# Latest **URL:** https://discuss.elastic.co/latest.md?page=1566 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1567 --- ## [Watcher Webhook s\_s\_l\_handshake\_exception](https://discuss.elastic.co/t/watcher-webhook-s-s-l-handshake-exception/278551)
**Author:** [@yoli1888](https://discuss.elastic.co/u/yoli1888)\ **Replies:** 4\ **Last updated:** [July 19, 2021, 5:52pm UTC](https://discuss.elastic.co/t/watcher-webhook-s-s-l-handshake-exception/278551 "2021-07-19T17:52:20Z")
I am using 7.9.1. Kibana is running in a docker container. Trying to setup a Webhook action in Watcher with the following code: "webhook\_2" : { "webhook" : { "scheme" : "https", "host" : "e… --- ## [Elastic Agents error after installation: ...fleet-server returned an error: MaxLimit](https://discuss.elastic.co/t/elastic-agents-error-after-installation-fleet-server-returned-an-error-maxlimit/278716)
**Author:** [@jamespichardo](https://discuss.elastic.co/u/jamespichardo)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 5:09pm UTC](https://discuss.elastic.co/t/elastic-agents-error-after-installation-fleet-server-returned-an-error-maxlimit/278716 "2021-07-19T17:09:21Z")
After installing, Elastic Agents it keeps in "Offline" state and "Healthy" intermittently. When checking Agent logs I found this error several times: -- \[elastic\_agent\]\[error\] Could not communicate with fleet-server Ch… --- ## [Short URL for public users](https://discuss.elastic.co/t/short-url-for-public-users/277266)
**Author:** [@martinsz](https://discuss.elastic.co/u/martinsz)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 5:00pm UTC](https://discuss.elastic.co/t/short-url-for-public-users/277266 "2021-07-19T17:00:41Z")
Hello, we're having an issue trying to generate short permalinks for our public users. Our set-up is login via header in an nginx proxy for the public user and the public space, which are very restricted. But the links … --- ## [Auto Delete index log ElasticSearch by period](https://discuss.elastic.co/t/auto-delete-index-log-elasticsearch-by-period/279086)
**Author:** [@java\_dev](https://discuss.elastic.co/u/java_dev)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 4:49pm UTC](https://discuss.elastic.co/t/auto-delete-index-log-elasticsearch-by-period/279086 "2021-07-19T16:49:47Z")
How can i configure ElasticSearch to delete logs passed 1 month, or if there is no sush conf, how can i call api delete from java client i want to send post with authentification and with query for delete : json = { "… --- ## [Finding the parent id/ session id of an activity (logs)](https://discuss.elastic.co/t/finding-the-parent-id-session-id-of-an-activity-logs/279091)
**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 4:17pm UTC](https://discuss.elastic.co/t/finding-the-parent-id-session-id-of-an-activity-logs/279091 "2021-07-19T16:17:15Z")
Is there a way to find parent id/session id that measures from the start to the end of an activity in Elasticsearch. I was reading up on spans and how they can help with this. However, besides using APM, does elasticsear… --- ## [Kibana map and controls: filtering on a field common to two indices should filter away all points in second index](https://discuss.elastic.co/t/kibana-map-and-controls-filtering-on-a-field-common-to-two-indices-should-filter-away-all-points-in-second-index/278723)
**Author:** [@UMJames](https://discuss.elastic.co/u/UMJames)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 4:06pm UTC](https://discuss.elastic.co/t/kibana-map-and-controls-filtering-on-a-field-common-to-two-indices-should-filter-away-all-points-in-second-index/278723 "2021-07-19T16:06:06Z")
I have two indices displayed on a map, "Individuals" and "Teams", and both have a common field: "Country". I have two Controls visualizations, one filtering by Country, acting on the "Individuals" index pattern, and the… --- ## [Fleet managed elastic agent enrolled as standalone via AzDo pipeline](https://discuss.elastic.co/t/fleet-managed-elastic-agent-enrolled-as-standalone-via-azdo-pipeline/278863)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 3:22pm UTC](https://discuss.elastic.co/t/fleet-managed-elastic-agent-enrolled-as-standalone-via-azdo-pipeline/278863 "2021-07-19T15:22:50Z")
We are installing elastic agents onto WS2019 VMs via Azure DevOps pipelines. In the pipeline in one particular stage/task there is one powershell script that installs different packages on the server and Elastic Agent i… --- ## [Filebeat unable to parse logs with log4j format](https://discuss.elastic.co/t/filebeat-unable-to-parse-logs-with-log4j-format/278824)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-parse-logs-with-log4j-format/278824 "2021-07-19T15:24:19Z")
