# Latest **URL:** https://discuss.elastic.co/latest.md?page=1323 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1324 --- ## [Bar chart single color and bar for Others bucket](https://discuss.elastic.co/t/bar-chart-single-color-and-bar-for-others-bucket/293136)
**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 4:21pm UTC](https://discuss.elastic.co/t/bar-chart-single-color-and-bar-for-others-bucket/293136 "2022-01-04T16:21:29Z")
Hi, Lets say I have table of countries and their GDP. I would like to have bar chart splitted on X-Axis by terms (countries) and be also colored by terms. I wanna show TOP 10 and Others buckets. I saw this is possible… --- ## [Delete JndiLookup.class](https://discuss.elastic.co/t/delete-jndilookup-class/291507)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 16\ **Last updated:** [January 4, 2022, 2:49pm UTC](https://discuss.elastic.co/t/delete-jndilookup-class/291507 "2022-01-04T14:49:58Z")
Dear Team, I am unable to find the file zip -q -d \/logstash-core/lib/jars/log4j-core-2.\* org/apache/logging/log4j/core/lookup/JndiLookup.class Can someone please help me or guide me. Regards --- ## [Can't reach ECE created in strigo lab](https://discuss.elastic.co/t/cant-reach-ece-created-in-strigo-lab/293454)
**Author:** [@paulov](https://discuss.elastic.co/u/paulov)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 2:20pm UTC](https://discuss.elastic.co/t/cant-reach-ece-created-in-strigo-lab/293454 "2022-01-04T14:20:43Z")
Hi, I just finished installing ECE and upon trying to access the Cloud UI, http://172.31.38.182:12400, I get the page "This site can't be reached". (also not on the 12443 address) The port is up and can be connected t… --- ## [Parse Exchange Message tracking logs via Dissect filebeat processor](https://discuss.elastic.co/t/parse-exchange-message-tracking-logs-via-dissect-filebeat-processor/293445)
**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\ **Replies:** 8\ **Last updated:** [January 4, 2022, 2:06pm UTC](https://discuss.elastic.co/t/parse-exchange-message-tracking-logs-via-dissect-filebeat-processor/293445 "2022-01-04T14:06:47Z")
Hello everyone i have been trying to ingest and parse Exchange message tracking logs via filebeat dissect processor to generate fields i need from the log rather than the beat dumping the entire log into the message fiel… --- ## [How to whitelist NULL values?](https://discuss.elastic.co/t/how-to-whitelist-null-values/293449)
**Author:** [@Wooden\_tree](https://discuss.elastic.co/u/Wooden_tree)\ **Replies:** 0\ **Last updated:** [January 4, 2022, 1:55pm UTC](https://discuss.elastic.co/t/how-to-whitelist-null-values/293449 "2022-01-04T13:55:57Z")
Hello, I’m a quite new in Elastic world and I’d like to know if it’s possible to whitelist a NULL value. We have a rule that detects the authentications of our privileges accounts on unauthorized assets which is based … --- ## [Force saved object URL when accessing Kibana](https://discuss.elastic.co/t/force-saved-object-url-when-accessing-kibana/292694)
**Author:** [@Bustencio](https://discuss.elastic.co/u/Bustencio)\ **Replies:** 2\ **Last updated:** [January 4, 2022, 1:18pm UTC](https://discuss.elastic.co/t/force-saved-object-url-when-accessing-kibana/292694 "2022-01-04T13:18:00Z")
Hi, Currently a lot of our users are accessing old snapshots of our dashboards because they saved them as markers by copying the URL that the browser showed in the search bar. I was wondering if there is any way to for… --- ## [I'm trying to move my elastic stack to 7.16.2 (from 6.8.22) in docker-compose - but fails to get certificates generated](https://discuss.elastic.co/t/im-trying-to-move-my-elastic-stack-to-7-16-2-from-6-8-22-in-docker-compose-but-fails-to-get-certificates-generated/292675)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 5\ **Last updated:** [January 4, 2022, 1:06pm UTC](https://discuss.elastic.co/t/im-trying-to-move-my-elastic-stack-to-7-16-2-from-6-8-22-in-docker-compose-but-fails-to-get-certificates-generated/292675 "2022-01-04T13:06:49Z")
