# Latest **URL:** https://discuss.elastic.co/latest.md?page=1095 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1096 --- ## [Bar chart ordering Kibana Lens](https://discuss.elastic.co/t/bar-chart-ordering-kibana-lens/306758)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 3\ **Last updated:** [June 10, 2022, 5:51am UTC](https://discuss.elastic.co/t/bar-chart-ordering-kibana-lens/306758 "2022-06-10T05:51:32Z")
Hi, I have a horizontal bar chart in Kibana lens which has $ value on the horizontal axis, top 3 products on the vertical axis and "group other values by other" turned off, and breakdown by manager names with top 3 man… --- ## [Redis: Error fetching metrics error determining cgroups version: error reading /proc/89458/cgroup](https://discuss.elastic.co/t/redis-error-fetching-metrics-error-determining-cgroups-version-error-reading-proc-89458-cgroup/306280)
**Author:** [@Duane\_DSouza](https://discuss.elastic.co/u/Duane_DSouza)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 4:24am UTC](https://discuss.elastic.co/t/redis-error-fetching-metrics-error-determining-cgroups-version-error-reading-proc-89458-cgroup/306280 "2022-06-10T04:24:45Z")
Hi , I am trying to use metricbeat (version 8.1.2) module for Redis. Redis cluster is managed app.redislabs.com Here is the config: metricsets: \["info", "keyspace"\] hosts: \["redis-16058.internal.xxxxxxxxx.ec2.clo… --- ## [Legends on map](https://discuss.elastic.co/t/legends-on-map/306778)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 5:29am UTC](https://discuss.elastic.co/t/legends-on-map/306778 "2022-06-10T05:29:36Z")
Is there a way to adjust the number template on the legends on a Kibana map. For e.g. it is currently showing the full length for large numbers. what if we want to show the numbers trimmed as $1000k etc. instead of the … --- ## [Get most recent distinct rows as kibana table](https://discuss.elastic.co/t/get-most-recent-distinct-rows-as-kibana-table/306524)
**Author:** [@chamod\_maduranga](https://discuss.elastic.co/u/chamod_maduranga)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 3:44am UTC](https://discuss.elastic.co/t/get-most-recent-distinct-rows-as-kibana-table/306524 "2022-06-10T03:44:51Z")
I created index pattern and it has 4 fields(timestamp,Id,Type,Count). Need to get the most recent(based on the timestamp)rows with unique Type. Sample data: |timestamp|ID|Type|Count| |1/10/2022|1|A|12| |1/11/2022|2|A… --- ## [Start request repeated too quickly for filebeat.service](https://discuss.elastic.co/t/start-request-repeated-too-quickly-for-filebeat-service/305005)
**Author:** [@bd67](https://discuss.elastic.co/u/bd67)\ **Replies:** 4\ **Last updated:** [June 10, 2022, 1:43am UTC](https://discuss.elastic.co/t/start-request-repeated-too-quickly-for-filebeat-service/305005 "2022-06-10T01:43:35Z")
Hello All, I have several servers set up with Filebeat since few months , nothing changed in terms of config for any. Over the past few days I am observing 2 of these servers consistently failing to keep Filebeat servi… --- ## [Es\_rejected\_execution\_exception - what steps do I need to take?](https://discuss.elastic.co/t/es-rejected-execution-exception-what-steps-do-i-need-to-take/306836)
**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 1:29am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception-what-steps-do-i-need-to-take/306836 "2022-06-10T01:29:15Z")
I am using Elasticsearch docker image 7.17.4. I am on a 12 core machine using Python and the helpers.parallel\_bulk() function with the default thread count and queue size. The error I get is elasticsearch.ApiError: Ap… --- ## [How to filter an index by the maximum value of a field?](https://discuss.elastic.co/t/how-to-filter-an-index-by-the-maximum-value-of-a-field/306755)
**Author:** [@Arifullah](https://discuss.elastic.co/u/Arifullah)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 1:21am UTC](https://discuss.elastic.co/t/how-to-filter-an-index-by-the-maximum-value-of-a-field/306755 "2022-06-10T01:21:43Z")
There is a field in the index by the name of date but the data of that field is not in a proper date format its only a number. So I want a filter to include only the data of maximum data of date field I mean how to creat… --- ## [Terms are not working with multilevel nested query](https://discuss.elastic.co/t/terms-are-not-working-with-multilevel-nested-query/306428)
