# Latest **URL:** https://discuss.elastic.co/latest.md?page=1407 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1408 --- ## [Saved Objects, Visualized items and Dashboards is missing](https://discuss.elastic.co/t/saved-objects-visualized-items-and-dashboards-is-missing/287946)
**Author:** [@Brisma](https://discuss.elastic.co/u/Brisma)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 6:50pm UTC](https://discuss.elastic.co/t/saved-objects-visualized-items-and-dashboards-is-missing/287946 "2021-11-01T18:50:49Z")
Currently i develop dashboards and visualization in Kibana. In the next days, there are error when opening kibana with error message like this: {"statusCode":500,"error":"Internal Server Error","message":"{illegal\_argum… --- ## [How send Auditbeat dashboard to kibana (rancher)](https://discuss.elastic.co/t/how-send-auditbeat-dashboard-to-kibana-rancher/288165)
**Author:** [@sadux](https://discuss.elastic.co/u/sadux)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 6:49pm UTC](https://discuss.elastic.co/t/how-send-auditbeat-dashboard-to-kibana-rancher/288165 "2021-11-01T18:49:41Z")
Hello! I'm new at ELK. Just update ELK stack to 7.15.1 and need download Auditbeat dashboards to kibana. Kibana running at rancher container. How I should download dashboards to Kibana? --- ## [Nested Gauge Chart](https://discuss.elastic.co/t/nested-gauge-chart/288129)
**Author:** [@bodach](https://discuss.elastic.co/u/bodach)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 6:41pm UTC](https://discuss.elastic.co/t/nested-gauge-chart/288129 "2021-11-01T18:41:57Z")
Hello, I saw this gauge chart somewhere and I want to use the same structure in my canvas. Any ideas where can i download it? --- ## [Sorting by named query result](https://discuss.elastic.co/t/sorting-by-named-query-result/288168)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 6:36pm UTC](https://discuss.elastic.co/t/sorting-by-named-query-result/288168 "2021-11-01T18:36:33Z")
Is it possible to sort the results of the ES query by the value present in the named query? We have such code in Elasticsearch-dsl: def \_named\_family\_sample\_q(family\_samples\_q, family\_guid, quality\_filters\_by\_family): … --- ## [7.15.1 is extremely slow](https://discuss.elastic.co/t/7-15-1-is-extremely-slow/287617)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 10\ **Last updated:** [November 1, 2021, 5:25pm UTC](https://discuss.elastic.co/t/7-15-1-is-extremely-slow/287617 "2021-11-01T17:25:50Z")
whom ever it may concern something is wrong with 7.15.1 loading kibana dashboard is extremely slow same hardware works loading same data same dashboard in 7.12 only 14 second. 7.15.1 it takes 2 min. everything is same … --- ## [Web Crawler Failed HTTP request: Unable to request “\< domain \>” because it resolved to only private/invalid addresses v2](https://discuss.elastic.co/t/web-crawler-failed-http-request-unable-to-request-domain-because-it-resolved-to-only-private-invalid-addresses-v2/288102)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 4:56pm UTC](https://discuss.elastic.co/t/web-crawler-failed-http-request-unable-to-request-domain-because-it-resolved-to-only-private-invalid-addresses-v2/288102 "2021-11-01T16:56:10Z")
An issue with the same subject was raised in April 2020.. orhantoyElastic Team Member advised "Yes, that's the current, default behavior and it will become configurable in the next minor release." Has this become confi… --- ## [Bulk import](https://discuss.elastic.co/t/bulk-import/288084)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 4:41pm UTC](https://discuss.elastic.co/t/bulk-import/288084 "2021-11-01T16:41:09Z")
I have 2M recorders that i want to push to elastic enterprise search. There is an old thread That suggested to chunk the data to 100 records and index it via API. I wonder if there is a better solution and more trans… --- ## [(How) is it possible to monitor the progress of a crawler?](https://discuss.elastic.co/t/how-is-it-possible-to-monitor-the-progress-of-a-crawler/288079)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 4:35pm UTC](https://discuss.elastic.co/t/how-is-it-possible-to-monitor-the-progress-of-a-crawler/288079 "2021-11-01T16:35:48Z")
