# Latest **URL:** https://discuss.elastic.co/latest.md?page=1379 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1380 --- ## [Kibana spaces fail to get status for filebeat agent while setup](https://discuss.elastic.co/t/kibana-spaces-fail-to-get-status-for-filebeat-agent-while-setup/289452)
**Author:** [@Rahul\_Kalshetty](https://discuss.elastic.co/u/Rahul_Kalshetty)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 8:21pm UTC](https://discuss.elastic.co/t/kibana-spaces-fail-to-get-status-for-filebeat-agent-while-setup/289452 "2021-11-22T20:21:17Z")
Im using filebeat to push my logs to Elasticsearch directly. I have configured a kibana space in filebeat.yml but it is giving me error saying Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GE… --- ## [Error uploading ndjson files to /api/saved\_objects/\_import : returned 406](https://discuss.elastic.co/t/error-uploading-ndjson-files-to-api-saved-objects-import-returned-406/289618)
**Author:** [@lokeshv1989](https://discuss.elastic.co/u/lokeshv1989)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 8:06pm UTC](https://discuss.elastic.co/t/error-uploading-ndjson-files-to-api-saved-objects-import-returned-406/289618 "2021-11-22T20:06:03Z")
Hi, we are trying to build powershell script to import the ndjson (Diskutilization.ndjson) file into Kibana. $upload\_object = $es\_url + “/api/saved\_objects/\_import?overwrite=true” $form = @{ file = Get-Content -Raw -P… --- ## [Logstash JMX input plugin cannot load Cassandra configuration](https://discuss.elastic.co/t/logstash-jmx-input-plugin-cannot-load-cassandra-configuration/289273)
**Author:** [@Erkan\_SIRIN](https://discuss.elastic.co/u/Erkan_SIRIN)\ **Replies:** 4\ **Last updated:** [November 22, 2021, 7:24pm UTC](https://discuss.elastic.co/t/logstash-jmx-input-plugin-cannot-load-cassandra-configuration/289273 "2021-11-22T19:24:20Z")
I am trying to get Cassandra metrics through logstash jmx input. My logstash pipeline conf: /etc/logstash/conf.d/cassandra\_jmx.conf input { jmx { path =\> "/etc/logstash/jmxconf" polling\_frequency =\> 15 … --- ## [How to increase the totalresults count? currently it is capped to 10000](https://discuss.elastic.co/t/how-to-increase-the-totalresults-count-currently-it-is-capped-to-10000/289624)
**Author:** [@Mecadamia.nut](https://discuss.elastic.co/u/Mecadamia.nut)\ **Replies:** 5\ **Last updated:** [November 22, 2021, 7:07pm UTC](https://discuss.elastic.co/t/how-to-increase-the-totalresults-count-currently-it-is-capped-to-10000/289624 "2021-11-22T19:07:54Z")
We have around 35k records ingested in the appsearch engine. when we do the default search without any searchTerm it gives 10000 as the totalResults count instead of 35000 even though the user may not scroll through all … --- ## [How to sort ResultView data](https://discuss.elastic.co/t/how-to-sort-resultview-data/288798)
**Author:** [@pradeepjanga](https://discuss.elastic.co/u/pradeepjanga)\ **Replies:** 16\ **Last updated:** [November 22, 2021, 6:42pm UTC](https://discuss.elastic.co/t/how-to-sort-resultview-data/288798 "2021-11-22T18:42:00Z")
I have custom result view but i want to do some sorting before data is being rendered. is that possible? \ {wasSearched && (totalResults \> 0) ? \ **Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 6:13pm UTC](https://discuss.elastic.co/t/creating-a-watcher-to-compare-moving-average-values/289634 "2021-11-22T18:13:23Z") Hello there, I'm trying to build a watcher to compare two values for a moving average, one being the latest bucket moving average value and the other the moving average value for a bucket one month earlier (-1 Month off… --- ## [Disk capacity for elasticsearch](https://discuss.elastic.co/t/disk-capacity-for-elasticsearch/289816)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 4\ **Last updated:** [November 22, 2021, 4:25pm UTC](https://discuss.elastic.co/t/disk-capacity-for-elasticsearch/289816 "2021-11-22T16:25:37Z")
I want to ship my application log files into Elasticsearch and trying to come-up with a capacity plan for Elasticsearch. Let's say if I have 1 GB log file, how much disk space I need for Elasticsearch to store log conte… --- ## [Service\_name auto-discovery issue](https://discuss.elastic.co/t/service-name-auto-discovery-issue/289604)
