# Latest **URL:** https://discuss.elastic.co/latest.md?page=1364 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1365 --- ## [Panels to have in Kibana dashboard for troubleshooting applications](https://discuss.elastic.co/t/panels-to-have-in-kibana-dashboard-for-troubleshooting-applications/289949)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:23pm UTC](https://discuss.elastic.co/t/panels-to-have-in-kibana-dashboard-for-troubleshooting-applications/289949 "2021-12-02T21:23:37Z")
Hey folks, what are some good panels to have in kibana visualisation for developers to troubleshoot issues in applications? I am trying to create a dashboard that developers could use to pinpoint where the app is having… --- ## [Alert on Windows event id to be grouped by and include hostname](https://discuss.elastic.co/t/alert-on-windows-event-id-to-be-grouped-by-and-include-hostname/290249)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 9:21pm UTC](https://discuss.elastic.co/t/alert-on-windows-event-id-to-be-grouped-by-and-include-hostname/290249 "2021-12-02T21:21:33Z")
Hi, I would like to run an alert on a specific windows log event id. This alert should be grouped on hostname. So, if 3 hosts generate this alert i would like 3 separate alerts logged. However, i can't seem to do this… --- ## [Processing gzipped Log Files with Elastic Agent Custom Log Integration?](https://discuss.elastic.co/t/processing-gzipped-log-files-with-elastic-agent-custom-log-integration/290831)
**Author:** [@abolan](https://discuss.elastic.co/u/abolan)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 9:14pm UTC](https://discuss.elastic.co/t/processing-gzipped-log-files-with-elastic-agent-custom-log-integration/290831 "2021-12-02T21:14:03Z")
Hello, I have an Elastic Cloud environment set up and I'm trying to ingest and parse a number of gzipped log files from a pair of central log repository servers. The Elastic Agent is already installed and communicating … --- ## [Kibana Monitoring Dashboard shows dubious memory usage for Filebeat](https://discuss.elastic.co/t/kibana-monitoring-dashboard-shows-dubious-memory-usage-for-filebeat/289645)
**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:59pm UTC](https://discuss.elastic.co/t/kibana-monitoring-dashboard-shows-dubious-memory-usage-for-filebeat/289645 "2021-12-02T20:59:19Z")
I just set up Filebeat monitoring for my elk stack, and checked out the dashboard in Kibana. How am I meant to read the "Memory (MB)" section? It looks like it is saying the OS has \> 60 terabytes of memory reserved for t… --- ## [To apply time filter in canvas to all visualisations](https://discuss.elastic.co/t/to-apply-time-filter-in-canvas-to-all-visualisations/290655)
**Author:** [@SwetaD](https://discuss.elastic.co/u/SwetaD)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:55pm UTC](https://discuss.elastic.co/t/to-apply-time-filter-in-canvas-to-all-visualisations/290655 "2021-12-02T20:55:42Z")
Hello, I designed a canvas with several visualisations - mainly peak values for a day. I wish to insert a time filter common to all. I inserted a time filter but by changing the timestamp, no value changes. Can someon… --- ## [Vega Visualization ESe](https://discuss.elastic.co/t/vega-visualization-ese/290707)
**Author:** [@WhatImIDoing](https://discuss.elastic.co/u/WhatImIDoing)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:54pm UTC](https://discuss.elastic.co/t/vega-visualization-ese/290707 "2021-12-02T20:54:39Z")
I am getting an EsError for my vega script and i dont know what else to do. I tried putting it into the dev tools and fixed all the syntax errors shown there. Was working and now it doesn't. Kibana version: 7.10 { … --- ## [Histogram aggregation on calculated field by script](https://discuss.elastic.co/t/histogram-aggregation-on-calculated-field-by-script/290829)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 8:53pm UTC](https://discuss.elastic.co/t/histogram-aggregation-on-calculated-field-by-script/290829 "2021-12-02T20:53:16Z")
Hey everyone! We have index with products and every product (document in index) has several prices fields. We have query with script that calculates us finalPrice field because we do not know how many prices a document … --- ## [Canvas dropdown control doesn't work as I expected](https://discuss.elastic.co/t/canvas-dropdown-control-doesnt-work-as-i-expected/289786)
