# Latest **URL:** https://discuss.elastic.co/latest.md?page=1126 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1127 --- ## [Lens in Kibana 8.2.0 Only Works When Host Machine Connected to Internet](https://discuss.elastic.co/t/lens-in-kibana-8-2-0-only-works-when-host-machine-connected-to-internet/304998)
**Author:** [@eafrost.cissp](https://discuss.elastic.co/u/eafrost.cissp)\ **Replies:** 6\ **Last updated:** [May 18, 2022, 6:09pm UTC](https://discuss.elastic.co/t/lens-in-kibana-8-2-0-only-works-when-host-machine-connected-to-internet/304998 "2022-05-18T18:09:41Z")
I have upgraded my ELK stack on Windows 10 from version 7.71.1 to version 8.2.0. My production machines have no Internet connectivity. Everything works fine except for Lens visualizations in Kibana. I get a blank screen… --- ## [Is there any change in the query-syntax of Elasticsearch?](https://discuss.elastic.co/t/is-there-any-change-in-the-query-syntax-of-elasticsearch/305084)
**Author:** [@Ashrut](https://discuss.elastic.co/u/Ashrut)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 2:42pm UTC](https://discuss.elastic.co/t/is-there-any-change-in-the-query-syntax-of-elasticsearch/305084 "2022-05-18T14:42:19Z")
Hi, everyone. I had written this query when I was using Elasticsearch (5.6). --\> \< { from: params.fetch(:offset), size: params.fetch(:size), \_source: { excludes: \["attachments.\*"\] }, sort: SortB… --- ## [Reindexing error es\_rejected\_execution\_exception](https://discuss.elastic.co/t/reindexing-error-es-rejected-execution-exception/305099)
**Author:** [@luciana](https://discuss.elastic.co/u/luciana)\ **Replies:** 3\ **Last updated:** [May 18, 2022, 5:28pm UTC](https://discuss.elastic.co/t/reindexing-error-es-rejected-execution-exception/305099 "2022-05-18T17:28:54Z")
Both my indices are on the same node. The source has about 200k documents, I'm using AWS and the instance type is "t3.small.search" so 2 vCPUs. I tried slicing already but it just gives me the same error. Any ideas on wh… --- ## [Vega Boxplot - referencing properties in \_source (infinite extent error)](https://discuss.elastic.co/t/vega-boxplot-referencing-properties-in-source-infinite-extent-error/304696)
**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\ **Replies:** 3\ **Last updated:** [May 18, 2022, 5:16pm UTC](https://discuss.elastic.co/t/vega-boxplot-referencing-properties-in-source-infinite-extent-error/304696 "2022-05-18T17:16:52Z")
Hello - In an effort to build a boxplot against my real elastic data, I have started by following this documentation to create a simple boxplot using Vega (v5) in Kibana (v8.0) Instead of using the pre-canned penguins.… --- ## [Http\_poller input and excluding parent json properties for output to elastic](https://discuss.elastic.co/t/http-poller-input-and-excluding-parent-json-properties-for-output-to-elastic/305098)
**Author:** [@dwittner](https://discuss.elastic.co/u/dwittner)\ **Replies:** 1\ **Last updated:** [May 18, 2022, 5:12pm UTC](https://discuss.elastic.co/t/http-poller-input-and-excluding-parent-json-properties-for-output-to-elastic/305098 "2022-05-18T17:12:08Z")
afternoon My poller reads from a source where the array that I wish to be the source of the Elasticsearch output plugin in not the parent and not the only property. How can I either filter appropriately OR instruct the… --- ## [How to filter data in cavas only time filter is there](https://discuss.elastic.co/t/how-to-filter-data-in-cavas-only-time-filter-is-there/304671)
**Author:** [@Ritika123](https://discuss.elastic.co/u/Ritika123)\ **Replies:** 4\ **Last updated:** [May 18, 2022, 5:03pm UTC](https://discuss.elastic.co/t/how-to-filter-data-in-cavas-only-time-filter-is-there/304671 "2022-05-18T17:03:13Z")
unable to apply filter in my canvas workpad only time filter is there --- ## [Reduce the number of shards in my deployment](https://discuss.elastic.co/t/reduce-the-number-of-shards-in-my-deployment/305082)
