# Latest **URL:** https://discuss.elastic.co/latest.md?page=1681 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1682 --- ## [Kibana canvas access permission with on per page basis](https://discuss.elastic.co/t/kibana-canvas-access-permission-with-on-per-page-basis/272752)
**Author:** [@glitz](https://discuss.elastic.co/u/glitz)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 9:13pm UTC](https://discuss.elastic.co/t/kibana-canvas-access-permission-with-on-per-page-basis/272752 "2021-05-12T21:13:58Z")
hello, if a have a privileged user1 and other unprivileged user2, is there a way that I can control that user 1 can read any page in a canvas (the whole canvas) but user2 can read some pages in the same canvas, provided… --- ## [Detection Rule Exceptions "is one of", comma in value](https://discuss.elastic.co/t/detection-rule-exceptions-is-one-of-comma-in-value/272738)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 6\ **Last updated:** [May 12, 2021, 8:30pm UTC](https://discuss.elastic.co/t/detection-rule-exceptions-is-one-of-comma-in-value/272738 "2021-05-12T20:30:45Z")
Hi All, I'm trying to add an exception to a detection rule. This exception is intended to be an is one of rule, that excludes a number of ISPs. However, I am running into an issue some of the ISP names contain a comma, … --- ## [Kibana tsvb pipeline aggregation](https://discuss.elastic.co/t/kibana-tsvb-pipeline-aggregation/271568)
**Author:** [@ivh](https://discuss.elastic.co/u/ivh)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 7:46pm UTC](https://discuss.elastic.co/t/kibana-tsvb-pipeline-aggregation/271568 "2021-05-12T19:46:18Z")
Hello Elastic team! I have a working pipeline aggregation script based on this example & I want to graph same in Kibana (7.10.1) TSVB ... and simply cannot understand how to accomplish this. Tried bucket\_script in TSVB,… --- ## [Logstash: Ingesting CSV, filtered by CSV columns](https://discuss.elastic.co/t/logstash-ingesting-csv-filtered-by-csv-columns/272831)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 4\ **Last updated:** [May 12, 2021, 7:30pm UTC](https://discuss.elastic.co/t/logstash-ingesting-csv-filtered-by-csv-columns/272831 "2021-05-12T19:30:20Z")
Is it possible to ingest data via logstash by applying a filter on data in the CSV file being ingested? For example: input { file { path =\> "blah/blah/\*.gz" max\_open\_files =\> 16000 mode =\> "read" start\_position =\> "b… --- ## [Using Swiftype site search and faceting with crawler](https://discuss.elastic.co/t/using-swiftype-site-search-and-faceting-with-crawler/272091)
**Author:** [@karl\_st](https://discuss.elastic.co/u/karl_st)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 7:14pm UTC](https://discuss.elastic.co/t/using-swiftype-site-search-and-faceting-with-crawler/272091 "2021-05-12T19:14:06Z")
Hi, I had a question - I am working with an outside vendor who is building a Salesforce commerce cloud implementation. We currently use site search via crawler to index both our current marketing site and also our cart … --- ## [Spark - reading index with no type](https://discuss.elastic.co/t/spark-reading-index-with-no-type/272843)
**Author:** [@Elan1](https://discuss.elastic.co/u/Elan1)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 7:05pm UTC](https://discuss.elastic.co/t/spark-reading-index-with-no-type/272843 "2021-05-12T19:05:07Z")
Hi I am using ES 7.1 and created an index. Now I am trying to read it from Spark but getting an error because my index does not have a type. I am following the examples located here GitHub - elastic/elasticsearch-hadoop… --- ## [Format SIEM alerts](https://discuss.elastic.co/t/format-siem-alerts/272772)
**Author:** [@vishnug](https://discuss.elastic.co/u/vishnug)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 6:46pm UTC](https://discuss.elastic.co/t/format-siem-alerts/272772 "2021-05-12T18:46:50Z")
Hi, I'm using ELK v7.12.1. I have enabled few SIEM rules and configured an email action. I'm able to access the event details through {{#context.alerts}} {{.}}{{/context.alerts}}. But when sending the mail the content … --- ## [Recommended Setup and Settings for Very Large Data](https://discuss.elastic.co/t/recommended-setup-and-settings-for-very-large-data/272833)
