# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1060

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1061

---

## [How can i integrate custom visualization plugin into kibana Dashboard](https://discuss.elastic.co/t/how-can-i-integrate-custom-visualization-plugin-into-kibana-dashboard/308547)

<div class="topic-metadata">

**Author:** [@Kushal\_Roy](https://discuss.elastic.co/u/Kushal_Roy)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 4:23pm UTC](https://discuss.elastic.co/t/how-can-i-integrate-custom-visualization-plugin-into-kibana-dashboard/308547 "2022-07-05T16:23:50Z")

</div>

Hii, I developed a custom visualization Kibana Plugin. It's a React App which is visualizing data queried from an Elasticsearch index in its React components. Now i am trying to implement my custom Kibana plugin app as…

---

## [Is there any plan to add {{context.group}} on the state of Recovered in the email connector?](https://discuss.elastic.co/t/is-there-any-plan-to-add-context-group-on-the-state-of-recovered-in-the-email-connector/308939)

<div class="topic-metadata">

**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 4:00pm UTC](https://discuss.elastic.co/t/is-there-any-plan-to-add-context-group-on-the-state-of-recovered-in-the-email-connector/308939 "2022-07-05T16:00:51Z")

</div>

When setting up a rule by pre-configured email connector theres the option to add a {{context.group}} variable in Fired state which can be really useful, but theres no such option when doing the same for Recovered instan…

---

## [How to change kibana login splash screen icon image](https://discuss.elastic.co/t/how-to-change-kibana-login-splash-screen-icon-image/308927)

<div class="topic-metadata">

**Author:** [@diegoneto](https://discuss.elastic.co/u/diegoneto)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 3:52pm UTC](https://discuss.elastic.co/t/how-to-change-kibana-login-splash-screen-icon-image/308927 "2022-07-05T15:52:14Z")

</div>

Hello guys. I would like to know where I can change this icon. I know that the icon above "Administrator", is somewhere on the server, but I don't know the path. How to change?

---

## [Update errors to version 8.3.1](https://discuss.elastic.co/t/update-errors-to-version-8-3-1/308808)

<div class="topic-metadata">

**Author:** [@PM75](https://discuss.elastic.co/u/PM75)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 3:41pm UTC](https://discuss.elastic.co/t/update-errors-to-version-8-3-1/308808 "2022-07-05T15:41:57Z")

</div>

Hello, I would like to specify that I am French and that my English is not my best. Following the security alert : I have just tried to update from 8.2.0 to 8.3.1 by following the instructions: Since then, I have t…

---

## [Check, wehen an Engine was last updated](https://discuss.elastic.co/t/check-wehen-an-engine-was-last-updated/308747)

<div class="topic-metadata">

**Author:** [@John\_Agricola](https://discuss.elastic.co/u/John_Agricola)\
**Replies:** 2\
**Last updated:** [July 5, 2022, 3:28pm UTC](https://discuss.elastic.co/t/check-wehen-an-engine-was-last-updated/308747 "2022-07-05T15:28:53Z")

</div>

Hi everyone, We are running a script to keep our engines up to date. So now I try to build a little sanity check that iterates through all engines to see if they are up to date. Is there a possibility to see, when an e…

---

## [Node discovery on ECS FARGATE - nodes see each other but won't join up](https://discuss.elastic.co/t/node-discovery-on-ecs-fargate-nodes-see-each-other-but-wont-join-up/308933)

<div class="topic-metadata">

**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 3:27pm UTC](https://discuss.elastic.co/t/node-discovery-on-ecs-fargate-nodes-see-each-other-but-wont-join-up/308933 "2022-07-05T15:27:56Z")

</div>

I'm running a Service in ECS that has two small elasticsearch tasks. It uses service discovery, so both are registered under A records in Route 53 hosted zones. I've configured elasticsearch to use the route 53 dns as t…

---

## [Logstash parsing XML failing on second and subsequent records](https://discuss.elastic.co/t/logstash-parsing-xml-failing-on-second-and-subsequent-records/308905)

<div class="topic-metadata">

**Author:** [@Gerrard](https://discuss.elastic.co/u/Gerrard)\
**Replies:** 2\
**Last updated:** [July 5, 2022, 2:54pm UTC](https://discuss.elastic.co/t/logstash-parsing-xml-failing-on-second-and-subsequent-records/308905 "2022-07-05T14:54:55Z")

</div>

Hi, I'm struggling to understand why logstash is unable to process any records beyond the first in my XML log file. The first record is parsed fine, but then any following ones get the "\_xmlparsefailure" tag. My log fil…

---

## [Spark write to es thrown 'FORBIDDEN/12/index read-only'](https://discuss.elastic.co/t/spark-write-to-es-thrown-forbidden-12-index-read-only/308923)