**Author:** [@lvalladares](https://discuss.elastic.co/u/lvalladares)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 4:57pm UTC](https://discuss.elastic.co/t/reduce-the-number-of-shards-in-my-deployment/305082 "2022-05-18T16:57:36Z")
Hi Folks! I'm developing a search feature on my website and I am using Elastic App Search as the backend for this, in order to do this I am using a small deployment in Elastic Cloud, this has been working right. Right … --- ## [Removing time range from a view in Kibana Canvas](https://discuss.elastic.co/t/removing-time-range-from-a-view-in-kibana-canvas/304950)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 4:43pm UTC](https://discuss.elastic.co/t/removing-time-range-from-a-view-in-kibana-canvas/304950 "2022-05-18T16:43:50Z")
I've been trying out the Canvas and got the problem that I can't remove the time range for a view if I make it on the Select type\>Create tab. Is there anything I'm missing or that's how it is? --- ## [Event analyzer showing error](https://discuss.elastic.co/t/event-analyzer-showing-error/304930)
**Author:** [@okopnik](https://discuss.elastic.co/u/okopnik)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 11:42am UTC](https://discuss.elastic.co/t/event-analyzer-showing-error/304930 "2022-05-17T11:42:45Z")
Hello, We're running an elastic stack consisting of Winlogbeat (7.16.1), Logstash (7.17.2), Elastic (7.17.2) and Kibana (7.17.2) nodes. We tried using the Timeline feature and analyzing events, but it prompts an error … --- ## [Extract CSV Data](https://discuss.elastic.co/t/extract-csv-data/304687)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [May 18, 2022, 4:20pm UTC](https://discuss.elastic.co/t/extract-csv-data/304687 "2022-05-18T16:20:02Z")
Hi, I am attempting to extract more than 1 month's worth of data and put it into a CSV through the discover tab. Unfortunately, when I tried to do that I only get a day's worth of data. Is there any way that you can help… --- ## [How to add image against new custom plugin?](https://discuss.elastic.co/t/how-to-add-image-against-new-custom-plugin/304683)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 1\ **Last updated:** [May 18, 2022, 4:18pm UTC](https://discuss.elastic.co/t/how-to-add-image-against-new-custom-plugin/304683 "2022-05-18T16:18:31Z")
Hi All, I am bit new to kibana custom plugin development. Based on elastic documentation , I have added euiIconType to add image path under "core.application.register()" However , I don't see any icon in kibana along … --- ## [Export Dashboard to pdf](https://discuss.elastic.co/t/export-dashboard-to-pdf/304666)
**Author:** [@marcw](https://discuss.elastic.co/u/marcw)\ **Replies:** 1\ **Last updated:** [May 18, 2022, 4:12pm UTC](https://discuss.elastic.co/t/export-dashboard-to-pdf/304666 "2022-05-18T16:12:58Z")
We use a trial key to test export to pdf functionality. I created a dashboard containing a graph and a datatable. In the dashboard the graph is shown and the full datatable is visible (a few 100 lines). When I create the… --- ## [Best way to parse multiple message patterns](https://discuss.elastic.co/t/best-way-to-parse-multiple-message-patterns/304836)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 7\ **Last updated:** [May 18, 2022, 3:59pm UTC](https://discuss.elastic.co/t/best-way-to-parse-multiple-message-patterns/304836 "2022-05-18T15:59:02Z")
Hello, I want to ask if it is possible to have multiple dissect patterns? I know i can create conditionals based on the "\_dissectfailure" and create another dissect to parse other patterns, but this doesn't prevent the… --- ## [Sorting by Geo Distance with Relevance Score](https://discuss.elastic.co/t/sorting-by-geo-distance-with-relevance-score/304953)
**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\ **Replies:** 6\ **Last updated:** [May 18, 2022, 3:19pm UTC](https://discuss.elastic.co/t/sorting-by-geo-distance-with-relevance-score/304953 "2022-05-18T15:19:04Z")
Hello everyone, I want to sort results according to relevance score and geo distance together. What is the best way to do so? --- ## [Using field value as value in message\[x\]](https://discuss.elastic.co/t/using-field-value-as-value-in-message-x/305035)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 4\ **Last updated:** [May 18, 2022, 2:43pm UTC](https://discuss.elastic.co/t/using-field-value-as-value-in-message-x/305035 "2022-05-18T14:43:47Z")