With the Log4J vulnerability I've been tasked to update our quite dated Elasticsearch stack. We were on 6.5.1, which I moved to 6.8.22 without issues. Now I want to move it to 7.16.2. There isn't that much with rollin… --- ## [Elastic life cycle management](https://discuss.elastic.co/t/elastic-life-cycle-management/293392)
**Author:** [@bargb](https://discuss.elastic.co/u/bargb)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 12:49pm UTC](https://discuss.elastic.co/t/elastic-life-cycle-management/293392 "2022-01-04T12:49:33Z")
Hello All. I am relatively new to elastic and trying to configure elastic policy for life cycle management on a Kubernetes env. I see that we can configure using curl request. Is there are corresponding CLI? I want… --- ## [Kibana SIEM and custom indexes](https://discuss.elastic.co/t/kibana-siem-and-custom-indexes/293186)
**Author:** [@ulysse31](https://discuss.elastic.co/u/ulysse31)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 12:39pm UTC](https://discuss.elastic.co/t/kibana-siem-and-custom-indexes/293186 "2022-01-04T12:39:12Z")
Hello All, We have used Kibana SIEM essentially for network metadata retention, So historically, all network related metadata from various network filebeat modules (suricata, sonicwall, iptables, etc ...) ends up into s… --- ## [Eland: How to access and filter nested fields in a DataFrame?](https://discuss.elastic.co/t/eland-how-to-access-and-filter-nested-fields-in-a-dataframe/292672)
**Author:** [@Paddyns](https://discuss.elastic.co/u/Paddyns)\ **Replies:** 2\ **Last updated:** [January 4, 2022, 12:10pm UTC](https://discuss.elastic.co/t/eland-how-to-access-and-filter-nested-fields-in-a-dataframe/292672 "2022-01-04T12:10:20Z")
Hi, I'm trying to use the examples from the ELAND docs e.g. this filtering example from github df\[(df.Carrier=="Kibana Airlines") & (df.AvgTicketPrice \> 900.0) & (df.Cancelled == True)\].head() But the fields I have al… --- ## [Filebeat read file from beginning always when restart](https://discuss.elastic.co/t/filebeat-read-file-from-beginning-always-when-restart/293325)
**Author:** [@sc.lai](https://discuss.elastic.co/u/sc.lai)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 11:38am UTC](https://discuss.elastic.co/t/filebeat-read-file-from-beginning-always-when-restart/293325 "2022-01-04T11:38:23Z")
I have a problem with filebeat running on Linux, every time I stop the filebeat and then start it, it always read file from the beginning. The log file uploaded by windows batch every 5 minutes, steps as below: put t… --- ## [After Elasticsearch 7.10-\>7.16 Upgrade Geo Shape Queries Cause Heap Problem ( G1 Humongous Allocation )](https://discuss.elastic.co/t/after-elasticsearch-7-10-7-16-upgrade-geo-shape-queries-cause-heap-problem-g1-humongous-allocation/292912)
**Author:** [@bulent](https://discuss.elastic.co/u/bulent)\ **Replies:** 6\ **Last updated:** [January 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/after-elasticsearch-7-10-7-16-upgrade-geo-shape-queries-cause-heap-problem-g1-humongous-allocation/292912 "2022-01-04T10:03:59Z")
Hi; We have upgraded our ES Cluster from 7.10.0 to 7.16.2 . After upgrade , we have noticed heap usage increased a lot because of G1 Humongous Allocations. ES heap has a lot of Humongous regions. When Heap usage reac… --- ## [Kibana auto login (with security enabled)](https://discuss.elastic.co/t/kibana-auto-login-with-security-enabled/292934)