**Author:** [@jessie.velayo](https://discuss.elastic.co/u/jessie.velayo)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 6:33pm UTC](https://discuss.elastic.co/t/recommended-setup-and-settings-for-very-large-data/272833 "2021-05-12T18:33:34Z")
Hi, Just want to ask your help what's the recommended cluster setup and settings for the data below: Given: To index: 32 billion records (around 7 TB) Node specs: 8 CPUs x 64 RAM x 1.7 TB disk Query complexity: 5 l… --- ## [Data values about time graph kibana vega, vega-lite](https://discuss.elastic.co/t/data-values-about-time-graph-kibana-vega-vega-lite/272714)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 4\ **Last updated:** [May 12, 2021, 5:45pm UTC](https://discuss.elastic.co/t/data-values-about-time-graph-kibana-vega-vega-lite/272714 "2021-05-12T17:45:31Z")
Hi all experts, I'm a beginner of this new techonolgy. I would like to use vega for display line graph that plot data values over time-series (timestamp). The goal is to represent how data values and not count of data ch… --- ## [Field for http response times](https://discuss.elastic.co/t/field-for-http-response-times/272742)
**Author:** [@Sergii\_Ovcharenko](https://discuss.elastic.co/u/Sergii_Ovcharenko)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 5:04pm UTC](https://discuss.elastic.co/t/field-for-http-response-times/272742 "2021-05-12T17:04:44Z")
Hey, Our app logs HTTP response times for the APIs we provide. What would be the best standard field to put this data in to follow ECS standard and best practices? There is no http.response.latency or similar field and e… --- ## [Elasticsearch engineer 1](https://discuss.elastic.co/t/elasticsearch-engineer-1/272835)
**Author:** [@JimBoSlice](https://discuss.elastic.co/u/JimBoSlice)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 5:04pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-1/272835 "2021-05-12T17:04:10Z")
I'm trying to start Elastic Training Engineer 1. I spin up my master and 3 other elastic instances. When I start elasticsearch, I get a massive error telling me I don't have the current version of Java installed. I tried… --- ## [Support for getting parameterized URLs without url\_groups](https://discuss.elastic.co/t/support-for-getting-parameterized-urls-without-url-groups/272182)
**Author:** [@bimanarajesh](https://discuss.elastic.co/u/bimanarajesh)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 4:35pm UTC](https://discuss.elastic.co/t/support-for-getting-parameterized-urls-without-url-groups/272182 "2021-05-12T16:35:18Z")
APM Server version: 7.6.0 APM Agent language and version: Java - 1.17.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Download page Fresh install or upgraded from other vers… --- ## [ML watcher issues v7.5](https://discuss.elastic.co/t/ml-watcher-issues-v7-5/272517)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 4:28pm UTC](https://discuss.elastic.co/t/ml-watcher-issues-v7-5/272517 "2021-05-12T16:28:55Z")
Hi, I got some problems with my watchers lately, the are not sending mail, and the last issue is that it keep in firing state, but never send mail, the jobs are constantly suggesting me that I set a larger query delay to… --- ## [Kibana roles / Errors - warning showing after login](https://discuss.elastic.co/t/kibana-roles-errors-warning-showing-after-login/272721)
**Author:** [@leal](https://discuss.elastic.co/u/leal)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 4:25pm UTC](https://discuss.elastic.co/t/kibana-roles-errors-warning-showing-after-login/272721 "2021-05-12T16:25:35Z")
We had a need to leave some users of a web application to see specific logs for that app. I have created a role, updated /etc/elasticsearch/role\_mapping.yml, I've installed filebeat to fetch this data from the source hos… --- ## [Admin account for Kibana](https://discuss.elastic.co/t/admin-account-for-kibana/272779)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 4:17pm UTC](https://discuss.elastic.co/t/admin-account-for-kibana/272779 "2021-05-12T16:17:59Z")
Hi! how can i get admin account from kibana via command line? I need to create an administrator account to administer other users and manage their access. I don't have a password for the current kibana administrator acc… --- ## [Drop\_event processor not working](https://discuss.elastic.co/t/drop-event-processor-not-working/272786)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 3:31pm UTC](https://discuss.elastic.co/t/drop-event-processor-not-working/272786 "2021-05-12T15:31:04Z")