I have setup a crawler, but do not recognise any evidence of its progress. Is there a page showing a count or an animated graphic suggesting progress? --- ## [Add a domain to get started - validate domain - failed](https://discuss.elastic.co/t/add-a-domain-to-get-started-validate-domain-failed/288077)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 4:28pm UTC](https://discuss.elastic.co/t/add-a-domain-to-get-started-validate-domain-failed/288077 "2021-11-01T16:28:40Z")
A first try, using python3 http.server Suggestion gratefully received --- ## [Security rules failing (timed out) all the time](https://discuss.elastic.co/t/security-rules-failing-timed-out-all-the-time/285681)
**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\ **Replies:** 5\ **Last updated:** [November 1, 2021, 4:05pm UTC](https://discuss.elastic.co/t/security-rules-failing-timed-out-all-the-time/285681 "2021-11-01T16:05:27Z")
I have a testing Elasticsearch (7.14.0 before and 7.15.0 now) where I'm sending filebeat's Threat Intel data (50,000 documents on the filebeat-\* index) and a Firewall data index with less than 1,000,000 messages. I've c… --- ## [Endpoint SIEM rule trigger execution "email"](https://discuss.elastic.co/t/endpoint-siem-rule-trigger-execution-email/287836)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 4:04pm UTC](https://discuss.elastic.co/t/endpoint-siem-rule-trigger-execution-email/287836 "2021-11-01T16:04:30Z")
Simple idea and question for this one. SIEM rules are really nice but I'll be honest I don't keep the Alerts tabs open 24x7. I do have to sleep at some point in life... Setting the Endpoint Security rule to perform a ta… --- ## [Search #/@'s on ElasticSearch](https://discuss.elastic.co/t/search-s-on-elasticsearch/288157)
**Author:** [@Joran](https://discuss.elastic.co/u/Joran)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 3:51pm UTC](https://discuss.elastic.co/t/search-s-on-elasticsearch/288157 "2021-11-01T15:51:45Z")
Hi, We attempted to index @/#'s on our Elasticsearch, so we could search for example "#bitcoin". See here our settings for our Index "users" (some settings I replaced with "PRIVATE"): "users": { "settings": { "index"… --- ## [How to see differences in Bar Vertical Percentage](https://discuss.elastic.co/t/how-to-see-differences-in-bar-vertical-percentage/288125)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 3:37pm UTC](https://discuss.elastic.co/t/how-to-see-differences-in-bar-vertical-percentage/288125 "2021-11-01T15:37:28Z")
Hi, I'm using 7.15, I have created Bar Vertical Percentage that will show build status, the build runs 700 tests... and sometimes there are tests failures, in the visual I've created it is hard to see the failed builds… --- ## [How to add the name of Ingest node that processed the pipeline to special field](https://discuss.elastic.co/t/how-to-add-the-name-of-ingest-node-that-processed-the-pipeline-to-special-field/288091)
**Author:** [@Ayd\_Asraf](https://discuss.elastic.co/u/Ayd_Asraf)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 3:36pm UTC](https://discuss.elastic.co/t/how-to-add-the-name-of-ingest-node-that-processed-the-pipeline-to-special-field/288091 "2021-11-01T15:36:00Z")
Hello, I am trying to get the ingest node name that ran the pipeline which produced the output final document and append it to the document by setting the value of a special extra field "ingested\_on" that was created fo… --- ## [Shard creation when using index pattern](https://discuss.elastic.co/t/shard-creation-when-using-index-pattern/288099)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 3:11pm UTC](https://discuss.elastic.co/t/shard-creation-when-using-index-pattern/288099 "2021-11-01T15:11:55Z")
How are shards created/allocated when we are using an index pattern such that each day's log is written to a separate index (eg my\_index\_emailf\_log-\* , my\_index\_emailf\_log-dd-mm-yyyy .) Suppose we have specified 1 pri… --- ## [Metricbeat lambda](https://discuss.elastic.co/t/metricbeat-lambda/287267)
