# Latest **URL:** https://discuss.elastic.co/latest.md?page=1703 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1704 --- ## [Metricbeat kubernetes volumes type](https://discuss.elastic.co/t/metricbeat-kubernetes-volumes-type/271720)
**Author:** [@andrask](https://discuss.elastic.co/u/andrask)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 9:23pm UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-volumes-type/271720 "2021-04-29T21:23:23Z")
Metricbeat is providing numbers for volumes in my cluster. However, I find it hard to determine what type a volume is as this data is missing from the fields. Would it be possible to add the type field too? E.g. PV, Conf… --- ## [Heartbeat showing 1/2 of my nodes down](https://discuss.elastic.co/t/heartbeat-showing-1-2-of-my-nodes-down/271680)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 2\ **Last updated:** [April 29, 2021, 9:20pm UTC](https://discuss.elastic.co/t/heartbeat-showing-1-2-of-my-nodes-down/271680 "2021-04-29T21:20:20Z")
Hey I have two nodes of elasticsearch running in two separate VMs in azure, I set up SSL + https for my cluster and secured kibana too running in VM1. I used self signed certificates following this doc. I used the file e… --- ## [Use kibana for clickhouse rather than elasticsearch](https://discuss.elastic.co/t/use-kibana-for-clickhouse-rather-than-elasticsearch/271356)
**Author:** [@DrissiReda](https://discuss.elastic.co/u/DrissiReda)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 9:04pm UTC](https://discuss.elastic.co/t/use-kibana-for-clickhouse-rather-than-elasticsearch/271356 "2021-04-29T21:04:45Z")
Hello, I'm trying to add support for clickhouse for kibana. And to do so I need to know what kind of request kibana sends to elasticsearch (especially aggregations). What parts of the source code should I look for? Can … --- ## [If an ML job doesnt find anomalies it will not display anything in the anomaly explorer an in single metric viewer?](https://discuss.elastic.co/t/if-an-ml-job-doesnt-find-anomalies-it-will-not-display-anything-in-the-anomaly-explorer-an-in-single-metric-viewer/271657)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [April 29, 2021, 8:57pm UTC](https://discuss.elastic.co/t/if-an-ml-job-doesnt-find-anomalies-it-will-not-display-anything-in-the-anomaly-explorer-an-in-single-metric-viewer/271657 "2021-04-29T20:57:58Z")
Hi I have a multimetric job divided by hosts, it is posible that metrics for some host doesnt create anomalies and this specific host is nos displayed in anomaly explorer and in the single metric viewer? how can I make… --- ## [Can't start Kibana with nssm.exe Service Paused](https://discuss.elastic.co/t/cant-start-kibana-with-nssm-exe-service-paused/271384)
**Author:** [@ayyoub](https://discuss.elastic.co/u/ayyoub)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 8:48pm UTC](https://discuss.elastic.co/t/cant-start-kibana-with-nssm-exe-service-paused/271384 "2021-04-29T20:48:50Z")
Hi People I tried to start Kibana manually (Kibana-bat) and it worked fine. However as I tried to start Kibana as a service using nssm.exe it couldn't get started as a service and the service turned to "Paused" any Id… --- ## [\[LOGSTASH\] How to pars logs with SSH](https://discuss.elastic.co/t/logstash-how-to-pars-logs-with-ssh/270513)
**Author:** [@Adhara](https://discuss.elastic.co/u/Adhara)\ **Replies:** 2\ **Last updated:** [April 29, 2021, 8:40pm UTC](https://discuss.elastic.co/t/logstash-how-to-pars-logs-with-ssh/270513 "2021-04-29T20:40:48Z")
Hello, I'm new in ELK and i don't understand one thing. I installed ELK with basic options. I did some small tests locally with the "File" input and it worked fine. Now, I wanted to parse the logs for a remote machine… --- ## [Elastic Stack Architecture Upgrade](https://discuss.elastic.co/t/elastic-stack-architecture-upgrade/271708)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 8:30pm UTC](https://discuss.elastic.co/t/elastic-stack-architecture-upgrade/271708 "2021-04-29T20:30:01Z")
I have been tasked by my director with coming up with a 'right size' for our corporate Elastic Stack and I have the following question. We are using AWS Cloud and we're growing but we're not what you would call an extre… --- ## [How to speed up Language Identification Inference](https://discuss.elastic.co/t/how-to-speed-up-language-identification-inference/271660)
