# Latest **URL:** https://discuss.elastic.co/latest.md?page=1234 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1235 --- ## [Newb/learner floundering](https://discuss.elastic.co/t/newb-learner-floundering/298216)
**Author:** [@mrodent](https://discuss.elastic.co/u/mrodent)\ **Replies:** 3\ **Last updated:** [March 2, 2022, 11:44pm UTC](https://discuss.elastic.co/t/newb-learner-floundering/298216 "2022-03-02T23:44:37Z")
When I say newb, I have in fact developed a couple of minor apps which use the most basic aspects of creating an ES index and then searching it (in Python). The resource I might naturally expect to go to, with v 7.16 cu… --- ## [Trying to get my docker-compose to start Kibana with ssl](https://discuss.elastic.co/t/trying-to-get-my-docker-compose-to-start-kibana-with-ssl/296568)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 8\ **Last updated:** [March 2, 2022, 11:26pm UTC](https://discuss.elastic.co/t/trying-to-get-my-docker-compose-to-start-kibana-with-ssl/296568 "2022-03-02T23:26:44Z")
Hi All I'm trying to set up my kibana to use SSL for 7.16.3, like I set up Elasticsearch. So I used this guide : Encrypting communications in an Elasticsearch Docker Container | Elasticsearch Guide \[7.17\] | Elastic to… --- ## [Update by query with index alias](https://discuss.elastic.co/t/update-by-query-with-index-alias/298610)
**Author:** [@Metheny](https://discuss.elastic.co/u/Metheny)\ **Replies:** 3\ **Last updated:** [March 2, 2022, 11:09pm UTC](https://discuss.elastic.co/t/update-by-query-with-index-alias/298610 "2022-03-02T23:09:09Z")
In the Alias documentation it says that write operations aren't allowed on index alias and that it would return an error: If an alias points to multiple indices or data streams and is\_write\_index isn’t set, the alias r… --- ## [How long does it usually take for another master candidate to be elected?](https://discuss.elastic.co/t/how-long-does-it-usually-take-for-another-master-candidate-to-be-elected/298617)
**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 11:08pm UTC](https://discuss.elastic.co/t/how-long-does-it-usually-take-for-another-master-candidate-to-be-elected/298617 "2022-03-02T23:08:07Z")
I have a cluster like below. node1 master-node : master(true), data(false) data-node-1 : master(true), data(true) node2 data-node-2 : master(true), data(true) node3 data-node-3 : master(false), data(true) When th… --- ## [Elasticsearch node limitations and scaling](https://discuss.elastic.co/t/elasticsearch-node-limitations-and-scaling/298594)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 11:07pm UTC](https://discuss.elastic.co/t/elasticsearch-node-limitations-and-scaling/298594 "2022-03-02T23:07:27Z")
Hi, I'm having some anomalies with my 3 nodes cluster, my nodes have some instability, I keep losing a node each time and sometimes the cluster take long time to recover, but i'm not sure if the root cause is a cluster … --- ## [Elasticsearch.yml after startup is not showing in RHEL 8](https://discuss.elastic.co/t/elasticsearch-yml-after-startup-is-not-showing-in-rhel-8/298680)
**Author:** [@CoreyCBurton](https://discuss.elastic.co/u/CoreyCBurton)\ **Replies:** 5\ **Last updated:** [March 2, 2022, 11:02pm UTC](https://discuss.elastic.co/t/elasticsearch-yml-after-startup-is-not-showing-in-rhel-8/298680 "2022-03-02T23:02:39Z")
I have installed Elasticsearch on RHEL 8. I followed this guide below. Everything went smoothly and I started the service. I am trying to edit the Elasticsearch.yml and I can't seem to find it. I am also trying to tu… --- ## [Netflow - Qos Channels](https://discuss.elastic.co/t/netflow-qos-channels/298681)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 0\ **Last updated:** [March 2, 2022, 10:45pm UTC](https://discuss.elastic.co/t/netflow-qos-channels/298681 "2022-03-02T22:45:38Z")
Hi, I want to know if the filebeat module Netflow, has monitor of channels Qos?? Regards, --- ## [Incomplete number of total integrations under "Browse Integrations"](https://discuss.elastic.co/t/incomplete-number-of-total-integrations-under-browse-integrations/298675)
