# Latest **URL:** https://discuss.elastic.co/latest.md?page=1086 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1087 --- ## [Getting kibana logs in my java application](https://discuss.elastic.co/t/getting-kibana-logs-in-my-java-application/307444)
**Author:** [@shivam\_agrawal1](https://discuss.elastic.co/u/shivam_agrawal1)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 6:47am UTC](https://discuss.elastic.co/t/getting-kibana-logs-in-my-java-application/307444 "2022-06-17T06:47:02Z")
I am pushing multiple logs into Elasticsearch using filebeats and visualising them in kibana. Now, I want to get all these logs into my java application and make a slack bot for monitoring purposes. How can I get all tho… --- ## [Stack percentage bar chart in Canvas](https://discuss.elastic.co/t/stack-percentage-bar-chart-in-canvas/307227)
**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 6:08am UTC](https://discuss.elastic.co/t/stack-percentage-bar-chart-in-canvas/307227 "2022-06-17T06:08:03Z")
Hi all, I want to create 100% stack bar visual in canvas and also need data label to be visible in order to know the percentage of each stack. Refer to the 1st image that I have tried with demodata and 2nd image for how… --- ## [Elastic Search query that matches all elements in nested document](https://discuss.elastic.co/t/elastic-search-query-that-matches-all-elements-in-nested-document/307395)
**Author:** [@Zedson.Sagar](https://discuss.elastic.co/u/Zedson.Sagar)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 5:22am UTC](https://discuss.elastic.co/t/elastic-search-query-that-matches-all-elements-in-nested-document/307395 "2022-06-17T05:22:33Z")
I have an index with nested document structure as below - { "firstindex": { "mappings": { "properties": { "Name": { "type": "text" }, "SecurityCo… --- ## [How to fix host issue in filebeat-7.17.4 without drop\_fields](https://discuss.elastic.co/t/how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/306890)
**Author:** [@mbmannubisht](https://discuss.elastic.co/u/mbmannubisht)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 4:51am UTC](https://discuss.elastic.co/t/how-to-fix-host-issue-in-filebeat-7-17-4-without-drop-fields/306890 "2022-06-17T04:51:43Z")
Hi Team, Stuck in one issue if I drop\_fields of host then it will work otherwise not working Working condition code: - drop\_fields: fields: \["beat", "offset", "source", "type", "input\_type", "host"\] igno… --- ## [Return fields format when retrieving more than one documents using Elasticsearch Filter plugin in Logstash](https://discuss.elastic.co/t/return-fields-format-when-retrieving-more-than-one-documents-using-elasticsearch-filter-plugin-in-logstash/307467)
**Author:** [@Zhihai\_Xian](https://discuss.elastic.co/u/Zhihai_Xian)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 4:05am UTC](https://discuss.elastic.co/t/return-fields-format-when-retrieving-more-than-one-documents-using-elasticsearch-filter-plugin-in-logstash/307467 "2022-06-17T04:05:48Z")
Hi, I could not find any topic or documentation about return fields processing when retrieving more than one documents using Elasticsearch filter plugin in Logstash. Is it possible and how to parse the fields format in … --- ## [Ingest data and. fetch data through groovy in the. URL https://testsearch-cca1f6.ent.us-central1.gcp.cloud.es.io](https://discuss.elastic.co/t/ingest-data-and-fetch-data-through-groovy-in-the-url-https-testsearch-cca1f6-ent-us-central1-gcp-cloud-es-io/307463)
**Author:** [@Pritam\_Thing](https://discuss.elastic.co/u/Pritam_Thing)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 3:40am UTC](https://discuss.elastic.co/t/ingest-data-and-fetch-data-through-groovy-in-the-url-https-testsearch-cca1f6-ent-us-central1-gcp-cloud-es-io/307463 "2022-06-17T03:40:53Z")
Hey everyone, I want to ingest data dynamically though groovy and search through jquery . While i was testing the search api, I found some issue related to cors. Could someone help me out with the following code. … --- ## [Search on Multiple Indices](https://discuss.elastic.co/t/search-on-multiple-indices/307105)
**Author:** [@QuanMinhTran](https://discuss.elastic.co/u/QuanMinhTran)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 3:31am UTC](https://discuss.elastic.co/t/search-on-multiple-indices/307105 "2022-06-17T03:31:05Z")
I doing a query to search for multiple indices on Elasticsearch. The problem here is the priority of the result doesn't follow what I think. For example, I have 2 indices: index\_1 and index\_2 In Index\_1 have ~80 docs, … --- ## [Kibana / Map /Result narrowed](https://discuss.elastic.co/t/kibana-map-result-narrowed/307456)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 1:35am UTC](https://discuss.elastic.co/t/kibana-map-result-narrowed/307456 "2022-06-17T01:35:06Z")