**Author:** [@Narkomax](https://discuss.elastic.co/u/Narkomax)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 3:07pm UTC](https://discuss.elastic.co/t/metricbeat-lambda/287267 "2021-11-01T15:07:23Z")
Who can explain me why? We are using metricbeat to monitor AWS Lambdas. Using simple standard dashboard. Today, we have 1 error in cloudwatch in our lambda, but for some reason metricbeat found 4 errors with the same t… --- ## [Filter over 6000 values in Kibana](https://discuss.elastic.co/t/filter-over-6000-values-in-kibana/288136)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 2:56pm UTC](https://discuss.elastic.co/t/filter-over-6000-values-in-kibana/288136 "2021-11-01T14:56:19Z")
Hey! I have created a query filter in python and send it to Kibana as a saved object. The final saved object looks like that: { "attributes": { "description": "", "filters": \[{ "query":… --- ## [Excluded fields in index pattern still shows up as suggestions in search bar](https://discuss.elastic.co/t/excluded-fields-in-index-pattern-still-shows-up-as-suggestions-in-search-bar/287913)
**Author:** [@ella.danielsson](https://discuss.elastic.co/u/ella.danielsson)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 2:30pm UTC](https://discuss.elastic.co/t/excluded-fields-in-index-pattern-still-shows-up-as-suggestions-in-search-bar/287913 "2021-11-01T14:30:19Z")
I have excluded the field NodeAlias and NodeAlias.keyword in my index pattern. But when I am viewing my data in discovery and clicking in the search bar with kql as search language the excluded field is still suggested. … --- ## [How To read in logstash the response from elasticsearch using elasticsearch output plugin](https://discuss.elastic.co/t/how-to-read-in-logstash-the-response-from-elasticsearch-using-elasticsearch-output-plugin/288135)
**Author:** [@yeppazu](https://discuss.elastic.co/u/yeppazu)\ **Replies:** 5\ **Last updated:** [November 1, 2021, 2:16pm UTC](https://discuss.elastic.co/t/how-to-read-in-logstash-the-response-from-elasticsearch-using-elasticsearch-output-plugin/288135 "2021-11-01T14:16:31Z")
Hi :slight\_smile: there is a some method to read response from Elasticsearch and trigger an action over it? (eg: running script, call an http url, ...) Normally, elastic return a JSON after HTTP index request. This JSO… --- ## [Filebeat only reads my local machine log files](https://discuss.elastic.co/t/filebeat-only-reads-my-local-machine-log-files/288119)
**Author:** [@Amrbayoumy89](https://discuss.elastic.co/u/Amrbayoumy89)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 2:14pm UTC](https://discuss.elastic.co/t/filebeat-only-reads-my-local-machine-log-files/288119 "2021-11-01T14:14:51Z")
Hello Dears, I started to install Elasticsearch, Filebeat and Kibana on my local machine. I have a written text file for Tomcat logs called "tomcatServerlogs.log" and I entered its path in filebeat.yml When I switch to… --- ## [Index management not listing indicies in the cluster for superuser](https://discuss.elastic.co/t/index-management-not-listing-indicies-in-the-cluster-for-superuser/288110)
**Author:** [@vijayebpzr](https://discuss.elastic.co/u/vijayebpzr)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 1:47pm UTC](https://discuss.elastic.co/t/index-management-not-listing-indicies-in-the-cluster-for-superuser/288110 "2021-11-01T13:47:11Z")
I logged into kibana as superuser, but I am not able to view the indicies that are present in the cluster. However I can see the index patterns and could query those patterns in Discover tab. I am wondering what is restr… --- ## [Uptime discovery/self registration](https://discuss.elastic.co/t/uptime-discovery-self-registration/287294)
**Author:** [@Bert\_Vanpeteghem](https://discuss.elastic.co/u/Bert_Vanpeteghem)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 1:44pm UTC](https://discuss.elastic.co/t/uptime-discovery-self-registration/287294 "2021-11-01T13:44:59Z")
Hi, is it possible to have some kind of discovery/self registration for applications and services in Elastic Uptime? So that applications can register the required uptime checks and alerting without having to bother the… --- ## [Is it possible to save column width in dashboard?](https://discuss.elastic.co/t/is-it-possible-to-save-column-width-in-dashboard/288126)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 1:18pm UTC](https://discuss.elastic.co/t/is-it-possible-to-save-column-width-in-dashboard/288126 "2021-11-01T13:18:45Z")