**Author:** [@ravee1112](https://discuss.elastic.co/u/ravee1112)\ **Replies:** 6\ **Last updated:** [June 10, 2022, 12:31am UTC](https://discuss.elastic.co/t/terms-are-not-working-with-multilevel-nested-query/306428 "2022-06-10T00:31:58Z")
Below is my mapping for index: { "properties" : { "solutions" : { "type" : "nested", "properties" : { "deliverySkills" : { "type" : "nested", "properties" : { "m… --- ## [Need help configuring repository-s3 (AWS\_WEB\_IDENTITY\_TOKEN\_FILE ignored?)](https://discuss.elastic.co/t/need-help-configuring-repository-s3-aws-web-identity-token-file-ignored/306607)
**Author:** [@ericsperano](https://discuss.elastic.co/u/ericsperano)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 12:00am UTC](https://discuss.elastic.co/t/need-help-configuring-repository-s3-aws-web-identity-token-file-ignored/306607 "2022-06-10T00:00:24Z")
Hello, I'm having some difficulties setting up the repository-s3 plugin on Kubernetes (EKS) using ECK. I can confirm that my service account is configured correctly, I can launch a pod running ubuntu with this service … --- ## [NLP Summarizer Model for ES 8.2.2](https://discuss.elastic.co/t/nlp-summarizer-model-for-es-8-2-2/306740)
**Author:** [@sim](https://discuss.elastic.co/u/sim)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 11:17pm UTC](https://discuss.elastic.co/t/nlp-summarizer-model-for-es-8-2-2/306740 "2022-06-09T23:17:45Z")
I wonder if ES 8.2.2 already supports a PyTorch NLP model for summarization? Eg. sshleifer/distilbart-cnn-12-6 · Hugging Face It's not an option in eland's current supported task types. It is a generative model, ie. g… --- ## [Custom jar deployment](https://discuss.elastic.co/t/custom-jar-deployment/306832)
**Author:** [@igladyshev](https://discuss.elastic.co/u/igladyshev)\ **Replies:** 0\ **Last updated:** [June 9, 2022, 9:35pm UTC](https://discuss.elastic.co/t/custom-jar-deployment/306832 "2022-06-09T21:35:16Z")
Hello. I am trying to consume kafka topics and output them to s3. All works when we consume topics published in Avro, but we are struggling to make it working for JSON topics. I understood there is an option of using spe… --- ## [In Scripted Field 'Create Field' grayed out and 'Name' input box missing only for some index patterns](https://discuss.elastic.co/t/in-scripted-field-create-field-grayed-out-and-name-input-box-missing-only-for-some-index-patterns/306824)
**Author:** [@nofmxc](https://discuss.elastic.co/u/nofmxc)\ **Replies:** 5\ **Last updated:** [June 9, 2022, 7:52pm UTC](https://discuss.elastic.co/t/in-scripted-field-create-field-grayed-out-and-name-input-box-missing-only-for-some-index-patterns/306824 "2022-06-09T19:52:38Z")
I'm trying to create a scripted field for an index. For my 'dev-logs' index it works great, but for my 'logs' index, the UI won't let me save the scripted field since the button is greyed out. Also weirdly there is no op… --- ## [Appsearch giving 10000 total\_results for every query i did](https://discuss.elastic.co/t/appsearch-giving-10000-total-results-for-every-query-i-did/306656)
**Author:** [@haris.sheikh](https://discuss.elastic.co/u/haris.sheikh)\ **Replies:** 4\ **Last updated:** [June 9, 2022, 7:47pm UTC](https://discuss.elastic.co/t/appsearch-giving-10000-total-results-for-every-query-i-did/306656 "2022-06-09T19:47:24Z")
Hi, I am facing a problem in the 8.2 release, when I search for something it gives me total\_results always 10,000 as if some sort of max limit is set there. My Query Result Thanks. --- ## [Log Path for ECK Agent Daemonset](https://discuss.elastic.co/t/log-path-for-eck-agent-daemonset/305825)
**Author:** [@rstasiunas1](https://discuss.elastic.co/u/rstasiunas1)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 7:45pm UTC](https://discuss.elastic.co/t/log-path-for-eck-agent-daemonset/305825 "2022-06-09T19:45:41Z")
I deployed the Kubernetes integration to an ECK daemonset deployment version 8.2.2 in Amazon EKS running on Bottlerocket hosts. I’m not getting any container or audit logs. When I exec into one of the agent pods, there i… --- ## [Modify values in json array with Ruby](https://discuss.elastic.co/t/modify-values-in-json-array-with-ruby/306756)
**Author:** [@Long\_Nguyen](https://discuss.elastic.co/u/Long_Nguyen)\ **Replies:** 4\ **Last updated:** [June 9, 2022, 6:42pm UTC](https://discuss.elastic.co/t/modify-values-in-json-array-with-ruby/306756 "2022-06-09T18:42:30Z")
Hello everyone, I have a json structure as follows: { "server":\[ { "active":true, "objID":1 }, { "active":true, "objID":2 }, { "active":false, … --- ## [Indexes not rolled over or deleted](https://discuss.elastic.co/t/indexes-not-rolled-over-or-deleted/306796)
