# Latest **URL:** https://discuss.elastic.co/latest.md?page=1282 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1283 --- ## [Kibana Lens/Line customizations](https://discuss.elastic.co/t/kibana-lens-line-customizations/295783)
**Author:** [@GustavoEH](https://discuss.elastic.co/u/GustavoEH)\ **Replies:** 2\ **Last updated:** [February 1, 2022, 6:03pm UTC](https://discuss.elastic.co/t/kibana-lens-line-customizations/295783 "2022-02-01T18:03:44Z")
Hello, I created a Line view in Kibana to see the data I'm getting from different exchanges, but I' having difficulties to customize the view. As I don't have much experience with Kibana, now I'm not sure if Lens/Line i… --- ## [SQL query does not work in filter bar of visualization](https://discuss.elastic.co/t/sql-query-does-not-work-in-filter-bar-of-visualization/295909)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 5:49pm UTC](https://discuss.elastic.co/t/sql-query-does-not-work-in-filter-bar-of-visualization/295909 "2022-02-01T17:49:20Z")
Hi all, I want to use SQL query just as KQL query in Query filter bar to build visualizations and dashboards. But the Query does not work in filter bar even after installing SQL plugin. Any ideas? --- ## [Updating all documents using a dictionary as input](https://discuss.elastic.co/t/updating-all-documents-using-a-dictionary-as-input/295728)
**Author:** [@Jenobi](https://discuss.elastic.co/u/Jenobi)\ **Replies:** 5\ **Last updated:** [February 1, 2022, 5:14pm UTC](https://discuss.elastic.co/t/updating-all-documents-using-a-dictionary-as-input/295728 "2022-02-01T17:14:44Z")
Update All Documents Background Information I have a use case where I need to update all documents in my index. My source looks similar to the below: { 'hits': \[ {'\_index': 'main-index-v2', '\_type': '\_doc', … --- ## [Kibana aliases conflicting when restoring a snapshot](https://discuss.elastic.co/t/kibana-aliases-conflicting-when-restoring-a-snapshot/295390)
**Author:** [@oskrdt](https://discuss.elastic.co/u/oskrdt)\ **Replies:** 7\ **Last updated:** [February 1, 2022, 4:49pm UTC](https://discuss.elastic.co/t/kibana-aliases-conflicting-when-restoring-a-snapshot/295390 "2022-02-01T16:49:50Z")
I'm trying to restore a snapshot created on a Elastic Stack cluster version 7.9.1 into another cluster version 7.14.0, but it seems the restore action is corrupting the indexes and after the attempt I'm not longer able t… --- ## [Elastic config file revert to default](https://discuss.elastic.co/t/elastic-config-file-revert-to-default/295955)
**Author:** [@Gamliel\_Alon](https://discuss.elastic.co/u/Gamliel_Alon)\ **Replies:** 0\ **Last updated:** [February 1, 2022, 3:23pm UTC](https://discuss.elastic.co/t/elastic-config-file-revert-to-default/295955 "2022-02-01T15:23:23Z")
Hi after installing security patches on ubuntu 18.04 the yml config file was revert to default like all was commented again on the logs I see this see this: Setting up linux-cloud-tools-common (4.15.0-166.174) ... S… --- ## [Count equal element in array](https://discuss.elastic.co/t/count-equal-element-in-array/295925)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 3\ **Last updated:** [February 1, 2022, 4:27pm UTC](https://discuss.elastic.co/t/count-equal-element-in-array/295925 "2022-02-01T16:27:57Z")
Hello everyone ! I need help. I have boolean field "sendSMS" with many values, for exemple : sendSMS : \[true , false, true\] and i want use scripted field to count the number of "true" in my field. Thanks in advance … --- ## [Kibana 7.16 sorts split slices in alphabetical order and not according to filter sequence](https://discuss.elastic.co/t/kibana-7-16-sorts-split-slices-in-alphabetical-order-and-not-according-to-filter-sequence/295684)
**Author:** [@Opti](https://discuss.elastic.co/u/Opti)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 3:55pm UTC](https://discuss.elastic.co/t/kibana-7-16-sorts-split-slices-in-alphabetical-order-and-not-according-to-filter-sequence/295684 "2022-02-01T15:55:23Z")
Hi, I have some dashboards that were created in Kibana 7.10 that use a count aggregation with filters as split slices within a bucket. The split slices each have a label with a description. WIthin version 7.10, this wou… --- ## [Unable to find User and role management feature in Kibana 7.16](https://discuss.elastic.co/t/unable-to-find-user-and-role-management-feature-in-kibana-7-16/295954)