Currently we do run Tomcat server with log4j logging framework Filebeat unable to parse logs with log4j format Can any please suggest --- ## [Moving Kibana 7.13.3 development environment](https://discuss.elastic.co/t/moving-kibana-7-13-3-development-environment/278368)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 20\ **Last updated:** [July 19, 2021, 2:45pm UTC](https://discuss.elastic.co/t/moving-kibana-7-13-3-development-environment/278368 "2021-07-19T14:45:56Z")
Hello all, I hope you are doing well! I have a question about my kibana development environment. I have developed kibana from source on one workstation and copied it from there and pasted it on another work station. it … --- ## [Cannot read property map of undefined](https://discuss.elastic.co/t/cannot-read-property-map-of-undefined/279080)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 2:44pm UTC](https://discuss.elastic.co/t/cannot-read-property-map-of-undefined/279080 "2021-07-19T14:44:43Z")
Hi, I have elk stack version 7.11.1. I have 2 spaces. Chrome browser. Everything was working fine. Suddenly started getting the problem in custom space for dashboards, discover and many tabs. All this error happens … --- ## [Elastic Cloud can't connect to Kibana](https://discuss.elastic.co/t/elastic-cloud-cant-connect-to-kibana/278818)
**Author:** [@mi\_uber\_alles](https://discuss.elastic.co/u/mi_uber_alles)\ **Replies:** 4\ **Last updated:** [July 19, 2021, 2:42pm UTC](https://discuss.elastic.co/t/elastic-cloud-cant-connect-to-kibana/278818 "2021-07-19T14:42:54Z")
Hi All, I just started to use a trial version of the Elastic Cloud and created my first deployment. I also created a test VM to provide sample data through Metricbeat. Added the cloud.id and cloud.auth data to the confi… --- ## [Why wildcard not working? Filebeat 7.13.3](https://discuss.elastic.co/t/why-wildcard-not-working-filebeat-7-13-3/278693)
**Author:** [@Oleg\_Makar21e31](https://discuss.elastic.co/u/Oleg_Makar21e31)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:37pm UTC](https://discuss.elastic.co/t/why-wildcard-not-working-filebeat-7-13-3/278693 "2021-07-19T14:37:27Z")
Why wildcard doesnt working in filebeat? I read all logstash's article about PATH and GLOB (not working too even GLOB constructor is valid) and recursive\_glob.enabled: true and it doesnt working for me!!! Why???? Please… --- ## [KIbana Time series not getting updated when using Interval as "Auto"](https://discuss.elastic.co/t/kibana-time-series-not-getting-updated-when-using-interval-as-auto/279017)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:35pm UTC](https://discuss.elastic.co/t/kibana-time-series-not-getting-updated-when-using-interval-as-auto/279017 "2021-07-19T14:35:04Z")
Im using Timeseries graph in Kibana 7.10.2 . When I select Interval as Auto , its not getting updated on time. When I set interval as 5m, Im able to see record, but not when selected as Auto. As you see in below image, … --- ## [How to hide columns from data table?](https://discuss.elastic.co/t/how-to-hide-columns-from-data-table/279077)
**Author:** [@creativeguitar](https://discuss.elastic.co/u/creativeguitar)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:22pm UTC](https://discuss.elastic.co/t/how-to-hide-columns-from-data-table/279077 "2021-07-19T14:22:08Z")
I applied a date range filter to my table and it created an ugly column that I would like to hide. If it is not possible to hide, I would be ok if i can at least get rid of the time part of the date and display somethin… --- ## [Format Datatable Column text](https://discuss.elastic.co/t/format-datatable-column-text/278596)
**Author:** [@matheuspavanetti](https://discuss.elastic.co/u/matheuspavanetti)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:00pm UTC](https://discuss.elastic.co/t/format-datatable-column-text/278596 "2021-07-19T14:00:51Z")
Hi Team, Currently, I'm building a dashboard which the data source field is a big text, When I open the field in the Discover session, it shows me the way I expect, formatted and aligned, But when I query this field f… --- ## [Horizontal Bar Chart - Axys Y Display Interval 0.01](https://discuss.elastic.co/t/horizontal-bar-chart-axys-y-display-interval-0-01/278068)