**Author:** [@coynef](https://discuss.elastic.co/u/coynef)\ **Replies:** 7\ **Last updated:** [November 22, 2021, 3:14pm UTC](https://discuss.elastic.co/t/service-name-auto-discovery-issue/289604 "2021-11-22T15:14:03Z")
Kibana version: 7.10.1 Elasticsearch version:7.10.1 APM Server version:7.10.1 APM Agent language and version: 1.26.0 Description of the problem including expected versus actual behavior. Please include screenshots (i… --- ## [Readonly role/user unable to view remote cluster index results](https://discuss.elastic.co/t/readonly-role-user-unable-to-view-remote-cluster-index-results/289615)
**Author:** [@jwmocs](https://discuss.elastic.co/u/jwmocs)\ **Replies:** 2\ **Last updated:** [November 22, 2021, 2:56pm UTC](https://discuss.elastic.co/t/readonly-role-user-unable-to-view-remote-cluster-index-results/289615 "2021-11-22T14:56:22Z")
Basically I need a readonly role to simulate the "experimental" viewer role, but limit Kibana privileges to only Analytics\>Discover, and Management\>Dev-tools. But my custom readonly role after assigning ALL run-as priv… --- ## [Filebeat \> logstash "Invalid FieldReference" in the log](https://discuss.elastic.co/t/filebeat-logstash-invalid-fieldreference-in-the-log/289747)
**Author:** [@gyurgyalag](https://discuss.elastic.co/u/gyurgyalag)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 2:47pm UTC](https://discuss.elastic.co/t/filebeat-logstash-invalid-fieldreference-in-the-log/289747 "2021-11-22T14:47:38Z")
seems there are similare topics to this without answer 1 and one suggests there is no solution 2 But I ask anyway maybe somebody can help. This is the error: ^\[\[Alogstash | \[2021-11-20T16:57:20,868\]\[INFO \]\[org.log… --- ## ["Unable to save document" while indexing document](https://discuss.elastic.co/t/unable-to-save-document-while-indexing-document/289809)
**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 2:37pm UTC](https://discuss.elastic.co/t/unable-to-save-document-while-indexing-document/289809 "2021-11-22T14:37:55Z")
HI, Using app search and Elasticsearch version 7.10 A few ids have got corrupted while indexing appsearch, now when i am trying to index them even v through Postman i get \[ { "id": "123456a2-e619-43f9-98c2… --- ## [Elasticsearch remove fields](https://discuss.elastic.co/t/elasticsearch-remove-fields/289442)
**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\ **Replies:** 12\ **Last updated:** [November 22, 2021, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-remove-fields/289442 "2021-11-22T14:27:22Z")
Hello! i'm using: elasticsearch 7.13.2 kibana 7.12.1 I am trying to remove index pattern fields in kibana -\> dev tools using the following command POST /mdaemon\_test\_array\_2\_step-2021.11.16\_test\_reindex/\_update\_by\_… --- ## [Multi Terms aggregation does not exist in Java High Level REST Client！](https://discuss.elastic.co/t/multi-terms-aggregation-does-not-exist-in-java-high-level-rest-client/289044)
**Author:** [@Ethan.Winst](https://discuss.elastic.co/u/Ethan.Winst)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 1:08pm UTC](https://discuss.elastic.co/t/multi-terms-aggregation-does-not-exist-in-java-high-level-rest-client/289044 "2021-11-22T13:08:31Z")
Multi Terms aggregation does not exist in Java High Level REST Client！ Does Multi Terms aggregation currently only provide this function for kibana? --- ## [How to disable instrumentation just for kafka producers (but not consumers) on APM java agent](https://discuss.elastic.co/t/how-to-disable-instrumentation-just-for-kafka-producers-but-not-consumers-on-apm-java-agent/289796)
**Author:** [@spekdrum](https://discuss.elastic.co/u/spekdrum)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 12:50pm UTC](https://discuss.elastic.co/t/how-to-disable-instrumentation-just-for-kafka-producers-but-not-consumers-on-apm-java-agent/289796 "2021-11-22T12:50:36Z")
Hi, I now I can disable instrumentation for kafka events with disable\_instrumentations property like this: disable\_instrumentations=kafka But this removes all related to Kafka. I would like to disable instrumentation … --- ## [Elasticsearch plugin-install don't use the proper Java version](https://discuss.elastic.co/t/elasticsearch-plugin-install-dont-use-the-proper-java-version/289269)
**Author:** [@Jeremy\_Gachet](https://discuss.elastic.co/u/Jeremy_Gachet)\ **Replies:** 4\ **Last updated:** [November 22, 2021, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-plugin-install-dont-use-the-proper-java-version/289269 "2021-11-22T12:50:28Z")
Hello, I try to install the OpenNlp plugin on my local machine with the command bin/elasticsearch-plugin install https://github.com/spinscale/elasticsearch-ingest-opennlp/releases/download/7.15.2.1/ingest-opennlp-7.15.… --- ## [Can transform with init, map, combine, reduce emit multiple documents?](https://discuss.elastic.co/t/can-transform-with-init-map-combine-reduce-emit-multiple-documents/289563)