**Author:** [@Adityadgr8](https://discuss.elastic.co/u/Adityadgr8)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 3:51pm UTC](https://discuss.elastic.co/t/unable-to-find-user-and-role-management-feature-in-kibana-7-16/295954 "2022-02-01T15:51:33Z")
Hello, I have used user and role management features in Kibana v6.8 and v7.1 also but recently i setup latest elk stack, there I am unable to get this feature This is kibana snip from older version: This is kibana … --- ## [Использование одного и того же nested документа в разных корневых документах](https://discuss.elastic.co/t/nested/295957)
**Author:** [@Oleksandr](https://discuss.elastic.co/u/Oleksandr)\ **Replies:** 0\ **Last updated:** [February 1, 2022, 3:49pm UTC](https://discuss.elastic.co/t/nested/295957 "2022-02-01T15:49:29Z")
Индекс имеет вид: PUT company { "settings": { "index": { "number\_of\_shards": 1, "number\_of\_replicas": 1 }, "analysis": { "analyzer": { "analyzer-name": { "type": "custom… --- ## [Building a Kibana distributable Plugin fails in 7.16.3](https://discuss.elastic.co/t/building-a-kibana-distributable-plugin-fails-in-7-16-3/295877)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 3:08pm UTC](https://discuss.elastic.co/t/building-a-kibana-distributable-plugin-fails-in-7-16-3/295877 "2022-02-01T15:08:12Z")
Hi, We have upgraded our plugin from 7.9.3 to 7.16.3. I have ran these commands yarn cache clean yarn kbn clean BUILD\_TS\_REFS\_DISABLE=true yarn kbn bootstrap --no-cache --debug --verbose cd plugins/wind rm -Rf build… --- ## [Unable to change date format](https://discuss.elastic.co/t/unable-to-change-date-format/295948)
**Author:** [@duanra22](https://discuss.elastic.co/u/duanra22)\ **Replies:** 3\ **Last updated:** [February 1, 2022, 3:05pm UTC](https://discuss.elastic.co/t/unable-to-change-date-format/295948 "2022-02-01T15:05:05Z")
Hello everyone, I've seen several topics with the same problem, however none of the solutions I found worked for me and it's making me crazy because I am sure it should be very simple. To explain the problem, I am usin… --- ## [Elastic search - filter on a field based on the length of that field's contents](https://discuss.elastic.co/t/elastic-search-filter-on-a-field-based-on-the-length-of-that-fields-contents/295883)
**Author:** [@drwiremore](https://discuss.elastic.co/u/drwiremore)\ **Replies:** 4\ **Last updated:** [February 1, 2022, 3:02pm UTC](https://discuss.elastic.co/t/elastic-search-filter-on-a-field-based-on-the-length-of-that-fields-contents/295883 "2022-02-01T15:02:16Z")
Thought this would be easy. I'm searching a data index of data-awsch\*:ls-aws-cloudtrail\* based on event.type that is not one of start, access, info. This is working as intended, but the output is huge. Rather than fil… --- ## [Any example of how to connect to elastic cloud using express js](https://discuss.elastic.co/t/any-example-of-how-to-connect-to-elastic-cloud-using-express-js/295952)
**Author:** [@Munashe\_komichi](https://discuss.elastic.co/u/Munashe_komichi)\ **Replies:** 0\ **Last updated:** [February 1, 2022, 3:00pm UTC](https://discuss.elastic.co/t/any-example-of-how-to-connect-to-elastic-cloud-using-express-js/295952 "2022-02-01T15:00:54Z")
Any example of how to implement Elasticsearch into express js,links documentation, i cant find any grappable information on it --- ## [Calculate delta between two ingestions](https://discuss.elastic.co/t/calculate-delta-between-two-ingestions/295938)
**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\ **Replies:** 4\ **Last updated:** [February 1, 2022, 2:39pm UTC](https://discuss.elastic.co/t/calculate-delta-between-two-ingestions/295938 "2022-02-01T14:39:48Z")
Hi Is it possible to validate the difference between two different ingestions (based on timestamp)? It is, i am ingesting some data from my IOT devices, as temperature, humidity, particulate matter (air quality level) … --- ## [Cold/Frozen Tiers on on-premise storage](https://discuss.elastic.co/t/cold-frozen-tiers-on-on-premise-storage/295881)