**Author:** [@Rafael\_Almeida1](https://discuss.elastic.co/u/Rafael_Almeida1)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 1:57pm UTC](https://discuss.elastic.co/t/horizontal-bar-chart-axys-y-display-interval-0-01/278068 "2021-07-19T13:57:56Z")
Hi, I'm trying create a graph horizontal bar with money interval of $0.01. My Elastic Stack version is 7.11.2. The atual interval is just $0.2. How I can visually discern the difference between values? --- ## [How to group by multiple fields in kibana](https://discuss.elastic.co/t/how-to-group-by-multiple-fields-in-kibana/279003)
**Author:** [@advaitha001](https://discuss.elastic.co/u/advaitha001)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 1:16pm UTC](https://discuss.elastic.co/t/how-to-group-by-multiple-fields-in-kibana/279003 "2021-07-19T13:16:15Z")
Hello, We are new to Kibana, trying to achieve sum(max(column) group by field1(date),field2(string). We tried doing sum bucket, but we were able to only pick one of the fields. Please help us if there is any way to do… --- ## [How can I reindex the results of an aggregation into another index?](https://discuss.elastic.co/t/how-can-i-reindex-the-results-of-an-aggregation-into-another-index/278896)
**Author:** [@Vaishnavi\_Nandakumar](https://discuss.elastic.co/u/Vaishnavi_Nandakumar)\ **Replies:** 10\ **Last updated:** [July 19, 2021, 12:58pm UTC](https://discuss.elastic.co/t/how-can-i-reindex-the-results-of-an-aggregation-into-another-index/278896 "2021-07-19T12:58:58Z")
Hello, I'm using the 7.7.0 version of Elasticsearch. I have an aggregation query that works on the ingested data to produce the output but I am not able to re-index it. Data Context The given dataset has around 500,00… --- ## [How to clean & group url with paramater data](https://discuss.elastic.co/t/how-to-clean-group-url-with-paramater-data/277000)
**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 12:45pm UTC](https://discuss.elastic.co/t/how-to-clean-group-url-with-paramater-data/277000 "2021-07-19T12:45:45Z")
I have URL field on my log which i need to group/bucket: Unfortunately the it has some varying data on it, such as: https://172.18.10.41/api/v1.0/customer/inquiry/401301018517537 http://182.18.10.41/corp/rest/v1/01/cu… --- ## [How to run elassandra on windows](https://discuss.elastic.co/t/how-to-run-elassandra-on-windows/279058)
**Author:** [@Pramod\_Kumar3](https://discuss.elastic.co/u/Pramod_Kumar3)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 12:19pm UTC](https://discuss.elastic.co/t/how-to-run-elassandra-on-windows/279058 "2021-07-19T12:19:12Z")
I am try to run elassandra on windows by using Cassandra -e command, it's throwing invalid parameters : empty value. I believe the run command should be different. Can you please share the command to run on windows. T… --- ## [Return result of a custom field using query\_template](https://discuss.elastic.co/t/return-result-of-a-custom-field-using-query-template/279051)
**Author:** [@martb](https://discuss.elastic.co/u/martb)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 11:41am UTC](https://discuss.elastic.co/t/return-result-of-a-custom-field-using-query-template/279051 "2021-07-19T11:41:17Z")
Hi, I've created a query\_template that gets the average number of alerts per day, but it's not returning the avg\_count result to logstash. I done this before when the field exists but not with a custom result i.e not a … --- ## [How to allow Users access Kibana on Elastic Cloud on Azure?](https://discuss.elastic.co/t/how-to-allow-users-access-kibana-on-elastic-cloud-on-azure/278381)
**Author:** [@idelix](https://discuss.elastic.co/u/idelix)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 11:41am UTC](https://discuss.elastic.co/t/how-to-allow-users-access-kibana-on-elastic-cloud-on-azure/278381 "2021-07-19T11:41:07Z")
I deployed: Elastic Cloud (Elasticsearch managed service) Elastic Cloud (Elasticsearch managed service) Now I need to allow users from my Azure tenant to access Kibana using their Azure AD credentials so to do something… --- ## [Execute script while in maintenance mode](https://discuss.elastic.co/t/execute-script-while-in-maintenance-mode/279050)
**Author:** [@crl](https://discuss.elastic.co/u/crl)\ **Replies:** 0\ **Last updated:** [July 19, 2021, 11:19am UTC](https://discuss.elastic.co/t/execute-script-while-in-maintenance-mode/279050 "2021-07-19T11:19:11Z")
I have a cluster hosted in AWS that I have had to place in maintenance mode (stop routing requests) as the incoming requests prevent any work on the cluster in its current state. Some of the issues are caused by mapping… --- ## [Customized color for the gauge visualization](https://discuss.elastic.co/t/customized-color-for-the-gauge-visualization/278651)
