# Latest **URL:** https://discuss.elastic.co/latest.md?page=1363 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1364 --- ## [Daily dashboard report - Kibana](https://discuss.elastic.co/t/daily-dashboard-report-kibana/290875)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 2:17pm UTC](https://discuss.elastic.co/t/daily-dashboard-report-kibana/290875 "2021-12-03T14:17:30Z")
Hi. My setup has Suricata running and sending logs to ES to be displayed in KIbana. I want to generate daily reports from the custom dashboards that i have created. I know that Kibana allows this. Do i have to be a lic… --- ## [Update Documents (multiple fields) using multiple Index (Array of id's)](https://discuss.elastic.co/t/update-documents-multiple-fields-using-multiple-index-array-of-ids/290898)
**Author:** [@tirth\_pipalia](https://discuss.elastic.co/u/tirth_pipalia)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 2:00pm UTC](https://discuss.elastic.co/t/update-documents-multiple-fields-using-multiple-index-array-of-ids/290898 "2021-12-03T14:00:10Z")
I want an example where I can use Array of \[id's\] and Array of \[object{}\] (having fields and values), which will update ids\[0\] with object\[0\], ids\[1\] with object\[1\] in a single query. --- ## [Dec 3rd 2021: \[en\] What's new in the Elasticsearch Python client 8.0.0](https://discuss.elastic.co/t/dec-3rd-2021-en-whats-new-in-the-elasticsearch-python-client-8-0-0/289203)
**Author:** [@sethmlarson](https://discuss.elastic.co/u/sethmlarson)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-3rd-2021-en-whats-new-in-the-elasticsearch-python-client-8-0-0/289203 "2021-12-03T08:00:33Z")
There's an 8.0.0 pre-release out for the Elasticsearch client, fresh off the press! You can give it a try yourself or skip to the "What's new" section to read about all the new features coming in 8.0.0. Getting started S… --- ## [Logstash log4j2.properties deleting all the compressed files](https://discuss.elastic.co/t/logstash-log4j2-properties-deleting-all-the-compressed-files/290896)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 12:33pm UTC](https://discuss.elastic.co/t/logstash-log4j2-properties-deleting-all-the-compressed-files/290896 "2021-12-03T12:33:08Z")
Hi Team, I am trying to delete the audit files from Elasticsearch logs directory "C:\\test-elk\\Elasticsearch-7.7.0\\data\\logs". My audit files are generating to the mentioned path but unfortunately I am not able to delete… --- ## [How to get the most relevant fields from a single document?](https://discuss.elastic.co/t/how-to-get-the-most-relevant-fields-from-a-single-document/290895)
**Author:** [@IgnazK](https://discuss.elastic.co/u/IgnazK)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 12:33pm UTC](https://discuss.elastic.co/t/how-to-get-the-most-relevant-fields-from-a-single-document/290895 "2021-12-03T12:33:08Z")
I have an index containing documents with information about various products. As the documents were created from paginated files, the information text is mapped on numerated fields representing the respective page in the… --- ## [Add operation on log messages](https://discuss.elastic.co/t/add-operation-on-log-messages/289466)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 17\ **Last updated:** [December 3, 2021, 12:27pm UTC](https://discuss.elastic.co/t/add-operation-on-log-messages/289466 "2021-12-03T12:27:59Z")
Hi Team, I have logs, where when bank account is opened i am getting below messages. for APAC - bank account is opened in APAC for EMEA - bank account is opened in EMEA Say for a day, if there was 4 accounts opened… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/288862)
**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 11:49am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/288862 "2021-12-03T11:49:33Z")
hello, i installed 3 nodes of Elasticsearch and its working but when i put kibana i have the message "Kibana server is not ready yet" My log kibana.yml {"type":"log","@timestamp":"2021-11-10T10:12:19+01:00","tags":\["d… --- ## [Erros on kibana devtools "parse\_exception"](https://discuss.elastic.co/t/erros-on-kibana-devtools-parse-exception/290635)
