# Latest **URL:** https://discuss.elastic.co/latest.md?page=1103 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1104 --- ## [Lens Table: increase limit on number of values](https://discuss.elastic.co/t/lens-table-increase-limit-on-number-of-values/306268)
**Author:** [@nikaes](https://discuss.elastic.co/u/nikaes)\ **Replies:** 1\ **Last updated:** [June 4, 2022, 2:34pm UTC](https://discuss.elastic.co/t/lens-table-increase-limit-on-number-of-values/306268 "2022-06-04T14:34:48Z")
Hi All, in may case I would like to show the top values of about 1500 elements. There is a limit on the 'number of values' though: Any chance to increase this limit on Kibana 8.2 ? Elasticsearch accepts queries wa… --- ## [My elasticsearch cannot execute "'/tmp/elastic-certificates.p12' already exists"](https://discuss.elastic.co/t/my-elasticsearch-cannot-execute-tmp-elastic-certificates-p12-already-exists/306383)
**Author:** [@rockers](https://discuss.elastic.co/u/rockers)\ **Replies:** 0\ **Last updated:** [June 4, 2022, 12:00pm UTC](https://discuss.elastic.co/t/my-elasticsearch-cannot-execute-tmp-elastic-certificates-p12-already-exists/306383 "2022-06-04T12:00:28Z")
I used an ansible script to run this Elasticsearch because i changed jvm.options using ram xs512m so i run this sctipt again which means it shows this error so its already created so how can i remove it and create it aga… --- ## [ES master only works and 2 other nodes get empty cluster id](https://discuss.elastic.co/t/es-master-only-works-and-2-other-nodes-get-empty-cluster-id/305827)
**Author:** [@rockers](https://discuss.elastic.co/u/rockers)\ **Replies:** 4\ **Last updated:** [June 4, 2022, 11:50am UTC](https://discuss.elastic.co/t/es-master-only-works-and-2-other-nodes-get-empty-cluster-id/305827 "2022-06-04T11:50:53Z")
i created 3 ES machines in virtualbox 1 master1 1 data1 1 data2 my master01 only get cluster\_uuid two other nodes failed "cluster\_uuid": "\_na\_"" master cluster.name: mycluster node.name: master1 path.data: /var/li… --- ## [Filebeat - Update Index Template and create new index](https://discuss.elastic.co/t/filebeat-update-index-template-and-create-new-index/306003)
**Author:** [@Hardik\_Sanghavi](https://discuss.elastic.co/u/Hardik_Sanghavi)\ **Replies:** 3\ **Last updated:** [June 4, 2022, 11:41am UTC](https://discuss.elastic.co/t/filebeat-update-index-template-and-create-new-index/306003 "2022-06-04T11:41:16Z")
Hello, I am new to Filebeat. I used the standard configuration setup for filebeat and got it to ship data to Elasticsearch. I have added some custom fields and they automatically got the "keyword" type. I changed the… --- ## [java.lang.IllegalArgumentException: unknown setting \[node.roles\] please check that any required plugins are installed](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-node-roles-please-check-that-any-required-plugins-are-installed/247121)
**Author:** [@snehadarshini](https://discuss.elastic.co/u/snehadarshini)\ **Replies:** 7\ **Last updated:** [June 4, 2022, 11:12am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-unknown-setting-node-roles-please-check-that-any-required-plugins-are-installed/247121 "2022-06-04T11:12:52Z")
Added node.roles: \[ master \] in elasticsearch.yml configuration. Index or shard allocation is not done yet. Using 7.8.1 version of elastic search. However on starting the node I get the below exception Caused by: java.la… --- ## [How to remove discovery.zen.ping.unicasts completely](https://discuss.elastic.co/t/how-to-remove-discovery-zen-ping-unicasts-completely/306344)
**Author:** [@garry12](https://discuss.elastic.co/u/garry12)\ **Replies:** 2\ **Last updated:** [June 4, 2022, 10:11am UTC](https://discuss.elastic.co/t/how-to-remove-discovery-zen-ping-unicasts-completely/306344 "2022-06-04T10:11:08Z")
I am running a Elasticsearch 7.2 version and I had a property defined in my Elasticsearch.yml file that is - discovery.zen.ping.unicast.hosts: \[IP1, IP2....\] but obviously when I read the documentation I see that this d… --- ## [How to use call chain plugin in kibana 7.9](https://discuss.elastic.co/t/how-to-use-call-chain-plugin-in-kibana-7-9/306377)
