# Latest **URL:** https://discuss.elastic.co/latest.md?page=1481 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1482 --- ## [Endpoint Security custom notification logo](https://discuss.elastic.co/t/endpoint-security-custom-notification-logo/283709)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 1:35pm UTC](https://discuss.elastic.co/t/endpoint-security-custom-notification-logo/283709 "2021-09-13T13:35:54Z")
Hello, Will there be an option in the future to modify the logo that appears on the pop up notifications for Endpoint Security malware/ransomware, similar to how you can modify the pop up message? It appears to be loca… --- ## [Is it possible to customize the "-- ANY --" placeholder of the dropdown filter?](https://discuss.elastic.co/t/is-it-possible-to-customize-the-any-placeholder-of-the-dropdown-filter/283900)
**Author:** [@medina](https://discuss.elastic.co/u/medina)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 1:13pm UTC](https://discuss.elastic.co/t/is-it-possible-to-customize-the-any-placeholder-of-the-dropdown-filter/283900 "2021-09-13T13:13:32Z")
Is there anything in the Expression Editor that I can do to change that? --- ## [Script\_score query does not support \[query\]](https://discuss.elastic.co/t/script-score-query-does-not-support-query/284076)
**Author:** [@Ahmed\_ZERHOUNI](https://discuss.elastic.co/u/Ahmed_ZERHOUNI)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 1:06pm UTC](https://discuss.elastic.co/t/script-score-query-does-not-support-query/284076 "2021-09-13T13:06:38Z")
\*\*Hey everyone, i'm trying to apply a custom score using script score but i'm facing this issue...i would really appreciate your help Here's the query i'm using for that. my query was based on the documentation of Ela… --- ## [Is it possible to add the "number of replicas" in logstash code , rather than in index template?](https://discuss.elastic.co/t/is-it-possible-to-add-the-number-of-replicas-in-logstash-code-rather-than-in-index-template/284064)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 1:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-the-number-of-replicas-in-logstash-code-rather-than-in-index-template/284064 "2021-09-13T13:00:13Z")
Hello, I wanted to know if its possible to mention "number of replicas" in the logstash code , rather than in index template , so when i rollover the index , this is inherited by the newer index. Mine is a single node … --- ## [Two bars in vertical/horizontal chart](https://discuss.elastic.co/t/two-bars-in-vertical-horizontal-chart/282674)
**Author:** [@mzagrajek](https://discuss.elastic.co/u/mzagrajek)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 12:58pm UTC](https://discuss.elastic.co/t/two-bars-in-vertical-horizontal-chart/282674 "2021-09-13T12:58:45Z")
Hi there I have problem with visualization. What I want? vertical or horizontal chart one bar representing field with all products divided by some business unit: Y-axis will be count of those, X-axis the business uni… --- ## [AWS metricbeat unable to load data in kibana](https://discuss.elastic.co/t/aws-metricbeat-unable-to-load-data-in-kibana/283416)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 9\ **Last updated:** [September 13, 2021, 12:19pm UTC](https://discuss.elastic.co/t/aws-metricbeat-unable-to-load-data-in-kibana/283416 "2021-09-13T12:19:00Z")
Hi , I am using metricbeat 7.14. IAM policy given for AWS billing and AWS.yml config file is as follows as stated in AWS billing metricset | Metricbeat Reference \[7.16\] | Elastic Step I followed to start aws and flo… --- ## [Reporting - CSV Export: contains partial data](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 9\ **Last updated:** [September 13, 2021, 12:05pm UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052 "2021-09-13T12:05:21Z")
Hi Team, we have execute any query, it gives results and we save it by x name and when we generate csv then records are not getting saved in csv file. Sometimes partial results are getting saved. We have also tried afte… --- ## [Maximum number of inputs in filter section terms](https://discuss.elastic.co/t/maximum-number-of-inputs-in-filter-section-terms/283807)