Hi, I would like to ask that i have field x =\> 0 it was an integer field value and i have a message\[\] array i want to consume the value of x inside the message for example: message\[x\] . here is an example of my code: f… --- ## [Filebeat eats all space on disks when Elastic is down](https://discuss.elastic.co/t/filebeat-eats-all-space-on-disks-when-elastic-is-down/304653)
**Author:** [@yaks-hw](https://discuss.elastic.co/u/yaks-hw)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 2:06pm UTC](https://discuss.elastic.co/t/filebeat-eats-all-space-on-disks-when-elastic-is-down/304653 "2022-05-18T14:06:44Z")
Hello All, Our Elastic instance is down sometimes due to high load and human mistakes (we are in the middle of setting everything fine). When this happens, disks are getting full by Filebeat logs that notifies us that i… --- ## [Filebeat sophos module error: Provided Grok expressions do not match field value](https://discuss.elastic.co/t/filebeat-sophos-module-error-provided-grok-expressions-do-not-match-field-value/304675)
**Author:** [@Joshua\_H](https://discuss.elastic.co/u/Joshua_H)\ **Replies:** 16\ **Last updated:** [May 18, 2022, 1:56pm UTC](https://discuss.elastic.co/t/filebeat-sophos-module-error-provided-grok-expressions-do-not-match-field-value/304675 "2022-05-18T13:56:11Z")
Hello Everyone, I am trying to setup the Filebeat Sophos Module for a Sophos-XG Firewall. Filebeat Output is send directly to Elasticsearch. I enabled the sophos module and the initialized it sucessfully with filebeat… --- ## [Kibana won't start after 8.2.0 upgrade](https://discuss.elastic.co/t/kibana-wont-start-after-8-2-0-upgrade/304881)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [May 18, 2022, 1:52pm UTC](https://discuss.elastic.co/t/kibana-wont-start-after-8-2-0-upgrade/304881 "2022-05-18T13:52:04Z")
I had 8.1.1 running and I upgraded to 8.2.0 this is single node test system. hence I shutdown Elasticsearch and kibana upgrade and start kibana is complaining like this \[2022-05-16T19:33:11.618-05:00\]\[FATAL\]\[root\] Er… --- ## [ElasticAPM SaaS: PHP agent fails to run](https://discuss.elastic.co/t/elasticapm-saas-php-agent-fails-to-run/304758)
**Author:** [@dthapostle](https://discuss.elastic.co/u/dthapostle)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 1:45pm UTC](https://discuss.elastic.co/t/elasticapm-saas-php-agent-fails-to-run/304758 "2022-05-18T13:45:50Z")
I configured Elastic APM agent using Elastic manual: Set up the Agent | APM PHP Agent Reference \[1.x\] | Elastic I configured PHP 7.4 to use elastic\_apm.so and restarted PHP-FPM. It fails on every start/connectoin: -- A… --- ## [Kibana get 502 Bad Gateway](https://discuss.elastic.co/t/kibana-get-502-bad-gateway/304989)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 1:38pm UTC](https://discuss.elastic.co/t/kibana-get-502-bad-gateway/304989 "2022-05-18T13:38:10Z")
Kibana status is active, but the webpage shows me 502 Bad Gateway. I checked the kibana.log. Here are the error message: {"type":"log","@timestamp":"2022-05-17T18:56:18+00:00","tags":\["error","savedobjects-service"\],"pi… --- ## [Lens not working](https://discuss.elastic.co/t/lens-not-working/305041)
**Author:** [@adis3421](https://discuss.elastic.co/u/adis3421)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 1:21pm UTC](https://discuss.elastic.co/t/lens-not-working/305041 "2022-05-18T13:21:42Z")
Hi, After update kibana from 8.1.2 to 8.2 When i try to create new visualization in Lens option nothing showing. On Oracle Linux 8.4 --- ## [Not Getting Logs in Elastic Stack](https://discuss.elastic.co/t/not-getting-logs-in-elastic-stack/305025)
**Author:** [@Rajesh119](https://discuss.elastic.co/u/Rajesh119)\ **Replies:** 19\ **Last updated:** [May 18, 2022, 1:13pm UTC](https://discuss.elastic.co/t/not-getting-logs-in-elastic-stack/305025 "2022-05-18T13:13:37Z")
Hi, i recently install latest version of elastic stack(Elasticsearch, kibana, logstash and filebeat) but iam not getting logs in elastic stack. please any one help me. curl -X GET "localhost:9200/\_cat/indices?v" outp… --- ## [Script alerts](https://discuss.elastic.co/t/script-alerts/305056)