**Author:** [@sfinxone](https://discuss.elastic.co/u/sfinxone)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 9:13pm UTC](https://discuss.elastic.co/t/incomplete-number-of-total-integrations-under-browse-integrations/298675 "2022-03-02T21:13:13Z")
Hi, I'm having a weird issue with an ELK deployment on a particular system. After starting and configuring Elasticsearch and Kibana, I don't get the complete list of integrations under "browse integrations". I am getting… --- ## [Kibana- Unable to Retrieve Version information from Elasticsearch](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch/298673)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 8:25pm UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch/298673 "2022-03-02T20:25:36Z")
Hi, I am using 8.0.0 for Elasticsearch and Kibana, with a docker-compose set up. Elasticsearch is running with no issues, how I do get the title message error. Error: \[ERROR\]\[elasticsearch-service\] Unable to retrieve v… --- ## [Correct way to only include specific sharepoint sites in Workpspace search](https://discuss.elastic.co/t/correct-way-to-only-include-specific-sharepoint-sites-in-workpspace-search/298335)
**Author:** [@Robin\_Vanderschueren](https://discuss.elastic.co/u/Robin_Vanderschueren)\ **Replies:** 5\ **Last updated:** [March 2, 2022, 9:00pm UTC](https://discuss.elastic.co/t/correct-way-to-only-include-specific-sharepoint-sites-in-workpspace-search/298335 "2022-03-02T21:00:29Z")
I've configured the workspace search following this guide: Customize indexing for a content source | Workplace Search Guide \[8.4\] | Elastic This resulted for me in the following rule: "default\_action": "include… --- ## [Can't seem to use socket dataset on rocky linux](https://discuss.elastic.co/t/cant-seem-to-use-socket-dataset-on-rocky-linux/298102)
**Author:** [@jhbigler](https://discuss.elastic.co/u/jhbigler)\ **Replies:** 7\ **Last updated:** [March 2, 2022, 9:00pm UTC](https://discuss.elastic.co/t/cant-seem-to-use-socket-dataset-on-rocky-linux/298102 "2022-03-02T21:00:08Z")
Auditbeat version: 7.15.2 Operating system: Rocky Linux (4.18.0-348.12.2.el8\_5.x86\_64) My issue is similar to the one discussed here, but the fixes that were put in 7.10 do not work here. Commenting out the socket data… --- ## [Core vs extended field regarding a mutate error](https://discuss.elastic.co/t/core-vs-extended-field-regarding-a-mutate-error/298653)
**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\ **Replies:** 3\ **Last updated:** [March 2, 2022, 8:24pm UTC](https://discuss.elastic.co/t/core-vs-extended-field-regarding-a-mutate-error/298653 "2022-03-02T20:24:25Z")
I'm getting a mutate error where the "host" value is being set to the "device\_hostname"but was wondering if it's because one is a core field and the other is an extended field? Here is what is being applied in my filter… --- ## [Elastic Agent enrolls but stuck in UPDATING status - not related to upgrade](https://discuss.elastic.co/t/elastic-agent-enrolls-but-stuck-in-updating-status-not-related-to-upgrade/298668)
**Author:** [@kfs](https://discuss.elastic.co/u/kfs)\ **Replies:** 0\ **Last updated:** [March 2, 2022, 7:37pm UTC](https://discuss.elastic.co/t/elastic-agent-enrolls-but-stuck-in-updating-status-not-related-to-upgrade/298668 "2022-03-02T19:37:06Z")
I have an issue with freshly deployed sytem: after (successfully) installing and enrolling agent to fleet, the agent status is foreverin UPDATING state and it appears to be not running, although the service is in running… --- ## [Using a Counter to Flexibly Return to Most Recent Data in Dashboard](https://discuss.elastic.co/t/using-a-counter-to-flexibly-return-to-most-recent-data-in-dashboard/298575)
**Author:** [@clibassi](https://discuss.elastic.co/u/clibassi)\ **Replies:** 2\ **Last updated:** [March 2, 2022, 7:14pm UTC](https://discuss.elastic.co/t/using-a-counter-to-flexibly-return-to-most-recent-data-in-dashboard/298575 "2022-03-02T19:14:01Z")
Cross posting this from a r/kibana post I made that has yet to receive any responses Maybe a bit of an oddball question here. I have a workflow that automatically downloads data from a federal website each week, process… --- ## [Elastic Search Lowercase analyser does not return search result](https://discuss.elastic.co/t/elastic-search-lowercase-analyser-does-not-return-search-result/298662)