**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\ **Replies:** 21\ **Last updated:** [December 3, 2021, 11:46am UTC](https://discuss.elastic.co/t/erros-on-kibana-devtools-parse-exception/290635 "2021-12-03T11:46:55Z")
hello, i have this error when i use dev tools, GET is working but PUT and POST action is not working, do you have any idea ? thanks for your response --- ## [Input fields involuntarily convert character combinations into unicode, like "\<-" or "=\>" into ← and ⇒](https://discuss.elastic.co/t/input-fields-involuntarily-convert-character-combinations-into-unicode-like-or-into-and/290870)
**Author:** [@grin](https://discuss.elastic.co/u/grin)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 11:11am UTC](https://discuss.elastic.co/t/input-fields-involuntarily-convert-character-combinations-into-unicode-like-or-into-and/290870 "2021-12-03T11:11:31Z")
I can't search for "-\>" or "\<-" or "=\>" and probably other combinations in Kibana since input gets converted to → ← ⇒ and like. Even if it isn't input: creating a filter by pressing (+) on a "-\>" field creates a filter … --- ## [Does Elasticagent has fileintegrity as a feauture](https://discuss.elastic.co/t/does-elasticagent-has-fileintegrity-as-a-feauture/290813)
**Author:** [@djamel.lahouazi](https://discuss.elastic.co/u/djamel.lahouazi)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 11:08am UTC](https://discuss.elastic.co/t/does-elasticagent-has-fileintegrity-as-a-feauture/290813 "2021-12-03T11:08:15Z")
Is there any integration in elasticagent for fileintegrity? --- ## [Filebeat with sophos module](https://discuss.elastic.co/t/filebeat-with-sophos-module/290867)
**Author:** [@sanil.ramachandran](https://discuss.elastic.co/u/sanil.ramachandran)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 10:40am UTC](https://discuss.elastic.co/t/filebeat-with-sophos-module/290867 "2021-12-03T10:40:00Z")
Hello, I am very new to elk. I have managed to install elasticsearch,kibana and filebeat in ubuntu server, managed to enable sophos module and manged to receive syslog messages from the appliance using rsyslog server. … --- ## [Line diagram showing sum of finished orders over time](https://discuss.elastic.co/t/line-diagram-showing-sum-of-finished-orders-over-time/290818)
**Author:** [@maxl](https://discuss.elastic.co/u/maxl)\ **Replies:** 5\ **Last updated:** [December 3, 2021, 10:15am UTC](https://discuss.elastic.co/t/line-diagram-showing-sum-of-finished-orders-over-time/290818 "2021-12-03T10:15:13Z")
Hello to the elastic community! I have a problem and I can't figure out how I could achieve this. Every few minutes some orders get finished. And I want to show how many are finished after 5 mins, after 10 mins, and s… --- ## [Filebeat data not indexed](https://discuss.elastic.co/t/filebeat-data-not-indexed/290801)
**Author:** [@Angelo\_Capone](https://discuss.elastic.co/u/Angelo_Capone)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 5:24pm UTC](https://discuss.elastic.co/t/filebeat-data-not-indexed/290801 "2021-12-02T17:24:08Z")
Hi, i'm using filebeat 7.15.1 running as a docker container with the following configuration: filebeat.config: modules: path: ${path.config}/modules.d/\*.yml reload.enabled: true reload.period: 60s filebe… --- ## [Monitor GCE VM commands](https://discuss.elastic.co/t/monitor-gce-vm-commands/286988)
**Author:** [@\_bugc4t](https://discuss.elastic.co/u/_bugc4t)\ **Replies:** 1\ **Last updated:** [December 3, 2021, 9:27am UTC](https://discuss.elastic.co/t/monitor-gce-vm-commands/286988 "2021-12-03T09:27:31Z")
I've got a running filebeat ECK cluster. However, I've got a new requirement to incorporate VM commands and processes from another GCP project for analysis. I've looked into the GCP Ops Agent and Auditbeat but neither s… --- ## [Filebeat k8s - autodiscover for podman.sock not working](https://discuss.elastic.co/t/filebeat-k8s-autodiscover-for-podman-sock-not-working/290857)
**Author:** [@cal2](https://discuss.elastic.co/u/cal2)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 9:11am UTC](https://discuss.elastic.co/t/filebeat-k8s-autodiscover-for-podman-sock-not-working/290857 "2021-12-03T09:11:55Z")
Hi Ok i've got filebeat running on kubernetes (k3s) via helm. All is working totally fine for gathering the cluster logs. I also have podman running on the same nodes and i'd like to use the docker autodiscover provide… --- ## [Filebeat/Logstash Delay](https://discuss.elastic.co/t/filebeat-logstash-delay/290856)
