# Latest **URL:** https://discuss.elastic.co/latest.md?page=1453 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1454 --- ## [Kibana-keystore password view option in Elastic 7.13.1](https://discuss.elastic.co/t/kibana-keystore-password-view-option-in-elastic-7-13-1/285539)
**Author:** [@tsahoo43](https://discuss.elastic.co/u/tsahoo43)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 10:56pm UTC](https://discuss.elastic.co/t/kibana-keystore-password-view-option-in-elastic-7-13-1/285539 "2021-09-30T22:56:30Z")
Hi Team, I have created the "kibana-keystore" file and stored the Elasticsearch username and Elasticsearch password in it . Could anyone please explain the process to view the stored password from the keystore . Thank… --- ## [Kibana and UiPath Orchestrator ( Cloud)](https://discuss.elastic.co/t/kibana-and-uipath-orchestrator-cloud/285548)
**Author:** [@Varun\_Dharni](https://discuss.elastic.co/u/Varun_Dharni)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 10:49pm UTC](https://discuss.elastic.co/t/kibana-and-uipath-orchestrator-cloud/285548 "2021-09-30T22:49:00Z")
How can I connect Kibana with UiPath Orchestrator . I want to visualize logs created in UiPath Orchestrator in Kibana. I am using Uipath Orchestrator CE edition which is on cloud and have installed kibana on my local m… --- ## [Is it possible to hide some fields in filters for particular user?](https://discuss.elastic.co/t/is-it-possible-to-hide-some-fields-in-filters-for-particular-user/285572)
**Author:** [@WhatsIsKibana](https://discuss.elastic.co/u/WhatsIsKibana)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 10:47pm UTC](https://discuss.elastic.co/t/is-it-possible-to-hide-some-fields-in-filters-for-particular-user/285572 "2021-09-30T22:47:51Z")
Hello, I want to hide some fields in filter bar of dashboard or visualization. For example, if user is "admin" I want to show all available fields, but for non-admin user I'd like to hide some of fields. Is it possible… --- ## [Grafana colored logs and elasticsearch lucene query](https://discuss.elastic.co/t/grafana-colored-logs-and-elasticsearch-lucene-query/285541)
**Author:** [@AlexG](https://discuss.elastic.co/u/AlexG)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 9:49pm UTC](https://discuss.elastic.co/t/grafana-colored-logs-and-elasticsearch-lucene-query/285541 "2021-09-30T21:49:16Z")
I have colored logs (Ansible logs) in Elasticsearch. Logs are displayed normally (colored) in Grafana. If I execute a lucence query using a Number field, the logs will be displayed in color: But if I execute lucen… --- ## [One or multiple metricbeat indices?](https://discuss.elastic.co/t/one-or-multiple-metricbeat-indices/285216)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 3\ **Last updated:** [September 30, 2021, 9:45pm UTC](https://discuss.elastic.co/t/one-or-multiple-metricbeat-indices/285216 "2021-09-30T21:45:51Z")
Hi there. I am installing machines with metricbeat to measure metrics. At the time of implementing it, I have the doubt if it is better to have a single index ({Agent} - {version}) or multiple indexes ({Agent} -{versio… --- ## [How to remove showFilter button when no results on mobile view](https://discuss.elastic.co/t/how-to-remove-showfilter-button-when-no-results-on-mobile-view/285395)
**Author:** [@pradeepjanga](https://discuss.elastic.co/u/pradeepjanga)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 8:16pm UTC](https://discuss.elastic.co/t/how-to-remove-showfilter-button-when-no-results-on-mobile-view/285395 "2021-09-30T20:16:25Z")
Hi, when our App in Desktop mode, i dont see showfilter until results are populated. But on mobile view i can see a button with "showFilters" when there is no results populated. how to hide or remove until results are a… --- ## [Winlogbeat - Sysmon Module and Even.Code: 1 Missing](https://discuss.elastic.co/t/winlogbeat-sysmon-module-and-even-code-1-missing/285620)
**Author:** [@elasticband](https://discuss.elastic.co/u/elasticband)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 5:40pm UTC](https://discuss.elastic.co/t/winlogbeat-sysmon-module-and-even-code-1-missing/285620 "2021-09-30T17:40:53Z")
I am having a problem with Winlogbeats not sending or not properly parsing all the Sysmon event.code fields. I have been testing beign able to event code: 1 for process creations like "whoami.exe", but when I started to … --- ## [How to use Analyze index disk usage API?](https://discuss.elastic.co/t/how-to-use-analyze-index-disk-usage-api/285119)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 7\ **Last updated:** [September 30, 2021, 5:22pm UTC](https://discuss.elastic.co/t/how-to-use-analyze-index-disk-usage-api/285119 "2021-09-30T17:22:32Z")
