# Latest **URL:** https://discuss.elastic.co/latest.md?page=1085 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1086 --- ## [Make a chart field clickable + action](https://discuss.elastic.co/t/make-a-chart-field-clickable-action/307178)
**Author:** [@Marouene\_dakhlaoui](https://discuss.elastic.co/u/Marouene_dakhlaoui)\ **Replies:** 14\ **Last updated:** [June 17, 2022, 3:11pm UTC](https://discuss.elastic.co/t/make-a-chart-field-clickable-action/307178 "2022-06-17T15:11:29Z")
Hello, I currently have this simple table visualization created on Kibana.\* I would like to make it so that when I click on a path it opens up a popup to my local PC accessing the image in the path. As I am a new us… --- ## [Datastream speed](https://discuss.elastic.co/t/datastream-speed/306969)
**Author:** [@dmitry.chanturiya](https://discuss.elastic.co/u/dmitry.chanturiya)\ **Replies:** 5\ **Last updated:** [June 17, 2022, 2:47pm UTC](https://discuss.elastic.co/t/datastream-speed/306969 "2022-06-17T14:47:15Z")
Hello. Can U help me to understand why datastream search are slower then index search. I have one Index: size: 572 GB shards: 30 primary shards There are stored some data by one mounth. I have create datastream wit… --- ## [Edge n-gram token filter : why "side" parameter is Deprecated?](https://discuss.elastic.co/t/edge-n-gram-token-filter-why-side-parameter-is-deprecated/307519)
**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 2:19pm UTC](https://discuss.elastic.co/t/edge-n-gram-token-filter-why-side-parameter-is-deprecated/307519 "2022-06-17T14:19:34Z")
Hi, I read in documentation, that for Edge n-gram token filter the side parameter is Deprecated. Why ? What is the equivalent then ? Thanks. --- ## [Invalid Field Reference Logstash Grok](https://discuss.elastic.co/t/invalid-field-reference-logstash-grok/307512)
**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 2:08pm UTC](https://discuss.elastic.co/t/invalid-field-reference-logstash-grok/307512 "2022-06-17T14:08:25Z")
I'm receiving the error below but it doesn't offer a lot of information that I am able to tell. Anyone seen this before? 2022-06-17T07:45:19,655\]\[WARN \]\[logstash.filters.grok \]\[Cisco\_ASA\]\[694b9ac8fb3e2aae9d4c91962e71… --- ## [Kibana Broken unless run using “/usr/share/kibana/bin/kibana --allow-root” command](https://discuss.elastic.co/t/kibana-broken-unless-run-using-usr-share-kibana-bin-kibana-allow-root-command/307513)
**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 2:06pm UTC](https://discuss.elastic.co/t/kibana-broken-unless-run-using-usr-share-kibana-bin-kibana-allow-root-command/307513 "2022-06-17T14:06:08Z")
Pre upgrade to 8.2.3 I was able to start kibana with 'systemctl start kibana' but it just fails over and over again after the upgrade. I found I am able to run Kibana using /usr/share/kibana/bin/kibana --allow-root It… --- ## [Elastic Agent AWS Integration - no option for ingesting EKS control plane logs](https://discuss.elastic.co/t/elastic-agent-aws-integration-no-option-for-ingesting-eks-control-plane-logs/307518)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 1:50pm UTC](https://discuss.elastic.co/t/elastic-agent-aws-integration-no-option-for-ingesting-eks-control-plane-logs/307518 "2022-06-17T13:50:19Z")
Hi, We have AWS EKS and we want to ingest control plane log such as K8s audit Log (Amazon EKS control plane logging - Amazon EKS). Currently we use Kubernetes integration but it seems the current integration only suppo… --- ## [Passing Array and a Variable from Json output to a http request in Ruby](https://discuss.elastic.co/t/passing-array-and-a-variable-from-json-output-to-a-http-request-in-ruby/307515)
**Author:** [@santhoshi.p](https://discuss.elastic.co/u/santhoshi.p)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 1:32pm UTC](https://discuss.elastic.co/t/passing-array-and-a-variable-from-json-output-to-a-http-request-in-ruby/307515 "2022-06-17T13:32:43Z")
Hi, I have above output coming from one API and I need to pass this to another API where URL will have variable componets of datasource array and nodeID. And I need to store this data an ingest it to elastic as document… --- ## [Docker container randomly stopping with no error log](https://discuss.elastic.co/t/docker-container-randomly-stopping-with-no-error-log/307325)
