# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1504

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1505

---

## [Maximize KIbana Panel In dashboard](https://discuss.elastic.co/t/maximize-kibana-panel-in-dashboard/282653)

<div class="topic-metadata">

**Author:** [@selin](https://discuss.elastic.co/u/selin)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 12:25am UTC](https://discuss.elastic.co/t/maximize-kibana-panel-in-dashboard/282653 "2021-08-30T00:25:25Z")

</div>

Hi experts, Is there a way to maximise panel. I not sure where the settings are can please guide me

---

## [Kibana UI Quick select](https://discuss.elastic.co/t/kibana-ui-quick-select/282634)

<div class="topic-metadata">

**Author:** [@selin](https://discuss.elastic.co/u/selin)\
**Replies:** 1\
**Last updated:** [August 30, 2021, 12:18am UTC](https://discuss.elastic.co/t/kibana-ui-quick-select/282634 "2021-08-30T00:18:07Z")

</div>

Hi friends I really need your advice https://www.elastic.co/guide/en/kibana/current/set-time-filter.html I read the document but i really not sure What is Quick select Refresh every Then i saw we hve Relative In …

---

## [Multiple azure app insights in metricbeat](https://discuss.elastic.co/t/multiple-azure-app-insights-in-metricbeat/282618)

<div class="topic-metadata">

**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\
**Replies:** 0\
**Last updated:** [August 27, 2021, 12:55am UTC](https://discuss.elastic.co/t/multiple-azure-app-insights-in-metricbeat/282618 "2021-08-27T00:55:25Z")

</div>

Hi Everyone, I am currently pulling in Azure App Insights data in ELK Stack using Metricbeat, like this module: azure metricsets: - app\_insights enabled: true period: 300s application\_id: '' api\_key: '' …

---

## [API Authorization & Token base API call](https://discuss.elastic.co/t/api-authorization-token-base-api-call/282566)

<div class="topic-metadata">

**Author:** [@shashikant.deshmukh](https://discuss.elastic.co/u/shashikant.deshmukh)\
**Replies:** 1\
**Last updated:** [August 29, 2021, 11:54pm UTC](https://discuss.elastic.co/t/api-authorization-token-base-api-call/282566 "2021-08-29T23:54:17Z")

</div>

Hi Experts, @val I need your expert advice, to achieve below things. I have 2 API, Authentication - It generate the token GetRobotDetails - It uses the above token to make successful API call. can you please help ho…

---

## [Reduce duplicate signals/ alerts](https://discuss.elastic.co/t/reduce-duplicate-signals-alerts/282768)

<div class="topic-metadata">

**Author:** [@jaspher](https://discuss.elastic.co/u/jaspher)\
**Replies:** 0\
**Last updated:** [August 29, 2021, 10:23pm UTC](https://discuss.elastic.co/t/reduce-duplicate-signals-alerts/282768 "2021-08-29T22:23:10Z")

</div>

Hi, Is it possible to mute/ ignore repeating alerts for a period of time? For example, if a c2 beacon is detected, an alert does not need to be generated again if the signal is still open/ not closed. In Alienvault, t…

---

## [Add tags in filebeat modules](https://discuss.elastic.co/t/add-tags-in-filebeat-modules/282750)

<div class="topic-metadata">

**Author:** [@geetika\_gopi](https://discuss.elastic.co/u/geetika_gopi)\
**Replies:** 4\
**Last updated:** [August 29, 2021, 6:57pm UTC](https://discuss.elastic.co/t/add-tags-in-filebeat-modules/282750 "2021-08-29T18:57:03Z")

</div>

Hi all, I have beats installed on my logstash instance. My idea is to collect multiple logs using filebeat modules -\> send it to logstash on port 5044 -\> send it to elasticsearch. Can I add tags in each of the filebeat…

---

## [Metricbeat Azure Modules metricset for VirtualNetworkGateway](https://discuss.elastic.co/t/metricbeat-azure-modules-metricset-for-virtualnetworkgateway/282732)