Hi, I'm using 7.15, My dashboard appears with few visuals, in the visual the columns are not width enough... So I've can set new width but the save Dashboard button is disabled. Is there a way to save column width in d… --- ## [Error load indices](https://discuss.elastic.co/t/error-load-indices/287914)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 1:14pm UTC](https://discuss.elastic.co/t/error-load-indices/287914 "2021-11-01T13:14:08Z")
I have got error to load indices in kibana. In Elasticsearch log no errors. Kabana logs contains next : {"type":"log","@timestamp":"2021-10-28T15:54:31+03:00","tags":\["error","http"\],"pid":39683,"message":"TypeError: Ca… --- ## [Filebeat Module - Umbrella - Parsing not usable Data](https://discuss.elastic.co/t/filebeat-module-umbrella-parsing-not-usable-data/285632)
**Author:** [@elasticband](https://discuss.elastic.co/u/elasticband)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 12:59pm UTC](https://discuss.elastic.co/t/filebeat-module-umbrella-parsing-not-usable-data/285632 "2021-11-01T12:59:11Z")
Hey Everyone, I have had pretty decent luck with the Filebeat modules, I currently use multiple Cisco ingestions (ASA, FTD, Meraki), and I have the Umbrella information being recognized and parsed; however I really do n… --- ## [How to disable popups in Kibana visualization](https://discuss.elastic.co/t/how-to-disable-popups-in-kibana-visualization/288076)
**Author:** [@Kinkokela](https://discuss.elastic.co/u/Kinkokela)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 12:53pm UTC](https://discuss.elastic.co/t/how-to-disable-popups-in-kibana-visualization/288076 "2021-11-01T12:53:11Z")
I am using Kibana visualization i-frame in my Django project. But sometimes popups appear. How can I remove all popups? I found this topic but it is not suitable for me so I need another solution. --- ## [Hybrid Grok and Dissect Parsing](https://discuss.elastic.co/t/hybrid-grok-and-dissect-parsing/288021)
**Author:** [@Nico\_Pampaloni](https://discuss.elastic.co/u/Nico_Pampaloni)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 11:25am UTC](https://discuss.elastic.co/t/hybrid-grok-and-dissect-parsing/288021 "2021-11-01T11:25:35Z")
Hi Everyone! I have a question about using Dissect and Grok together when working with a format that has varying structure. A line in my log file might look like this: word,word.word.word.word|timestamp|number,number,na… --- ## [Set Elastic Security rules on syslog](https://discuss.elastic.co/t/set-elastic-security-rules-on-syslog/288012)
**Author:** [@Limoelou](https://discuss.elastic.co/u/Limoelou)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 11:01am UTC](https://discuss.elastic.co/t/set-elastic-security-rules-on-syslog/288012 "2021-11-01T11:01:33Z")
Hello, I'm having trouble to display syslog events in Kibana. I have a Stormshield firewall sending syslog events to my elastic server from different hosts : 2628 2703 3.429885364 192.168.3.223 → 10.22.5.58 Syslog … --- ## [Custom module in filebeat](https://discuss.elastic.co/t/custom-module-in-filebeat/288114)
**Author:** [@Paurav\_Thakkar](https://discuss.elastic.co/u/Paurav_Thakkar)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 10:51am UTC](https://discuss.elastic.co/t/custom-module-in-filebeat/288114 "2021-11-01T10:51:43Z")
Hi, I am trying to create a custom module that I need for a data source that is not available. This data source exposes an API that can be used to fetch logs. Currently I am using filebeat OSS and the input plugin that I… --- ## [Rename exported rules to their original name](https://discuss.elastic.co/t/rename-exported-rules-to-their-original-name/287722)
**Author:** [@michel.beaudry](https://discuss.elastic.co/u/michel.beaudry)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 10:44am UTC](https://discuss.elastic.co/t/rename-exported-rules-to-their-original-name/287722 "2021-11-01T10:44:12Z")
Exporting a rule in Elastic Security always result in a file named rules\_export.ndjson It would make much more sense to use the rule name as the title for the exported rule, is there any parameters to set this or it has… [Previous page](https://discuss.elastic.co/latest.md?page=1406) [Next page](https://discuss.elastic.co/latest.md?page=1408)