**Author:** [@Kristan\_Uccello](https://discuss.elastic.co/u/Kristan_Uccello)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 1:26pm UTC](https://discuss.elastic.co/t/docker-container-randomly-stopping-with-no-error-log/307325 "2022-06-17T13:26:56Z")
I have setup a developer environment on my machine (Mac M1 Ultra). I am using the ARM docker images. I have blogged my full setup notes for my config: https://kuccello.medium.com/elastic-search-8-2-3-kibana-enterprise-se… --- ## [Display inflection point of area visualizaion in kibana](https://discuss.elastic.co/t/display-inflection-point-of-area-visualizaion-in-kibana/307424)
**Author:** [@safaeaz](https://discuss.elastic.co/u/safaeaz)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 1:10pm UTC](https://discuss.elastic.co/t/display-inflection-point-of-area-visualizaion-in-kibana/307424 "2022-06-17T13:10:22Z")
is it possible to display inflection point of area visualizaion in kibana i"m using kibana 7.17.0 --- ## [Exiting: error loading config file: yaml: line 48: did not find expected key](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-48-did-not-find-expected-key/307508)
**Author:** [@Orkun\_CELIK](https://discuss.elastic.co/u/Orkun_CELIK)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 1:03pm UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-48-did-not-find-expected-key/307508 "2022-06-17T13:03:01Z")
Hi All , After editing apm.yml in elastic apm, we get the following error. We get the error in the index line. output.Elasticsearch: hosts: \["https://10.0.0.12:9200", "https://10.0.0.13:9200", "https://10.0.0.14:9200"… --- ## [Logstash-output-syslog-3.0.5 not sending UDP over IPv6](https://discuss.elastic.co/t/logstash-output-syslog-3-0-5-not-sending-udp-over-ipv6/307279)
**Author:** [@ben2015](https://discuss.elastic.co/u/ben2015)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 12:25pm UTC](https://discuss.elastic.co/t/logstash-output-syslog-3-0-5-not-sending-udp-over-ipv6/307279 "2022-06-17T12:25:56Z")
I'm trying to use logstash-output-syslog-3.0.5 with protocol UDP and an IPv6 address. It fails in connect, at line 209 of logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-syslog-3.0.5/lib/logstash/outputs/syslog.… --- ## [Deduplicate data](https://discuss.elastic.co/t/deduplicate-data/307372)
**Author:** [@Worlock](https://discuss.elastic.co/u/Worlock)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 12:08pm UTC](https://discuss.elastic.co/t/deduplicate-data/307372 "2022-06-17T12:08:37Z")
So I have data that is getting exported to a JSON file, that's being uploaded to Elastic using FIlebeat. One of the fields can change, and when that happens, I would like the record being updated in Elastic instead of u… --- ## [Building filebeat with journald support for arm](https://discuss.elastic.co/t/building-filebeat-with-journald-support-for-arm/307490)
**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 11:24am UTC](https://discuss.elastic.co/t/building-filebeat-with-journald-support-for-arm/307490 "2022-06-17T11:24:41Z")
Hello everyone, I've been struggling to figure out how to compile filebeat with support for journald for arm platform. I know it seems to not be officially supported (since there are no arm packages available to downl… --- ## [Ruby code to generate fields dynamically based on csv](https://discuss.elastic.co/t/ruby-code-to-generate-fields-dynamically-based-on-csv/307276)
**Author:** [@SreelekhaKovuri](https://discuss.elastic.co/u/SreelekhaKovuri)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 11:12am UTC](https://discuss.elastic.co/t/ruby-code-to-generate-fields-dynamically-based-on-csv/307276 "2022-06-17T11:12:19Z")
I need dynamically generated fields based on the CSV in the logs. In this case my csv format can be in any of the following ways: CSV = CSV = 0 CSV = 1111;2222;3333;4444444;5555 CSV = 1;2;3;4;5;6;7;8;9;10 So, I wan… --- ## [Whether anyone configured filebeats and metricbeats for Azure HDinsight \[Apache kafka\]?](https://discuss.elastic.co/t/whether-anyone-configured-filebeats-and-metricbeats-for-azure-hdinsight-apache-kafka/307400)