<div class="topic-metadata">

**Author:** [@jimi\_feng](https://discuss.elastic.co/u/jimi_feng)\
**Replies:** 2\
**Last updated:** [July 5, 2022, 2:22pm UTC](https://discuss.elastic.co/t/spark-write-to-es-thrown-forbidden-12-index-read-only/308923 "2022-07-05T14:22:41Z")

</div>

Hi team, i meet some problem, when i write data from spark streaming to elasticsearch, there throw \[FORBIDDEN/12/index read-only / allow delete (api)\], i though may caused by low disk space, so i chekced node stat: http…

---

## [Logstash 'file\_chunk\_size'](https://discuss.elastic.co/t/logstash-file-chunk-size/308659)

<div class="topic-metadata">

**Author:** [@ChinigamiHunter](https://discuss.elastic.co/u/ChinigamiHunter)\
**Replies:** 3\
**Last updated:** [July 5, 2022, 2:23pm UTC](https://discuss.elastic.co/t/logstash-file-chunk-size/308659 "2022-07-05T14:23:06Z")

</div>

hi all, i have some files in a folder and i want to index them in Elasticsearch using logstash. some of the files are indexed, but i get a lot of this error i don't know why : \[2022-06-30T16:15:24,966\]\[INFO \]\[filewatc…

---

## [Send only one field in pipeline to pipeline communication](https://discuss.elastic.co/t/send-only-one-field-in-pipeline-to-pipeline-communication/308002)

<div class="topic-metadata">

**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\
**Replies:** 9\
**Last updated:** [July 5, 2022, 2:17pm UTC](https://discuss.elastic.co/t/send-only-one-field-in-pipeline-to-pipeline-communication/308002 "2022-07-05T14:17:08Z")

</div>

Hello, I'd like my 1st pipeline to send the event to an Elasticsearch output and only a field's event to the input of a 2nd pipeline. Is it possible to send only one field in a pipeline and not a complete event?

---

## [Installing Mapper Size Plugin on Elastic Cloud](https://discuss.elastic.co/t/installing-mapper-size-plugin-on-elastic-cloud/308872)

<div class="topic-metadata">

**Author:** [@pablo\_diez](https://discuss.elastic.co/u/pablo_diez)\
**Replies:** 2\
**Last updated:** [July 5, 2022, 2:12pm UTC](https://discuss.elastic.co/t/installing-mapper-size-plugin-on-elastic-cloud/308872 "2022-07-05T14:12:27Z")

</div>

Good morning, I am trying to install the Mapper Size Plugin on ElasticSearch Cloud, but I dont know where or how to begin since the server is managed by Elastic directly. Is there any way to install it through Kibana o…

---

## [Regarding if else condition for grok filter](https://discuss.elastic.co/t/regarding-if-else-condition-for-grok-filter/308863)

<div class="topic-metadata">

**Author:** [@suresh\_u](https://discuss.elastic.co/u/suresh_u)\
**Replies:** 5\
**Last updated:** [July 5, 2022, 2:11pm UTC](https://discuss.elastic.co/t/regarding-if-else-condition-for-grok-filter/308863 "2022-07-05T14:11:39Z")

</div>

Hi @sudhagar\_ramesh @Badger I have 1 date field in my oracle db. If the date field value is empty then I am getting grokparsefailure error as I am doing grok on that value. I need to put 1 condition like if date is nil…

---

## [How to stop logstash using default address when using pipeline](https://discuss.elastic.co/t/how-to-stop-logstash-using-default-address-when-using-pipeline/308922)

<div class="topic-metadata">

**Author:** [@michael.rhys](https://discuss.elastic.co/u/michael.rhys)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 2:00pm UTC](https://discuss.elastic.co/t/how-to-stop-logstash-using-default-address-when-using-pipeline/308922 "2022-07-05T14:00:06Z")

</div>

I am configuring logstash inside kubernetes using the pipeline and it is connecting to my central elk stack fine. However not only is it connecting to the ELK Host I specify it is repeatedly trying to contact http://ela…

---

## [How to iterate through multiple records and create notification for each record?](https://discuss.elastic.co/t/how-to-iterate-through-multiple-records-and-create-notification-for-each-record/308887)

<div class="topic-metadata">

**Author:** [@chsasm](https://discuss.elastic.co/u/chsasm)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 9:44am UTC](https://discuss.elastic.co/t/how-to-iterate-through-multiple-records-and-create-notification-for-each-record/308887 "2022-07-05T09:44:12Z")

</div>

Hi All, I am trying to implement a Watcher alert for error scenarios. I have a use-case where the 1st search query will retrieve all the failure records from Kibana index. I would like to iterate through each retrieve…