**Author:** [@borisr84](https://discuss.elastic.co/u/borisr84)\ **Replies:** 4\ **Last updated:** [January 4, 2022, 10:57am UTC](https://discuss.elastic.co/t/kibana-auto-login-with-security-enabled/292934 "2022-01-04T10:57:16Z")
Hi, I've enabled Kibana security with x-pack security and now when I access Kibana UI I need to provide credentials. My preferred behavior is to authenticate users automatically (as my system already has a login screen… --- ## [Running an \_update\_by\_query statement dropped the field in unmatched elements?](https://discuss.elastic.co/t/running-an-update-by-query-statement-dropped-the-field-in-unmatched-elements/293333)
**Author:** [@cdav](https://discuss.elastic.co/u/cdav)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 9:20am UTC](https://discuss.elastic.co/t/running-an-update-by-query-statement-dropped-the-field-in-unmatched-elements/293333 "2022-01-04T09:20:50Z")
I've run the following query: POST hits-\*/\_update\_by\_query { "script": { "source": "ctx.\_source.type = 'se';", "lang": "painless" }, "query": { "match": { "type": "qa" } } } Everything see… --- ## [Data not visibile in Kibana](https://discuss.elastic.co/t/data-not-visibile-in-kibana/293122)
**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\ **Replies:** 9\ **Last updated:** [January 4, 2022, 9:20am UTC](https://discuss.elastic.co/t/data-not-visibile-in-kibana/293122 "2022-01-04T09:20:20Z")
Hello, I ingested data from s3 bucket into Elasticsearch through Logstash pipelines. BUT I AM NOT ABLE TO visualize DATA IN KIBANA . I am only able to see data till october monthsm and after that no data is visible th… --- ## [Calculate total time of a list of documents](https://discuss.elastic.co/t/calculate-total-time-of-a-list-of-documents/293280)
**Author:** [@javidr](https://discuss.elastic.co/u/javidr)\ **Replies:** 3\ **Last updated:** [January 4, 2022, 9:15am UTC](https://discuss.elastic.co/t/calculate-total-time-of-a-list-of-documents/293280 "2022-01-04T09:15:30Z")
Hi I have some documents with a field called "duration", in the format HH:MM:SS. I would like to calculate the sum of the duration of the documents i have filtered by a date. However, when trying to sum the data, since … --- ## [APM Java agent v1.27.0+ instrumention errors on modulepath](https://discuss.elastic.co/t/apm-java-agent-v1-27-0-instrumention-errors-on-modulepath/292877)
**Author:** [@duponter](https://discuss.elastic.co/u/duponter)\ **Replies:** 4\ **Last updated:** [January 4, 2022, 9:04am UTC](https://discuss.elastic.co/t/apm-java-agent-v1-27-0-instrumention-errors-on-modulepath/292877 "2022-01-04T09:04:49Z")
Currently, APM Java agent v1.26.0 is attached successfully to a Spring Boot 2.6 application (JDK 17). This application has enabled Java modules and is therefore running on the modulepath. Although the APM Java Agent is… --- ## [Unable to start Elasticsearch on my local Windows system](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-my-local-windows-system/293202)
**Author:** [@gauravraje](https://discuss.elastic.co/u/gauravraje)\ **Replies:** 2\ **Last updated:** [January 4, 2022, 8:54am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-my-local-windows-system/293202 "2022-01-04T08:54:43Z")
Team, I have downloaded Elasticsearch on my local system but when i am trying to open/start elastic server from bin/Elasticsearch.bat, we are facing below issue plz share possible steps to launch Elasticsearch succes… --- ## [Should I close the older PIT id once it has been replaced by a new PIT id?](https://discuss.elastic.co/t/should-i-close-the-older-pit-id-once-it-has-been-replaced-by-a-new-pit-id/293420)