**Author:** [@Arifullah](https://discuss.elastic.co/u/Arifullah)\ **Replies:** 0\ **Last updated:** [June 4, 2022, 9:28am UTC](https://discuss.elastic.co/t/how-to-use-call-chain-plugin-in-kibana-7-9/306377 "2022-06-04T09:28:54Z")
How to use call chain plugin in kibana 7.9 --- ## [Unable to authenticate user after password creation](https://discuss.elastic.co/t/unable-to-authenticate-user-after-password-creation/306359)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 2\ **Last updated:** [June 4, 2022, 8:39am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-after-password-creation/306359 "2022-06-04T08:39:48Z")
I have created Elasticsearch built-in users password with: bin/elasticsearch-setup-passwords interactive I set for every user password asdfasdf. All successfuly: Initiating the setup of passwords for reserved users el… --- ## ["Empty client certificate chain" error stops inter-node handshake using wildcard certs](https://discuss.elastic.co/t/empty-client-certificate-chain-error-stops-inter-node-handshake-using-wildcard-certs/306278)
**Author:** [@Anil\_Kumar\_2003](https://discuss.elastic.co/u/Anil_Kumar_2003)\ **Replies:** 1\ **Last updated:** [June 4, 2022, 6:02am UTC](https://discuss.elastic.co/t/empty-client-certificate-chain-error-stops-inter-node-handshake-using-wildcard-certs/306278 "2022-06-04T06:02:58Z")
Hi Team, I need help securing ES inter-node communication. Environment Details: ES version: 7.14.1, cluster with 2 nodes (reduced size to get to the root cause) Java: openjdk-16.0.2 OS: Ubuntu 20.02 JVM options: al… --- ## [Read column of datatype "JSON" from database using Logstash](https://discuss.elastic.co/t/read-column-of-datatype-json-from-database-using-logstash/306369)
**Author:** [@bhavani\_nandakumar](https://discuss.elastic.co/u/bhavani_nandakumar)\ **Replies:** 0\ **Last updated:** [June 3, 2022, 10:31pm UTC](https://discuss.elastic.co/t/read-column-of-datatype-json-from-database-using-logstash/306369 "2022-06-03T22:31:24Z")
I have developed a script to read table from Postgres Database and load the data in a json format inside Kafka topic. The problem is one of the columns (cust\_record) in the table is JSON type and I could not read that co… --- ## [How to slow down output ingestion rate with logstash?](https://discuss.elastic.co/t/how-to-slow-down-output-ingestion-rate-with-logstash/306363)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 2\ **Last updated:** [June 3, 2022, 9:26pm UTC](https://discuss.elastic.co/t/how-to-slow-down-output-ingestion-rate-with-logstash/306363 "2022-06-03T21:26:09Z")
Hello, I've millions of records in Elasticsearch and sending outputs as individual files using file output plugin. I've noticed logstash extraction rate is high and used a sleep plugin to slow down after every few secs… --- ## [Not able to run elasticsearch after installing tls demo certificate(search guard)](https://discuss.elastic.co/t/not-able-to-run-elasticsearch-after-installing-tls-demo-certificate-search-guard/306335)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 1\ **Last updated:** [June 3, 2022, 9:23pm UTC](https://discuss.elastic.co/t/not-able-to-run-elasticsearch-after-installing-tls-demo-certificate-search-guard/306335 "2022-06-03T21:23:50Z")
i have metioned the error code below: \[2022-06-03T13:18:26,086\]\[WARN \]\[o.e.d.PeerFinder \] \[node-2\] address \[1.xx.xx9.xxx:9xx\], node \[null\], requesting \[false\] connection failed: \[1.xx.xx9.xxx:9xx\] general node connectio… --- ## [Compare unstructured texts with conditions within one index](https://discuss.elastic.co/t/compare-unstructured-texts-with-conditions-within-one-index/306367)
**Author:** [@Rubyfan](https://discuss.elastic.co/u/Rubyfan)\ **Replies:** 0\ **Last updated:** [June 3, 2022, 8:55pm UTC](https://discuss.elastic.co/t/compare-unstructured-texts-with-conditions-within-one-index/306367 "2022-06-03T20:55:26Z")
Hi, The use case is that we want to see what is the difference between two unstructured text contents(transcripts) within one index. These two text contents will be selected based on filters(different time ranges; diffe… --- ## [CSV data enrichment with Geolocation](https://discuss.elastic.co/t/csv-data-enrichment-with-geolocation/306354)
**Author:** [@Vitaliy.N](https://discuss.elastic.co/u/Vitaliy.N)\ **Replies:** 4\ **Last updated:** [June 3, 2022, 8:18pm UTC](https://discuss.elastic.co/t/csv-data-enrichment-with-geolocation/306354 "2022-06-03T20:18:04Z")
Hello, I am just starting with Elk stack and need a nudge in the right direction. Is there a way to convert string address into a longitude and latitude coordinates and add them back to CSV file using Logstash? Or does … --- ## [Where can I access the logs sent to Elasticsearch?](https://discuss.elastic.co/t/where-can-i-access-the-logs-sent-to-elasticsearch/306259)