I have a proccessor to drop some events for a user. here is my config: processors: - drop\_event: when: and: - or: - equals.event.code: 4658 - equals.event.code: 4656 - equals.even… --- ## [Searching Does not Return Results - Challenge](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/271116)
**Author:** [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 2:58pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/271116 "2021-05-12T14:58:15Z")
I posted a search question Searching Does not Return Results - Challenge - #7 by Gary\_Blackwell, but it was the wrong forum. I have not had time to learn the scripting someone in the forum requested that I learn. I hav… --- ## [Searching Does not Return Results - Challenge](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832)
**Author:** [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\ **Replies:** 29\ **Last updated:** [May 12, 2021, 2:56pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832 "2021-05-12T14:56:59Z")
I have this log message in Elastic: ExtendedProperties \[{"Name":"UserAgent","Value":"Microsoft Office/16.0 (Windows NT 10.0; Microsoft Outlook 16.0.13426; Pro)"} {"Name":"UserAuthenticationMethod","Value":"1"} {"Name":… --- ## [Is this registered\_domain processor's problem?](https://discuss.elastic.co/t/is-this-registered-domain-processors-problem/272819)
**Author:** [@e997cd7e8d9915436150](https://discuss.elastic.co/u/e997cd7e8d9915436150)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 2:32pm UTC](https://discuss.elastic.co/t/is-this-registered-domain-processors-problem/272819 "2021-05-12T14:32:58Z")
I am using the winlogbeat-sysmon.js without modifying. But some domain have wrong result like attached image. I think there is no problem with the public suffix list. What is solution? Thank you. --- ## [How to know when transaction is finished](https://discuss.elastic.co/t/how-to-know-when-transaction-is-finished/272587)
**Author:** [@the\_duke](https://discuss.elastic.co/u/the_duke)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 2:29pm UTC](https://discuss.elastic.co/t/how-to-know-when-transaction-is-finished/272587 "2021-05-12T14:29:36Z")
Hi All, I was wondering how one can determine if a transaction is finished? I am working on an angular project and want to log how long a user is logged in. When the user logs out, I start a transaction, calculate the… --- ## [Is Elast alert available for Elasticsearch 7.9.3?](https://discuss.elastic.co/t/is-elast-alert-available-for-elasticsearch-7-9-3/272141)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 2:24pm UTC](https://discuss.elastic.co/t/is-elast-alert-available-for-elasticsearch-7-9-3/272141 "2021-05-12T14:24:20Z")
We are using Elasticsearch with Basic license. Kibana Alerts / Watchers are not available for the Basic License. Ours is a completely open source project, and we are trying to achieve alerting with open source options a… --- ## [Unable to start Elasticsearch as a service](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-a-service/272722)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 5\ **Last updated:** [May 12, 2021, 2:21pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-a-service/272722 "2021-05-12T14:21:26Z")
Elasticsearch version: 7.12 Elasticsearch is installed as an RPM on RHEL 7.9 server. We running ELK on a single VM. For the path.data we have an NFS mounted. When I try to start elasticsearch with path.data set to /var… --- ## [Ingest several csv and create geo\_point](https://discuss.elastic.co/t/ingest-several-csv-and-create-geo-point/272816)
**Author:** [@RichaMax](https://discuss.elastic.co/u/RichaMax)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 1:47pm UTC](https://discuss.elastic.co/t/ingest-several-csv-and-create-geo-point/272816 "2021-05-12T13:47:59Z")
Hello everyone, I'm new to ELK and I have some questions regarding the ingestion of csv files and I couldn't find what I was looking for on the forum. I want to ingest several csv into elasticsearch in different index … --- ## [Stalled Logstash Pipeline and Centralized Pipeline Management](https://discuss.elastic.co/t/stalled-logstash-pipeline-and-centralized-pipeline-management/272815)