**Author:** [@marekpowwm](https://discuss.elastic.co/u/marekpowwm)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:52pm UTC](https://discuss.elastic.co/t/canvas-dropdown-control-doesnt-work-as-i-expected/289786 "2021-12-02T20:52:35Z")
I try to create a dropdown control inside the canvas. I created a data source and previewed it: And next, I tried to set up the display for this control: But nothing was displayed on the canvas when I clicked on t… --- ## [Logstash 7.15 grok patterns directory](https://discuss.elastic.co/t/logstash-7-15-grok-patterns-directory/290826)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:48pm UTC](https://discuss.elastic.co/t/logstash-7-15-grok-patterns-directory/290826 "2021-12-02T20:48:19Z")
Hi, I was running logstash 7.3, and had configured some grok patterns in a file and placed that file in /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-patterns-core-4.1.2/patterns/ After upgrading to logs… --- ## [Kibana Maps Tooltip Date format](https://discuss.elastic.co/t/kibana-maps-tooltip-date-format/290810)
**Author:** [@travisvyas](https://discuss.elastic.co/u/travisvyas)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:47pm UTC](https://discuss.elastic.co/t/kibana-maps-tooltip-date-format/290810 "2021-12-02T20:47:56Z")
After our kibana was updated to 7.12 we have noticed that our date/time fields are showing as epoch in the kibana maps when we hover over our data points. When the same date/fields are seen in discover tab they are fine… --- ## [Vega Multiple Roots Error](https://discuss.elastic.co/t/vega-multiple-roots-error/290824)
**Author:** [@WhatImIDoing](https://discuss.elastic.co/u/WhatImIDoing)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 8:46pm UTC](https://discuss.elastic.co/t/vega-multiple-roots-error/290824 "2021-12-02T20:46:44Z")
I am getting a multiple roots error from this vega script and i am not sure where in the transformation i am going wrong. { "$schema": "https://vega.github.io/schema/vega/v5.json", "description": "An example of a … --- ## [KIbana SQL query parametrization](https://discuss.elastic.co/t/kibana-sql-query-parametrization/289787)
**Author:** [@marekpowwm](https://discuss.elastic.co/u/marekpowwm)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:33pm UTC](https://discuss.elastic.co/t/kibana-sql-query-parametrization/289787 "2021-12-02T20:33:12Z")
Is it possible to add a parameter to select index using ES SQL? I created a variable named indexName and I tried to add it to the query this way: SELECT \* FROM "{indexName}" But I get the error: So my question is: … --- ## [Kibana NetworkError while trying to access /api/core/capabiities](https://discuss.elastic.co/t/kibana-networkerror-while-trying-to-access-api-core-capabiities/289408)
**Author:** [@kallistisoft](https://discuss.elastic.co/u/kallistisoft)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:28pm UTC](https://discuss.elastic.co/t/kibana-networkerror-while-trying-to-access-api-core-capabiities/289408 "2021-12-02T20:28:49Z")
I'm trying to setup an ELK stack on Arch Linux and am unable to access the Kibana dashboard. When trying to access Kibana it hangs on the 'loading elastic' loading screen and eventually fails by timing out on the reques… --- ## [Free Text Input Control](https://discuss.elastic.co/t/free-text-input-control/290757)
**Author:** [@kshepitzki1](https://discuss.elastic.co/u/kshepitzki1)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:26pm UTC](https://discuss.elastic.co/t/free-text-input-control/290757 "2021-12-02T20:26:44Z")
Input Controls are amazing. Would be nice to complement the Drop Down and Range controls with Free Text controls that are bound to specific fields like the other controls. Is it possible? --- ## [Fleet server problem](https://discuss.elastic.co/t/fleet-server-problem/289654)
**Author:** [@dzsonaszg](https://discuss.elastic.co/u/dzsonaszg)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 8:19pm UTC](https://discuss.elastic.co/t/fleet-server-problem/289654 "2021-12-02T20:19:35Z")
Hello, My Feelt server is missing from the agent list, and if i try to reistall, i get this message. Now my agents are working correctly. On my endpoints the enrollment works just fine, but not the endpoint security as… --- ## [Does rollup support scripted fields?](https://discuss.elastic.co/t/does-rollup-support-scripted-fields/290503)