**Author:** [@BenGur](https://discuss.elastic.co/u/BenGur)\ **Replies:** 3\ **Last updated:** [June 3, 2022, 6:35pm UTC](https://discuss.elastic.co/t/where-can-i-access-the-logs-sent-to-elasticsearch/306259 "2022-06-03T18:35:00Z")
Hello, I am trying to access the log files sent to Elasticsearch outside of the Kibana browser but don't know where to find them. I am running Elasticsearch on a remote CentOS 7 server with another AWS CentOS 7 server … --- ## [Remove or Reinstall Fleet Server](https://discuss.elastic.co/t/remove-or-reinstall-fleet-server/306346)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 0\ **Last updated:** [June 3, 2022, 4:49pm UTC](https://discuss.elastic.co/t/remove-or-reinstall-fleet-server/306346 "2022-06-03T16:49:01Z")
Hi there, I would like to know if there´s a way to remove or reinstall fleet server in another linux server box? Thanks for the attention --- ## [Out of the Box ML jobs for Security](https://discuss.elastic.co/t/out-of-the-box-ml-jobs-for-security/305162)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 3\ **Last updated:** [June 3, 2022, 3:41pm UTC](https://discuss.elastic.co/t/out-of-the-box-ml-jobs-for-security/305162 "2022-06-03T15:41:42Z")
Good Morning, I am looking for help/advice in regards to using the out of the box ML jobs. Specifically, some of the jobs that are underlying SIEM detections. I have an environment with 4500 hosts sending endpoint data … --- ## [Diagram gantt](https://discuss.elastic.co/t/diagram-gantt/306316)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 1\ **Last updated:** [June 3, 2022, 3:02pm UTC](https://discuss.elastic.co/t/diagram-gantt/306316 "2022-06-03T15:02:57Z")
Hello everyone, I need help to make a gantt chart. I have in my data the date of my appointments and the duration of each one. How is it possible to make a gantt chart from this? Thank you in advance for your help --- ## [Formula to show percentage on gauge showing wrong values](https://discuss.elastic.co/t/formula-to-show-percentage-on-gauge-showing-wrong-values/306283)
**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\ **Replies:** 2\ **Last updated:** [June 3, 2022, 3:01pm UTC](https://discuss.elastic.co/t/formula-to-show-percentage-on-gauge-showing-wrong-values/306283 "2022-06-03T15:01:43Z")
Formula to show percentage or division on gauge showing wrong values I have used below advanced json formula but its showing zero. Please help and let me know the correct method to find percentage . I need (sum of … --- ## [Rally 7.9.2 is not supported?](https://discuss.elastic.co/t/rally-7-9-2-is-not-supported/306331)
**Author:** [@Gsqsf](https://discuss.elastic.co/u/Gsqsf)\ **Replies:** 9\ **Last updated:** [June 3, 2022, 2:40pm UTC](https://discuss.elastic.co/t/rally-7-9-2-is-not-supported/306331 "2022-06-03T14:40:13Z")
Elasticsearch.exceptions.UnsupportedProductError: The client noticed that the server is not a supported distribution of Elasticsearch The Elasticsearch server version is 7.9.2. Tagline is "You Know, for Search" build\_… --- ## [Looking to get only the latest records from the index](https://discuss.elastic.co/t/looking-to-get-only-the-latest-records-from-the-index/306205)
**Author:** [@Mohamed\_Naufal](https://discuss.elastic.co/u/Mohamed_Naufal)\ **Replies:** 7\ **Last updated:** [June 3, 2022, 2:02pm UTC](https://discuss.elastic.co/t/looking-to-get-only-the-latest-records-from-the-index/306205 "2022-06-03T14:02:17Z")
Hi Community, I'm currently working on Elasticsearch and looking for an option to retrieve only the latest records from the index. Let me break down this query, We're using AWS Data Stream to load the logs and then, i… --- ## [Kibana Canvas disable link based on value](https://discuss.elastic.co/t/kibana-canvas-disable-link-based-on-value/303926)
**Author:** [@Bigbad](https://discuss.elastic.co/u/Bigbad)\ **Replies:** 2\ **Last updated:** [June 3, 2022, 1:25pm UTC](https://discuss.elastic.co/t/kibana-canvas-disable-link-based-on-value/303926 "2022-06-03T13:25:33Z")
Hello, Is it possible to disable a link of canvas Text Element based on search value ? For example if value=1, link is supposed to be not clickable. Thank You --- ## [Filebeat service is not starting in debian docker image](https://discuss.elastic.co/t/filebeat-service-is-not-starting-in-debian-docker-image/306340)