Hi, We'd like to know how to use \_disk\_usage api. We are trying to figure out how much disk is used by individual fields in an index. The example mentioned in the doc is a POST request but it has no example data… --- ## [Is it better to have one pipeline or multiple pipelines?](https://discuss.elastic.co/t/is-it-better-to-have-one-pipeline-or-multiple-pipelines/285493)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 6\ **Last updated:** [September 30, 2021, 5:12pm UTC](https://discuss.elastic.co/t/is-it-better-to-have-one-pipeline-or-multiple-pipelines/285493 "2021-09-30T17:12:41Z")
Hello From the start, Ive implemented the Elastic Stack using Logstash as the reciever and sender of logs to Logstash. Ive always implemented it using various pipelines. Each pipeline is organized by a different config… --- ## [Define ordering in wildcard query](https://discuss.elastic.co/t/define-ordering-in-wildcard-query/285601)
**Author:** [@v\_kumar](https://discuss.elastic.co/u/v_kumar)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 5:11pm UTC](https://discuss.elastic.co/t/define-ordering-in-wildcard-query/285601 "2021-09-30T17:11:44Z")
Hi, In one of our use-case we're using a wildcard query on a field("cmpy") with searchQuery(val). Let's say values on different documents for "cmpy" field is "val", "1 val", "a value". Ask is, is there a way to order th… --- ## [Elastic Certified Engineer Badge](https://discuss.elastic.co/t/elastic-certified-engineer-badge/285606)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 4:33pm UTC](https://discuss.elastic.co/t/elastic-certified-engineer-badge/285606 "2021-09-30T16:33:28Z")
Hello, I got certified as an ECE in February of this year. I read somewhere in the forums that the ECE badge is a manual process. --- ## [“You do not have permission to access the requested page” error when accessing Kibana](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-the-requested-page-error-when-accessing-kibana/285613)
**Author:** [@muralikri](https://discuss.elastic.co/u/muralikri)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 4:10pm UTC](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-the-requested-page-error-when-accessing-kibana/285613 "2021-09-30T16:10:01Z")
Hi, I am trying to configure SAML SSO in on premises Elasticsearch environment (kubernetes elasticseatrch & kibana) and getting "You do not have permission to access the requested page". have tried all settings and sti… --- ## [Automatic provisioning (index/pipelin/transform)](https://discuss.elastic.co/t/automatic-provisioning-index-pipelin-transform/285475)
**Author:** [@roll](https://discuss.elastic.co/u/roll)\ **Replies:** 6\ **Last updated:** [September 30, 2021, 3:44pm UTC](https://discuss.elastic.co/t/automatic-provisioning-index-pipelin-transform/285475 "2021-09-30T15:44:53Z")
Hi all, I'm fairly new to Elasticsearch and need help automanizing the deployment. I'm using kafka sink connector to feed the data to Elasticsearch and transform API to prepare data for the client for querying. Elasti… --- ## [Sort by term position, ignoring term freqs](https://discuss.elastic.co/t/sort-by-term-position-ignoring-term-freqs/285611)
**Author:** [@maurienvy](https://discuss.elastic.co/u/maurienvy)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 3:36pm UTC](https://discuss.elastic.co/t/sort-by-term-position-ignoring-term-freqs/285611 "2021-09-30T15:36:16Z")
Hello everyone! I want to do a search that allows me to sort the results depending on wether the terms that I am looking for are closer to the beggining of the text field, and ignore term frequency altogether. So for ex… --- ## [Collecting syslog (514/udp) with Logstash in Docker swarm](https://discuss.elastic.co/t/collecting-syslog-514-udp-with-logstash-in-docker-swarm/285610)
**Author:** [@antoine.brun](https://discuss.elastic.co/u/antoine.brun)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 3:29pm UTC](https://discuss.elastic.co/t/collecting-syslog-514-udp-with-logstash-in-docker-swarm/285610 "2021-09-30T15:29:28Z")
Hello, we are trying to test Logstash to collect syslogs to replace our in-house syslog collector. This works fine when our application runs in Docker, the syslogs are sent to the nginx container that forwards them to … --- ## [ECK deployment fails on container runtime containerD](https://discuss.elastic.co/t/eck-deployment-fails-on-container-runtime-containerd/285488)