**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 8:16pm UTC](https://discuss.elastic.co/t/does-rollup-support-scripted-fields/290503 "2021-12-02T20:16:53Z")
hi, team, i had created the scripted fields in index patterns. When i create rollups job, i cann't find the scripted fields that i will aggregate on metrics. --- ## [Custom domain using AWS Cloudfront](https://discuss.elastic.co/t/custom-domain-using-aws-cloudfront/289621)
**Author:** [@michael.brizic](https://discuss.elastic.co/u/michael.brizic)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:13pm UTC](https://discuss.elastic.co/t/custom-domain-using-aws-cloudfront/289621 "2021-12-02T20:13:02Z")
I've read this blog post which has been helpful in getting started: Custom Domain However, due to various requirements on our end, I need to proxy our Elastic Cloud Kibana instance using AWS Route53/Cloudfront. And for … --- ## [Issue on .tasks index when trying to update Kibana from 6.8 to 7.6](https://discuss.elastic.co/t/issue-on-tasks-index-when-trying-to-update-kibana-from-6-8-to-7-6/289575)
**Author:** [@cam1](https://discuss.elastic.co/u/cam1)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:09pm UTC](https://discuss.elastic.co/t/issue-on-tasks-index-when-trying-to-update-kibana-from-6-8-to-7-6/289575 "2021-12-02T20:09:37Z")
Hello, I'm trying to upgrade my ES cluster from 6.8 to 7.6 but i'm facing an issue when I try to update my Kibana instance. I get an error on the .tasks index : FATAL \[index\_not\_found\_exception\] no such index \[.tasks… --- ## [Kibana SESSION\_EXPIRED](https://discuss.elastic.co/t/kibana-session-expired/289506)
**Author:** [@mst3r25](https://discuss.elastic.co/u/mst3r25)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:06pm UTC](https://discuss.elastic.co/t/kibana-session-expired/289506 "2021-12-02T20:06:06Z")
I keep getting random SESSION\_EXPIRED when after implementing PKI authentication. If I use username and password my session never expires. Sometime I am able to use PKI to log back in after the SESSION\_EXPIRED, other tim… --- ## [Custom Analyser for IPv4 Mapped IPv6](https://discuss.elastic.co/t/custom-analyser-for-ipv4-mapped-ipv6/290822)
**Author:** [@Sai\_Satwik\_Kuppili](https://discuss.elastic.co/u/Sai_Satwik_Kuppili)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 7:55pm UTC](https://discuss.elastic.co/t/custom-analyser-for-ipv4-mapped-ipv6/290822 "2021-12-02T19:55:07Z")
Seems Elasticsearch doesn't allow IPv4 mapped IPv6 with CIDR to index. When I was trying to index IPv4-mapped-IPv6 ::ffff:127.12.0.1/108 I am getting the following error. PUT test PUT test/\_mapping/ { "dynamic\_t… --- ## [Systemctl start logstash does nothing](https://discuss.elastic.co/t/systemctl-start-logstash-does-nothing/290814)
**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\ **Replies:** 6\ **Last updated:** [December 2, 2021, 7:36pm UTC](https://discuss.elastic.co/t/systemctl-start-logstash-does-nothing/290814 "2021-12-02T19:36:57Z")
I am working on pulling changes onto a few logstash boxes. The issue is when I run the command systemctl start logstash I get nothing back. Expected: logstash starts with a verbose output. Actual: Any help with t… --- ## [Generation of logs for kibana has stopped after SIGHUP](https://discuss.elastic.co/t/generation-of-logs-for-kibana-has-stopped-after-sighup/289439)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:48pm UTC](https://discuss.elastic.co/t/generation-of-logs-for-kibana-has-stopped-after-sighup/289439 "2021-12-02T19:48:28Z")
I observed that after SIGHUP signal sent to kibana, logs generation have stopped. Please tell how and why sighup signal is sent to kibana service. --- ## [Getting lines of a log that surround an error message with kibana](https://discuss.elastic.co/t/getting-lines-of-a-log-that-surround-an-error-message-with-kibana/289368)