**Author:** [@BionicSecurityMgr](https://discuss.elastic.co/u/BionicSecurityMgr)\ **Replies:** 2\ **Last updated:** [February 1, 2022, 2:12pm UTC](https://discuss.elastic.co/t/cold-frozen-tiers-on-on-premise-storage/295881 "2022-02-01T14:12:47Z")
Is anyone using on-premise servers/storage for Cold & Frozen data tiers? It's my understanding that these are the options: • AWS S3 • Google Cloud Storage • Azure Blob Storage • Hadoop Distributed File Store (HDFS) … --- ## [LOG4J vulenrability](https://discuss.elastic.co/t/log4j-vulenrability/295847)
**Author:** [@eden\_shirazi](https://discuss.elastic.co/u/eden_shirazi)\ **Replies:** 3\ **Last updated:** [February 1, 2022, 2:10pm UTC](https://discuss.elastic.co/t/log4j-vulenrability/295847 "2022-02-01T14:10:00Z")
Hi, I didn't found any official information about the log4j vulnerability in elastic. what is the official version of elastic that protect from log4j vulnerability? Thank for the help. --- ## [Transforming Indexes](https://discuss.elastic.co/t/transforming-indexes/295932)
**Author:** [@Arya\_Yellapu](https://discuss.elastic.co/u/Arya_Yellapu)\ **Replies:** 5\ **Last updated:** [February 1, 2022, 1:37pm UTC](https://discuss.elastic.co/t/transforming-indexes/295932 "2022-02-01T13:37:03Z")
Transforming Indexes is considering the timestamp field under "\_source" while comparing the data. How to exclude this field while comparison? Below is the query I am using to transform the data from two indexes: PUT /\_… --- ## [Creating Variables in Canvas](https://discuss.elastic.co/t/creating-variables-in-canvas/295854)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 2\ **Last updated:** [February 1, 2022, 1:30pm UTC](https://discuss.elastic.co/t/creating-variables-in-canvas/295854 "2022-02-01T13:30:27Z")
Hello there, Can anyone help me creating variables in Canvas? Thanks --- ## [REINDEX : identify fields to remove with a regular expression?](https://discuss.elastic.co/t/reindex-identify-fields-to-remove-with-a-regular-expression/295275)
**Author:** [@TheEvilDonut](https://discuss.elastic.co/u/TheEvilDonut)\ **Replies:** 8\ **Last updated:** [February 1, 2022, 1:03pm UTC](https://discuss.elastic.co/t/reindex-identify-fields-to-remove-with-a-regular-expression/295275 "2022-02-01T13:03:24Z")
Hello. Here's the situation. A source shipping logs to our cluster has messed up and sent us a large number of documents containing undesirable fields. The thing is that the fields names are almost random, there is no w… --- ## [Java Application Crashed with RejectedExecutionException](https://discuss.elastic.co/t/java-application-crashed-with-rejectedexecutionexception/295016)
**Author:** [@Manoj\_Soni](https://discuss.elastic.co/u/Manoj_Soni)\ **Replies:** 3\ **Last updated:** [February 1, 2022, 12:21pm UTC](https://discuss.elastic.co/t/java-application-crashed-with-rejectedexecutionexception/295016 "2022-02-01T12:21:09Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Keystore for logstash](https://discuss.elastic.co/t/keystore-for-logstash/295688)
**Author:** [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\ **Replies:** 3\ **Last updated:** [February 1, 2022, 12:18pm UTC](https://discuss.elastic.co/t/keystore-for-logstash/295688 "2022-02-01T12:18:51Z")
Hi guys i installed a keystore for logstash 7.16.3 in local on my machine it works fine but when i deploy the same pipeline on kibana =\> logstash pipelines it does'nt work. log : "Unable to configure plugins: (Configu… --- ## [Stringify object during reindexing](https://discuss.elastic.co/t/stringify-object-during-reindexing/295900)
**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\ **Replies:** 5\ **Last updated:** [February 1, 2022, 11:38am UTC](https://discuss.elastic.co/t/stringify-object-during-reindexing/295900 "2022-02-01T11:38:30Z")
Hi Team, I am looking for a solution to convert an object to string during reindexing. I searched for solutions using painless scripting but was unable to do so as it seems painless doesn't support JSON ( might be wrong… --- ## [Logs not showing in fleet](https://discuss.elastic.co/t/logs-not-showing-in-fleet/295690)
**Author:** [@Leviath](https://discuss.elastic.co/u/Leviath)\ **Replies:** 5\ **Last updated:** [February 1, 2022, 11:34am UTC](https://discuss.elastic.co/t/logs-not-showing-in-fleet/295690 "2022-02-01T11:34:50Z")
Good Morning, I have a fleet server with 2 hosts : The "kali" host has the following integrations installed with the elastic agent : I followed the installation steps from the elastic official webpage and the el… --- ## [Scrolling Search Template in elasticsearch-java 7.16](https://discuss.elastic.co/t/scrolling-search-template-in-elasticsearch-java-7-16/294869)