**Author:** [@Rana\_M\_Zubair](https://discuss.elastic.co/u/Rana_M_Zubair)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 11:20am UTC](https://discuss.elastic.co/t/customized-color-for-the-gauge-visualization/278651 "2021-07-19T11:20:08Z")
Hi all, I am trying to create a gauge visualization of split group bucket type. In my case, I have the field that results in success or error count. I want the gauge for the success case count to be of the green color a… --- ## [Logstash log4j2.properties configuration for pipeline logs](https://discuss.elastic.co/t/logstash-log4j2-properties-configuration-for-pipeline-logs/278612)
**Author:** [@Kshema](https://discuss.elastic.co/u/Kshema)\ **Replies:** 3\ **Last updated:** [July 19, 2021, 11:11am UTC](https://discuss.elastic.co/t/logstash-log4j2-properties-configuration-for-pipeline-logs/278612 "2021-07-19T11:11:10Z")
In our application, logstash.yml is configured to produce separate log files for each pipeline with the help of below property pipeline.separate\_logs: true This configuration setup is creating the below mentioned logs: … --- ## [Failed to start elastic search](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983)
**Author:** [@Jedrick](https://discuss.elastic.co/u/Jedrick)\ **Replies:** 8\ **Last updated:** [July 19, 2021, 10:48am UTC](https://discuss.elastic.co/t/failed-to-start-elastic-search/278983 "2021-07-19T10:48:42Z")
Hi, Good day. Can you help me with my problem with elastic search? Currently, i am building a Wazuh siem that uses elastic search functions. As I checked, Filebeat, kibana services are running. But the elasticsearch … --- ## [Enterprise-search won't start due to unhandled error: NoMethodError: undefined method \`join' for nil:NilClass](https://discuss.elastic.co/t/enterprise-search-wont-start-due-to-unhandled-error-nomethoderror-undefined-method-join-for-nil-nilclass/279040)
**Author:** [@matp](https://discuss.elastic.co/u/matp)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 10:07am UTC](https://discuss.elastic.co/t/enterprise-search-wont-start-due-to-unhandled-error-nomethoderror-undefined-method-join-for-nil-nilclass/279040 "2021-07-19T10:07:13Z")
After doing a very basic elasticsearch/enterprise-search install (single server, tarballs, elasticsearch running fine) I can't get enterprise search to start. There is an unhandled error in the logs/journal: NoMethodErr… --- ## [Kibana lens visualizations nested in dashboard unable to sort ascending/descending](https://discuss.elastic.co/t/kibana-lens-visualizations-nested-in-dashboard-unable-to-sort-ascending-descending/278998)
**Author:** [@technobrom](https://discuss.elastic.co/u/technobrom)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 10:03am UTC](https://discuss.elastic.co/t/kibana-lens-visualizations-nested-in-dashboard-unable-to-sort-ascending-descending/278998 "2021-07-19T10:03:09Z")
I'm currently using Kibana for work and have been creating visualizations using the new lens feature. I noticed that once I nest the new visualization in a dashboard, I am unable to sort the fields either ascending or de… --- ## [Prefix of special character on the id](https://discuss.elastic.co/t/prefix-of-special-character-on-the-id/278567)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 2\ **Last updated:** [July 19, 2021, 9:58am UTC](https://discuss.elastic.co/t/prefix-of-special-character-on-the-id/278567 "2021-07-19T09:58:49Z")
I have inadvertently loaded some documents without sanitising the field that was meant to be the id. So some records now have an id that begins with the ascii 09 i.e. the tab character I can extract an individual recor… --- ## [Script query is not returning whole double value](https://discuss.elastic.co/t/script-query-is-not-returning-whole-double-value/278871)
**Author:** [@RamPrasadKM](https://discuss.elastic.co/u/RamPrasadKM)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:50am UTC](https://discuss.elastic.co/t/script-query-is-not-returning-whole-double-value/278871 "2021-07-19T09:50:26Z")
POST gs011\_carea\_area/\_search { "from": 0, "size": 0, "version": true, "aggregations": { "filters": { "filter": { "bool": { "must": \[ { "terms": { "id": \[ 76701 \], "boost": 1 } } \], "adjust\_pure\_negati… [Previous page](https://discuss.elastic.co/latest.md?page=1565) [Next page](https://discuss.elastic.co/latest.md?page=1567)