**Author:** [@manjurgani](https://discuss.elastic.co/u/manjurgani)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 12:00pm UTC](https://discuss.elastic.co/t/maximum-number-of-inputs-in-filter-section-terms/283807 "2021-09-13T12:00:45Z")
GET example3/\_search?size=0 { "query": { "bool": { "filter": \[ { "terms": { "userId": \[ 199196,199195 \] }} \] } }, "aggs": { "top-tags": { "terms": { "field": "userId", "size": 10 }, "aggs": { "to-answe… --- ## [Watcher error 400 webhook action](https://discuss.elastic.co/t/watcher-error-400-webhook-action/283959)
**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\ **Replies:** 6\ **Last updated:** [September 13, 2021, 11:54am UTC](https://discuss.elastic.co/t/watcher-error-400-webhook-action/283959 "2021-09-13T11:54:59Z")
Hi! I'm facing a problem when I try to run a watcher. "body": "{\\n \\"error\\": {\\n \\"code\\": 400,\\n \\"message\\": \\"Invalid JSON payload received. Unexpected token.\\\\nsomething\\\\n^\\",\\n \\"status\\": \\"INVALID\_A… --- ## [Display top value of counter rate of nested fields](https://discuss.elastic.co/t/display-top-value-of-counter-rate-of-nested-fields/283276)
**Author:** [@Benoti](https://discuss.elastic.co/u/Benoti)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 11:40am UTC](https://discuss.elastic.co/t/display-top-value-of-counter-rate-of-nested-fields/283276 "2021-09-13T11:40:04Z")
Hello there, I an in the midle of adding some SNMP monitoring data to our Elastic stack and I cannot find a good way to display the data in Kibana's dashboard. I use logstash snmp input plugin and, thanks to this threa… --- ## [Customize logo in kibana-7.14.0](https://discuss.elastic.co/t/customize-logo-in-kibana-7-14-0/284010)
**Author:** [@Samrudhi\_Kuwar](https://discuss.elastic.co/u/Samrudhi_Kuwar)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 11:30am UTC](https://discuss.elastic.co/t/customize-logo-in-kibana-7-14-0/284010 "2021-09-13T11:30:15Z")
Hello to everyone! I am trying to customize kibana 7.14.0 I have successfully changed the logo in Header ( the logo in the tab). I have replaced the favicons folder. I am facing problem in changing logo in Logo in Lo… --- ## [Remove unwanted indices from a Kibana space](https://discuss.elastic.co/t/remove-unwanted-indices-from-a-kibana-space/284017)
**Author:** [@KrishnanR](https://discuss.elastic.co/u/KrishnanR)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 11:24am UTC](https://discuss.elastic.co/t/remove-unwanted-indices-from-a-kibana-space/284017 "2021-09-13T11:24:18Z")
I am having an index metricbeat-\* created in the default Kibana space, which is shared with the newly created space. Now, I wanted to remove that index from the newly created spaces. Can someone help me with that? N… --- ## [Anonymous user config](https://discuss.elastic.co/t/anonymous-user-config/284037)
**Author:** [@imarkvisser](https://discuss.elastic.co/u/imarkvisser)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 11:22am UTC](https://discuss.elastic.co/t/anonymous-user-config/284037 "2021-09-13T11:22:22Z")
Hi there, We are currently running ECK with an anonymous user for users to log in with, which looks like; kibana: enabled: true name: foo version: 7.11.2 http: image: count: 1 config: xpack.security.a… --- ## [Same color for actual value points and trendline on it](https://discuss.elastic.co/t/same-color-for-actual-value-points-and-trendline-on-it/284063)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 11:19am UTC](https://discuss.elastic.co/t/same-color-for-actual-value-points-and-trendline-on-it/284063 "2021-09-13T11:19:02Z")
Hi, I create a timelion visualization and displayed values on it by colored circle. I am displaying multiple values at a time point. After that I create trendlines on it. I want to make trendline color same respected … --- ## [Toogle index in search provider react search-ui](https://discuss.elastic.co/t/toogle-index-in-search-provider-react-search-ui/282838)
**Author:** [@artcups](https://discuss.elastic.co/u/artcups)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 11:14am UTC](https://discuss.elastic.co/t/toogle-index-in-search-provider-react-search-ui/282838 "2021-09-13T11:14:44Z")
We are building an search experiance for an eccomerce platform. We have a few different content types (different document types) indexed in a few diffrent indicies. We have tried a few different approaches without any l… --- ## [Is there a way to save Index Templates?](https://discuss.elastic.co/t/is-there-a-way-to-save-index-templates/284019)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 11:14am UTC](https://discuss.elastic.co/t/is-there-a-way-to-save-index-templates/284019 "2021-09-13T11:14:07Z")