**Author:** [@BERIN\_C\_DHAS](https://discuss.elastic.co/u/BERIN_C_DHAS)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 11:05am UTC](https://discuss.elastic.co/t/whether-anyone-configured-filebeats-and-metricbeats-for-azure-hdinsight-apache-kafka/307400 "2022-06-17T11:05:48Z")
whether anyone configured filebeats and metricbeats for Monitoring Azure HDinsight \[Apache kafka\]? --- ## [Elasticsearch machine learning datafeed configuration error](https://discuss.elastic.co/t/elasticsearch-machine-learning-datafeed-configuration-error/305484)
**Author:** [@zerojin63](https://discuss.elastic.co/u/zerojin63)\ **Replies:** 6\ **Last updated:** [June 17, 2022, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-machine-learning-datafeed-configuration-error/305484 "2022-06-17T10:35:31Z")
I'm trying to alter datafeed for ml jobs but the same errror keep occurs. What I want to do is alter data like 'abc/def/ghi' into 'abc' so based on this i wrote script as follows "runtime\_mappings": { "my\_runtime… --- ## [Httpjson pagination querystring value + 1](https://discuss.elastic.co/t/httpjson-pagination-querystring-value-1/307398)
**Author:** [@frolko](https://discuss.elastic.co/u/frolko)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:31am UTC](https://discuss.elastic.co/t/httpjson-pagination-querystring-value-1/307398 "2022-06-17T10:31:40Z")
Trying to use httpjson integration to scrape an api of data, using filebeat.8.2.2 The api takes query parameters PageSize=1000&PageNumber=1, where I'm supposed to keep adding PageNumber +1 until I get a 404 error. Howe… --- ## [ACCESS to kibana interface](https://discuss.elastic.co/t/access-to-kibana-interface/307492)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:30am UTC](https://discuss.elastic.co/t/access-to-kibana-interface/307492 "2022-06-17T10:30:42Z")
is it necessary to configure an nginx reverse proxy to access kibana from the outside? --- ## [ILM Forcemerge Internal Server Error](https://discuss.elastic.co/t/ilm-forcemerge-internal-server-error/304603)
**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:23am UTC](https://discuss.elastic.co/t/ilm-forcemerge-internal-server-error/304603 "2022-06-17T10:23:25Z")
We have ILM enabled for our indices and a number of the larger indices will fail hours into the forcemerge action with errors similar to the below: { "type": "exception", "reason": "index \[prod-jaeger-span-2022-05-1… --- ## [Visualization of the JSON documents has become ugly](https://discuss.elastic.co/t/visualization-of-the-json-documents-has-become-ugly/306686)
**Author:** [@web-develop](https://discuss.elastic.co/u/web-develop)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 8:40am UTC](https://discuss.elastic.co/t/visualization-of-the-json-documents-has-become-ugly/306686 "2022-06-17T08:40:27Z")
Kibana has become ugly in vewing JSON documents since some version, I'm not sure exactly which one, let's consider these two: v7.7.0 (normal) and v7.15.1 (abnormal). The problem is developers has replaced browsers' nati… --- ## [Scaling elasticsearch](https://discuss.elastic.co/t/scaling-elasticsearch/306945)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 6\ **Last updated:** [June 17, 2022, 8:27am UTC](https://discuss.elastic.co/t/scaling-elasticsearch/306945 "2022-06-17T08:27:30Z")
Hello, My cluster is composed of 3 nodes (Master node, hot node and warm noeaud) i want to scal my cluster by adding a new elastic node which will be dedicated only for data replication. The replicas shard of all the c… --- ## [Block in start-input (file not readable) sqlserver logstash](https://discuss.elastic.co/t/block-in-start-input-file-not-readable-sqlserver-logstash/307391)
**Author:** [@Khadija\_BOUDINAR1](https://discuss.elastic.co/u/Khadija_BOUDINAR1)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 11:04am UTC](https://discuss.elastic.co/t/block-in-start-input-file-not-readable-sqlserver-logstash/307391 "2022-06-16T11:04:25Z")
Hi all, I plan to load data from SQL Server database to Elastic. While trying to load this data using the Logstash JDBC plugin I am facing a problem. I found in the community errors like this but no solution, Test: Cop… --- ## [Rename field depending on its data type](https://discuss.elastic.co/t/rename-field-depending-on-its-data-type/307361)