**Author:** [@koos](https://discuss.elastic.co/u/koos)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 5:40pm UTC](https://discuss.elastic.co/t/indexes-not-rolled-over-or-deleted/306796 "2022-06-09T17:40:01Z")
Hello All, I've been stuck with an issue that indexes are not getting deleted after what is defined in the ILM Policy. I have the same issue on various ES clusters, so clearly I'm doing something wrong. I have the foll… --- ## [Logstash runs out of memory as soon pipelines are triggered](https://discuss.elastic.co/t/logstash-runs-out-of-memory-as-soon-pipelines-are-triggered/306821)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 5:19pm UTC](https://discuss.elastic.co/t/logstash-runs-out-of-memory-as-soon-pipelines-are-triggered/306821 "2022-06-09T17:19:13Z")
My logstash has started suddenly running out of memory, though no changes have been made to the pipeline. Following is the error log. My server has 14-15 GB of memory free. Tried allocating different memory in jvm.optio… --- ## [Kibana behind nginx relative path](https://discuss.elastic.co/t/kibana-behind-nginx-relative-path/306764)
**Author:** [@hookenful](https://discuss.elastic.co/u/hookenful)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 4:52pm UTC](https://discuss.elastic.co/t/kibana-behind-nginx-relative-path/306764 "2022-06-09T16:52:03Z")
Hi there! Trying to achieve working kibana behing nginx relative path. Mydomain.com/kibana and it is not working. Mine docker-compose.yml kibana: image: reg.registry/only/kibana:7.11.2 environment: - SER… --- ## [Logstash shutdown with no error](https://discuss.elastic.co/t/logstash-shutdown-with-no-error/306807)
**Author:** [@Hosein\_Kashefikaram](https://discuss.elastic.co/u/Hosein_Kashefikaram)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 4:43pm UTC](https://discuss.elastic.co/t/logstash-shutdown-with-no-error/306807 "2022-06-09T16:43:26Z")
I got following messages after starting Logstash Jun 09 10:48:10 local systemd\[1\]: Started logstash. Jun 09 10:48:10 local logstash\[3191\]: Using bundled JDK: /usr/share/logstash/jdk Jun 09 10:48:11 local logstash\[3191\]:… --- ## [How to concatenate two fields using add fields processor in filebeat](https://discuss.elastic.co/t/how-to-concatenate-two-fields-using-add-fields-processor-in-filebeat/306488)
**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\ **Replies:** 13\ **Last updated:** [June 9, 2022, 4:16pm UTC](https://discuss.elastic.co/t/how-to-concatenate-two-fields-using-add-fields-processor-in-filebeat/306488 "2022-06-09T16:16:45Z")
I have 2 fields with one field carrying date value and another field carrying time value. I would like to have a single field with both date and time values concatenated. Could you please suggest? --- ## [\[Spring Data Elasticsearch\] Exception during save regardless of success](https://discuss.elastic.co/t/spring-data-elasticsearch-exception-during-save-regardless-of-success/306813)
**Author:** [@Almost\_Familiar](https://discuss.elastic.co/u/Almost_Familiar)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 3:59pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-exception-during-save-regardless-of-success/306813 "2022-06-09T15:59:21Z")
Hello everyone, we are using version Spring Boot 2.7.0 with Spring Data Elasticsearch, with reactive code. We prefer to make our requests with native queries via the ReactiveElasticsearchOperations interface. For an i… --- ## [Dynamic namespace on APM integration](https://discuss.elastic.co/t/dynamic-namespace-on-apm-integration/306023)
**Author:** [@juliana\_cg](https://discuss.elastic.co/u/juliana_cg)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 3:45pm UTC](https://discuss.elastic.co/t/dynamic-namespace-on-apm-integration/306023 "2022-06-09T15:45:48Z")
Hello, I'm using Fleet and Elastic Agent on ES 7.17.1. Before, we used an apm standalone server and we could decide how to name our indexes thanks to parameters on Elasticsearch output, like this: indices: - inde… --- ## [Average count record per Min using LENS](https://discuss.elastic.co/t/average-count-record-per-min-using-lens/306379)
**Author:** [@dfraz](https://discuss.elastic.co/u/dfraz)\ **Replies:** 3\ **Last updated:** [June 9, 2022, 1:38pm UTC](https://discuss.elastic.co/t/average-count-record-per-min-using-lens/306379 "2022-06-09T13:38:44Z")
I need to calculate the Average count record ( orders ) per Min and then multiply by 60 to get an estimation of orders per hour. Can it be done with LENS ? Thanks in advance --- ## [Need help to configure http output plugin for https](https://discuss.elastic.co/t/need-help-to-configure-http-output-plugin-for-https/306773)