Bonjour, J'ai un problème pour contourner le fait que l'utilisation d'un control sur une map dans un dashboard influence un autre layer. Je m'explique : J'ai un layer L1 avec certaines données que j'affiche sur carte, j… --- ## [Filebeat and Metricbeat process cause CPU high for 8.2.0 version](https://discuss.elastic.co/t/filebeat-and-metricbeat-process-cause-cpu-high-for-8-2-0-version/307207)
**Author:** [@wisdomluo](https://discuss.elastic.co/u/wisdomluo)\ **Replies:** 9\ **Last updated:** [June 17, 2022, 1:13am UTC](https://discuss.elastic.co/t/filebeat-and-metricbeat-process-cause-cpu-high-for-8-2-0-version/307207 "2022-06-17T01:13:19Z")
top - 09:18:06 up 7 min, 1 user, load average: 10.19, 8.81, 4.51 Tasks: 124 total, 3 running, 58 sleeping, 0 stopped, 1 zombie %Cpu(s): 82.0 us, 7.7 sy, 0.0 ni, 10.3 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st KiB … --- ## [Change dashboard logo](https://discuss.elastic.co/t/change-dashboard-logo/307440)
**Author:** [@chamod\_maduranga](https://discuss.elastic.co/u/chamod_maduranga)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 11:25pm UTC](https://discuss.elastic.co/t/change-dashboard-logo/307440 "2022-06-16T23:25:41Z")
need to change dashboard logo. Saw that if i hosted it in locally or using a docker,simply changing yml file i can change the logo. But how can i change it if i hosted on aws. --- ## [Changed node port - now it doesn't have shards, but storage is still used](https://discuss.elastic.co/t/changed-node-port-now-it-doesnt-have-shards-but-storage-is-still-used/307451)
**Author:** [@matiasgarciaisaia](https://discuss.elastic.co/u/matiasgarciaisaia)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 8:40pm UTC](https://discuss.elastic.co/t/changed-node-port-now-it-doesnt-have-shards-but-storage-is-still-used/307451 "2022-06-16T20:40:08Z")
I've setup a 6-node Elasticsearch 7.17.0 cluster which has to serve a single read-only ~1TB index. The nodes have 2TB of storage, so I've set that index to be a single shard, with 5 replicas (so each node gets a full co… --- ## [Kibana shows double with slightly changed value](https://discuss.elastic.co/t/kibana-shows-double-with-slightly-changed-value/307318)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 8:51pm UTC](https://discuss.elastic.co/t/kibana-shows-double-with-slightly-changed-value/307318 "2022-06-16T20:51:52Z")
How do I get Kibana Discover to display a double (number) as a double? I have a document indexed with the double value 2555417833004 for a particular field. But when Kibana Discover shows the same document, it displays… --- ## [Elasticsearch service won't start](https://discuss.elastic.co/t/elasticsearch-service-wont-start/307290)
**Author:** [@Lukasz1](https://discuss.elastic.co/u/Lukasz1)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 8:45pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-start/307290 "2022-06-16T20:45:42Z")
Elasticsearch (7.17.0) service won't start The config file is so simple that I can't find any error there. My config is: cluster.name: elkos node.name: elkos-1 path.data: /mnt/elasticsearch/data path.logs: /mnt/elast… --- ## [Subtracting two values of a field](https://discuss.elastic.co/t/subtracting-two-values-of-a-field/306915)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 8:36pm UTC](https://discuss.elastic.co/t/subtracting-two-values-of-a-field/306915 "2022-06-16T20:36:41Z")
Hello All, I have a set up which parses the following line in a log file: \[2022-06-10T19:52:05.017+0000\]\[info\]\[gc \] GC(35959) Pause Full (Diagnostic Command) 1850M-\>1140M(2560M) 506.831ms The resultant get… --- ## [How to debug filebeat module, it doesn't seem to be getting syslog data](https://discuss.elastic.co/t/how-to-debug-filebeat-module-it-doesnt-seem-to-be-getting-syslog-data/307307)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 9\ **Last updated:** [June 16, 2022, 7:24pm UTC](https://discuss.elastic.co/t/how-to-debug-filebeat-module-it-doesnt-seem-to-be-getting-syslog-data/307307 "2022-06-16T19:24:42Z")