<div class="topic-metadata">

**Author:** [@adhiraj-g](https://discuss.elastic.co/u/adhiraj-g)\
**Replies:** 0\
**Last updated:** [August 28, 2021, 8:23pm UTC](https://discuss.elastic.co/t/metricbeat-azure-modules-metricset-for-virtualnetworkgateway/282732 "2021-08-28T20:23:23Z")

</div>

Hi, Is it possible to get Data from azure Virtual Network Gateway shown on Kibana? I have added the namespace to azure module yaml file. Connection is there but not sure on how to display its metrics on Kibana. I trie…

---

## [Revert from new Kibana v7.13 JSON format](https://discuss.elastic.co/t/revert-from-new-kibana-v7-13-json-format/280542)

<div class="topic-metadata">

**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\
**Replies:** 5\
**Last updated:** [August 29, 2021, 3:51pm UTC](https://discuss.elastic.co/t/revert-from-new-kibana-v7-13-json-format/280542 "2021-08-29T15:51:12Z")

</div>

Hey, After upgrading to Kibana v7.13 the JSON format in the Discover tab in Kibana was altered and now has no hierarchy in it. I was wondering if there is any way to revert this change to get a formatted JSON when…

---

## [Matching receipts with fulfilled orders](https://discuss.elastic.co/t/matching-receipts-with-fulfilled-orders/282123)

<div class="topic-metadata">

**Author:** [@JoeGilkey](https://discuss.elastic.co/u/JoeGilkey)\
**Replies:** 3\
**Last updated:** [August 29, 2021, 3:43pm UTC](https://discuss.elastic.co/t/matching-receipts-with-fulfilled-orders/282123 "2021-08-29T15:43:17Z")

</div>

Hello, I have a data stream that I am posting grocery receipts to on an hourly basis. The receipt includes the individual items purchased, as well as a keyword array with the unique product UPC codes. I’m trying to matc…

---

## [Kibana startup failure in Windows](https://discuss.elastic.co/t/kibana-startup-failure-in-windows/279407)

<div class="topic-metadata">

**Author:** [@Srinivas\_Kris](https://discuss.elastic.co/u/Srinivas_Kris)\
**Replies:** 4\
**Last updated:** [August 29, 2021, 3:34pm UTC](https://discuss.elastic.co/t/kibana-startup-failure-in-windows/279407 "2021-08-29T15:34:41Z")

</div>

Hi All I downloaded Kibana 7.13.4 zip file and extracted in windows. I started kibarna.bat in command prompt. I am getting the following error. Any help is appreciated. log \[11:02:36.548\] \[fatal\]\[root\] Error: Cannot …

---

## [Kafka Output - idempotent producer?](https://discuss.elastic.co/t/kafka-output-idempotent-producer/282754)

<div class="topic-metadata">

**Author:** [@GitSpree23](https://discuss.elastic.co/u/GitSpree23)\
**Replies:** 1\
**Last updated:** [August 29, 2021, 2:43pm UTC](https://discuss.elastic.co/t/kafka-output-idempotent-producer/282754 "2021-08-29T14:43:00Z")

</div>

I can see from Logstash logs that enable.idempotence=false by default. How do I set the value to true?

---

## [Common File for adding email address in SIEM Detection email action](https://discuss.elastic.co/t/common-file-for-adding-email-address-in-siem-detection-email-action/282341)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 1\
**Last updated:** [August 29, 2021, 8:58am UTC](https://discuss.elastic.co/t/common-file-for-adding-email-address-in-siem-detection-email-action/282341 "2021-08-29T08:58:48Z")

</div>

Hi, Please share if there any way to keep common file for Email "To" address and use parameter in detection email action instead of adding email address in each Detections Rules. I am using ELK 7.13.4. Thanks in adva…

---

## [Docker elasticsearch - changing directory permission is not working](https://discuss.elastic.co/t/docker-elasticsearch-changing-directory-permission-is-not-working/282746)