**Author:** [@Leo\_Baby\_Jacob](https://discuss.elastic.co/u/Leo_Baby_Jacob)\ **Replies:** 0\ **Last updated:** [March 2, 2022, 6:47pm UTC](https://discuss.elastic.co/t/elastic-search-lowercase-analyser-does-not-return-search-result/298662 "2022-03-02T18:47:39Z")
I have a text based index like below. I am trying to maintain both exact search and ambiguous search based on tokens based on user input. While text based search works fine(partial search) when it comes to term search it… --- ## [How to make ILM work in ES v 7.10.0](https://discuss.elastic.co/t/how-to-make-ilm-work-in-es-v-7-10-0/298619)
**Author:** [@Vikrant\_Aggarwal](https://discuss.elastic.co/u/Vikrant_Aggarwal)\ **Replies:** 5\ **Last updated:** [March 2, 2022, 6:37pm UTC](https://discuss.elastic.co/t/how-to-make-ilm-work-in-es-v-7-10-0/298619 "2022-03-02T18:37:37Z")
Hello Team, May be a naive query but I couldn't find information on this topic. Issuing: GET \_ilm/status giving me the following error: { "error" : "Incorrect HTTP method for uri \[/\_ilm/status?pretty=true\] and meth… --- ## [Delete previous document](https://discuss.elastic.co/t/delete-previous-document/298602)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 6:35pm UTC](https://discuss.elastic.co/t/delete-previous-document/298602 "2022-03-02T18:35:15Z")
Hi i have jdbc input run every min and i want to delete the previous document that inserted in the index once the schedule run how the logstash structure will be ? --- ## [Disable response logging (access log) in Kibana \[7.16.3\]](https://discuss.elastic.co/t/disable-response-logging-access-log-in-kibana-7-16-3/297889)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 4\ **Last updated:** [March 2, 2022, 6:15pm UTC](https://discuss.elastic.co/t/disable-response-logging-access-log-in-kibana-7-16-3/297889 "2022-03-02T18:15:59Z")
Hi, everyone I have configured Kibana 7.16.3 logging in order not to be so verbose. Here you are an example: logging: root: level: error However, I would like to disable response information: {"type":"response"… --- ## [Help for parsing with Grok filter](https://discuss.elastic.co/t/help-for-parsing-with-grok-filter/298635)
**Author:** [@ASRLO](https://discuss.elastic.co/u/ASRLO)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 6:13pm UTC](https://discuss.elastic.co/t/help-for-parsing-with-grok-filter/298635 "2022-03-02T18:13:28Z")
Hello, I would like to split my message field on my logs but I don't master the grok filter at all, can you suggest a split? Here is the message field to cut: Windows Installer a reconfiguré le produit. Nom du produit… --- ## [Fleet automatic import visualizations and dashboards by default](https://discuss.elastic.co/t/fleet-automatic-import-visualizations-and-dashboards-by-default/297915)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 3:00pm UTC](https://discuss.elastic.co/t/fleet-automatic-import-visualizations-and-dashboards-by-default/297915 "2022-02-22T15:00:25Z")
Hi, everyone I have just upgraded from Kibana 7.9.2 to Kibana 7.16.3 and I have realised that Kibana has imported some index-patterns, visualizations and dashboards after entering in Fleet section. Index Pattern screen… --- ## [Issues with NXLog log rotation and Filebeat](https://discuss.elastic.co/t/issues-with-nxlog-log-rotation-and-filebeat/297952)
**Author:** [@ganesh\_tarone](https://discuss.elastic.co/u/ganesh_tarone)\ **Replies:** 3\ **Last updated:** [March 2, 2022, 5:14pm UTC](https://discuss.elastic.co/t/issues-with-nxlog-log-rotation-and-filebeat/297952 "2022-03-02T17:14:03Z")
I am using NXLog to output some events to a .json file. Basically, I'm using nxlog filecycle() method (find more here) to rotate log files. But the way nxlog does it is as below, (For weekly retention as an example) F… --- ## [Calling a search template from Kibana](https://discuss.elastic.co/t/calling-a-search-template-from-kibana/298377)
**Author:** [@jkulcsar](https://discuss.elastic.co/u/jkulcsar)\ **Replies:** 4\ **Last updated:** [March 2, 2022, 5:13pm UTC](https://discuss.elastic.co/t/calling-a-search-template-from-kibana/298377 "2022-03-02T17:13:17Z")
Hello everybody Is it possible to "wire up" a call/visualize a search template in Kibana? I've defined a search template that takes a few parameters and when I call this through the API, it works great. I even wrote a … --- ## [How to use facets transform mime\_types](https://discuss.elastic.co/t/how-to-use-facets-transform-mime-types/298651)
