978 "2022-08-12T05:29:49Z")
Error message received when trying to configure the Umbrella integration with a Cisco-managed s3 bucket: Input 'aws-s3' failed with: failed to initialize s3 poller: failed to get AWS region for bucket: exceeded maximum … --- ## [Cluster Level Replica settings](https://discuss.elastic.co/t/cluster-level-replica-settings/311976)
**Author:** [@benedictDTony](https://discuss.elastic.co/u/benedictDTony)\ **Replies:** 0\ **Last updated:** [August 12, 2022, 5:12am UTC](https://discuss.elastic.co/t/cluster-level-replica-settings/311976 "2022-08-12T05:12:48Z")
Hi, I would like to set replica settings at the cluster level instead of index level. Despite the template settings I would like my indices to be created with 0 replicas. Could someone help me how to achieve this, h… [Previous page](https://discuss.elastic.co/latest.md?page=1008) [Next page](https://discuss.elastic.co/latest.md?page=1010)