**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 9\ **Last updated:** [November 22, 2021, 12:26pm UTC](https://discuss.elastic.co/t/can-transform-with-init-map-combine-reduce-emit-multiple-documents/289563 "2021-11-22T12:26:34Z")
Hi, In an index we have multiple documents for sequential steps that are part of a single transaction. We need to calculate the elapsed times for each step. Instead of emitting 1 document with all timings for all step… --- ## [Few questions on running elasticsearch with free license](https://discuss.elastic.co/t/few-questions-on-running-elasticsearch-with-free-license/289801)
**Author:** [@prat1](https://discuss.elastic.co/u/prat1)\ **Replies:** 2\ **Last updated:** [November 22, 2021, 12:08pm UTC](https://discuss.elastic.co/t/few-questions-on-running-elasticsearch-with-free-license/289801 "2021-11-22T12:08:40Z")
Hi Team, Is there any limit on the number of GB of logs per day, say in filebeat processing of GBs of data or in logstash ingestion or any limit on elasticsearch storage of GBs of data in free license of Elasticsearch? … --- ## [Crawler always fails when there are several domains](https://discuss.elastic.co/t/crawler-always-fails-when-there-are-several-domains/289734)
**Author:** [@mbil](https://discuss.elastic.co/u/mbil)\ **Replies:** 2\ **Last updated:** [November 22, 2021, 11:59am UTC](https://discuss.elastic.co/t/crawler-always-fails-when-there-are-several-domains/289734 "2021-11-22T11:59:30Z")
When I run the crawler with only one domain configured, it runs successfully, even this domain has thousands of pages. After that, I delete the domain, add a new one and start the crawler again. This works fine, but it… --- ## [How can I turn off the security warning popup in kibana Discover UI](https://discuss.elastic.co/t/how-can-i-turn-off-the-security-warning-popup-in-kibana-discover-ui/289560)
**Author:** [@wabrit](https://discuss.elastic.co/u/wabrit)\ **Replies:** 2\ **Last updated:** [November 22, 2021, 11:44am UTC](https://discuss.elastic.co/t/how-can-i-turn-off-the-security-warning-popup-in-kibana-discover-ui/289560 "2021-11-22T11:44:14Z")
I'm running es/kibana 7.15.1 with security disabled in es, but the kibana discovery screen is unusable because of the constant appearance of these popups: Is there any way to turn them off? --- ## [Domain identifier only for one specific subdomain](https://discuss.elastic.co/t/domain-identifier-only-for-one-specific-subdomain/289689)
**Author:** [@iamvg](https://discuss.elastic.co/u/iamvg)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 11:40am UTC](https://discuss.elastic.co/t/domain-identifier-only-for-one-specific-subdomain/289689 "2021-11-22T11:40:49Z")
In Swiftype site search, I am planning to use a domain identifier to filter results based on domain. I've added 3 subdomains under one Swiftype engine. Using the below approach I am planning to add domain identifier fo… --- ## [Installation of metricbeat (any Beat)](https://discuss.elastic.co/t/installation-of-metricbeat-any-beat/289583)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 2\ **Last updated:** [November 22, 2021, 11:22am UTC](https://discuss.elastic.co/t/installation-of-metricbeat-any-beat/289583 "2021-11-22T11:22:44Z")
I have just installed 7.15 metric beat, but I do not like any of the defaults. Typically when running an msi you can choose all the configurables. How can I achieve the same for the beat installations. I am on windows… --- ## [Tuning search results for Kibana](https://discuss.elastic.co/t/tuning-search-results-for-kibana/288623)
**Author:** [@amcgrawRVA](https://discuss.elastic.co/u/amcgrawRVA)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 11:14am UTC](https://discuss.elastic.co/t/tuning-search-results-for-kibana/288623 "2021-11-22T11:14:50Z")
I am a non-coder musicologist using Elastic to search and visualize a large music-related dataset. I would like to tune search on my full text fields. Tuning search is straightforward in app search and in the dev tools c… --- ## [Filebeat -\> logstash -\> elastic](https://discuss.elastic.co/t/filebeat-logstash-elastic/289469)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 5\ **Last updated:** [November 22, 2021, 10:47am UTC](https://discuss.elastic.co/t/filebeat-logstash-elastic/289469 "2021-11-22T10:47:27Z")