**Author:** [@bdaniel7](https://discuss.elastic.co/u/bdaniel7)\ **Replies:** 1\ **Last updated:** [May 18, 2022, 1:02pm UTC](https://discuss.elastic.co/t/script-alerts/305056 "2022-05-18T13:02:26Z")
Hi, Is it possible to define alerts as Painless scripts? So I don't have to use the web interface on each environment where I install ELK? --- ## [Elastic Agent Custom Windows Event Logs](https://discuss.elastic.co/t/elastic-agent-custom-windows-event-logs/304485)
**Author:** [@Joshua\_H](https://discuss.elastic.co/u/Joshua_H)\ **Replies:** 4\ **Last updated:** [May 18, 2022, 12:55pm UTC](https://discuss.elastic.co/t/elastic-agent-custom-windows-event-logs/304485 "2022-05-18T12:55:53Z")
Hello everyone, I am struggling to add custom Windows Event Logs to my Elastic-Agents / my Agent-Policy and make it work. For example I would like to ingest Elasticsearch with Event Logs from the Serverrole Remotedeskt… --- ## [New Java API client BulkRequest lacks documentation/features](https://discuss.elastic.co/t/new-java-api-client-bulkrequest-lacks-documentation-features/304809)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 12:55pm UTC](https://discuss.elastic.co/t/new-java-api-client-bulkrequest-lacks-documentation-features/304809 "2022-05-18T12:55:35Z")
Can somebody show me a more elaborate example of using the new Java API BulkRequest? I used to be able to set things like bulk size, bulk actions, concurrent requests,... I already took a look at elasticsearch-java/Requ… --- ## [O365 authentication details shows up after 2 hr in kibana](https://discuss.elastic.co/t/o365-authentication-details-shows-up-after-2-hr-in-kibana/305062)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 12:47pm UTC](https://discuss.elastic.co/t/o365-authentication-details-shows-up-after-2-hr-in-kibana/305062 "2022-05-18T12:47:58Z")
Hi Experts, I added the O365 integration in elastic 8.2 with all default Content types enabled to monitor the successful/failure login details ; However when I was testing the possible test cases, I noticed that If I l… --- ## [How do I connect logstash with ES?](https://discuss.elastic.co/t/how-do-i-connect-logstash-with-es/304797)
**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 12:00pm UTC](https://discuss.elastic.co/t/how-do-i-connect-logstash-with-es/304797 "2022-05-18T12:00:43Z")
Hi! What do I have to do? Something like Elasticsearch-users useradd ? And add some roles? Best Andy --- ## [Remove fields based on a regex in the ingest pipeline](https://discuss.elastic.co/t/remove-fields-based-on-a-regex-in-the-ingest-pipeline/304447)
**Author:** [@Althea\_Vestrit](https://discuss.elastic.co/u/Althea_Vestrit)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 11:23am UTC](https://discuss.elastic.co/t/remove-fields-based-on-a-regex-in-the-ingest-pipeline/304447 "2022-05-18T11:23:23Z")
Hello, I use elastic-agents to save docker logs by using the "Custom logs" integration. When uploading logs, fields are added according to the labels of the different containers from which the logs are retrieved. Howe… --- ## [Filebeat topics with 'when' conditions](https://discuss.elastic.co/t/filebeat-topics-with-when-conditions/305054)
**Author:** [@juliang](https://discuss.elastic.co/u/juliang)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 11:20am UTC](https://discuss.elastic.co/t/filebeat-topics-with-when-conditions/305054 "2022-05-18T11:20:13Z")
Hi there, I have the below defined in my output.kafka section topics: - topic: "my-topic" when: and: - equals: kubernetes.namespace: "test" - has\_… --- ## [What's the limit of specified values on a DLS filter?](https://discuss.elastic.co/t/whats-the-limit-of-specified-values-on-a-dls-filter/305050)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 10:52am UTC](https://discuss.elastic.co/t/whats-the-limit-of-specified-values-on-a-dls-filter/305050 "2022-05-18T10:52:15Z")
Hi! I need to perform a query on a set of specified values, and for that I'm using a filter with a manually defined DSL query such as this one (this is an example recommended in another thread that works fine): { "que… [Previous page](https://discuss.elastic.co/latest.md?page=1125) [Next page](https://discuss.elastic.co/latest.md?page=1127)