**Author:** [@Sumit\_Yadav](https://discuss.elastic.co/u/Sumit_Yadav)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 9:06am UTC](https://discuss.elastic.co/t/filebeat-logstash-delay/290856 "2021-12-03T09:06:06Z")
Hi Team I have a self managed elastic cluster. We are using Filebeat -\> logstash -\> Elasticsearch cluster-\> Kibana setup. All 7.15v with basic license. Data transferred through out the day is around 260GB. Filebeat hav… --- ## [Refreshing the access token when communicating with an API](https://discuss.elastic.co/t/refreshing-the-access-token-when-communicating-with-an-api/25384)
**Author:** [@rmarji](https://discuss.elastic.co/u/rmarji)\ **Replies:** 10\ **Last updated:** [December 3, 2021, 9:05am UTC](https://discuss.elastic.co/t/refreshing-the-access-token-when-communicating-with-an-api/25384 "2021-12-03T09:05:26Z")
I'm trying to use Http\_poller input plugin, to get results from an API, it works fine while the access token is valid, however its only valid for one hour, I want to be able to refresh the access token with the refresh t… --- ## [SIEM rules advice](https://discuss.elastic.co/t/siem-rules-advice/290422)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 8:20am UTC](https://discuss.elastic.co/t/siem-rules-advice/290422 "2021-12-03T08:20:57Z")
I am working on a team that is trying to use elastic as a SOC. We have all of the prebuilt SIEM rules within elastic, and someone enabled 80 of them at some point. Now we are going back through them to decide if we have … --- ## [Using FSCrawler as REST in simulate mode. How to disable communication with ES (Elasticsearch)](https://discuss.elastic.co/t/using-fscrawler-as-rest-in-simulate-mode-how-to-disable-communication-with-es-elasticsearch/290805)
**Author:** [@Francois\_Saab](https://discuss.elastic.co/u/Francois_Saab)\ **Replies:** 2\ **Last updated:** [December 3, 2021, 8:12am UTC](https://discuss.elastic.co/t/using-fscrawler-as-rest-in-simulate-mode-how-to-disable-communication-with-es-elasticsearch/290805 "2021-12-03T08:12:22Z")
Hello, We are using FSCrawler As Rest service and using it in simulate mode. We are uploading files to ES from our SDK. All is ok so far. However we want to configure FSCrawler to not communicate with ES , as we are o… --- ## [Relocation starts on network drops even though node\_left delay is set](https://discuss.elastic.co/t/relocation-starts-on-network-drops-even-though-node-left-delay-is-set/290797)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 7:54am UTC](https://discuss.elastic.co/t/relocation-starts-on-network-drops-even-though-node-left-delay-is-set/290797 "2021-12-03T07:54:00Z")
We have a process (Patch Orchestration in Azure Service Fabric) that patches our VMs. As I expect node reboots during this, I have set a node\_left delay to cover the reboot time (i.e., ~10 min). This generally works well… --- ## [When I log in to Kibana as kibana\_system user, it says "You do not have permission"](https://discuss.elastic.co/t/when-i-log-in-to-kibana-as-kibana-system-user-it-says-you-do-not-have-permission/290837)
**Author:** [@tadashi.oya](https://discuss.elastic.co/u/tadashi.oya)\ **Replies:** 4\ **Last updated:** [December 3, 2021, 7:38am UTC](https://discuss.elastic.co/t/when-i-log-in-to-kibana-as-kibana-system-user-it-says-you-do-not-have-permission/290837 "2021-12-03T07:38:40Z")
Hi there. When I log in to Kibana as kibana\_system user, it says "You do not have permission to access the requested page". As elastic user, the dashboard is displayed. The reproduction procedure is as follows. step … --- ## [NEST Client.SearchAsync\() automatically deserializes an object with a Null value](https://discuss.elastic.co/t/nest-client-searchasync-t-automatically-deserializes-an-object-with-a-null-value/290847)
**Author:** [@KhalidDu](https://discuss.elastic.co/u/KhalidDu)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 6:57am UTC](https://discuss.elastic.co/t/nest-client-searchasync-t-automatically-deserializes-an-object-with-a-null-value/290847 "2021-12-03T06:57:14Z")
When I'm in the Nest Client, I use Client.SearchAsync\() , Some fields in the result are Null, Entity is the Index structure that I inserted. When I use Client.SearchAsync\(), I don't want to use Object, w… --- ## [How to create/update fields to URL format?](https://discuss.elastic.co/t/how-to-create-update-fields-to-url-format/290730)