Hello, Is there a way to save index templates , in the UI (under "actions") i don't see an option that lets one save an index template . I have a few log types that would probably require a few index templates and pr… --- ## [Canvas dropdown filter not showing all the values for the chosen column](https://discuss.elastic.co/t/canvas-dropdown-filter-not-showing-all-the-values-for-the-chosen-column/283464)
**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 10:39am UTC](https://discuss.elastic.co/t/canvas-dropdown-filter-not-showing-all-the-values-for-the-chosen-column/283464 "2021-09-13T10:39:23Z")
Hi, I am using the dropdown filter on my canvas board right now and I have managed to get it working however depending on the time range i set it will not pick up all the values for the column i have filtered for. We ar… --- ## [Problem with configuration filebeat and output kafka](https://discuss.elastic.co/t/problem-with-configuration-filebeat-and-output-kafka/284032)
**Author:** [@potro\_italiano](https://discuss.elastic.co/u/potro_italiano)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 9:04am UTC](https://discuss.elastic.co/t/problem-with-configuration-filebeat-and-output-kafka/284032 "2021-09-13T09:04:13Z")
Good morning, I have one machine with filebeat that send data to kafka. The problem is that not send data a kafka and it not register never errors in the log of filebeat. there is telnet connectivity and I did the test… --- ## [Index Stats kibana](https://discuss.elastic.co/t/index-stats-kibana/284044)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 9:37am UTC](https://discuss.elastic.co/t/index-stats-kibana/284044 "2021-09-13T09:37:49Z")
Hello ! I have seen that in kibana you can consult statistics of an index. Can this fields be consulted as one more field and viewed on a dashboard? i tried this and codec =\> rubydebug { metadata =\> true} in log… --- ## [Failed shard error on elasticsearch snapshot (No space left)](https://discuss.elastic.co/t/failed-shard-error-on-elasticsearch-snapshot-no-space-left/284035)
**Author:** [@Prasad\_94](https://discuss.elastic.co/u/Prasad_94)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 9:16am UTC](https://discuss.elastic.co/t/failed-shard-error-on-elasticsearch-snapshot-no-space-left/284035 "2021-09-13T09:16:45Z")
Hi all, When I navigate to stack management --\> snapshots and repositories I can see the snapshots list. On that list, there is a one-column that said Failed shards. Right now most of the snapshots show 1 failed shard… --- ## [Fleet Server Status Inconsistency](https://discuss.elastic.co/t/fleet-server-status-inconsistency/283790)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 7\ **Last updated:** [September 13, 2021, 9:14am UTC](https://discuss.elastic.co/t/fleet-server-status-inconsistency/283790 "2021-09-13T09:14:03Z")
Hi, I'm setting up Fleet in my production environment. I've followed this guide Encrypt traffic in a self-managed cluster | Fleet User Guide \[7.14\] | Elastic and I was able to enroll the Fleet Server. But something str… --- ## [Monitoring Elastic Stack?](https://discuss.elastic.co/t/monitoring-elastic-stack/283791)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 8:44am UTC](https://discuss.elastic.co/t/monitoring-elastic-stack/283791 "2021-09-13T08:44:09Z")
Hello We have a monitoring system that watchest the Elastic Stack but the CPU and memory randomly shoot up to 94% (in case of memory) and all of a sudden, go back down to 70% or so. Are there any metrics that I should … --- ## [Circuit break exception - version 7.7.0](https://discuss.elastic.co/t/circuit-break-exception-version-7-7-0/281568)