---

## [Regular expression query](https://discuss.elastic.co/t/regular-expression-query/308865)

<div class="topic-metadata">

**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 1:17pm UTC](https://discuss.elastic.co/t/regular-expression-query/308865 "2022-07-05T13:17:05Z")

</div>

Hi, i have data as below in my elastic 'My ORDER NO. 013-2009-01 and the order date is March 11, 2009 and delivered date is 13-03-2009 and the product id is B-43.' I am using regular expression query to get the data fr…

---

## [Json input script for converting bytes to GB and percentage?](https://discuss.elastic.co/t/json-input-script-for-converting-bytes-to-gb-and-percentage/308862)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 1:06pm UTC](https://discuss.elastic.co/t/json-input-script-for-converting-bytes-to-gb-and-percentage/308862 "2022-07-05T13:06:44Z")

</div>

Hi , I want to convert memory size and cpu usage into GB in dashboard , please help me with json input script for that

---

## [Kibana error](https://discuss.elastic.co/t/kibana-error/308861)

<div class="topic-metadata">

**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 1:05pm UTC](https://discuss.elastic.co/t/kibana-error/308861 "2022-07-05T13:05:11Z")

</div>

Hi i am facing this error while starting the kibana service.can you provide me the solution \[fatal\]\[root\] Error: Unable to complete saved object migrations for the \[.kibana\_task\_manager\] index: Unable to complete the OU…

---

## [How to change memory, disk space into GB and %](https://discuss.elastic.co/t/how-to-change-memory-disk-space-into-gb-and/308855)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 1:01pm UTC](https://discuss.elastic.co/t/how-to-change-memory-disk-space-into-gb-and/308855 "2022-07-05T13:01:37Z")

</div>

Hi, i have to change disk space in bytes into GB and % .i tried by changing the fields into bytes, pct, size etc but its showing up as bytes only.

---

## [Count API with track\_total\_hits](https://discuss.elastic.co/t/count-api-with-track-total-hits/308912)

<div class="topic-metadata">

**Author:** [@James\_Conkling](https://discuss.elastic.co/u/James_Conkling)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 12:54pm UTC](https://discuss.elastic.co/t/count-api-with-track-total-hits/308912 "2022-07-05T12:54:07Z")

</div>

While the search API has the track\_total\_hits optimization to approximate search hit count, I noticed the count API does not. If I am only looking for the approximate hit count, is it more performant to use the search A…

---

## [Configuration ingest from file](https://discuss.elastic.co/t/configuration-ingest-from-file/308910)

<div class="topic-metadata">

**Author:** [@mololkin.kirill.mol](https://discuss.elastic.co/u/mololkin.kirill.mol)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 12:53pm UTC](https://discuss.elastic.co/t/configuration-ingest-from-file/308910 "2022-07-05T12:53:06Z")

</div>

Hello is there an opportunity for configuration ingest pipelines with elasticsearch.yaml?

---

## [How to use filter on a column if it's from a nested field on Kibana Canvas?](https://discuss.elastic.co/t/how-to-use-filter-on-a-column-if-its-from-a-nested-field-on-kibana-canvas/308763)

<div class="topic-metadata">

**Author:** [@Gvinfinity](https://discuss.elastic.co/u/Gvinfinity)\
**Replies:** 1\
**Last updated:** [July 5, 2022, 12:46pm UTC](https://discuss.elastic.co/t/how-to-use-filter-on-a-column-if-its-from-a-nested-field-on-kibana-canvas/308763 "2022-07-05T12:46:09Z")

</div>

Whenever I use a filter, be it a dropdown or time filter on a column that is from a nested field no data, even data that match the filter, appears in data tables. Is there another way to do this that I'm not aware of?

---

## [Get list of current hot indexes in elasticSearch](https://discuss.elastic.co/t/get-list-of-current-hot-indexes-in-elasticsearch/308870)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 2\
**Last updated:** [July 5, 2022, 12:42pm UTC](https://discuss.elastic.co/t/get-list-of-current-hot-indexes-in-elasticsearch/308870 "2022-07-05T12:42:41Z")

</div>

Hi, Currently I am getting list of current hot indexes through Low Level Client: Request request = new Request("GET", "/\_cat/aliases/" + ALIAS\_NAME+ "?format=json&s=is\_write\_index:desc,"); Is there a way to get list…

---

## [Can we use wildcard in the field\_name or Can we apply condition in fields block inside query\_string](https://discuss.elastic.co/t/can-we-use-wildcard-in-the-field-name-or-can-we-apply-condition-in-fields-block-inside-query-string/308904)

<div class="topic-metadata">

**Author:** [@deepak\_prem](https://discuss.elastic.co/u/deepak_prem)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 11:56am UTC](https://discuss.elastic.co/t/can-we-use-wildcard-in-the-field-name-or-can-we-apply-condition-in-fields-block-inside-query-string/308904 "2022-07-05T11:56:30Z")