**Author:** [@brian661](https://discuss.elastic.co/u/brian661)\ **Replies:** 3\ **Last updated:** [December 3, 2021, 5:09am UTC](https://discuss.elastic.co/t/how-to-create-update-fields-to-url-format/290730 "2021-12-03T05:09:47Z")
I am trying to build my Kibana and automating the creation of the index patterns. For all of the index pattern, I want to update a field to format=URL, and set up the link on it, But I am not able to find the api I sho… --- ## [Is it possible to have a seperate kibana link with unique port for each jenkins job?](https://discuss.elastic.co/t/is-it-possible-to-have-a-seperate-kibana-link-with-unique-port-for-each-jenkins-job/290842)
**Author:** [@nava](https://discuss.elastic.co/u/nava)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 4:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-have-a-seperate-kibana-link-with-unique-port-for-each-jenkins-job/290842 "2021-12-03T04:29:21Z")
HI , My question is related to jenkins job. In a day we get 'N' number of jenkins jobs.instead of having consolidate kibana ,we want to have for each job need a different kibana dashboard ? is this possible ? if so w… --- ## [Elasticsearch highlight](https://discuss.elastic.co/t/elasticsearch-highlight/290838)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 0\ **Last updated:** [December 3, 2021, 3:46am UTC](https://discuss.elastic.co/t/elasticsearch-highlight/290838 "2021-12-03T03:46:00Z")
I want to have a accurate highlight match.for example ,then I search the string '2323',which will highlight the '2323' and don't highlight mathch '23231'、'23232' and so on.now I used the plain highlight type and default … --- ## [Kibana reporting download Intercept part of the string](https://discuss.elastic.co/t/kibana-reporting-download-intercept-part-of-the-string/289894)
**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\ **Replies:** 2\ **Last updated:** [December 3, 2021, 3:36am UTC](https://discuss.elastic.co/t/kibana-reporting-download-intercept-part-of-the-string/289894 "2021-12-03T03:36:49Z")
I want to download report as csv,but I have a big field which is text,and i want to download as many rows as possible，so i want to konw how can i do，if i don't update the xpack.reporting.csv.maxSizeBytes param because w… --- ## [Field with name for each document](https://discuss.elastic.co/t/field-with-name-for-each-document/290815)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 10:11pm UTC](https://discuss.elastic.co/t/field-with-name-for-each-document/290815 "2021-12-02T22:11:28Z")
In each entry I have IP address and I would have also name for it. I have pairs IP and name. How can I deal with it? To have name in each document where is IP adress? I use static lookup but this is hard to use, I don'… --- ## [Nest query search with AND](https://discuss.elastic.co/t/nest-query-search-with-and/290793)
**Author:** [@Katgust](https://discuss.elastic.co/u/Katgust)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:55pm UTC](https://discuss.elastic.co/t/nest-query-search-with-and/290793 "2021-12-02T21:55:51Z")
I'd like to convert this GET /financialfirms/\_search?q="Danske" AND "Bank" into DSL but can't find out how. Anyone wanna help? Right now every query I've made gives a result for "Danske" OR "Bank". I've tried differen… --- ## [How to add role/permissions to an existing API key?](https://discuss.elastic.co/t/how-to-add-role-permissions-to-an-existing-api-key/289946)
**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:32pm UTC](https://discuss.elastic.co/t/how-to-add-role-permissions-to-an-existing-api-key/289946 "2021-12-02T21:32:26Z")
I have created, from the Dev Console, and used an API key with "All" permissions for a particular index. I would now like to add "Read" permissions to a second index but use the existing API key. Can these be done? I am… --- ## [Problems with create Log threshold rule](https://discuss.elastic.co/t/problems-with-create-log-threshold-rule/290080)
**Author:** [@user25](https://discuss.elastic.co/u/user25)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:29pm UTC](https://discuss.elastic.co/t/problems-with-create-log-threshold-rule/290080 "2021-12-02T21:29:22Z")
Problems with create Log threshold rule in kibana -\>stack management -\> rules and connectors. I can't select any filed when creating this rule because there is an empty list. Elasticsearch, kibana, logstash have version … [Previous page](https://discuss.elastic.co/latest.md?page=1362) [Next page](https://discuss.elastic.co/latest.md?page=1364)