**Author:** [@ravindrababua](https://discuss.elastic.co/u/ravindrababua)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 8:35am UTC](https://discuss.elastic.co/t/circuit-break-exception-version-7-7-0/281568 "2021-09-13T08:35:18Z")
We have configured 3node cluster (2masters and 1data node),we have two sites prod and DR. between prod and DR we configured replication via kafka. We have observed below errors in logstash, and elasticsearch on DR site,… --- ## [Equivalent of 'Group By' along with significant\_text aggregation](https://discuss.elastic.co/t/equivalent-of-group-by-along-with-significant-text-aggregation/283944)
**Author:** [@firasd](https://discuss.elastic.co/u/firasd)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 8:25am UTC](https://discuss.elastic.co/t/equivalent-of-group-by-along-with-significant-text-aggregation/283944 "2021-09-13T08:25:06Z")
Hi folks.. I'm looking for some equivalent of SQL's 'group by' or 'distinct' ... basically I have this query { "query": { "range": { "post\_date": { "from": "2016-04-14 00:00:00", "to": "2016-04-15 00:00:0… --- ## [How to use BulkProcessor in synchronous processing?](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-synchronous-processing/283968)
**Author:** [@avocato](https://discuss.elastic.co/u/avocato)\ **Replies:** 7\ **Last updated:** [September 13, 2021, 7:50am UTC](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-synchronous-processing/283968 "2021-09-13T07:50:38Z")
Hello, I am trying to figure out how to use BulkProcessor \[Bulk API | Java REST Client \[7.14\] | Elastic\] during synchronous processing (bulk method) so that I could write something like this: val processor = BulkPr… --- ## [Metricbeat AWS module template](https://discuss.elastic.co/t/metricbeat-aws-module-template/284016)
**Author:** [@dwjvaughan](https://discuss.elastic.co/u/dwjvaughan)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 7:37am UTC](https://discuss.elastic.co/t/metricbeat-aws-module-template/284016 "2021-09-13T07:37:47Z")
I'm using the AWS module in metricbeat (just the Cloudwatch metricset) but I can't seem to find any index templates for it. If I do a metricbeat export template there are no mappings for aws., or more specifically for my… --- ## [How to read filebeat additional values from custom codec plugin?](https://discuss.elastic.co/t/how-to-read-filebeat-additional-values-from-custom-codec-plugin/284015)
**Author:** [@WanJune](https://discuss.elastic.co/u/WanJune)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 7:33am UTC](https://discuss.elastic.co/t/how-to-read-filebeat-additional-values-from-custom-codec-plugin/284015 "2021-09-13T07:33:12Z")
Hi. I am currently making Logstash Custom Plugin to analyze WAS logs. I am making a Codec plugin to analyze the unstructured WAS log sent from remote Filebeat. Filter plugin cannot be used because its stream disordere… --- ## [Metricbeat executing every 3 minutes using cron](https://discuss.elastic.co/t/metricbeat-executing-every-3-minutes-using-cron/284014)
**Author:** [@josh12](https://discuss.elastic.co/u/josh12)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 7:35am UTC](https://discuss.elastic.co/t/metricbeat-executing-every-3-minutes-using-cron/284014 "2021-09-13T07:35:44Z")
Can i know is there cron setting for metricbeat for period as how it was done for heartbeat --- ## [Change Color palette in Lens](https://discuss.elastic.co/t/change-color-palette-in-lens/282339)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 7:04am UTC](https://discuss.elastic.co/t/change-color-palette-in-lens/282339 "2021-09-13T07:04:19Z")
Hello, I have a Mixed XY visualization made in Lens mode and what I want to do is to change the colours palette to my wish. Here it is : So what I want is for nr.1 to assign green colour and for nr 3. orange and so… --- ## [Replacing cluster level objects (e.g. ClusterRole)](https://discuss.elastic.co/t/replacing-cluster-level-objects-e-g-clusterrole/283986)
**Author:** [@AndreyL](https://discuss.elastic.co/u/AndreyL)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 7:01am UTC](https://discuss.elastic.co/t/replacing-cluster-level-objects-e-g-clusterrole/283986 "2021-09-13T07:01:27Z")
I want to deploy ECK to our internal Kubernetes cluster. The issue I ran into is that ECK uses cluster level objects like ClusterRole, and I am not able to deploy those - we use Nirmata for cluster management, and each a… [Previous page](https://discuss.elastic.co/latest.md?page=1480) [Next page](https://discuss.elastic.co/latest.md?page=1482)