**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\ **Replies:** 0\ **Last updated:** [January 4, 2022, 8:51am UTC](https://discuss.elastic.co/t/should-i-close-the-older-pit-id-once-it-has-been-replaced-by-a-new-pit-id/293420 "2022-01-04T08:51:24Z")
I am working on a task in which I have to search a large number of documents in Elasticsearch. I use SearchAPI with SearchAfter and PointInTime as recommended. While fetching the results, I am using the PIT ID returned b… --- ## [How to show "N/A" in a field has null value](https://discuss.elastic.co/t/how-to-show-n-a-in-a-field-has-null-value/293416)
**Author:** [@v.le](https://discuss.elastic.co/u/v.le)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 8:22am UTC](https://discuss.elastic.co/t/how-to-show-n-a-in-a-field-has-null-value/293416 "2022-01-04T08:22:34Z")
Hi, I am new for Elasticsearch! I had imported my data content to Elasticsearch but I cant work out how to show the N/A value of the sales field. Here's the data : country group brand PT date sales Japan… --- ## [Hexadecimal to Decimal](https://discuss.elastic.co/t/hexadecimal-to-decimal/293361)
**Author:** [@dayajamal](https://discuss.elastic.co/u/dayajamal)\ **Replies:** 2\ **Last updated:** [January 4, 2022, 8:16am UTC](https://discuss.elastic.co/t/hexadecimal-to-decimal/293361 "2022-01-04T08:16:42Z")
Hi, I am trying to convert a field in my log from hexadecimal to decimal. I tried with the following log: 2021-07-26T16:49:02.189807+0200 | DEBUG | 910EAB70 | flyscan/core/server.1 | ScanActorTask::handle\_message Usin… --- ## [How to run multiple views of the same log set on same VM](https://discuss.elastic.co/t/how-to-run-multiple-views-of-the-same-log-set-on-same-vm/293417)
**Author:** [@smarajit\_mishra](https://discuss.elastic.co/u/smarajit_mishra)\ **Replies:** 0\ **Last updated:** [January 4, 2022, 8:16am UTC](https://discuss.elastic.co/t/how-to-run-multiple-views-of-the-same-log-set-on-same-vm/293417 "2022-01-04T08:16:41Z")
The requirement here is to create 2 views. 1 with the comprehensive view of all debug logs in like one week or so. And second view to have a job wise view. Where you can filter out logs and errors. The logs in themselv… --- ## [Swagger-4-es (Swagger UI for Key Elasticsearch Endpoints)](https://discuss.elastic.co/t/swagger-4-es-swagger-ui-for-key-elasticsearch-endpoints/293012)
**Author:** [@Johnnycc1](https://discuss.elastic.co/u/Johnnycc1)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 7:42am UTC](https://discuss.elastic.co/t/swagger-4-es-swagger-ui-for-key-elasticsearch-endpoints/293012 "2022-01-04T07:42:45Z")
Hey Elasticsearch community, I have created an openapi schema for the key Elasticsearch endpoints (or at least the ones I think are key). If you don't know what that is, basically when paired with the swagger-ui library… --- ## [In Logstash Log I am receiving Elasticsearch unreachable error](https://discuss.elastic.co/t/in-logstash-log-i-am-receiving-elasticsearch-unreachable-error/293199)
**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\ **Replies:** 11\ **Last updated:** [January 4, 2022, 7:42am UTC](https://discuss.elastic.co/t/in-logstash-log-i-am-receiving-elasticsearch-unreachable-error/293199 "2022-01-04T07:42:15Z")
I am not able to view data in kibana and grafana as well . And also i am getting {:message=\>"Elasticsearch Unreachable: error in logstash log --- ## [Add custom Information for correlation using JavaScript agent (RUM)](https://discuss.elastic.co/t/add-custom-information-for-correlation-using-javascript-agent-rum/293205)
