# Latest **URL:** https://discuss.elastic.co/latest.md?page=1608 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1609 --- ## [Canvas dropdown filter not working for some values](https://discuss.elastic.co/t/canvas-dropdown-filter-not-working-for-some-values/276637)
**Author:** [@Malaba](https://discuss.elastic.co/u/Malaba)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 7:56am UTC](https://discuss.elastic.co/t/canvas-dropdown-filter-not-working-for-some-values/276637 "2021-06-23T07:56:12Z")
Hello, I have a dropdown filter in a canva. Unfortunately, it doesn't work for 3 of 6 values. I tried to change these 3 values without success. Anyone to help me please? --- ## [Multiple split](https://discuss.elastic.co/t/multiple-split/276533)
**Author:** [@graaooor](https://discuss.elastic.co/u/graaooor)\ **Replies:** 3\ **Last updated:** [June 23, 2021, 7:55am UTC](https://discuss.elastic.co/t/multiple-split/276533 "2021-06-23T07:55:08Z")
Hello, I Have a csv file which have 3 fields field1 : ID field2 : Company Name field3 : Array of contacts (separator : | ) Theis field can be : null (no contact) one or more contacts But each contact is also an a… --- ## [Kibana ダッシュボード作成する際グラフの色と作成後グラフの色が違う](https://discuss.elastic.co/t/kibana/276738)
**Author:** [@lee0745](https://discuss.elastic.co/u/lee0745)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 7:47am UTC](https://discuss.elastic.co/t/kibana/276738 "2021-06-23T07:47:44Z")
kibana 7.13.0を使用しています。 kibanaでダッシュボード作成する時に設定したグラフの色と作成した後のグラフの色が違います。 自動に薄い色に変わってしまいます。 変わってしまう原因がありますでしょうか。 自分が設定した色が変わらないようにしたいです。 ダッシュボード作成時 ダッシュボード保存後画面表示 --- ## [logstashとpostgresDBを同期して取得する日付データが9時間ずれる](https://discuss.elastic.co/t/logstash-postgresdb-9/276254)
**Author:** [@lee0745](https://discuss.elastic.co/u/lee0745)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 7:29am UTC](https://discuss.elastic.co/t/logstash-postgresdb-9/276254 "2021-06-23T07:29:29Z")
logstashとpostgresDBを同期して取得する日付データが9時間ずれます。 postgres（sample\_date)：2021/06/17 11:45:59.740 logstash同期後：2021-06-17T02:45:59.740Z 私のconfファイルです。 input { jdbc { jdbc\_driver\_library =\> "../logstash/logstash-core/lib/… --- ## [Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/276176)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 23\ **Last updated:** [June 23, 2021, 7:04am UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/276176 "2021-06-23T07:04:51Z")
Hi, I have installed native Filebeat and configured filebeat.yml accordingley but when I start the service it gives the below error: Jun 16 10:16:03 picktrack-1b systemd\[1\]: filebeat.service: Service hold-off time ove… --- ## [Rally 2.2.1 released](https://discuss.elastic.co/t/rally-2-2-1-released/276730)
**Author:** [@Bradley\_Deam](https://discuss.elastic.co/u/Bradley_Deam)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 7:02am UTC](https://discuss.elastic.co/t/rally-2-2-1-released/276730 "2021-06-23T07:02:58Z")
This release contains a slew of bug fixes, doc improvements, and feature enhancements, but some of our favourite highlights include... A new shard stats telemetry device was added that records shard allocations and sta… --- ## [Dashboard panel not removable](https://discuss.elastic.co/t/dashboard-panel-not-removable/276666)
**Author:** [@boernd](https://discuss.elastic.co/u/boernd)\ **Replies:** 3\ **Last updated:** [June 23, 2021, 6:58am UTC](https://discuss.elastic.co/t/dashboard-panel-not-removable/276666 "2021-06-23T06:58:01Z")
Hi, Kibana version: 7.12.0 I have a dashboard with a panel. If I use the "Copy to dashboard" functionality of a panel I'm not able to remove the copied/linked(?) panel on the target dashboard again. In Edit mode I have… --- ## [Edit System Template with API call?](https://discuss.elastic.co/t/edit-system-template-with-api-call/276655)