**Author:** [@guillaumeV](https://discuss.elastic.co/u/guillaumeV)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 2:17pm UTC](https://discuss.elastic.co/t/need-help-to-configure-http-output-plugin-for-https/306773 "2022-06-09T14:17:00Z")
Hello i would like to send data via http output plugin (Http output plugin | Logstash Reference \[8.19\] | Elastic) to a https url . I have a very simple example with "https://www.google.com" which is not working is it pos… --- ## [Error executing 'postInstallation': EACCES: permission denied, mkdir '/bitnami/kibana/data'](https://discuss.elastic.co/t/error-executing-postinstallation-eacces-permission-denied-mkdir-bitnami-kibana-data/306798)
**Author:** [@mohamed\_atef](https://discuss.elastic.co/u/mohamed_atef)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 2:03pm UTC](https://discuss.elastic.co/t/error-executing-postinstallation-eacces-permission-denied-mkdir-bitnami-kibana-data/306798 "2022-06-09T14:03:57Z")
i have issue when i try to run kibana on K8S cluster via helm chart Error executing 'postInstallation': EACCES: permission denied, mkdir '/bitnami/kibana/data' --- ## [Grok pattern for snort alerts](https://discuss.elastic.co/t/grok-pattern-for-snort-alerts/306625)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 4\ **Last updated:** [June 9, 2022, 1:54pm UTC](https://discuss.elastic.co/t/grok-pattern-for-snort-alerts/306625 "2022-06-09T13:54:27Z")
HI everyone, Need help constructing grok pattern for the snort alert log file. I have the so far, but the output is incomplete - %{MONTHNUM:month}\\/%{MONTHDAY:day}-%{HOUR:hour}:%{MINUTE:minute}:%{SECOND:second}\\s+\\\[\\\*\\… --- ## [Snapshots in Kibana show failed while running](https://discuss.elastic.co/t/snapshots-in-kibana-show-failed-while-running/306702)
**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\ **Replies:** 2\ **Last updated:** [June 9, 2022, 1:45pm UTC](https://discuss.elastic.co/t/snapshots-in-kibana-show-failed-while-running/306702 "2022-06-09T13:45:04Z")
We upgraded from 7.11 to 7.16.3 and after the upgrade when we run snapshots of indices Kibana will show all the shards failed while the snapshot runs. Then once the snapshot completes it will have updated info and will … --- ## [Packetbeat flooding logs with FindSocketsOfPid errors when on system with short living processes](https://discuss.elastic.co/t/packetbeat-flooding-logs-with-findsocketsofpid-errors-when-on-system-with-short-living-processes/306802)
**Author:** [@Christos\_Arvanitis](https://discuss.elastic.co/u/Christos_Arvanitis)\ **Replies:** 0\ **Last updated:** [June 9, 2022, 1:39pm UTC](https://discuss.elastic.co/t/packetbeat-flooding-logs-with-findsocketsofpid-errors-when-on-system-with-short-living-processes/306802 "2022-06-09T13:39:44Z")
Hello, Due to the error logging here, on systems running many short living processes, we realized that packetbeat is flooding logs with entries like the following: {"log.level":"error","@timestamp":"2022-06-09T15:25:57… --- ## [How to create index name with date and incremental Number](https://discuss.elastic.co/t/how-to-create-index-name-with-date-and-incremental-number/305923)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 3\ **Last updated:** [June 9, 2022, 1:33pm UTC](https://discuss.elastic.co/t/how-to-create-index-name-with-date-and-incremental-number/305923 "2022-06-09T13:33:22Z")
Greetings ..! I want to create index from Logstash. The index name should be (index\_name-2022-05-30-001). And I set a limit to index is 1.5gb, when it exceeds in the same day, the newly created index name should be ind… --- ## [Jira Connector - Version supported](https://discuss.elastic.co/t/jira-connector-version-supported/306801)
**Author:** [@Orlando\_Gonzalez](https://discuss.elastic.co/u/Orlando_Gonzalez)\ **Replies:** 0\ **Last updated:** [June 9, 2022, 1:30pm UTC](https://discuss.elastic.co/t/jira-connector-version-supported/306801 "2022-06-09T13:30:20Z")
Hi everybody We are trying to configure the Jira connector from an ELK 7.15.0, where the Jira Service Desk is Server Onpremise version 4.9.1. So far we have not been able to configure it, can you tell us if this configu… [Previous page](https://discuss.elastic.co/latest.md?page=1094) [Next page](https://discuss.elastic.co/latest.md?page=1096)