# Latest **URL:** https://discuss.elastic.co/latest.md?page=1358 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1359 --- ## [Kibana login for new users failing](https://discuss.elastic.co/t/kibana-login-for-new-users-failing/291045)
**Author:** [@aditi\_salunke](https://discuss.elastic.co/u/aditi_salunke)\ **Replies:** 3\ **Last updated:** [December 7, 2021, 6:50pm UTC](https://discuss.elastic.co/t/kibana-login-for-new-users-failing/291045 "2021-12-07T18:50:51Z")
Hello, Can anyone explain what exactly happens in the following situation: Unless we sign in using elastic: ' built-in user ' and change password for new users who are created on kibana are not able to login and receiv… --- ## [Writing Spark Dataframe into ElasticSeach- Runs Successfully but Not all Data dumped](https://discuss.elastic.co/t/writing-spark-dataframe-into-elasticseach-runs-successfully-but-not-all-data-dumped/290051)
**Author:** [@Cloud11](https://discuss.elastic.co/u/Cloud11)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 6:38pm UTC](https://discuss.elastic.co/t/writing-spark-dataframe-into-elasticseach-runs-successfully-but-not-all-data-dumped/290051 "2021-12-07T18:38:54Z")
I am writing data from my spark-dataframe into ES. i did print the schema and the total count of records and it seems all ok until the dump gets started. Job runs successfully and no issue /error raised in spark job but … --- ## [Error GETting document](https://discuss.elastic.co/t/error-getting-document/291143)
**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 5:54pm UTC](https://discuss.elastic.co/t/error-getting-document/291143 "2021-12-07T17:54:07Z")
I PUT a document to index foo\_multi\_import\_20211207, and it results in an id of IGzLlX0B4Xv88DkYMDQL Then I GET the document with GET foo\_multi\_import\_20211207/IGzLlX0B4Xv88DkYMDQL, but get the error { "error" : "Inc… --- ## [Как выяснить причину ошибки при поиске в Kibana: "Courier fetch: xxx of xxx shards failed"](https://discuss.elastic.co/t/kibana-courier-fetch-xxx-of-xxx-shards-failed/290404)
**Author:** [@ep4sh](https://discuss.elastic.co/u/ep4sh)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 5:52pm UTC](https://discuss.elastic.co/t/kibana-courier-fetch-xxx-of-xxx-shards-failed/290404 "2021-12-07T17:52:12Z")
Получаю ошибку при попытке поиска в Kibana: Courier fetch: xxx of xxx shards failed. Для начала проверил всё ли в порядке с шардами - всё действительно ок. Посмотрел логи \[2021-11-28T23:49:07,110\]\[DEBUG\]\[o.e.a.s.Tran… --- ## [Monitoring GCP status dashboard](https://discuss.elastic.co/t/monitoring-gcp-status-dashboard/290920)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [December 7, 2021, 5:45pm UTC](https://discuss.elastic.co/t/monitoring-gcp-status-dashboard/290920 "2021-12-07T17:45:48Z")
Hi everybody, I was trying to find a way to monitor GCP status dashboard here using heartbeat component. Right now I have nothing to look at it, so is there anyone that in the past checked it? --- ## [Watcher condition setup](https://discuss.elastic.co/t/watcher-condition-setup/291151)
**Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\ **Replies:** 0\ **Last updated:** [December 7, 2021, 5:40pm UTC](https://discuss.elastic.co/t/watcher-condition-setup/291151 "2021-12-07T17:40:06Z")
Hello, I've been having trouble creating a watcher. My query has a terms aggregation to aggregate by process, this aggregation has a date\_histogram sub-aggregation, which itself has other sub-aggregations for metrics. M… --- ## [Getting \_timestampparsefailure error in kibana tags](https://discuss.elastic.co/t/getting-timestampparsefailure-error-in-kibana-tags/291150)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 0\ **Last updated:** [December 7, 2021, 5:39pm UTC](https://discuss.elastic.co/t/getting-timestampparsefailure-error-in-kibana-tags/291150 "2021-12-07T17:39:20Z")
Hello team, I am getting \_timestampparsefailure error in kibana tags. looks everything goods. Sample log line: 2021-12-03T12:31:57,176 DEBUG \[ghReVdD7RmwHTUFpx7WgdA\] com.pingidentity.pa.core.interceptor.flow - Invokin… --- ## [How to show Y axis in percentage instead of count in vertical bar chart](https://discuss.elastic.co/t/how-to-show-y-axis-in-percentage-instead-of-count-in-vertical-bar-chart/289778)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 5\ **Last updated:** [December 7, 2021, 5:15pm UTC](https://discuss.elastic.co/t/how-to-show-y-axis-in-percentage-instead-of-count-in-vertical-bar-chart/289778 "2021-12-07T17:15:43Z")
