# Latest **URL:** https://discuss.elastic.co/latest.md?page=1417 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1418 --- ## [Conditional string message of a Watch](https://discuss.elastic.co/t/conditional-string-message-of-a-watch/287608)
**Author:** [@rowish](https://discuss.elastic.co/u/rowish)\ **Replies:** 0\ **Last updated:** [October 25, 2021, 5:03pm UTC](https://discuss.elastic.co/t/conditional-string-message-of-a-watch/287608 "2021-10-25T17:03:17Z")
I am wondering if there is possible to embed in a watch such a mechanism that will use a sort of variable to determine the string in the email message of the action based on the chain input data. Specifically, instead o… --- ## [How to restrict edit access to dashboards / visuals within a space](https://discuss.elastic.co/t/how-to-restrict-edit-access-to-dashboards-visuals-within-a-space/287556)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 5\ **Last updated:** [October 26, 2021, 12:36am UTC](https://discuss.elastic.co/t/how-to-restrict-edit-access-to-dashboards-visuals-within-a-space/287556 "2021-10-26T00:36:25Z")
Hello, I have created a set of visuals within dashboard within a space. I do not want anyone to change these dashboards / visuals in this space. The user can create or change dashboards / visuals in other spaces. Is … --- ## [Unable to ship docker container logs using Filebeat](https://discuss.elastic.co/t/unable-to-ship-docker-container-logs-using-filebeat/287460)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 1\ **Last updated:** [October 26, 2021, 12:24am UTC](https://discuss.elastic.co/t/unable-to-ship-docker-container-logs-using-filebeat/287460 "2021-10-26T00:24:01Z")
I'm using Filebeat native version 7.10.0 to collect all the docker container logs located at /var/lib/docker/containers/container-id/.json . But unable to ship the logs. Below is my filebeat configuration file. Anyone p… --- ## [Sorting out TLS for ELK, using Helm Chart, in AKS](https://discuss.elastic.co/t/sorting-out-tls-for-elk-using-helm-chart-in-aks/286080)
**Author:** [@dcarlet](https://discuss.elastic.co/u/dcarlet)\ **Replies:** 3\ **Last updated:** [October 25, 2021, 11:24pm UTC](https://discuss.elastic.co/t/sorting-out-tls-for-elk-using-helm-chart-in-aks/286080 "2021-10-25T23:24:55Z")
So, I am trying to set up the following configuration: 3 node elastic cluster 1 node logstash 1 node kibana I am utilizing the Helm Charts (GitHub - elastic/helm-charts: You know, for Kubernetes); and specifically … --- ## [Is it possible to zoom and pan a visualization if you don't know the max/min of your scales?](https://discuss.elastic.co/t/is-it-possible-to-zoom-and-pan-a-visualization-if-you-dont-know-the-max-min-of-your-scales/287364)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 10:27pm UTC](https://discuss.elastic.co/t/is-it-possible-to-zoom-and-pan-a-visualization-if-you-dont-know-the-max-min-of-your-scales/287364 "2021-10-25T22:27:36Z")
Hello all, I have been working on adapting the "force directed graph" example to my data. But I have an issue where I have too many items that are returned and the nodes get forced out of the visible area. So I want to … --- ## [MadCap Flare and ElastiSearch 5.6](https://discuss.elastic.co/t/madcap-flare-and-elastisearch-5-6/287627)
**Author:** [@bob\_hopfner](https://discuss.elastic.co/u/bob_hopfner)\ **Replies:** 3\ **Last updated:** [October 25, 2021, 10:26pm UTC](https://discuss.elastic.co/t/madcap-flare-and-elastisearch-5-6/287627 "2021-10-25T22:26:31Z")
I am trying to get ElastiSearch (ver. 5.6) working with MadCap Flare (latest). We have done all the installation steps, the ES portal is populating with content from our site. When i publish to local host, it works and t… --- ## [How to add your images in Elastic Cloud](https://discuss.elastic.co/t/how-to-add-your-images-in-elastic-cloud/287537)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 10:22pm UTC](https://discuss.elastic.co/t/how-to-add-your-images-in-elastic-cloud/287537 "2021-10-25T22:22:26Z")
I had an on prem set up previously and now I have the elastic cloud trial license. I have custom images in my application for breadcrumbs. How and where am I supposed to place these images so that they load properly in m… --- ## [Xpack for production (100 data nodes)](https://discuss.elastic.co/t/xpack-for-production-100-data-nodes/287533)