<div class="topic-metadata">

**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\
**Replies:** 0\
**Last updated:** [August 29, 2021, 7:19am UTC](https://discuss.elastic.co/t/docker-elasticsearch-changing-directory-permission-is-not-working/282746 "2021-08-29T07:19:50Z")

</div>

Hi all elasticsearch.yml --- ## Default Elasticsearch configuration from Elasticsearch base image. ## https://github.com/elastic/elasticsearch/blob/master/distribution/docker/src/docker/config/elasticsearch.yml # clust…

---

## [\-system.hostfs doesn't seem to work](https://discuss.elastic.co/t/system-hostfs-doesnt-seem-to-work/282745)

<div class="topic-metadata">

**Author:** [@MikSFG](https://discuss.elastic.co/u/MikSFG)\
**Replies:** 0\
**Last updated:** [August 29, 2021, 7:15am UTC](https://discuss.elastic.co/t/system-hostfs-doesnt-seem-to-work/282745 "2021-08-29T07:15:53Z")

</div>

Hi, I'm currently trying to audit my host from my container, but when I mount my var,sys,proc to the container's /hostfs it doesn't affect anything, audit doesn't do anything with them. For example, I can check my host…

---

## [How do I apply the Precision from the Ranking Evaluation API to all ids?](https://discuss.elastic.co/t/how-do-i-apply-the-precision-from-the-ranking-evaluation-api-to-all-ids/282742)

<div class="topic-metadata">

**Author:** [@Talents](https://discuss.elastic.co/u/Talents)\
**Replies:** 0\
**Last updated:** [August 29, 2021, 3:36am UTC](https://discuss.elastic.co/t/how-do-i-apply-the-precision-from-the-ranking-evaluation-api-to-all-ids/282742 "2021-08-29T03:36:10Z")

</div>

I'm using this page as a reference (Ranking evaluation API | Elasticsearch Guide \[7.14\] | Elastic) and I was just wondering how I'd apply the Precision part to all the ids in my index instead of having to do it 1 by 1? T…

---

## [Logstash Plugins](https://discuss.elastic.co/t/logstash-plugins/282713)

<div class="topic-metadata">

**Author:** [@Markelastic](https://discuss.elastic.co/u/Markelastic)\
**Replies:** 4\
**Last updated:** [August 28, 2021, 10:53pm UTC](https://discuss.elastic.co/t/logstash-plugins/282713 "2021-08-28T22:53:52Z")

</div>

I am trying to parse a single line of unstructured data and I believe I am over complicating the matter. I am a log time SIEM engineer and content developer. That said, I am both in awe and just a tad overwhelmed in ligh…

---

## [APM-Server not connecting to my application](https://discuss.elastic.co/t/apm-server-not-connecting-to-my-application/281475)

<div class="topic-metadata">

**Author:** [@Piyush\_Mittal](https://discuss.elastic.co/u/Piyush_Mittal)\
**Replies:** 13\
**Last updated:** [August 28, 2021, 8:08pm UTC](https://discuss.elastic.co/t/apm-server-not-connecting-to-my-application/281475 "2021-08-28T20:08:56Z")

</div>

Hey, I just started using APM to monitor my application. I done successful setup of APM-server along with my nodejs apm-agent on my local machine. But, When I go to setup the same for production, my APM-server is not con…

---

## [Metricbeat not accurate the value](https://discuss.elastic.co/t/metricbeat-not-accurate-the-value/282730)

<div class="topic-metadata">

**Author:** [@selin](https://discuss.elastic.co/u/selin)\
**Replies:** 0\
**Last updated:** [August 28, 2021, 4:50pm UTC](https://discuss.elastic.co/t/metricbeat-not-accurate-the-value/282730 "2021-08-28T16:50:48Z")

</div>

Hi can i know why the pid value is different in linux is 166 but in kibana showing 117 \[ps aux | wc -l 166 Also total used free shared buff/cache available Mem: 3789 …