Hi, I am using a vertical bar chart for data visualization. I want percentage instead of count in Y-axis. I checked multiple options but was unable to get through it, Viz Pic- --- ## [Enterprise Search 7.16.0 Security Update](https://discuss.elastic.co/t/enterprise-search-7-16-0-security-update/291146)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [December 7, 2021, 5:00pm UTC](https://discuss.elastic.co/t/enterprise-search-7-16-0-security-update/291146 "2021-12-07T17:00:36Z")
Enterprise Search Information Disclosure issue (ESA-2021-28) An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integrat… --- ## [How to use Kibana API in plugin development](https://discuss.elastic.co/t/how-to-use-kibana-api-in-plugin-development/291131)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 3\ **Last updated:** [December 7, 2021, 4:55pm UTC](https://discuss.elastic.co/t/how-to-use-kibana-api-in-plugin-development/291131 "2021-12-07T16:55:32Z")
Hi there, we're trying to develop a custom plugin and we're stuck when it comes to call a Kibana APIs. We can import the RequestHandlerContext interface to provide a context we can use to call Elasticsearch APIs, but w… --- ## [How to fetch multiple metric dimensions from monitor metric set of azure metricbeat module](https://discuss.elastic.co/t/how-to-fetch-multiple-metric-dimensions-from-monitor-metric-set-of-azure-metricbeat-module/290364)
**Author:** [@adhiraj-g](https://discuss.elastic.co/u/adhiraj-g)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 4:49pm UTC](https://discuss.elastic.co/t/how-to-fetch-multiple-metric-dimensions-from-monitor-metric-set-of-azure-metricbeat-module/290364 "2021-12-07T16:49:28Z")
Hi there, I was searching for ways to fetch out metric dimension values of azure application Gateway and landed on the following link: Metricbeat azure module - Simultaneously fetch multi-dimensional metric values Appa… --- ## [Exclude binary data filebeat in logfile](https://discuss.elastic.co/t/exclude-binary-data-filebeat-in-logfile/291031)
**Author:** [@MalfuncEddie](https://discuss.elastic.co/u/MalfuncEddie)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 4:43pm UTC](https://discuss.elastic.co/t/exclude-binary-data-filebeat-in-logfile/291031 "2021-12-07T16:43:51Z")
Hi, I've got a multiline log file that has following structure 2021-12-06 11:36:31,088 .... 2021-12-06 11:36:32,588 ... 2021-12-06 11:36:34,127 --------------------------- ID: 82506 Response-Code: 200 Content-Type: ap… --- ## [Getting \_dateparsefailure for a log file having two timestamps](https://discuss.elastic.co/t/getting-dateparsefailure-for-a-log-file-having-two-timestamps/289643)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 3\ **Last updated:** [December 7, 2021, 4:10pm UTC](https://discuss.elastic.co/t/getting-dateparsefailure-for-a-log-file-having-two-timestamps/289643 "2021-12-07T16:10:44Z")
Hello My log file looks like: \[ { "textPayload": "{'testkey': 'testvalue'}", "insertId": "12345-12345", "resource": { "type": "cloud\_function", "labels": { "project\_id": "project-p123",… --- ## [Need help to get only message](https://discuss.elastic.co/t/need-help-to-get-only-message/290123)
**Author:** [@sushant12](https://discuss.elastic.co/u/sushant12)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 3:59pm UTC](https://discuss.elastic.co/t/need-help-to-get-only-message/290123 "2021-12-07T15:59:45Z")
logs logging messages in following pattern 2021-11-03 05:03:22,773,773 DEBUG \[controllers.requests\] log are logged in to system. i just want to extract following things so i can store in separate variables : Time stam… --- ## [Elasticsearch Engineer On-Demand Lab Kibana1 Problem](https://discuss.elastic.co/t/elasticsearch-engineer-on-demand-lab-kibana1-problem/291134)
**Author:** [@RLPowellJr](https://discuss.elastic.co/u/RLPowellJr)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 3:51pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-on-demand-lab-kibana1-problem/291134 "2021-12-07T15:51:38Z")
Greetings! I am enrolled in/subscribed to the on-demand Elasticsearch Engineer course. The first four or five days were good, but a couple of days ago the lab, and maybe specifically cluster1 and/or kibana1, has starte… --- ## [Detection rules that only alert on the 1st detection of an event](https://discuss.elastic.co/t/detection-rules-that-only-alert-on-the-1st-detection-of-an-event/290933)