I was using logstash to forward filebeat info (zeek and suricata) to the elastic cluster I manage. Filebeat is 7.12.0 and logstash and elastic are version 7.13.4. It was working without a problem until yesterday. I am n… --- ## [Order by dynamically by a field in bar chart](https://discuss.elastic.co/t/order-by-dynamically-by-a-field-in-bar-chart/289579)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 3\ **Last updated:** [November 22, 2021, 10:42am UTC](https://discuss.elastic.co/t/order-by-dynamically-by-a-field-in-bar-chart/289579 "2021-11-22T10:42:22Z")
Hi, I Plot a bar chart in kibana visualization and I am showing multiple bar for multiple fields value in x-axis. I want to add filter and set order on chart based on any filed. Chat image is below. Any filter opti… --- ## [Error creating runner from config: 1 error: string value is not set accessing 'perfmon.queries.0.counters.1.name'](https://discuss.elastic.co/t/error-creating-runner-from-config-1-error-string-value-is-not-set-accessing-perfmon-queries-0-counters-1-name/289195)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 3\ **Last updated:** [November 22, 2021, 10:37am UTC](https://discuss.elastic.co/t/error-creating-runner-from-config-1-error-string-value-is-not-set-accessing-perfmon-queries-0-counters-1-name/289195 "2021-11-22T10:37:05Z")
Anyone able to decode the error "Error creating runner from config: 1 error: string value is not set accessing 'perfmon.queries.0.counters.1.name'" and explain what its trying to tell me? I have copied the example perfm… --- ## [Filebeat 7.12 to output to multiple kafka topics](https://discuss.elastic.co/t/filebeat-7-12-to-output-to-multiple-kafka-topics/288056)
**Author:** [@itsec](https://discuss.elastic.co/u/itsec)\ **Replies:** 11\ **Last updated:** [November 22, 2021, 10:23am UTC](https://discuss.elastic.co/t/filebeat-7-12-to-output-to-multiple-kafka-topics/288056 "2021-11-22T10:23:15Z")
Hi, I'm on filebeat 7.12 (Centos7). How do i output to multiple topics Pls advise. filebeat: prospectors: - type: log enabled: true paths: -/opt/xssssss/log/xxx.txt close\_rename: true fields: document\_type: "x… --- ## [Kibana 7.15.2 Security Update](https://discuss.elastic.co/t/kibana-7-15-2-security-update/289788)
**Author:** [@Ilya\_Moskalev](https://discuss.elastic.co/u/Ilya_Moskalev)\ **Replies:** 4\ **Last updated:** [November 22, 2021, 9:24am UTC](https://discuss.elastic.co/t/kibana-7-15-2-security-update/289788 "2021-11-22T09:24:52Z")
Hello everyone! Tell me plz my kibana is affected by this vulnerability if it works on HTTPS and hosted on Linux security engineers want me to update kibana, but I do not want to recklessly update. --- ## [JDBC logging duplicate row](https://discuss.elastic.co/t/jdbc-logging-duplicate-row/289297)
**Author:** [@LinhNT1](https://discuss.elastic.co/u/LinhNT1)\ **Replies:** 3\ **Last updated:** [November 22, 2021, 8:46am UTC](https://discuss.elastic.co/t/jdbc-logging-duplicate-row/289297 "2021-11-22T08:46:02Z")
Hi there, I have a logtash with JDBC input like below jdbc { jdbc\_driver\_library =\> "${LOGSTASH\_JDBC\_DRIVER\_JAR\_LOCATION}" jdbc\_driver\_class =\> "${LOGSTASH\_JDBC\_DRIVER}" jdbc\_connection\_string =\>… --- ## [How to point out kibana to multiple elasticsearch cluster](https://discuss.elastic.co/t/how-to-point-out-kibana-to-multiple-elasticsearch-cluster/289780)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [November 22, 2021, 8:31am UTC](https://discuss.elastic.co/t/how-to-point-out-kibana-to-multiple-elasticsearch-cluster/289780 "2021-11-22T08:31:57Z")
Hello team, We have 5 different kibana cluster with 5 different URL. We need one kibana URL like http://kibana.com/ and we need to change kibana URL like http://kibana.com/cluster1 http://kibana.com/cluster2 http://… --- ## [How to install custom plugin from s3 locations in Kubernetes Elasticsearch(ECK)?](https://discuss.elastic.co/t/how-to-install-custom-plugin-from-s3-locations-in-kubernetes-elasticsearch-eck/289781)
**Author:** [@manu\_john](https://discuss.elastic.co/u/manu_john)\ **Replies:** 0\ **Last updated:** [November 22, 2021, 8:11am UTC](https://discuss.elastic.co/t/how-to-install-custom-plugin-from-s3-locations-in-kubernetes-elasticsearch-eck/289781 "2021-11-22T08:11:52Z")
How to install a custom plugin from s3 locations in Kubernetes Elasticsearch(ECK)? [Previous page](https://discuss.elastic.co/latest.md?page=1378) [Next page](https://discuss.elastic.co/latest.md?page=1380)