I'm trying to use the panw module receiving data via a syslog port. I've enabled the module and can see that filebeat is listening on the proper udp port. I can see traffic arrive in tcpdump and the events look valid. … --- ## [Logstash - .gz files - Error: Unexpected end of ZLIB input stream](https://discuss.elastic.co/t/logstash-gz-files-error-unexpected-end-of-zlib-input-stream/263028)
**Author:** [@sam281](https://discuss.elastic.co/u/sam281)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 6:54pm UTC](https://discuss.elastic.co/t/logstash-gz-files-error-unexpected-end-of-zlib-input-stream/263028 "2022-06-16T18:54:57Z")
Hi, I am using logstash to read .gz files. The gzip files are around 10 to 15GB for which logstash was unable to process and crashing. So I have split the .gz files using 7zip split based on size of 3GB .gz file chunks.… --- ## [Format is showing wrong in label](https://discuss.elastic.co/t/format-is-showing-wrong-in-label/306627)
**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\ **Replies:** 3\ **Last updated:** [June 16, 2022, 6:30pm UTC](https://discuss.elastic.co/t/format-is-showing-wrong-in-label/306627 "2022-06-16T18:30:54Z")
I draw a vertical bar graph but in one of my column, values are in decimal and i set it to 0 also but still label are showing decimal values. --- ## [Unknown response error when running using \`\_disk\_usage\` api](https://discuss.elastic.co/t/unknown-response-error-when-running-using-disk-usage-api/307330)
**Author:** [@Ryan\_Morrison](https://discuss.elastic.co/u/Ryan_Morrison)\ **Replies:** 9\ **Last updated:** [June 16, 2022, 6:06pm UTC](https://discuss.elastic.co/t/unknown-response-error-when-running-using-disk-usage-api/307330 "2022-06-16T18:06:38Z")
I'm looking at utilizing the new \[\_disk\_usage\](https://www.elastic.co/guide/en/elasticsearch/reference/master/indices-disk-usage.html) api and doing so successfully in our staging environment. However, when running agai… --- ## [Combine two different aggregation results into one](https://discuss.elastic.co/t/combine-two-different-aggregation-results-into-one/307143)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 2\ **Last updated:** [June 16, 2022, 6:00pm UTC](https://discuss.elastic.co/t/combine-two-different-aggregation-results-into-one/307143 "2022-06-16T18:00:19Z")
We have traffic logs from and to WAN. We need to :slight\_smile: We need to add/aggregate the sentbytes when the source interface is WAN. We need to add/aggregate the receivedbytes when the destination interface is WAN… --- ## [Display All X values](https://discuss.elastic.co/t/display-all-x-values/306804)
**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 5:39pm UTC](https://discuss.elastic.co/t/display-all-x-values/306804 "2022-06-16T17:39:39Z")
I'm currently creating a bar chart. However, as you can see, it on shows some of the months, and not all of them. Is there a way to show them all ? Thanks --- ## [Configure Elastic APM in webform project](https://discuss.elastic.co/t/configure-elastic-apm-in-webform-project/307402)
**Author:** [@Azhar\_Majeed](https://discuss.elastic.co/u/Azhar_Majeed)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 4:47pm UTC](https://discuss.elastic.co/t/configure-elastic-apm-in-webform-project/307402 "2022-06-16T16:47:19Z")
Hi, I am trying to configure APM in webform project. Can you please share some documentation or sample code to help me implementation and setting confuguration for APM in web.config of global.asax. All what I am finding… --- ## [Filebeat receives HTTP 405 from Elasticsearch after 7.x -\> 8.1 upgrade](https://discuss.elastic.co/t/filebeat-receives-http-405-from-elasticsearch-after-7-x-8-1-upgrade/303821)
**Author:** [@Specialist](https://discuss.elastic.co/u/Specialist)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 4:21pm UTC](https://discuss.elastic.co/t/filebeat-receives-http-405-from-elasticsearch-after-7-x-8-1-upgrade/303821 "2022-06-16T16:21:37Z")
Hi there, since upgrading to v8.1 Filebeat no longer starts with the following error: Connection marked as failed because the onConnect callback failed: error loading template: failure while checking if template exist… --- ## [\[Metricbeat\] Can't apply rollover when creating indexes](https://discuss.elastic.co/t/metricbeat-cant-apply-rollover-when-creating-indexes/306810)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 15\ **Last updated:** [June 16, 2022, 4:16pm UTC](https://discuss.elastic.co/t/metricbeat-cant-apply-rollover-when-creating-indexes/306810 "2022-06-16T16:16:39Z")