**Author:** [@rueian](https://discuss.elastic.co/u/rueian)\ **Replies:** 5\ **Last updated:** [April 29, 2021, 6:35pm UTC](https://discuss.elastic.co/t/how-to-speed-up-language-identification-inference/271660 "2021-04-29T18:35:34Z")
Hi, I were trying the language identification feature (Language identification | Machine Learning in the Elastic Stack \[7.12\] | Elastic), and noticed that the model inference was very slow. Originally, my elasticsearch … --- ## [Missing prepareSearch() method in RestHighLevelClient](https://discuss.elastic.co/t/missing-preparesearch-method-in-resthighlevelclient/271631)
**Author:** [@cmpich](https://discuss.elastic.co/u/cmpich)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 6:13pm UTC](https://discuss.elastic.co/t/missing-preparesearch-method-in-resthighlevelclient/271631 "2021-04-29T18:13:05Z")
I am trying to use Aggregation API and for that documentation tells me to use SearchResponse sr = node.client().prepareSearch() .setQuery( /\* your query \*/ ) .addAggregation( /\* add an aggregation \*/ ) … --- ## [Conversion of timeformat](https://discuss.elastic.co/t/conversion-of-timeformat/270961)
**Author:** [@mansa](https://discuss.elastic.co/u/mansa)\ **Replies:** 5\ **Last updated:** [April 29, 2021, 5:58pm UTC](https://discuss.elastic.co/t/conversion-of-timeformat/270961 "2021-04-29T17:58:53Z")
Hi Folks we have few logs which comes into time format "2021-04-05 08:04:24+07:00" and i want to convert this time into format "Sep 15 18:58:48" because i am sending logs to different SIEM which reads only syslog time st… --- ## [Drop fields with key that contain string and value \<1](https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 5:53pm UTC](https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672 "2021-04-29T17:53:02Z")
I have a document that contains multiple fields with name metrics.time.\*. I would like to be able to drop all fields from the event that have key =\> metrics.time\* and value \< 1. Can this be accomplished? I tried doin… --- ## [Does Elasticsearch support double bytes characters in path.data?](https://discuss.elastic.co/t/does-elasticsearch-support-double-bytes-characters-in-path-data/271650)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 5:06pm UTC](https://discuss.elastic.co/t/does-elasticsearch-support-double-bytes-characters-in-path-data/271650 "2021-04-29T17:06:55Z")
Does Elasticsearch support double bytes characters like Chinese, Japanese, Korean in path.data? --- ## [EC2 system metrics v/s AWS metrics](https://discuss.elastic.co/t/ec2-system-metrics-v-s-aws-metrics/270598)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 5:06pm UTC](https://discuss.elastic.co/t/ec2-system-metrics-v-s-aws-metrics/270598 "2021-04-29T17:06:49Z")
Using Elastic 7.9 version with 7.9 beats (EFK self managed). Monitoring AWS-EC2 instances Question: Can I just use System Module using Metric beats or AWS EC2 module is required Can you please suggest/comment what mo… --- ## [MetricSet System not being populated for Ubuntu](https://discuss.elastic.co/t/metricset-system-not-being-populated-for-ubuntu/271125)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 4:54pm UTC](https://discuss.elastic.co/t/metricset-system-not-being-populated-for-ubuntu/271125 "2021-04-29T16:54:10Z")
We have configured MetricBeat(7.9 Elastic search 7.9) in the AWS-EC2 Ubuntu 20.04.1 LTS Collecting the filesystem MetricSet. The generated JSON doesn't contain the disk metrics like system.filesystem.used.pct: 0 It sho… --- ## [Для чего нужен параметр \_tier\_preference: data\_content?](https://discuss.elastic.co/t/tier-preference-data-content/271652)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 5:03pm UTC](https://discuss.elastic.co/t/tier-preference-data-content/271652 "2021-04-29T17:03:29Z")
Добрый день! Заметил, что при обновлении до версий 7.11 или 7.12 в новых индексах, в настройках индекса появился параметр, которого я нигде не указывал ни в одном темплейте индекса ранее: "index.routing.allocation.inclu… --- ## [Kibana and elasticsearch not setup on the same vm trouble(version:7.6)](https://discuss.elastic.co/t/kibana-and-elasticsearch-not-setup-on-the-same-vm-trouble-version-7-6/271671)