**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\ **Replies:** 3\ **Last updated:** [October 25, 2021, 9:54pm UTC](https://discuss.elastic.co/t/xpack-for-production-100-data-nodes/287533 "2021-10-25T21:54:26Z")
Azure Cloud ES version: 7.12 Data Nodes Count: 100 (deployed using helm chats) I read ES docs that explain how to enable xpack Few Questions: How I automate xpack? --- ## [Building kibana from source code is not generating build/target forlder](https://discuss.elastic.co/t/building-kibana-from-source-code-is-not-generating-build-target-forlder/287337)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 9:50pm UTC](https://discuss.elastic.co/t/building-kibana-from-source-code-is-not-generating-build-target-forlder/287337 "2021-10-25T21:50:06Z")
I downloaded Kibana 7.12.0, and now I want to build it, but it is not generating a build folder. Any ideas? --- ## [Kibana shows data for future time say filter is set to Today and data should have been displayed till current time](https://discuss.elastic.co/t/kibana-shows-data-for-future-time-say-filter-is-set-to-today-and-data-should-have-been-displayed-till-current-time/287265)
**Author:** [@shalini\_v](https://discuss.elastic.co/u/shalini_v)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 9:48pm UTC](https://discuss.elastic.co/t/kibana-shows-data-for-future-time-say-filter-is-set-to-today-and-data-should-have-been-displayed-till-current-time/287265 "2021-10-25T21:48:22Z")
Kibana shows data for future time say filter is set to Today and data should have been displayed current time. I see there are data after current time.This should not happen in real time series data as event has not occ… --- ## [Error Service Unavailable in table](https://discuss.elastic.co/t/error-service-unavailable-in-table/287613)
**Author:** [@Natalia\_Ruiz](https://discuss.elastic.co/u/Natalia_Ruiz)\ **Replies:** 2\ **Last updated:** [October 25, 2021, 9:25pm UTC](https://discuss.elastic.co/t/error-service-unavailable-in-table/287613 "2021-10-25T21:25:18Z")
Buen día, quisiera que por favor me ayudaran con lo siguiente, tengo una tabla con 22 columnas y mas de 7000 registros y me sale error Service Unavailable, ya revise y no es por memoria, quiero saber por que otra razon p… --- ## [In a vega visualization is it possible to modify a signals value from mark's trigger?](https://discuss.elastic.co/t/in-a-vega-visualization-is-it-possible-to-modify-a-signals-value-from-marks-trigger/287239)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 9:31pm UTC](https://discuss.elastic.co/t/in-a-vega-visualization-is-it-possible-to-modify-a-signals-value-from-marks-trigger/287239 "2021-10-25T21:31:13Z")
Hello All, I am working with a force directed graph, and want to be able to zoom in and out on it, as a result I need to know the min/max value of x/y which are computed as part of the triggers on the mark, so I would l… --- ## [How to create a metric and change the format to day, hour, minute](https://discuss.elastic.co/t/how-to-create-a-metric-and-change-the-format-to-day-hour-minute/287206)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 9:29pm UTC](https://discuss.elastic.co/t/how-to-create-a-metric-and-change-the-format-to-day-hour-minute/287206 "2021-10-25T21:29:55Z")
How to create a metric and change the format to day, hour, minute example: I've already managed to put it in this format 0:0:0, however when it passes 24 hours, it's weird to see and if it's been days that it's unre… --- ## [Elastic Watcher - Problem in compare condition](https://discuss.elastic.co/t/elastic-watcher-problem-in-compare-condition/286582)
**Author:** [@Chiaaa](https://discuss.elastic.co/u/Chiaaa)\ **Replies:** 0\ **Last updated:** [October 13, 2021, 7:20am UTC](https://discuss.elastic.co/t/elastic-watcher-problem-in-compare-condition/286582 "2021-10-13T07:20:30Z")
Hi, I'm new to Elastic Word. I have to create a custom watcher that extracts -from an index - the Isin, Price and Currency fields of the last day (without aggregating them) and compares them with the average price of t… --- ## [Blank Timelion](https://discuss.elastic.co/t/blank-timelion/286579)
**Author:** [@ebosdev](https://discuss.elastic.co/u/ebosdev)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 9:09pm UTC](https://discuss.elastic.co/t/blank-timelion/286579 "2021-10-25T21:09:18Z")
Hello everyone, I am using Kibana 7.9.3 and I am currently facing an issue where the timelion is blank this is the query i am using .es(index=investigation\_master\_index,timefield=uco-observable:sentTime.@value, split=… --- ## [Hardware Requirement for Kibana Multiple Dashboard](https://discuss.elastic.co/t/hardware-requirement-for-kibana-multiple-dashboard/285971)