**Author:** [@tnibbe](https://discuss.elastic.co/u/tnibbe)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:41pm UTC](https://discuss.elastic.co/t/getting-lines-of-a-log-that-surround-an-error-message-with-kibana/289368 "2021-12-02T19:41:15Z")
Hello I am trying to use the ELK stack for error diagnosis with some testing output logs. I have a log structured as follows. DateTime MessageType MessageOrigin Message 2021-10-28T00:11:16… --- ## [Change kibana loading logo](https://discuss.elastic.co/t/change-kibana-loading-logo/289340)
**Author:** [@mohamed.softparadigm](https://discuss.elastic.co/u/mohamed.softparadigm)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:16pm UTC](https://discuss.elastic.co/t/change-kibana-loading-logo/289340 "2021-12-02T19:16:52Z")
I am running kibana 7.15 in a docker container. How can I change Elasticsearch loading logo in kibana iframe? --- ## [ElasticSearch 6.0 + Grafana 7.x data viz is not working as expected](https://discuss.elastic.co/t/elasticsearch-6-0-grafana-7-x-data-viz-is-not-working-as-expected/288669)
**Author:** [@111343](https://discuss.elastic.co/u/111343)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 7:15pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-grafana-7-x-data-viz-is-not-working-as-expected/288669 "2021-12-02T19:15:42Z")
Reporting the issue here What Grafana version and what operating system are you using? - 7.5.4 What are you trying to achieve? I’m trying to vizualize specific excerpts of the logs. I need to display performance of th… --- ## [CSV exporting reports fails almost all the time](https://discuss.elastic.co/t/csv-exporting-reports-fails-almost-all-the-time/289087)
**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:09pm UTC](https://discuss.elastic.co/t/csv-exporting-reports-fails-almost-all-the-time/289087 "2021-12-02T19:09:17Z")
In very similar vanes as 7.5 \[reporting\] fails randomly and Kibana Reporting -csv download fails frequently with error 'Unable to generate report Max attempts reached (3)' we're currently unable to do CSV exporting most … --- ## [Scaling Out a Cloud Deployment](https://discuss.elastic.co/t/scaling-out-a-cloud-deployment/290650)
**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 6:48pm UTC](https://discuss.elastic.co/t/scaling-out-a-cloud-deployment/290650 "2021-12-02T18:48:31Z")
We have an Elastic Cloud deployment and I'd like to scale out the hot data tier. However, it's not clear to me how to scale out vs. scaling up. Questions: Does changing "Size per zone" result in scaling out or only in … --- ## [Specific Graph](https://discuss.elastic.co/t/specific-graph/288909)
**Author:** [@Alexandre\_Solane](https://discuss.elastic.co/u/Alexandre_Solane)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 6:37pm UTC](https://discuss.elastic.co/t/specific-graph/288909 "2021-12-02T18:37:31Z")
Hello everyone, I have a specific question. In my Elastic Index, i've got record which contain many timestamp and one value input\_y (for each record). I want to create graph group by record that mark point input\_y for e… --- ## [Multiple SQL statements in query](https://discuss.elastic.co/t/multiple-sql-statements-in-query/288494)
**Author:** [@antongb](https://discuss.elastic.co/u/antongb)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 6:19pm UTC](https://discuss.elastic.co/t/multiple-sql-statements-in-query/288494 "2021-12-02T18:19:32Z")
Hi, I would like to design a query which finds the subset of field values based on the same values in a different document. Here is the document structure for context: TABLE = FRUIT\_QUESTIONS {"ID": 1, "question": "Do… --- ## [How to export/import an ES snapshot to/from an external harddrive](https://discuss.elastic.co/t/how-to-export-import-an-es-snapshot-to-from-an-external-harddrive/290796)
**Author:** [@dancing\_ghosts](https://discuss.elastic.co/u/dancing_ghosts)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 6:11pm UTC](https://discuss.elastic.co/t/how-to-export-import-an-es-snapshot-to-from-an-external-harddrive/290796 "2021-12-02T18:11:09Z")
We have our customers Filebeat/Winlogbeat data stored on our Elasticsearch instance. The customer has an Elasticsearch instance at their physical location which is the same version as ours. They wish to import this data … [Previous page](https://discuss.elastic.co/latest.md?page=1363) [Next page](https://discuss.elastic.co/latest.md?page=1365)