**Author:** [@keshara](https://discuss.elastic.co/u/keshara)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 3:14pm UTC](https://discuss.elastic.co/t/eck-deployment-fails-on-container-runtime-containerd/285488 "2021-09-30T15:14:54Z")
Hi, I setup a Kubernetes cluster on vmware bare-metal environment. This Kubernetes cluster backed by container run-time =\> containerD(not Docker). # kubectl get nodes -o wide NAME STATUS ROLES … --- ## [How to modify a single value from timestamp](https://discuss.elastic.co/t/how-to-modify-a-single-value-from-timestamp/285567)
**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\ **Replies:** 3\ **Last updated:** [September 30, 2021, 3:08pm UTC](https://discuss.elastic.co/t/how-to-modify-a-single-value-from-timestamp/285567 "2021-09-30T15:08:13Z")
Hi all, I'm trying to find out a way to substitute a single value from @timestamp, from another one, for instance, the hour. So far I know you can get the timestamp separated values using %{+HH}, but I can't find a way… --- ## [Logstash misinterprets incoming data](https://discuss.elastic.co/t/logstash-misinterprets-incoming-data/285200)
**Author:** [@hellotty](https://discuss.elastic.co/u/hellotty)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 2:45pm UTC](https://discuss.elastic.co/t/logstash-misinterprets-incoming-data/285200 "2021-09-30T14:45:55Z")
Hello. I am streaming mdaemon logs using filebeat and using multiline.pattern to concatenate lines into one event. Using logstash, I create fields "mail from", "mail to", "message id", etc. Is it possible to make grok … --- ## [TCP plugin tuning](https://discuss.elastic.co/t/tcp-plugin-tuning/285510)
**Author:** [@vaseemQA](https://discuss.elastic.co/u/vaseemQA)\ **Replies:** 5\ **Last updated:** [September 30, 2021, 2:40pm UTC](https://discuss.elastic.co/t/tcp-plugin-tuning/285510 "2021-09-30T14:40:16Z")
Hi Team, I'm Using TCP plugin inside input and opened port =\> 12345 and then I've started logstash which works a listener, on the other side I've generated a sample shell script which works as a client and opened a TCP … --- ## [Unexpected end of ZLIB input stream on parsing gzip files](https://discuss.elastic.co/t/unexpected-end-of-zlib-input-stream-on-parsing-gzip-files/285603)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 2:35pm UTC](https://discuss.elastic.co/t/unexpected-end-of-zlib-input-stream-on-parsing-gzip-files/285603 "2021-09-30T14:35:55Z")
hello , I have a few MBs of gzip files ,which logstash fails to parse for some reason . I have 3 configs set up in pipelines.yml and 1 succeeds first and the other 2 fail the same error . \[2021-09-30T14:29:47,055\]\[ERRO… --- ## [TLS Certificates dashboard is empty](https://discuss.elastic.co/t/tls-certificates-dashboard-is-empty/281984)
**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\ **Replies:** 15\ **Last updated:** [September 30, 2021, 2:31pm UTC](https://discuss.elastic.co/t/tls-certificates-dashboard-is-empty/281984 "2021-09-30T14:31:03Z")
Hi, I have a problem with the TLS Certificates dashboard in Uptime 7.14.0. In the Monitors dashboard, I can see dates in the TLS Certificates column saying that the certificates will expire next year. Unfortunately, wh… --- ## [Visualize a Counter from MicroMeter with ElasticAPM](https://discuss.elastic.co/t/visualize-a-counter-from-micrometer-with-elasticapm/285404)
**Author:** [@milanvdm](https://discuss.elastic.co/u/milanvdm)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 2:26pm UTC](https://discuss.elastic.co/t/visualize-a-counter-from-micrometer-with-elasticapm/285404 "2021-09-30T14:26:39Z")
Im trying out a simple counter with MicroMeter. I have 4 instances of the same application running on k8s and each of them has a counter "counter-example" which they increment. From what I understand, each increment cre… --- ## [Is it possible to add a runtime field which is the percentage of two different columns in the same row?](https://discuss.elastic.co/t/is-it-possible-to-add-a-runtime-field-which-is-the-percentage-of-two-different-columns-in-the-same-row/285597)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 2:01pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-a-runtime-field-which-is-the-percentage-of-two-different-columns-in-the-same-row/285597 "2021-09-30T14:01:46Z")