**Author:** [@Robin\_Vanderschueren](https://discuss.elastic.co/u/Robin_Vanderschueren)\ **Replies:** 0\ **Last updated:** [March 2, 2022, 5:12pm UTC](https://discuss.elastic.co/t/how-to-use-facets-transform-mime-types/298651 "2022-03-02T17:12:00Z")
I'm looking into the way on how to change the mime\_type field into a more readable format. Following the documentation: Content sources API reference | Workplace Search Guide \[8.4\] | Elastic I tried the following: cur… --- ## [Synthetic monitor locations](https://discuss.elastic.co/t/synthetic-monitor-locations/298573)
**Author:** [@keiransteele](https://discuss.elastic.co/u/keiransteele)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 4:53pm UTC](https://discuss.elastic.co/t/synthetic-monitor-locations/298573 "2022-03-02T16:53:53Z")
I have setup 3 instances of the elastic-agent-complete container on Fargate in multiple regions. I would like to be able to have them report to Uptime that they're in different locations rather than all in the same "Flee… --- ## [Embed Elastic Cloud (7.10.1) Kibana visualisation to VueJS application without asking for log in](https://discuss.elastic.co/t/embed-elastic-cloud-7-10-1-kibana-visualisation-to-vuejs-application-without-asking-for-log-in/298236)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 4:08pm UTC](https://discuss.elastic.co/t/embed-elastic-cloud-7-10-1-kibana-visualisation-to-vuejs-application-without-asking-for-log-in/298236 "2022-03-02T16:08:23Z")
Hi, I want to embed my Kibana visualizations in my VueJS web application. If I use "Copy iFrame Code" from the share option and use that in my HTML page, it asks for login. Is there any way to embed the kibana visualiz… --- ## [Autocomplete with range](https://discuss.elastic.co/t/autocomplete-with-range/298644)
**Author:** [@earlyriser01](https://discuss.elastic.co/u/earlyriser01)\ **Replies:** 0\ **Last updated:** [March 2, 2022, 3:50pm UTC](https://discuss.elastic.co/t/autocomplete-with-range/298644 "2022-03-02T15:50:08Z")
Hi all! I want to use my custom analyzer (autocomplete -- below) on a number field that I have indexed as shown below. I am using Ruby on Rails Elasticsearch version. settings index: { analysis: { filter:… --- ## [Automate re-index process](https://discuss.elastic.co/t/automate-re-index-process/293876)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 5\ **Last updated:** [March 2, 2022, 3:46pm UTC](https://discuss.elastic.co/t/automate-re-index-process/293876 "2022-03-02T15:46:26Z")
We are using: elastic operator 1.8 Elasticsearch 7.15.2 Current problem: we have 2 shards for every index and 7 data/masters nodes on Elasticsearch (impossible to scale it by license number), we need to retain 6 days … --- ## [Share the Kibana dashboard to outside network users](https://discuss.elastic.co/t/share-the-kibana-dashboard-to-outside-network-users/298145)
**Author:** [@abhishek\_dixit](https://discuss.elastic.co/u/abhishek_dixit)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 3:30pm UTC](https://discuss.elastic.co/t/share-the-kibana-dashboard-to-outside-network-users/298145 "2022-03-02T15:30:43Z")
Hi Team I have created the dashboard in our local network, i need to share the dashboard to outside network users. Is there any way we can acchive this in kibana. --- ## [How do we create a trend line on Kibana?](https://discuss.elastic.co/t/how-do-we-create-a-trend-line-on-kibana/298624)
**Author:** [@Priyanka\_Rajpal](https://discuss.elastic.co/u/Priyanka_Rajpal)\ **Replies:** 3\ **Last updated:** [March 2, 2022, 3:13pm UTC](https://discuss.elastic.co/t/how-do-we-create-a-trend-line-on-kibana/298624 "2022-03-02T15:13:17Z")
How do I create a trend line for a bar graph, where on X axis I have date histogram and on Y axis sum/count? (Not referring to line graph when saying trend line) Thanks --- ## [Plugin enhanced-table on Kibana cloud](https://discuss.elastic.co/t/plugin-enhanced-table-on-kibana-cloud/298004)
**Author:** [@rituzza](https://discuss.elastic.co/u/rituzza)\ **Replies:** 11\ **Last updated:** [March 2, 2022, 2:57pm UTC](https://discuss.elastic.co/t/plugin-enhanced-table-on-kibana-cloud/298004 "2022-03-02T14:57:25Z")
Good morning, we need to setup enhanced-table plugin on the Kibana AWS environment but at this moment it isn't not allowed. Please Please consider that this plugin is widely used in on-premises environments and therefo… [Previous page](https://discuss.elastic.co/latest.md?page=1233) [Next page](https://discuss.elastic.co/latest.md?page=1235)