**Author:** [@fuphil](https://discuss.elastic.co/u/fuphil)\ **Replies:** 2\ **Last updated:** [January 4, 2022, 7:08am UTC](https://discuss.elastic.co/t/add-custom-information-for-correlation-using-javascript-agent-rum/293205 "2022-01-04T07:08:59Z")
Hi, we have the JavaScript agent (RUM) in place and are also collecting the logs via filebeat. In order to be able to correlate the data between RUM and the Logs I would like to add some custom information on the clien… --- ## [Composite aggregation behavior when missing a key, not value](https://discuss.elastic.co/t/composite-aggregation-behavior-when-missing-a-key-not-value/293407)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 0\ **Last updated:** [January 4, 2022, 6:17am UTC](https://discuss.elastic.co/t/composite-aggregation-behavior-when-missing-a-key-not-value/293407 "2022-01-04T06:17:01Z")
Hi every body! I'm using composite aggregation to multi terms on my data. some where in docs elastic says: By default documents without a value for a given source are ignored. It is possible to include them in the res… --- ## [How to stop auto index creation](https://discuss.elastic.co/t/how-to-stop-auto-index-creation/293275)
**Author:** [@ken\_kentan](https://discuss.elastic.co/u/ken_kentan)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 5:55am UTC](https://discuss.elastic.co/t/how-to-stop-auto-index-creation/293275 "2022-01-04T05:55:47Z")
I'm using Elasticsearch(7.16.0) with Metricbeat and Filebeat. It will create unused indexes automtically. e.g. dekitateserver-filebeat-7.11.1-\*. Curentlly, Filebeat is using only dekitateserver-filebeat-2021-\*. How to… --- ## [\[16:00:31.383\] \[error\]\[data\]\[elasticsearch\] \[TimeoutError\]: Request timed out](https://discuss.elastic.co/t/1631-383-error-data-elasticsearch-timeouterror-request-timed-out/293277)
**Author:** [@adkyushu](https://discuss.elastic.co/u/adkyushu)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 5:55am UTC](https://discuss.elastic.co/t/1631-383-error-data-elasticsearch-timeouterror-request-timed-out/293277 "2022-01-04T05:55:14Z")
When I start Kibana, it prompts me log \[15:59:26.369\] \[error\]\[data\]\[elasticsearch\] \[TimeoutError\]: Request timed out log \[15:59:26.370\] \[error\]\[data\]\[elasticsearch\] \[TimeoutError\]: Request timed out log \[15:59:26.372\]… --- ## [Query about the Logstash compatibility with ELK 6.7.2](https://discuss.elastic.co/t/query-about-the-logstash-compatibility-with-elk-6-7-2/293301)
**Author:** [@Sunil\_Kumar1](https://discuss.elastic.co/u/Sunil_Kumar1)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 5:54am UTC](https://discuss.elastic.co/t/query-about-the-logstash-compatibility-with-elk-6-7-2/293301 "2022-01-04T05:54:32Z")
Hello Team, We are running the Elastic cluster with 6.7.2 version and we are also using logstash 6.7.2 to ship the application logs from our kubernetes containers to Elasticsearch. Our query is, is logstash 6.8.22 is co… --- ## [Correct way to map HTTP Server logs](https://discuss.elastic.co/t/correct-way-to-map-http-server-logs/293357)
**Author:** [@Jonathan\_Rosenboim](https://discuss.elastic.co/u/Jonathan_Rosenboim)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 5:52am UTC](https://discuss.elastic.co/t/correct-way-to-map-http-server-logs/293357 "2022-01-04T05:52:50Z")
Hi all! I am relatively new with Elasticsearch, and I want to store logs of all HTTP requests made to multiple services, including info like headers, body and params to Elasticsearch, and wish for all this info to be ac… [Previous page](https://discuss.elastic.co/latest.md?page=1322) [Next page](https://discuss.elastic.co/latest.md?page=1324)