---

## [Anomalies and bucket span](https://discuss.elastic.co/t/anomalies-and-bucket-span/282601)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [August 28, 2021, 1:17pm UTC](https://discuss.elastic.co/t/anomalies-and-bucket-span/282601 "2021-08-28T13:17:38Z")

</div>

Hi, I have a ML job with a bucket span of 5 minutes. when an anomaly is detected and displayed in a graph, the red dot is the beggining of that bucket span? or the end of the bucket span? in other words the red dot indi…

---

## [Unble to view single document permission denied](https://discuss.elastic.co/t/unble-to-view-single-document-permission-denied/282724)

<div class="topic-metadata">

**Author:** [@selin](https://discuss.elastic.co/u/selin)\
**Replies:** 1\
**Last updated:** [August 28, 2021, 1:00pm UTC](https://discuss.elastic.co/t/unble-to-view-single-document-permission-denied/282724 "2021-08-28T13:00:49Z")

</div>

Hi friend can i know what permission need to be provided so user can view \[View surrounding documents\] \[View single document\]

---

## [The perfect Elasticsearch data node](https://discuss.elastic.co/t/the-perfect-elasticsearch-data-node/280841)

<div class="topic-metadata">

**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\
**Replies:** 4\
**Last updated:** [August 28, 2021, 12:01pm UTC](https://discuss.elastic.co/t/the-perfect-elasticsearch-data-node/280841 "2021-08-28T12:01:20Z")

</div>

I'm currently upgrading our Elasticsearch cluster to a multi-petabyte cluster (~2.5 petabytes). I have some questions about scaling out Elasticsearch, etc. First, I've found that cheap nucs with 12+ cores and 64GB of RA…

---

## [HTTP error 401 on /api/licensing/info](https://discuss.elastic.co/t/http-error-401-on-api-licensing-info/281542)

<div class="topic-metadata">

**Author:** [@rilcy](https://discuss.elastic.co/u/rilcy)\
**Replies:** 3\
**Last updated:** [August 28, 2021, 4:04am UTC](https://discuss.elastic.co/t/http-error-401-on-api-licensing-info/281542 "2021-08-28T04:04:42Z")

</div>

Hi everyone, When browsing in Kibana interface i often get disconnected with the message "SESSION\_EXPIRED" and got redirected to the login page Checking in the Kibana logs i see that right before getting disconnected t…

---

## [Unable to start elasticsearch on CentOs](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos/282687)

<div class="topic-metadata">

**Author:** [@mirza\_muhriz](https://discuss.elastic.co/u/mirza_muhriz)\
**Replies:** 11\
**Last updated:** [August 28, 2021, 3:06am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-on-centos/282687 "2021-08-28T03:06:56Z")

</div>

/bin/systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendo …

---

## [Kibana Error connecting to package registry: request to https://xxx.xxx/xxx failed, reason: self signed certificate in certificate chain](https://discuss.elastic.co/t/kibana-error-connecting-to-package-registry-request-to-https-xxx-xxx-xxx-failed-reason-self-signed-certificate-in-certificate-chain/282710)

<div class="topic-metadata">

**Author:** [@jonkop](https://discuss.elastic.co/u/jonkop)\
**Replies:** 1\
**Last updated:** [August 28, 2021, 12:37am UTC](https://discuss.elastic.co/t/kibana-error-connecting-to-package-registry-request-to-https-xxx-xxx-xxx-failed-reason-self-signed-certificate-in-certificate-chain/282710 "2021-08-28T00:37:21Z")

</div>

Hello, In our company we have a checkpoint firewall with a reverse proxy everything works fine except for 1 error message that appears every time you try to access external content from kibana. log \[23: 58: 26.917\] …

---

## [Beginner: Trouble getting started](https://discuss.elastic.co/t/beginner-trouble-getting-started/282617)

<div class="topic-metadata">

**Author:** [@jmsbooth](https://discuss.elastic.co/u/jmsbooth)\
**Replies:** 7\
**Last updated:** [August 27, 2021, 11:33pm UTC](https://discuss.elastic.co/t/beginner-trouble-getting-started/282617 "2021-08-27T23:33:21Z")