**Author:** [@kodka](https://discuss.elastic.co/u/kodka)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 6:47am UTC](https://discuss.elastic.co/t/edit-system-template-with-api-call/276655 "2021-06-23T06:47:00Z")
I want to create ILP to elasticsearch monitoring index, i have ILP created, and now i want to link it to the System template ".monitoring-es" but in order to have everything persistent and ready to be reused, we impleme… --- ## [Prebuilt dashboards for esrally](https://discuss.elastic.co/t/prebuilt-dashboards-for-esrally/276674)
**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\ **Replies:** 4\ **Last updated:** [June 23, 2021, 5:57am UTC](https://discuss.elastic.co/t/prebuilt-dashboards-for-esrally/276674 "2021-06-23T05:57:14Z")
Hi All, I have pushed the esrally metrics to dedicated elasticsearch cluster. are there any existing dashboards available so that I can make use of them for esrally metrics visualizations in kibana? --- ## [Calculate statistical Reliability based on selection in Kibana](https://discuss.elastic.co/t/calculate-statistical-reliability-based-on-selection-in-kibana/276719)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 5:36am UTC](https://discuss.elastic.co/t/calculate-statistical-reliability-based-on-selection-in-kibana/276719 "2021-06-23T05:36:14Z")
Hi, I want to calculate the reliability of filter selection based on count and standard deviation using central limit theorem. So is there any way to implement this calculation with any visualization of kibana. --- ## [Time difference](https://discuss.elastic.co/t/time-difference/276300)
**Author:** [@Cgr\_EQ](https://discuss.elastic.co/u/Cgr_EQ)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 4:10am UTC](https://discuss.elastic.co/t/time-difference/276300 "2021-06-23T04:10:07Z")
I have 2 documents and each document fields are as follow: Timestamp / ID / Field 2021-06-15 12:00:00 / 1 / Start (doc1) 2021-06-15 12… --- ## [How to find all String Type Methods of Painless](https://discuss.elastic.co/t/how-to-find-all-string-type-methods-of-painless/276623)
**Author:** [@john.zhang](https://discuss.elastic.co/u/john.zhang)\ **Replies:** 3\ **Last updated:** [June 23, 2021, 3:53am UTC](https://discuss.elastic.co/t/how-to-find-all-string-type-methods-of-painless/276623 "2021-06-23T03:53:11Z")
Hi All, I am a newer. I am curious , why not find any document for string type method of painless language. Please help tell me where to find? Thank you --- ## [I want to ask about elasticsearch and Ubuntu](https://discuss.elastic.co/t/i-want-to-ask-about-elasticsearch-and-ubuntu/276716)
**Author:** [@an\_dinh](https://discuss.elastic.co/u/an_dinh)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 3:46am UTC](https://discuss.elastic.co/t/i-want-to-ask-about-elasticsearch-and-ubuntu/276716 "2021-06-23T03:46:24Z")
When I setup Elasticsearch on Ubuntu, I made a mistake when putting 7.11.2 to: echo "deb https://artifacts.elastic.co/packages/7.11.2/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-7.11.2.list so now, wh… --- ## [Is it okay to make 7 nodes of cluster in one machine(server)?](https://discuss.elastic.co/t/is-it-okay-to-make-7-nodes-of-cluster-in-one-machine-server/276614)
**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\ **Replies:** 10\ **Last updated:** [June 23, 2021, 3:23am UTC](https://discuss.elastic.co/t/is-it-okay-to-make-7-nodes-of-cluster-in-one-machine-server/276614 "2021-06-23T03:23:58Z")
Hello. I am running ELK and this has only one node of cluster on server.(ELK version is 6.8) The indices size per a day is about below 100GB but it's gonna increase. So I need to divide nodes to master node and data no… --- ## [Check pattern in scripted field](https://discuss.elastic.co/t/check-pattern-in-scripted-field/276158)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 3\ **Last updated:** [June 23, 2021, 2:12am UTC](https://discuss.elastic.co/t/check-pattern-in-scripted-field/276158 "2021-06-23T02:12:57Z")