**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 7:49am UTC](https://discuss.elastic.co/t/rename-field-depending-on-its-data-type/307361 "2022-06-17T07:49:55Z")
Hi, We are currently having issues with the ingestion of some documents due to the data type for one field (log.context.exception). Most of the logs come with this field as an object and the mapping is prepared to store… --- ## [Need some help understanding filebeat init scripts](https://discuss.elastic.co/t/need-some-help-understanding-filebeat-init-scripts/307032)
**Author:** [@Hermooz](https://discuss.elastic.co/u/Hermooz)\ **Replies:** 5\ **Last updated:** [June 17, 2022, 7:20am UTC](https://discuss.elastic.co/t/need-some-help-understanding-filebeat-init-scripts/307032 "2022-06-17T07:20:56Z")
Hi all. I have been tasked to manage a filebeat installation on a not-so-recent machine - we're talking about a CentOS 6.4 with a filebeat version 7.12, installed by rpm. This is not (yet) a systemd-enabled distro so fil… --- ## [\[ConnectionError\]: unable to verify the first certificate](https://discuss.elastic.co/t/connectionerror-unable-to-verify-the-first-certificate/306708)
**Author:** [@Jaep](https://discuss.elastic.co/u/Jaep)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 7:19am UTC](https://discuss.elastic.co/t/connectionerror-unable-to-verify-the-first-certificate/306708 "2022-06-17T07:19:41Z")
I'm currently trying to setup kibana together with elasticSearch within the same docker-compose. In order to avoid any issue with the SSL certificates, I generated a "real" (not self signed) certificate that I'm using o… --- ## [Does elastic support Sentiment analysis using ELK stack?](https://discuss.elastic.co/t/does-elastic-support-sentiment-analysis-using-elk-stack/307359)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 7:01am UTC](https://discuss.elastic.co/t/does-elastic-support-sentiment-analysis-using-elk-stack/307359 "2022-06-17T07:01:49Z")
We are using platinum license of Elasticsearch. We are indexing the data and showing it using Kibana in terms of graphs and visualization. I wanted to know on the Index data if we can apply apply sentiment analysis and s… --- ## [One node very high load average , why?](https://discuss.elastic.co/t/one-node-very-high-load-average-why/307236)
**Author:** [@letwen](https://discuss.elastic.co/u/letwen)\ **Replies:** 8\ **Last updated:** [June 17, 2022, 6:53am UTC](https://discuss.elastic.co/t/one-node-very-high-load-average-why/307236 "2022-06-17T06:53:01Z")
version6.8.0.one data node in cluster,16cpu 2.30GHz,48G memory,8G swap.have low cpu use,low memory use,but when i use top,can see very high 'load average',it be 40,sy high too,why ? --- ## [Prevent users to delete saved filters](https://discuss.elastic.co/t/prevent-users-to-delete-saved-filters/307383)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:52am UTC](https://discuss.elastic.co/t/prevent-users-to-delete-saved-filters/307383 "2022-06-17T06:52:20Z")
It has been already asked in 2017 Is there a way to prevent user from deleting saved Searches/Visualizations/Dashboards? Checking if there a way to avoid users to not be allowed removing filters in a separate space. We … --- ## [Ansible Setup](https://discuss.elastic.co/t/ansible-setup/307472)
**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:47am UTC](https://discuss.elastic.co/t/ansible-setup/307472 "2022-06-17T06:47:30Z")
Continuing the discussion from \[Set up Repository on multi-node Cluster via Ansible\] Hi all , Please have a look at this post (Set up Repository on multi-node Cluster via Ansible): Hi all, There are some doubts which… --- ## [Getting kibana logs in my java application](https://discuss.elastic.co/t/getting-kibana-logs-in-my-java-application/307444)
**Author:** [@shivam\_agrawal1](https://discuss.elastic.co/u/shivam_agrawal1)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:47am UTC](https://discuss.elastic.co/t/getting-kibana-logs-in-my-java-application/307444 "2022-06-17T06:47:02Z")
I am pushing multiple logs into Elasticsearch using filebeats and visualising them in kibana. Now, I want to get all these logs into my java application and make a slack bot for monitoring purposes. How can I get all tho… [Previous page](https://discuss.elastic.co/latest.md?page=1084) [Next page](https://discuss.elastic.co/latest.md?page=1086)