**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 3:48pm UTC](https://discuss.elastic.co/t/detection-rules-that-only-alert-on-the-1st-detection-of-an-event/290933 "2021-12-07T15:48:21Z")
Apologies, but I am pretty new to the detection rules process. So any help is greatly appreciated! I was wondering if anyone knew of a way that I could create a detection rule that only alerts the first time an event o… --- ## [ECK and xpack.security.authc.api\_key.enabled with no TLS....workaround or next release?](https://discuss.elastic.co/t/eck-and-xpack-security-authc-api-key-enabled-with-no-tls-workaround-or-next-release/291138)
**Author:** [@trudesea](https://discuss.elastic.co/u/trudesea)\ **Replies:** 0\ **Last updated:** [December 7, 2021, 3:25pm UTC](https://discuss.elastic.co/t/eck-and-xpack-security-authc-api-key-enabled-with-no-tls-workaround-or-next-release/291138 "2021-12-07T15:25:05Z")
Hi, I realize that this is being worked on, but is there any work around for this? Since I cannot enable the api service, I am unable to add agents to the fleet. If I have to wait until the next release, I assume it w… --- ## [Not able to get see logs until I delete the index](https://discuss.elastic.co/t/not-able-to-get-see-logs-until-i-delete-the-index/290728)
**Author:** [@manavtidhan](https://discuss.elastic.co/u/manavtidhan)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 3:08pm UTC](https://discuss.elastic.co/t/not-able-to-get-see-logs-until-i-delete-the-index/290728 "2021-12-07T15:08:43Z")
Hi , I am not able to see logs next day , until I delete the index manually from Kibana Below is the status of my logstash and I am not able to see any error logs even I put the debug mode in logstash.yml Below is … --- ## [How to configure Elastic .NET APM agent with .net WCF service](https://discuss.elastic.co/t/how-to-configure-elastic-net-apm-agent-with-net-wcf-service/291070)
**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 2:39pm UTC](https://discuss.elastic.co/t/how-to-configure-elastic-net-apm-agent-with-net-wcf-service/291070 "2021-12-07T14:39:06Z")
Hi Team, I tried to implement a .net APM agent with WCF service but it's not working. In my case, my web application was deployed on the XXXX server & the service deployed on the YYYY server. I have configured the .net … --- ## [Elastic APM not working with .net WCF service](https://discuss.elastic.co/t/elastic-apm-not-working-with-net-wcf-service/290574)
**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\ **Replies:** 6\ **Last updated:** [December 7, 2021, 2:37pm UTC](https://discuss.elastic.co/t/elastic-apm-not-working-with-net-wcf-service/290574 "2021-12-07T14:37:33Z")
Hi Team, Elastic APM not working with .net WCF service. Please help me how to configure elastic .net apm agent with wcf service. Its working fine with mvc web application, but not with wcf service. My application fet… --- ## [Kibana - Error: EACCES: permission denied, open '/etc/kibana/kibana.yml'](https://discuss.elastic.co/t/kibana-error-eacces-permission-denied-open-etc-kibana-kibana-yml/291117)
**Author:** [@Peter\_M](https://discuss.elastic.co/u/Peter_M)\ **Replies:** 14\ **Last updated:** [December 7, 2021, 2:16pm UTC](https://discuss.elastic.co/t/kibana-error-eacces-permission-denied-open-etc-kibana-kibana-yml/291117 "2021-12-07T14:16:13Z")
Hey all, Fairly new to setting up Kibana, we are setting up on a test environment at the moment, an azure vm using CentOs. We installed Elasticseach and Kibana with Ansible playbooks, during some troubleshooting we had… --- ## [Adding and removing a node fixed our latency issues](https://discuss.elastic.co/t/adding-and-removing-a-node-fixed-our-latency-issues/291059)
**Author:** [@alsyia](https://discuss.elastic.co/u/alsyia)\ **Replies:** 2\ **Last updated:** [December 7, 2021, 2:14pm UTC](https://discuss.elastic.co/t/adding-and-removing-a-node-fixed-our-latency-issues/291059 "2021-12-07T14:14:27Z")
Dear all, I'm observing a very strange behaviour in my Elasticsearch cluster. It has ~35 nodes and stores dozens of Terabytes of data. We are running ES 5.5.3. We recently recreated all of our warm nodes so that they u… --- ## [Why setting \`inflight\_requests.type\` is not supported?](https://discuss.elastic.co/t/why-setting-inflight-requests-type-is-not-supported/291002)