**Author:** [@smart\_admin](https://discuss.elastic.co/u/smart_admin)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 9:04pm UTC](https://discuss.elastic.co/t/hardware-requirement-for-kibana-multiple-dashboard/285971 "2021-10-25T21:04:45Z")
I am working on multipe visulization dashboard On kibana.How much hardware requirement needed for Each visulization .Do we need to increase the hardware when we configure multiple logs filter on one Visulization . If ye… --- ## [Checking client cert subject in Logstash](https://discuss.elastic.co/t/checking-client-cert-subject-in-logstash/287625)
**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\ **Replies:** 0\ **Last updated:** [October 25, 2021, 8:49pm UTC](https://discuss.elastic.co/t/checking-client-cert-subject-in-logstash/287625 "2021-10-25T20:49:11Z")
I have Logstash set up receiving data from Filebeat on external servers, with SSL mutual authentication. I would like to add one more layer and only allow through when Filebeat's client certificate subject matches a str… --- ## [Customize the dashboards page](https://discuss.elastic.co/t/customize-the-dashboards-page/285835)
**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\ **Replies:** 2\ **Last updated:** [October 25, 2021, 8:41pm UTC](https://discuss.elastic.co/t/customize-the-dashboards-page/285835 "2021-10-25T20:41:17Z")
Hello, I'm looking to add a link after the word dashboards, I've tried this in \\src\\plugins\\dashboard\\target\\public\\dashboard.chunk.2.js tableListTitle: external\_kbnSharedDeps\_KbnI18n\_\["i18n"\].translate("dashboard.list… --- ## [Use Dynamic Values in array](https://discuss.elastic.co/t/use-dynamic-values-in-array/285978)
**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\ **Replies:** 0\ **Last updated:** [October 6, 2021, 6:33am UTC](https://discuss.elastic.co/t/use-dynamic-values-in-array/285978 "2021-10-06T06:33:49Z")
Need to use dynamic values in script processor for better results , but its always giving error. Kindly help!!!! "processors": \[ { "split": { "field": "f1", "separator": "\_", "target\_field":"temp" }, "script":… --- ## [On controls panel the date filter controls is erroring out](https://discuss.elastic.co/t/on-controls-panel-the-date-filter-controls-is-erroring-out/285952)
**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 8:13pm UTC](https://discuss.elastic.co/t/on-controls-panel-the-date-filter-controls-is-erroring-out/285952 "2021-10-25T20:13:57Z")
As you can see with my image I have the 'month' filter on my controls filled in with some date. It keeps erroring out with \[esaggs\]\>. The 'month' field is the time field on my index pattern. When I check my dev tools … --- ## [Timelion : display sum of days on y axis](https://discuss.elastic.co/t/timelion-display-sum-of-days-on-y-axis/285908)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 8:09pm UTC](https://discuss.elastic.co/t/timelion-display-sum-of-days-on-y-axis/285908 "2021-10-25T20:09:51Z")
Hi, i create i scripted field "sejour" to calculate the duration between two dates. I want to use a Timelion visualization to calculate the sum of those days. for exemple in 04/09/2021 i want to get 6 days , i… --- ## [Data frame analytics on scripted fields ML possible?](https://discuss.elastic.co/t/data-frame-analytics-on-scripted-fields-ml-possible/285504)
**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\ **Replies:** 17\ **Last updated:** [October 25, 2021, 5:17pm UTC](https://discuss.elastic.co/t/data-frame-analytics-on-scripted-fields-ml-possible/285504 "2021-10-25T17:17:23Z")
I am currently playing around with Machine learning on Kibana and I successfully learned how to use Anomaly detection to use scripted fields by editing the JSON. Now I want to use data frame analytics specifically curre… --- ## [Create Repository with S3 Protocol on Bucket Cloud on Premise](https://discuss.elastic.co/t/create-repository-with-s3-protocol-on-bucket-cloud-on-premise/287523)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 5\ **Last updated:** [October 25, 2021, 7:54pm UTC](https://discuss.elastic.co/t/create-repository-with-s3-protocol-on-bucket-cloud-on-premise/287523 "2021-10-25T19:54:31Z")