**Author:** [@loxiaopohaiol](https://discuss.elastic.co/u/loxiaopohaiol)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 4:48pm UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-not-setup-on-the-same-vm-trouble-version-7-6/271671 "2021-04-29T16:48:33Z")
I have two VMs to setup the kibana and the elasticsearch, one of them as elasticsearch server, another one setup the kibana, and both them running in the docker, but I meeting a error for the kibana server, the error l… --- ## [7.9.3 plugin icon not showing on navigation bar](https://discuss.elastic.co/t/7-9-3-plugin-icon-not-showing-on-navigation-bar/271659)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 4:48pm UTC](https://discuss.elastic.co/t/7-9-3-plugin-icon-not-showing-on-navigation-bar/271659 "2021-04-29T16:48:24Z")
Hi, I have upgraded my plugin from 7.6.0 to 7.9.3. My custom icon no longer renders in the navigation bar core.application.register({ id: 'wind', title: PLUGIN\_NAME, order: -5000, icon: 'plu… --- ## [Cross cluster Search](https://discuss.elastic.co/t/cross-cluster-search/270882)
**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 4:40pm UTC](https://discuss.elastic.co/t/cross-cluster-search/270882 "2021-04-29T16:40:44Z")
Hi. Has anyone implemented CCS between Elastic running on GCP or AWS and on on-prem hardware ? I am getting a connection refused error message when I try to add a remote cluster running on GCP or AWS. Thanks Murali --- ## [Do we have data loss when logstash is unable to send logs to haproxy as haproxy server is unavailable](https://discuss.elastic.co/t/do-we-have-data-loss-when-logstash-is-unable-to-send-logs-to-haproxy-as-haproxy-server-is-unavailable/269216)
**Author:** [@muralikrishna](https://discuss.elastic.co/u/muralikrishna)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 4:03pm UTC](https://discuss.elastic.co/t/do-we-have-data-loss-when-logstash-is-unable-to-send-logs-to-haproxy-as-haproxy-server-is-unavailable/269216 "2021-04-29T16:03:09Z")
Hi All, I am looking for some information on data/log loss incase of my below situation. I have centralized management cluster to which my logstash will be connected with and i have logs coming from beat agents and sys… --- ## [Failed to fetch rules and timelines: Failed to parse field \[filter\]: x\_content\_parse\_exception](https://discuss.elastic.co/t/failed-to-fetch-rules-and-timelines-failed-to-parse-field-filter-x-content-parse-exception/269624)
**Author:** [@aditi\_salunke](https://discuss.elastic.co/u/aditi_salunke)\ **Replies:** 2\ **Last updated:** [April 29, 2021, 3:42pm UTC](https://discuss.elastic.co/t/failed-to-fetch-rules-and-timelines-failed-to-parse-field-filter-x-content-parse-exception/269624 "2021-04-29T15:42:03Z")
I am unable to find what went wrong. Can anyone help me out ? PS: 1)Not able to see pre-configured rules and customised one(for superuser role) 2)No alert is getting triggered --- ## [Detection Custom Rule not working](https://discuss.elastic.co/t/detection-custom-rule-not-working/269578)
**Author:** [@anaghadeoreofficial](https://discuss.elastic.co/u/anaghadeoreofficial)\ **Replies:** 7\ **Last updated:** [April 29, 2021, 3:41pm UTC](https://discuss.elastic.co/t/detection-custom-rule-not-working/269578 "2021-04-29T15:41:18Z")
We are unable to view custom alerts in the detection module. Showing error as below: --- ## [How to determine separation between labels in axis?](https://discuss.elastic.co/t/how-to-determine-separation-between-labels-in-axis/269861)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 8\ **Last updated:** [April 29, 2021, 3:38pm UTC](https://discuss.elastic.co/t/how-to-determine-separation-between-labels-in-axis/269861 "2021-04-29T15:38:50Z")
Hello, If we consider above chart as an example, by default labels are separated with difference of 20. Is there any way that we can control the difference/separation between labels? --- ## [Kibana is not accessible from external browser](https://discuss.elastic.co/t/kibana-is-not-accessible-from-external-browser/271636)