Hello, I have a metricbeat deployed in a kubernetes cluster, I'm trying to create, for each kubernetes namespace, a metricbeat index following this pattern: metricbeat-%{\[agent.version\]}-%{\[kubernetes.namespace\]}-{now/d… --- ## [Kibana visualization for a nested Cardinality aggregation](https://discuss.elastic.co/t/kibana-visualization-for-a-nested-cardinality-aggregation/307284)
**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 4:13pm UTC](https://discuss.elastic.co/t/kibana-visualization-for-a-nested-cardinality-aggregation/307284 "2022-06-16T16:13:09Z")
Hi, I'm trying to create a visualization for the following query: GET \_search { "query": { "query\_string": { "query": "distribution.extension.id:org.xwiki.\* AND date.since:\[1 TO \*\]" } … --- ## [@timestamp to ISO (Europe/Madrid)](https://discuss.elastic.co/t/timestamp-to-iso-europe-madrid/307056)
**Author:** [@Jonathan\_Fernandez](https://discuss.elastic.co/u/Jonathan_Fernandez)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 3:55pm UTC](https://discuss.elastic.co/t/timestamp-to-iso-europe-madrid/307056 "2022-06-16T15:55:41Z")
Hi everyone! So basically I have to parse my UTC timestamp in a set of Elasticsearch Watchers to ISO (Europe/Madrid). IMPORTANT: I cannot use Logstash, quite unsure that use an Ingest Node for this would be permitted, … --- ## [Create new Event Renderers](https://discuss.elastic.co/t/create-new-event-renderers/307382)
**Author:** [@kotvmrc](https://discuss.elastic.co/u/kotvmrc)\ **Replies:** 1\ **Last updated:** [June 16, 2022, 3:36pm UTC](https://discuss.elastic.co/t/create-new-event-renderers/307382 "2022-06-16T15:36:34Z")
Hi guys, I'm looking for creating/customizing "Events Renderers" the ones used inside the timelines or in the "Alerts" page. I've found only a little piece of configuration where I can select what renderer enable or no… --- ## [Can we do : Analyser-\>Tokenizer-\>Token Filter-\>Re-tokenize and considers only these last tokens](https://discuss.elastic.co/t/can-we-do-analyser-tokenizer-token-filter-re-tokenize-and-considers-only-these-last-tokens/307298)
**Author:** [@fraf](https://discuss.elastic.co/u/fraf)\ **Replies:** 7\ **Last updated:** [June 16, 2022, 2:36pm UTC](https://discuss.elastic.co/t/can-we-do-analyser-tokenizer-token-filter-re-tokenize-and-considers-only-these-last-tokens/307298 "2022-06-16T14:36:54Z")
Hello, I want, given the input text : { "analyzer": "parapheur\_shingle", "text": "W 4.8.4.1 NI FNA NP 4.8.4 TEST 2" } having fllowing steps : tokenize as standard (word break with spaces =\> 8 tokens) filter … --- ## [Sort based on a Python List (array) and this list is not stored in the Elastic search](https://discuss.elastic.co/t/sort-based-on-a-python-list-array-and-this-list-is-not-stored-in-the-elastic-search/306528)
**Author:** [@Kv\_Karthik](https://discuss.elastic.co/u/Kv_Karthik)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/sort-based-on-a-python-list-array-and-this-list-is-not-stored-in-the-elastic-search/306528 "2022-06-16T14:32:52Z")
I would like to sort the hits in my results in a specific order and this order can be made available from a Python list or a python dictionary. I already tried using the script fields like mentioned in Medium website( M… --- ## [Can you hook an existing Elasticsearch index to Elastic App search](https://discuss.elastic.co/t/can-you-hook-an-existing-elasticsearch-index-to-elastic-app-search/222508)
**Author:** [@SanshilaG](https://discuss.elastic.co/u/SanshilaG)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/can-you-hook-an-existing-elasticsearch-index-to-elastic-app-search/222508 "2022-06-16T14:32:17Z")
I want to integrate App Search in my project. App search runs fine out of the box. But I have an application that is running on Elasticsearch, I was wondering if I could use this existing index as a backend for App searc… --- ## [Is it possible to query app-search documents through elastic search API?](https://discuss.elastic.co/t/is-it-possible-to-query-app-search-documents-through-elastic-search-api/246370)
**Author:** [@Ali\_Modern](https://discuss.elastic.co/u/Ali_Modern)\ **Replies:** 5\ **Last updated:** [June 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/is-it-possible-to-query-app-search-documents-through-elastic-search-api/246370 "2022-06-16T14:32:04Z")
I have self-hosted app search instance with the Elastic stack (ELK+Appsearch). I can't see app-search index in Kibana. I'm wondering if there is any other way to manage the documents app-search is working on apart from a… [Previous page](https://discuss.elastic.co/latest.md?page=1085) [Next page](https://discuss.elastic.co/latest.md?page=1087)