**Author:** [@ViggoC](https://discuss.elastic.co/u/ViggoC)\ **Replies:** 3\ **Last updated:** [December 7, 2021, 2:00pm UTC](https://discuss.elastic.co/t/why-setting-inflight-requests-type-is-not-supported/291002 "2021-12-07T14:00:05Z")
I found out that add inflight\_requests.type in elasticsearch.yml is not supported, but request.type is ok. uncaught exception in thread \[main\] java.lang.IllegalArgumentException: unknown setting \[network.breaker.infligh… --- ## [\[7.15.1\] Allow GET \_security/user avoiding permission bloat](https://discuss.elastic.co/t/7-15-1-allow-get-security-user-avoiding-permission-bloat/289064)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 2\ **Last updated:** [December 7, 2021, 1:57pm UTC](https://discuss.elastic.co/t/7-15-1-allow-get-security-user-avoiding-permission-bloat/289064 "2021-12-07T13:57:25Z")
Hi there, I'd need to create a role which allows a user to make the following call GET \_security/user in order to list all the users of a cluster. Unfortunately, according to the API doc it seems to need the manage\_s… --- ## [Exact Match Term Query Filter](https://discuss.elastic.co/t/exact-match-term-query-filter/291123)
**Author:** [@Lockhead](https://discuss.elastic.co/u/Lockhead)\ **Replies:** 0\ **Last updated:** [December 7, 2021, 1:29pm UTC](https://discuss.elastic.co/t/exact-match-term-query-filter/291123 "2021-12-07T13:29:09Z")
I have a Keyword field, which can contain multiple values, is there a way to query only for documents that contain "only" a specific Keyword? Let's imagine I have an Index with the following 4 documents: {"tags": "a"} … --- ## [ILM policiy](https://discuss.elastic.co/t/ilm-policiy/290863)
**Author:** [@mrchile](https://discuss.elastic.co/u/mrchile)\ **Replies:** 2\ **Last updated:** [December 7, 2021, 12:50pm UTC](https://discuss.elastic.co/t/ilm-policiy/290863 "2021-12-07T12:50:47Z")
I have hot and warm. I want to move indexes that are more than one day old to a warm node. How can I achieve this - what steps should I follow? Logstash writes data to index =\> "name {date}" , not to datastreem --- ## [Rollovers always done on the same node](https://discuss.elastic.co/t/rollovers-always-done-on-the-same-node/291056)
**Author:** [@PEB](https://discuss.elastic.co/u/PEB)\ **Replies:** 2\ **Last updated:** [December 7, 2021, 12:23pm UTC](https://discuss.elastic.co/t/rollovers-always-done-on-the-same-node/291056 "2021-12-07T12:23:22Z")
Hi, I'm working on a small 7.15 cluster (8 data nodes named data-node-X), and for some time, I've observed an abnormal behaviour I can't find the origin of. Indeed, all new rollovers of major indexes (ILM managed) are … --- ## [Elasticstac 40min Data dealy](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040)
**Author:** [@HannoKuegler](https://discuss.elastic.co/u/HannoKuegler)\ **Replies:** 4\ **Last updated:** [December 7, 2021, 10:23am UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040 "2021-12-07T10:23:23Z")
Hey there, We have currently running a Netflow setup with Elasticsearch. Data is collected on the Netflow router. Unfortunately it pops up at the Kibana dashboards 40 min later. What could be the Problem there? I'm lo… --- ## [Labs Datasets](https://discuss.elastic.co/t/labs-datasets/291100)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 2\ **Last updated:** [December 7, 2021, 10:15am UTC](https://discuss.elastic.co/t/labs-datasets/291100 "2021-12-07T10:15:10Z")
Hope everyone is doing well My Strigo labs (Number of hours) has been expired and have no more access to Lab for the On-Demand training "Data Analyst" Is it possible to have the datasets used for labs to do labs on pre… --- ## [Elastic Search cant find the results from Regex pattern](https://discuss.elastic.co/t/elastic-search-cant-find-the-results-from-regex-pattern/289049)
**Author:** [@rishabhtryroll](https://discuss.elastic.co/u/rishabhtryroll)\ **Replies:** 1\ **Last updated:** [December 7, 2021, 9:51am UTC](https://discuss.elastic.co/t/elastic-search-cant-find-the-results-from-regex-pattern/289049 "2021-12-07T09:51:32Z")
I am searching a particular regex pattern in the discover tab through KQL and Lucence but I got the error Expected ":", "\<", "\<=", "\>", "\>=", AND, OR, end of input, whitespace but "\\" found. log:"api.mydomain.com" AND '… [Previous page](https://discuss.elastic.co/latest.md?page=1357) [Next page](https://discuss.elastic.co/latest.md?page=1359)