**Author:** [@almotasim90](https://discuss.elastic.co/u/almotasim90)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 3:37pm UTC](https://discuss.elastic.co/t/kibana-is-not-accessible-from-external-browser/271636 "2021-04-29T15:37:04Z")
Hello, I am trying to install Elasticsearch and Kibana on Debian 10. they both work and active in the current machine. I want to access Kibana through different machine's browser, but it cannot be reached. I have chan… --- ## [Pattern Replace Character Filter In a Normalizer](https://discuss.elastic.co/t/pattern-replace-character-filter-in-a-normalizer/271669)
**Author:** [@MilanGatyas](https://discuss.elastic.co/u/MilanGatyas)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 2:58pm UTC](https://discuss.elastic.co/t/pattern-replace-character-filter-in-a-normalizer/271669 "2021-04-29T14:58:46Z")
My goal is to have a same pattern replace character filter on both my custom analyzer and normalizer. Seems like I can use the filter on the analyzer without issues, however facing error when trying to attach the filter … --- ## [Kibana.yml elasticsearch.username: kibana\_system or elastic](https://discuss.elastic.co/t/kibana-yml-elasticsearch-username-kibana-system-or-elastic/271517)
**Author:** [@m\_x](https://discuss.elastic.co/u/m_x)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 2:53pm UTC](https://discuss.elastic.co/t/kibana-yml-elasticsearch-username-kibana-system-or-elastic/271517 "2021-04-29T14:53:21Z")
Hi, Doc here says to use the 'elastic' user in kibana.yml whereas the default configuration and this doc say to use 'kibana\_system' user. Which one should I use ? --- ## [Can Kibana serve static HTML files?](https://discuss.elastic.co/t/can-kibana-serve-static-html-files/271062)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 7\ **Last updated:** [April 29, 2021, 2:44pm UTC](https://discuss.elastic.co/t/can-kibana-serve-static-html-files/271062 "2021-04-29T14:44:53Z")
I'd like to front-end a set of related Kibana dashboards with a static web page that displays a set of tiles with links to those dashboards: This is just a skeleton layout: The color and sizing specs are temporary … --- ## [Filebeat and multiline events](https://discuss.elastic.co/t/filebeat-and-multiline-events/271665)
**Author:** [@the3rdway](https://discuss.elastic.co/u/the3rdway)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 2:42pm UTC](https://discuss.elastic.co/t/filebeat-and-multiline-events/271665 "2021-04-29T14:42:16Z")
I'm working with a virtual appliance that has Filebeat baked in. I have no control over the Filebeat configuration, which is forwarding multiple files of different formats. I can filter on source and grab the file that… --- ## [Kibana Visuals - count number of customers with more than X buys](https://discuss.elastic.co/t/kibana-visuals-count-number-of-customers-with-more-than-x-buys/271107)
**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\ **Replies:** 7\ **Last updated:** [April 29, 2021, 2:38pm UTC](https://discuss.elastic.co/t/kibana-visuals-count-number-of-customers-with-more-than-x-buys/271107 "2021-04-29T14:38:26Z")
Hi all, Image that i have in elastic something like: Customer id Product I need to create a metric that tells me the number of customers that bought the product Y more than X time. Example number of customer that bo… --- ## [TSVB timeseries broken?](https://discuss.elastic.co/t/tsvb-timeseries-broken/271548)
**Author:** [@wlbsxnlp22](https://discuss.elastic.co/u/wlbsxnlp22)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 2:37pm UTC](https://discuss.elastic.co/t/tsvb-timeseries-broken/271548 "2021-04-29T14:37:13Z")
Hi The following is an attempt to display average response times across our different systems in one TSVB Timeseries. Each series has its own separate index pattern. (There is no index main index pattern in panel optio… --- ## [Including data from SQL tables to Elasticsearch](https://discuss.elastic.co/t/including-data-from-sql-tables-to-elasticsearch/271611)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 2:27pm UTC](https://discuss.elastic.co/t/including-data-from-sql-tables-to-elasticsearch/271611 "2021-04-29T14:27:39Z")
Good morning. I would like to know if it would be possible, in order to increase the performance of queries in a SQL database, to perform a data dump from the SQL database to elasticsearch, is that possible, or is it onl… [Previous page](https://discuss.elastic.co/latest.md?page=1702) [Next page](https://discuss.elastic.co/latest.md?page=1704)