**Author:** [@e.sharshenaliev](https://discuss.elastic.co/u/e.sharshenaliev)\ **Replies:** 0\ **Last updated:** [May 12, 2021, 1:30pm UTC](https://discuss.elastic.co/t/stalled-logstash-pipeline-and-centralized-pipeline-management/272815 "2021-05-12T13:30:03Z")
We are using one instance of Logstash (running on Debian VM via "systemctl start logstash") with x-pack Centralized Pipeline Management (CPM). We've encountered the following problem: if for whatever reason pipelines is… --- ## [Ingest mixed container logs with text and JSON \[filebeat\]\[docker\]](https://discuss.elastic.co/t/ingest-mixed-container-logs-with-text-and-json-filebeat-docker/271139)
**Author:** [@bluepuma77](https://discuss.elastic.co/u/bluepuma77)\ **Replies:** 4\ **Last updated:** [May 12, 2021, 1:22pm UTC](https://discuss.elastic.co/t/ingest-mixed-container-logs-with-text-and-json-filebeat-docker/271139 "2021-05-12T13:22:05Z")
Hi all, we are currently using plain text logging and import container output with filebeat into elastic and kibana. We would like to migrate to structured logging with JSON. Is a bit-by-bit migration possible, can I h… --- ## [Set Colors (under certain condition if possible) onto Data Table rows](https://discuss.elastic.co/t/set-colors-under-certain-condition-if-possible-onto-data-table-rows/272709)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 1:17pm UTC](https://discuss.elastic.co/t/set-colors-under-certain-condition-if-possible-onto-data-table-rows/272709 "2021-05-12T13:17:27Z")
Hi everyone. I have a little question about Data table visualisation. Is there a way to set colors to rows and not leave them white ? Even better is there a way to have odd row from one color and pair rows an other co… --- ## [Elasticsearch cannot parse the string value in json？](https://discuss.elastic.co/t/elasticsearch-cannot-parse-the-string-value-in-json/272793)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 3\ **Last updated:** [May 12, 2021, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-cannot-parse-the-string-value-in-json/272793 "2021-05-12T13:06:40Z")
Failure when writing some json data to es with logstash. {"type"=\>"mapper\_parsing\_exception", "reason"=\>"object mapping for \[Data.responsedto\] tried to parse field \[responsedto\] as object, but found a concrete value"} … --- ## [Logstash multiline pattern not working](https://discuss.elastic.co/t/logstash-multiline-pattern-not-working/272635)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 1:04pm UTC](https://discuss.elastic.co/t/logstash-multiline-pattern-not-working/272635 "2021-05-12T13:04:18Z")
Hello All , My logstash.conf file .. input { exec { command =\> "E:\\ELK\\logstash\\scripts\\srvrmgr.bat" interval =\> 300 codec =\> multiline { # Grok pattern names are valid! :slight\_smile: pattern =\> "^(D122|T… --- ## [Plugin installation was unsuccessful due to error "ENOENT: no such file or directory, mkdir"](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-enoent-no-such-file-or-directory-mkdir/272539)
**Author:** [@Pratiks](https://discuss.elastic.co/u/Pratiks)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 12:49pm UTC](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-enoent-no-such-file-or-directory-mkdir/272539 "2021-05-12T12:49:08Z")
I am trying to install enhance table plugin which is available in the github here GitHub - fbaligand/kibana-enhanced-table: Kibana visualization like a Data Table, but with enhanced features like computed columns, filter… --- ## [Additional sitemaps being ignored](https://discuss.elastic.co/t/additional-sitemaps-being-ignored/272614)
**Author:** [@ssmith](https://discuss.elastic.co/u/ssmith)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 12:37pm UTC](https://discuss.elastic.co/t/additional-sitemaps-being-ignored/272614 "2021-05-12T12:37:11Z")
Additional sitemaps added to the swiftype domain settings are not being added to the index, even when "restrict crawling to sitemaps" is enabled. I've checked the sitemap xml formats between the two, they're identical. … [Previous page](https://discuss.elastic.co/latest.md?page=1680) [Next page](https://discuss.elastic.co/latest.md?page=1682)