</div>

Hi friends, I have the following questions related to the Elasticsearch:- I want to know Can we use the wildcard in the fields name in term block in the query, if not is there any alternate way to achieve this.like In …

---

## [Help me to parse a string to fields (grok)](https://discuss.elastic.co/t/help-me-to-parse-a-string-to-fields-grok/308903)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 11:53am UTC](https://discuss.elastic.co/t/help-me-to-parse-a-string-to-fields-grok/308903 "2022-07-05T11:53:05Z")

</div>

Hi folks, I have following key: key = "value1/value2/value3" or key = "value1/value2/value3/value4" I want to split this to following structure: key1: value1 key2: value2 key3: value3 This would be easy by using a…

---

## [Authentication of my Python Script Elasticsearch 8.3](https://discuss.elastic.co/t/authentication-of-my-python-script-elasticsearch-8-3/308901)

<div class="topic-metadata">

**Author:** [@V\_o](https://discuss.elastic.co/u/V_o)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 11:40am UTC](https://discuss.elastic.co/t/authentication-of-my-python-script-elasticsearch-8-3/308901 "2022-07-05T11:40:46Z")

</div>

Hello, since Elasticsearch version 8... my Python scrips, which are sending Data to Elasticsearch are no longer working. I tried solving this Problem by using this code. client = Elasticsearch( "https://localhost:…

---

## [Http Request from painless script not working](https://discuss.elastic.co/t/http-request-from-painless-script-not-working/308876)

<div class="topic-metadata">

**Author:** [@mukesh\_154](https://discuss.elastic.co/u/mukesh_154)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 9:05am UTC](https://discuss.elastic.co/t/http-request-from-painless-script-not-working/308876 "2022-07-05T09:05:20Z")

</div>

I want to create a runtime field based on some conditions. And i have a query which is working fine on kibana console. I implemented the same query on java code but is not working. There is a method in SearchRequest run…

---

## [Very uncommon things happening with 7.17.0 ELK Cluster](https://discuss.elastic.co/t/very-uncommon-things-happening-with-7-17-0-elk-cluster/308664)

<div class="topic-metadata">

**Author:** [@Ravi\_S1](https://discuss.elastic.co/u/Ravi_S1)\
**Replies:** 6\
**Last updated:** [July 5, 2022, 11:05am UTC](https://discuss.elastic.co/t/very-uncommon-things-happening-with-7-17-0-elk-cluster/308664 "2022-07-05T11:05:07Z")

</div>

I have been observing that ELK 7.17.0 version is playing with my time & efforts. As i can observe, after changes happen in heap memory of ELK pods, have been observed that all thread pools are automatically consuming hi…

---

## [HTTP request from Painless script?](https://discuss.elastic.co/t/http-request-from-painless-script/308884)

<div class="topic-metadata">

**Author:** [@kennyprisjakt](https://discuss.elastic.co/u/kennyprisjakt)\
**Replies:** 2\
**Last updated:** [July 5, 2022, 10:19am UTC](https://discuss.elastic.co/t/http-request-from-painless-script/308884 "2022-07-05T10:19:59Z")

</div>

Hey, I'm currently looking for a way to do HTTP requests from a Painless script. Is that possible? Because i have not seen any examples of it when searching for it. Use case: Basically what i'm trying to do is runtim…

---

## [How to translate my sql query into es-sql?](https://discuss.elastic.co/t/how-to-translate-my-sql-query-into-es-sql/308890)

<div class="topic-metadata">

**Author:** [@josephLiu](https://discuss.elastic.co/u/josephLiu)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 9:57am UTC](https://discuss.elastic.co/t/how-to-translate-my-sql-query-into-es-sql/308890 "2022-07-05T09:57:35Z")

</div>

I want to query the data I need In SQL Server I can query like this select UniqueAuditRecord from dbo.kibanaLog group by UniqueAuditRecord having count(\*) =1 and MAX(timestamp) \<(select max(timestamp) from dbo.kibana…

---

## [Partial update in a rolled-over index](https://discuss.elastic.co/t/partial-update-in-a-rolled-over-index/308885)

<div class="topic-metadata">

**Author:** [@Robina\_Dhingra1](https://discuss.elastic.co/u/Robina_Dhingra1)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 9:39am UTC](https://discuss.elastic.co/t/partial-update-in-a-rolled-over-index/308885 "2022-07-05T09:39:09Z")

</div>

We're using datetime based index with an alias that is rolled over to a new index daily. We managed to achieve this by creating an ingest pipeline that figures out the physical index behind an alias and updates(read repl…

[Previous page](https://discuss.elastic.co/latest.md?page=1059)

[Next page](https://discuss.elastic.co/latest.md?page=1061)