I have a field "a" that sometimes gets values that satisfy the following pattern: "AAA\_BBB\_CCC\_DDD". The relevant feature of this pattern is the occurrence of the four underscores "\_". The lenght of the A's, B's, C's an… --- ## [The elasticsearch system user](https://discuss.elastic.co/t/the-elasticsearch-system-user/276629)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 1:53am UTC](https://discuss.elastic.co/t/the-elasticsearch-system-user/276629 "2021-06-23T01:53:44Z")
hello everyone. is the elasticsearch's user has a password? if not is there any documentation about this? --- ## [Kibana dashboards to monitoring used size in GB](https://discuss.elastic.co/t/kibana-dashboards-to-monitoring-used-size-in-gb/276626)
**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 12:04am UTC](https://discuss.elastic.co/t/kibana-dashboards-to-monitoring-used-size-in-gb/276626 "2021-06-23T00:04:40Z")
Hello guys, After a long research i couldnt find what is a requirement for my project. So, i'm using Elastic Siem, essentially with ELK + Filebeat, AuditBeat, WinLogBeat, MetricBeat, Heartbeat etc... And i have a requ… --- ## [Drop field based on pattern](https://discuss.elastic.co/t/drop-field-based-on-pattern/276443)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 9:49pm UTC](https://discuss.elastic.co/t/drop-field-based-on-pattern/276443 "2021-06-22T21:49:51Z")
Hi, I have some field names that begin with the string "sub" that I want Logstash to drop. Can I do something like: if \[sub\*\] { drop {} } --- ## ['m having trouble with PROBLEM CHILD GITHUB CODE](https://discuss.elastic.co/t/m-having-trouble-with-problem-child-github-code/276649)
**Author:** [@legend](https://discuss.elastic.co/u/legend)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 9:48pm UTC](https://discuss.elastic.co/t/m-having-trouble-with-problem-child-github-code/276649 "2021-06-22T21:48:33Z")
\ POST scripts/painless/execute { "script": { "lang": "painless", "source": """ String nGramAtPosition(String field, int fieldcount, int n) { if (fieldcount+n\>field.length()) { return '' } else { return fie… --- ## [KIbana pods getting created than given replica count](https://discuss.elastic.co/t/kibana-pods-getting-created-than-given-replica-count/276601)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 8:43pm UTC](https://discuss.elastic.co/t/kibana-pods-getting-created-than-given-replica-count/276601 "2021-06-22T20:43:55Z")
We had deployed eck(1.3.0) in a GKE cluster with 2 data-ingest and 3 master pods and 1 kibana pod(7.9.0). We had given 1 replica count for kibana configuration and deployed. But may kibana pods are getting created and t… --- ## [Logstash error : no implicit conversion of nil into Integer](https://discuss.elastic.co/t/logstash-error-no-implicit-conversion-of-nil-into-integer/276688)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 8:40pm UTC](https://discuss.elastic.co/t/logstash-error-no-implicit-conversion-of-nil-into-integer/276688 "2021-06-22T20:40:14Z")
Hello, elastic people, I have been making a filter in logstash of a conditional to analyze the status of a team according to the metrics, I tried it, but I get the following error, I need help with this please: \[ERROR\] … --- ## [Logstash: формирование @timestamp, используя имя файла лога и данные самого лога (ч. 2)](https://discuss.elastic.co/t/logstash-timestamp-2/276144)
**Author:** [@lkfmasd](https://discuss.elastic.co/u/lkfmasd)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 7:06pm UTC](https://discuss.elastic.co/t/logstash-timestamp-2/276144 "2021-06-22T19:06:35Z")
Добрый день. Продолжение темы: Logstash: формирование @timestamp, используя имя файла лога и данные самого лога. Продублирую задачу: На текущий момент поле @timestamp формируется, исходя из даты, когда данные были пер… --- ## [How to customize navbar logo in 7.12.1](https://discuss.elastic.co/t/how-to-customize-navbar-logo-in-7-12-1/276170)