Hello, atm my company have cloud on premise storage with S3 protocol I want to create snapshot repository on that storage, is this possible to do, because my storage is not based on aws, but only use the s3 protocol T… --- ## [Not getting complete data on Reports](https://discuss.elastic.co/t/not-getting-complete-data-on-reports/285780)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 7:45pm UTC](https://discuss.elastic.co/t/not-getting-complete-data-on-reports/285780 "2021-10-25T19:45:27Z")
Hi Team, We have multiple reports created using data table visualization, each report are having multiple bucket aggregations (term aggregation). Whenever we set the size to 10 data in reports is getting rendered witho… --- ## [Removing the “$” sign from event\_data.TargetUserName](https://discuss.elastic.co/t/removing-the-sign-from-event-data-targetusername/285742)
**Author:** [@schroray](https://discuss.elastic.co/u/schroray)\ **Replies:** 0\ **Last updated:** [October 2, 2021, 4:18pm UTC](https://discuss.elastic.co/t/removing-the-sign-from-event-data-targetusername/285742 "2021-10-02T16:18:14Z")
I found an Elastic blog on a possible dashboard for Winlogbeat logs: Monitoring Windows Logons with Winlogbeat | Elastic Blog I was trying to remove the dollar sign "$" from usernames in the field winlog.event\_data.Targ… --- ## [Top 10 values in dynamic options](https://discuss.elastic.co/t/top-10-values-in-dynamic-options/285430)
**Author:** [@PradeepJ](https://discuss.elastic.co/u/PradeepJ)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 7:41pm UTC](https://discuss.elastic.co/t/top-10-values-in-dynamic-options/285430 "2021-10-25T19:41:03Z")
Hi, The dynamic options in the controls visualization shows default 10 records (even when not selecting parent control). Can you please explain how dynamic option works with/without parent control? --- ## [How do I get histogram interval used in a custom plugin](https://discuss.elastic.co/t/how-do-i-get-histogram-interval-used-in-a-custom-plugin/285509)
**Author:** [@Addorex](https://discuss.elastic.co/u/Addorex)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 7:34pm UTC](https://discuss.elastic.co/t/how-do-i-get-histogram-interval-used-in-a-custom-plugin/285509 "2021-10-25T19:34:26Z")
I am writing a custom plugin. How do I get the interval that was used for histogram aggregations. When auto scaling is used how do I retrieve the interval. I need the interval for filtering. I am developing on 7.10.2. Th… --- ## [How to extract data from multiline(codec)](https://discuss.elastic.co/t/how-to-extract-data-from-multiline-codec/287575)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 3\ **Last updated:** [October 25, 2021, 7:34pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-multiline-codec/287575 "2021-10-25T19:34:26Z")
Hi Does anyone know how to extract data from under the codec multiline. After parse xml data I need to avoid the header (prefix of name measData ) for whole of ingested rows... it makes also some keyword field and mul… --- ## [What is the grok expression that can match variable length documents from a single log file?](https://discuss.elastic.co/t/what-is-the-grok-expression-that-can-match-variable-length-documents-from-a-single-log-file/285320)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 7:32pm UTC](https://discuss.elastic.co/t/what-is-the-grok-expression-that-can-match-variable-length-documents-from-a-single-log-file/285320 "2021-10-25T19:32:41Z")
A log file is having records of different leighths, say 3 different types of records? what is the grok expression that can match variable length documents from a single log file? This will be very useful for creating i… --- ## [Canvas dropdowncontrol filter breaking if data is missing](https://discuss.elastic.co/t/canvas-dropdowncontrol-filter-breaking-if-data-is-missing/285674)
**Author:** [@sigbo](https://discuss.elastic.co/u/sigbo)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 7:21pm UTC](https://discuss.elastic.co/t/canvas-dropdowncontrol-filter-breaking-if-data-is-missing/285674 "2021-10-25T19:21:25Z")
I'm working on a canvas to show comparisons between tests made on our systems. Doing that I've created filters to choose the test versions you want to compare and these filters are cross-filtering each other to avoid em… [Previous page](https://discuss.elastic.co/latest.md?page=1416) [Next page](https://discuss.elastic.co/latest.md?page=1418)