Hello, I see scripted fields has been deprecated in 7.13 and it is suggested that we use runtime fields. I was wondering if it is possible to add a runtime field which calculates the ratio of two different column value… --- ## [Authentication in elastic agent](https://discuss.elastic.co/t/authentication-in-elastic-agent/284979)
**Author:** [@Paurav\_Thakkar](https://discuss.elastic.co/u/Paurav_Thakkar)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 1:17pm UTC](https://discuss.elastic.co/t/authentication-in-elastic-agent/284979 "2021-09-30T13:17:29Z")
Hi, I am trying to understand how the authentication is handled in elastic agent for Elasticsearch. just like we have multiple options to configure beats to send data to Elasticsearch by giving api\_key, id/pass or certi… --- ## [Single Select Facet shows 5 values only](https://discuss.elastic.co/t/single-select-facet-shows-5-values-only/285562)
**Author:** [@anuragchoudhary01](https://discuss.elastic.co/u/anuragchoudhary01)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 1:08pm UTC](https://discuss.elastic.co/t/single-select-facet-shows-5-values-only/285562 "2021-09-30T13:08:33Z")
Hi, For facet views, I am using Single Select Facet but it is showing only 5 values in the dropdown. Can someone please advise how to increase that count, I checked the config but couldn't find anything related to that. … --- ## [Hosting your own Elastic Package Registry](https://discuss.elastic.co/t/hosting-your-own-elastic-package-registry/285230)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 1:00pm UTC](https://discuss.elastic.co/t/hosting-your-own-elastic-package-registry/285230 "2021-09-30T13:00:19Z")
It is not abundantly clear in any of the documentation that this is a feature that requires an Enterprise License. For something that is in Beta, Experimental and might not make it into GA anytime soon, why would this b… --- ## [High CPU usage ElasticSearch Causing Search slow and timeout with Kibana](https://discuss.elastic.co/t/high-cpu-usage-elasticsearch-causing-search-slow-and-timeout-with-kibana/285221)
**Author:** [@mitesh.gangaramani](https://discuss.elastic.co/u/mitesh.gangaramani)\ **Replies:** 8\ **Last updated:** [September 30, 2021, 12:48pm UTC](https://discuss.elastic.co/t/high-cpu-usage-elasticsearch-causing-search-slow-and-timeout-with-kibana/285221 "2021-09-30T12:48:20Z")
Hello Guys, Hope you are all doing well! We are using Fluent-bit + Elastic + Kibana stack for logging our kubernetes containers. However, sometimes the CPU usage goes too high and search from kibana not working. Setup… --- ## [Override agent.name, or add custom fields to fleet managed agents?](https://discuss.elastic.co/t/override-agent-name-or-add-custom-fields-to-fleet-managed-agents/285073)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 3\ **Last updated:** [September 30, 2021, 12:37pm UTC](https://discuss.elastic.co/t/override-agent-name-or-add-custom-fields-to-fleet-managed-agents/285073 "2021-09-30T12:37:43Z")
Hi, currently I deploy the \*beats with salt, and in the beats config file, I use to set the name: That name: field then in Elasticsearch/kibana shows up as the agent.name in the indices. This allows me easily to fin… --- ## [Logstash persistent queue max capacity](https://discuss.elastic.co/t/logstash-persistent-queue-max-capacity/285588)
**Author:** [@samia](https://discuss.elastic.co/u/samia)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 12:19pm UTC](https://discuss.elastic.co/t/logstash-persistent-queue-max-capacity/285588 "2021-09-30T12:19:27Z")
Hello, I would like to know if there's a maximum for the queue size of Logstash persistent queue ? I read that its default value is 1GB and it must not exceed the local disk size. I wander if it can handle volumes of … --- ## [Data/write/bulk tasks appearing on master nodes](https://discuss.elastic.co/t/data-write-bulk-tasks-appearing-on-master-nodes/285375)
**Author:** [@skijash](https://discuss.elastic.co/u/skijash)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 11:58am UTC](https://discuss.elastic.co/t/data-write-bulk-tasks-appearing-on-master-nodes/285375 "2021-09-30T11:58:27Z")
I'm seeing some strange usage patters on dedicated master nodes in a 5.6.16 Elasticsearch cluster. Master nodes seem to be having excessive heap pressure during some workloads, causing them to crash with OOM errors. Whe… [Previous page](https://discuss.elastic.co/latest.md?page=1452) [Next page](https://discuss.elastic.co/latest.md?page=1454)