**Author:** [@jps](https://discuss.elastic.co/u/jps)\ **Replies:** 2\ **Last updated:** [February 1, 2022, 11:32am UTC](https://discuss.elastic.co/t/scrolling-search-template-in-elasticsearch-java-7-16/294869 "2022-02-01T11:32:08Z")
Hi. Recently I've migrated from Elasticsearch-rest-high-level-client to Elasticsearch-java. My question is how can I scroll across SearchTemplateResponse? In SearchTemplateRequest we can put a scroll but it doesn't app… --- ## [Can Elasticsearch provide offsets of highlighted words?](https://discuss.elastic.co/t/can-elasticsearch-provide-offsets-of-highlighted-words/295323)
**Author:** [@astrodi](https://discuss.elastic.co/u/astrodi)\ **Replies:** 4\ **Last updated:** [February 1, 2022, 11:18am UTC](https://discuss.elastic.co/t/can-elasticsearch-provide-offsets-of-highlighted-words/295323 "2022-02-01T11:18:38Z")
We are having OCRed text of PDFs searchable in Elasticsearch. Also we have stored original PDFs, passing highlighted terms from Elasticsearch in URL and with custom library we highlight the words in PDFs. But we would … --- ## [Does elastic agent(7,16,3) contains all the beats?](https://discuss.elastic.co/t/does-elastic-agent-7-16-3-contains-all-the-beats/295817)
**Author:** [@boyd\_yang](https://discuss.elastic.co/u/boyd_yang)\ **Replies:** 1\ **Last updated:** [January 31, 2022, 3:13pm UTC](https://discuss.elastic.co/t/does-elastic-agent-7-16-3-contains-all-the-beats/295817 "2022-01-31T15:13:05Z")
How to enable the packetbeat in fleet? Should I install and configure packetbeat manually? The agent installed directory contains some beats: --- ## [Logs not being harvested after agent restart](https://discuss.elastic.co/t/logs-not-being-harvested-after-agent-restart/294579)
**Author:** [@yelloyonder](https://discuss.elastic.co/u/yelloyonder)\ **Replies:** 9\ **Last updated:** [February 1, 2022, 10:30am UTC](https://discuss.elastic.co/t/logs-not-being-harvested-after-agent-restart/294579 "2022-02-01T10:30:45Z")
Hi, We are using Elastic Agent to collect logs using the Custom Logs integration. This is on Elastic Cloud. The agent servers are turned off nightly. When the servers come up and the elastic-agent service is started, F… --- ## [Hi all, I am trying to ingest json file in Elasticsearch using python , but index is not getting created](https://discuss.elastic.co/t/hi-all-i-am-trying-to-ingest-json-file-in-elasticsearch-using-python-but-index-is-not-getting-created/295903)
**Author:** [@Chinmay\_Bhusate](https://discuss.elastic.co/u/Chinmay_Bhusate)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 9:55am UTC](https://discuss.elastic.co/t/hi-all-i-am-trying-to-ingest-json-file-in-elasticsearch-using-python-but-index-is-not-getting-created/295903 "2022-02-01T09:55:54Z")
Code is running , I'm not getting any error . But at a same time index is not created . Here is my code. import sys import json from pprint import pprint from elasticsearch import Elasticsearch es = Elasticsearch( … --- ## [ELK Alerting for AD logs](https://discuss.elastic.co/t/elk-alerting-for-ad-logs/295823)
**Author:** [@AbdulVaseem](https://discuss.elastic.co/u/AbdulVaseem)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 9:54am UTC](https://discuss.elastic.co/t/elk-alerting-for-ad-logs/295823 "2022-02-01T09:54:24Z")
How to set up an alert when an Admin or Enterprise admin is created on Local AD in kibana --- ## [Лимит на одновременное удаление индексов](https://discuss.elastic.co/t/topic/295923)
**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\ **Replies:** 0\ **Last updated:** [February 1, 2022, 9:50am UTC](https://discuss.elastic.co/t/topic/295923 "2022-02-01T09:50:18Z")
Добрый день! Есть кластер в котором очень много индексов: некоторые по дням, некоторым по месяцам Сейчас приходится последовательно удалять старые индексы за месяц, т.к. /indexname\_202112\* даёт сильную нагрузку на ФС и… [Previous page](https://discuss.elastic.co/latest.md?page=1281) [Next page](https://discuss.elastic.co/latest.md?page=1283)