**Author:** [@Kanishk\_Madan](https://discuss.elastic.co/u/Kanishk_Madan)\ **Replies:** 7\ **Last updated:** [June 22, 2021, 6:47pm UTC](https://discuss.elastic.co/t/how-to-customize-navbar-logo-in-7-12-1/276170 "2021-06-22T18:47:38Z")
hello community i want to change the navbar logo that is elastic how can I do it in 7.12.1. --- ## [Error Provisioning Index Pattern](https://discuss.elastic.co/t/error-provisioning-index-pattern/276172)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 6\ **Last updated:** [June 22, 2021, 6:42pm UTC](https://discuss.elastic.co/t/error-provisioning-index-pattern/276172 "2021-06-22T18:42:03Z")
Hi, I'm trying to create an index pattern from the following json file: { "index\_pattern": { "id": "\" "version": "0.1" "title": "test-\*", "timeFieldName": "@timestamp", "fieldFormats":… --- ## [Beep actiontype](https://discuss.elastic.co/t/beep-actiontype/273851)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 6:39pm UTC](https://discuss.elastic.co/t/beep-actiontype/273851 "2021-06-22T18:39:03Z")
I have added a new actionType to my kibana source. I register it in both server and client side my action id is : .beep at this moment i log a message in file. but i want to play a beep sound in my kibana. how can… --- ## [Unble to convert to date string field](https://discuss.elastic.co/t/unble-to-convert-to-date-string-field/276661)
**Author:** [@casquero](https://discuss.elastic.co/u/casquero)\ **Replies:** 10\ **Last updated:** [June 22, 2021, 6:30pm UTC](https://discuss.elastic.co/t/unble-to-convert-to-date-string-field/276661 "2021-06-22T18:30:09Z")
I've tried to create a new field as date but always appears as string in Kibana, I've done the following: mutate { add\_field =\> { "timestampTest" =\> "%{localisodate}" } } date { match =\> \["timest… --- ## [Generate Event in Kibana when clicking at the table row in Dashboard?](https://discuss.elastic.co/t/generate-event-in-kibana-when-clicking-at-the-table-row-in-dashboard/273929)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 6:18pm UTC](https://discuss.elastic.co/t/generate-event-in-kibana-when-clicking-at-the-table-row-in-dashboard/273929 "2021-06-22T18:18:26Z")
It is possible to generate event when clicking at the table row and That generated event send data to the other index in the kibana. Is it possible to generate event on table row in kibana. --- ## [Sort/Toggle Detection Rules by Severity or Risk Score](https://discuss.elastic.co/t/sort-toggle-detection-rules-by-severity-or-risk-score/276064)
**Author:** [@scanlan](https://discuss.elastic.co/u/scanlan)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 5:48pm UTC](https://discuss.elastic.co/t/sort-toggle-detection-rules-by-severity-or-risk-score/276064 "2021-06-22T17:48:30Z")
Is it possible to sort detection rules by risk score or severity? I would like to only enable rules above a certain severity/risk score. What is the best way to do this? --- ## [Wrong Total on listed fields in an index pattern](https://discuss.elastic.co/t/wrong-total-on-listed-fields-in-an-index-pattern/276684)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 0\ **Last updated:** [June 22, 2021, 5:29pm UTC](https://discuss.elastic.co/t/wrong-total-on-listed-fields-in-an-index-pattern/276684 "2021-06-22T17:29:12Z")
Hi all, I have an index pattern with list format data as below: linkedGPO's { "name": "Password and lockout policy", "enabled": true, "enforced": false }, { "name": "Screen Saver Lockout Policy", "enabled": t… --- ## [Elasticsearch cluster without replication](https://discuss.elastic.co/t/elasticsearch-cluster-without-replication/276682)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 5:17pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-without-replication/276682 "2021-06-22T17:17:51Z")
Can I create Elasticsearch cluster without replication? Which all settings needed to be taken care of, if I want to use it only for scaling and not for high availability. [Previous page](https://discuss.elastic.co/latest.md?page=1607) [Next page](https://discuss.elastic.co/latest.md?page=1609)