</div>

Deployed elasticsearch to an Ubuntu VM within Azure cloud. Edited the elasticsearch.yaml for the port, cluster.initial\_master\_nodes, and the network host: \[network.host\](https://network.host/): "localhost" http.port: 92…

---

## [Kibana server not ready yet](https://discuss.elastic.co/t/kibana-server-not-ready-yet/282694)

<div class="topic-metadata">

**Author:** [@Techy\_Vince](https://discuss.elastic.co/u/Techy_Vince)\
**Replies:** 4\
**Last updated:** [August 27, 2021, 7:33pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-yet/282694 "2021-08-27T19:33:51Z")

</div>

Hey everyone! Please I need fixing this error. Currently ruining from a docker container {"type":"log","@timestamp":"2021-08-27T16:29:22+00:00","tags":\["warning","plugins","actions","actions"\],"pid":1215,"message":"APIs…

---

## [HTTP\_Poller and Elasticsearch](https://discuss.elastic.co/t/http-poller-and-elasticsearch/282704)

<div class="topic-metadata">

**Author:** [@tofubeats](https://discuss.elastic.co/u/tofubeats)\
**Replies:** 0\
**Last updated:** [August 27, 2021, 8:03pm UTC](https://discuss.elastic.co/t/http-poller-and-elasticsearch/282704 "2021-08-27T20:03:40Z")

</div>

Hi, I am trying to query elasticsearch API with http\_poller input but keep getting the beloved PKIX building path failed error. I've set the elasticsearch.yml on the node being queried to contain the following: xpack.s…

---

## [Upgraded Kibana from 7.12 to 7.14 and now it's broken](https://discuss.elastic.co/t/upgraded-kibana-from-7-12-to-7-14-and-now-its-broken/282515)

<div class="topic-metadata">

**Author:** [@RLPowellJr](https://discuss.elastic.co/u/RLPowellJr)\
**Replies:** 8\
**Last updated:** [August 27, 2021, 5:38pm UTC](https://discuss.elastic.co/t/upgraded-kibana-from-7-12-to-7-14-and-now-its-broken/282515 "2021-08-27T17:38:57Z")

</div>

Bottom line up front: I’ve broken my Kibana by attempting an upgrade from 7.12 to 7.14. Details: We have an Elastic Stack installation in a development sandbox environment. The first version of the Stack components ins…

---

## [Other deployment options for functionbeat](https://discuss.elastic.co/t/other-deployment-options-for-functionbeat/282696)

<div class="topic-metadata">

**Author:** [@mohsen0](https://discuss.elastic.co/u/mohsen0)\
**Replies:** 0\
**Last updated:** [August 27, 2021, 5:16pm UTC](https://discuss.elastic.co/t/other-deployment-options-for-functionbeat/282696 "2021-08-27T17:16:28Z")

</div>

Hi The current deployment method of functionbeat, doesn't support adding AWS resource tags for different deployments. I saw Pass AWS tags to resources created by Functionbeat which went unanswered. Currently, deploym…

---

## [What's the characteristics and criterion of choosing master and search (kibana) nodes](https://discuss.elastic.co/t/whats-the-characteristics-and-criterion-of-choosing-master-and-search-kibana-nodes/282695)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 0\
**Last updated:** [August 27, 2021, 5:15pm UTC](https://discuss.elastic.co/t/whats-the-characteristics-and-criterion-of-choosing-master-and-search-kibana-nodes/282695 "2021-08-27T17:15:55Z")

</div>

Hey I am trying to design a cluster in a real use case, it's well-known that when we have more then 5 data nodes, the number of master nodes should be 3 (at least if I am wrong), but I can't decide the characteritics of …

[Previous page](https://discuss.elastic.co/latest.md?page=1503)

[Next page](https://discuss.elastic.co/latest.md?page=1505)