**Author:** [@Kumar\_Nikhil](https://discuss.elastic.co/u/Kumar_Nikhil)\ **Replies:** 0\ **Last updated:** [June 3, 2022, 1:08pm UTC](https://discuss.elastic.co/t/filebeat-service-is-not-starting-in-debian-docker-image/306340 "2022-06-03T13:08:07Z")
We are trying to install filebeat in debian docker image. NAME="Debian GNU/Linux" VERSION\_ID="9" VERSION="9 (stretch)" ID=debian HOME\_URL=" Its successfully building the image. But when we run the image and check f… --- ## [Lucene (Or KQL) query to filter current day of week](https://discuss.elastic.co/t/lucene-or-kql-query-to-filter-current-day-of-week/306339)
**Author:** [@vincent2mots](https://discuss.elastic.co/u/vincent2mots)\ **Replies:** 0\ **Last updated:** [June 3, 2022, 1:06pm UTC](https://discuss.elastic.co/t/lucene-or-kql-query-to-filter-current-day-of-week/306339 "2022-06-03T13:06:38Z")
Hi there! I have some data on Elasticsearch with a datetime field. I would like to filter all the data where the dayofweek is the same as today's... this way, I would be able to get all friday's data, saturday's data, … --- ## [Elastic search restore](https://discuss.elastic.co/t/elastic-search-restore/306329)
**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\ **Replies:** 4\ **Last updated:** [June 3, 2022, 1:00pm UTC](https://discuss.elastic.co/t/elastic-search-restore/306329 "2022-06-03T13:00:59Z")
Hi , I am new at Elasticsearch and have some doubts regarding restore , as the documentation is not very thorough on these points . Let us say i make some changes every time to my index and take a snapshot , now the n… --- ## [Aletring based on anomaly duration](https://discuss.elastic.co/t/aletring-based-on-anomaly-duration/305300)
**Author:** [@AmS](https://discuss.elastic.co/u/AmS)\ **Replies:** 5\ **Last updated:** [June 3, 2022, 12:55pm UTC](https://discuss.elastic.co/t/aletring-based-on-anomaly-duration/305300 "2022-06-03T12:55:31Z")
Hello, I m using Kibana machine Learning for anomaly detection. Also using « watcher » for sending email when anomaly has been detceted by the ML. I don’t want to send an email for each anomaly but just for continuous… --- ## [Parse Array and Send to Elastic Filter](https://discuss.elastic.co/t/parse-array-and-send-to-elastic-filter/306271)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 2\ **Last updated:** [June 3, 2022, 12:54pm UTC](https://discuss.elastic.co/t/parse-array-and-send-to-elastic-filter/306271 "2022-06-03T12:54:23Z")
Hello, I have an array of strings which I'd like to send nested object to an Elasticsearch filter to obtain additional data in a separately stored index. I've been searching for an approach to this but I cannot seem to … --- ## [Filebeat harvest logs from encyrpted file](https://discuss.elastic.co/t/filebeat-harvest-logs-from-encyrpted-file/306025)
**Author:** [@florinsfetea](https://discuss.elastic.co/u/florinsfetea)\ **Replies:** 2\ **Last updated:** [June 3, 2022, 12:53pm UTC](https://discuss.elastic.co/t/filebeat-harvest-logs-from-encyrpted-file/306025 "2022-06-03T12:53:39Z")
Hello people, how would one go about collecting logs from an encrypted log file that has to be first decrypted I have some /var/log/my\_encrypted\_log.log to read this I have to pipe the contents to an binary that decry… --- ## [Can Auditbeat file integrity module detect unmount and mount of CIFS filesystem](https://discuss.elastic.co/t/can-auditbeat-file-integrity-module-detect-unmount-and-mount-of-cifs-filesystem/306336)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 0\ **Last updated:** [June 3, 2022, 12:52pm UTC](https://discuss.elastic.co/t/can-auditbeat-file-integrity-module-detect-unmount-and-mount-of-cifs-filesystem/306336 "2022-06-03T12:52:23Z")
Hi Community, Can I use the Auditbeat file integrity module to detect if a share (Windows and CIFS) is mounted and unmounted? Any risc of Auditbeat to block unmounting the share? Best regards Flemming --- ## [EQL For Visualizations or Lens](https://discuss.elastic.co/t/eql-for-visualizations-or-lens/306326)
**Author:** [@Silver137](https://discuss.elastic.co/u/Silver137)\ **Replies:** 1\ **Last updated:** [June 3, 2022, 12:41pm UTC](https://discuss.elastic.co/t/eql-for-visualizations-or-lens/306326 "2022-06-03T12:41:22Z")
¿It's posible to use EQL querys to draw Visualizations on Kibana, similarely Lens or other Visualizations do? [Previous page](https://discuss.elastic.co/latest.md?page=1102) [Next page](https://discuss.elastic.co/latest.md?page=1104)