# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1716

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1717

---

## [Embed dashboard iframe into publicly available website](https://discuss.elastic.co/t/embed-dashboard-iframe-into-publicly-available-website/271006)

<div class="topic-metadata">

**Author:** [@tampe125](https://discuss.elastic.co/u/tampe125)\
**Replies:** 2\
**Last updated:** [April 23, 2021, 9:34am UTC](https://discuss.elastic.co/t/embed-dashboard-iframe-into-publicly-available-website/271006 "2021-04-23T09:34:54Z")

</div>

I'm using Elastic Cloud to log my application data. However, I'd wish to display some generic, aggregate data on company website. The iframe mode is very useful, however it requires a valid elastic search user to acces…

---

## [Interactive Field Selection - Dynamic Split Series](https://discuss.elastic.co/t/interactive-field-selection-dynamic-split-series/271012)

<div class="topic-metadata">

**Author:** [@Jay\_Farias](https://discuss.elastic.co/u/Jay_Farias)\
**Replies:** 1\
**Last updated:** [April 23, 2021, 9:07am UTC](https://discuss.elastic.co/t/interactive-field-selection-dynamic-split-series/271012 "2021-04-23T09:07:52Z")

</div>

Hi, We would like to build some visualizations in Kibana that are split by a field the user can select (ie: split series bar chart where the split series is dynamic based on a dropdown of fields the user can select). Any…

---

## [Kibana Control Panel](https://discuss.elastic.co/t/kibana-control-panel/270880)

<div class="topic-metadata">

**Author:** [@caitlyn.carlisle](https://discuss.elastic.co/u/caitlyn.carlisle)\
**Replies:** 1\
**Last updated:** [April 23, 2021, 8:45am UTC](https://discuss.elastic.co/t/kibana-control-panel/270880 "2021-04-23T08:45:20Z")

</div>

I added a control panel to my dashboard and it works when I am editing and using it in Kibana but when I import it to my website, the control panel no longer works. I was able to update the kibana autocomplete settings i…

---

## [Unexplained failure java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/unexplained-failure-java-lang-outofmemoryerror-java-heap-space/270100)

<div class="topic-metadata">

**Author:** [@Bertram\_van\_de\_Ven](https://discuss.elastic.co/u/Bertram_van_de_Ven)\
**Replies:** 14\
**Last updated:** [April 23, 2021, 8:37am UTC](https://discuss.elastic.co/t/unexplained-failure-java-lang-outofmemoryerror-java-heap-space/270100 "2021-04-23T08:37:20Z")

</div>

Dear, We've encounter 'random' out of memory errors that we can't explain. When we see the error occur we don't see an increase of Heap, system load, CPU or I/O. So I don't know where to search for the explanation why t…

---

## [Sending data to Multiple elasticsearch containers](https://discuss.elastic.co/t/sending-data-to-multiple-elasticsearch-containers/270532)

<div class="topic-metadata">

**Author:** [@safura\_zaheer](https://discuss.elastic.co/u/safura_zaheer)\
**Replies:** 10\
**Last updated:** [April 23, 2021, 7:58am UTC](https://discuss.elastic.co/t/sending-data-to-multiple-elasticsearch-containers/270532 "2021-04-23T07:58:00Z")

</div>

Hi all, I am having 3 docker containers of elasticsearch running on a single host on different ports, Now I want to send data to all the 3 containers so that I don't have any single point of failure . What are the diff…

---

## [Add tags or booleans to speed up queries?](https://discuss.elastic.co/t/add-tags-or-booleans-to-speed-up-queries/270947)

<div class="topic-metadata">

**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\
**Replies:** 4\
**Last updated:** [April 22, 2021, 12:37pm UTC](https://discuss.elastic.co/t/add-tags-or-booleans-to-speed-up-queries/270947 "2021-04-22T12:37:45Z")

</div>

Hello, I want to query documents if the length of a field is more than 1k or 10k, etc. I'm trying to follow an Elasticsearch best practice to avoid doing queries like "if field\_length\> 1000" (Tune for search speed | El…

---

## [Cross-Cluster search Implementation Issues](https://discuss.elastic.co/t/cross-cluster-search-implementation-issues/270651)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 7\
**Last updated:** [April 23, 2021, 6:37am UTC](https://discuss.elastic.co/t/cross-cluster-search-implementation-issues/270651 "2021-04-23T06:37:15Z")

</div>

Hello Team We have implemented Cross-Cluster Search in Elasticsearch version 7.8.0 clusters. For example Cluster-A and Cluster-B. Cluster-A elasticsearch.yml file has below parameters : cluster.remote.Cluster-B.seeds…

---

## [A different version of the library has been downloaded](https://discuss.elastic.co/t/a-different-version-of-the-library-has-been-downloaded/271038)

<div class="topic-metadata">

**Author:** [@tom-shumi](https://discuss.elastic.co/u/tom-shumi)\
**Replies:** 0\
**Last updated:** [April 23, 2021, 5:30am UTC](https://discuss.elastic.co/t/a-different-version-of-the-library-has-been-downloaded/271038 "2021-04-23T05:30:55Z")

</div>

I have defined version 6.8.6 Elasticsearch in build.gradle. implementation group: 'org.elasticsearch', name: 'elasticsearch', version: '6.8.6' Then version 6.8.6 and version 7.6.2 were downloaded. Why? Moreover, due …

---

## [Elastic search Kubernetes master restarts when snapshot triggered](https://discuss.elastic.co/t/elastic-search-kubernetes-master-restarts-when-snapshot-triggered/270805)

<div class="topic-metadata">

**Author:** [@rajkumar\_25](https://discuss.elastic.co/u/rajkumar_25)\
**Replies:** 5\
**Last updated:** [April 23, 2021, 4:54am UTC](https://discuss.elastic.co/t/elastic-search-kubernetes-master-restarts-when-snapshot-triggered/270805 "2021-04-23T04:54:45Z")

</div>

Elastic search Kubernetes restarts when the snapshot is triggered. Getting error OutOfMemoryError: Java heap space. My elastic search is having 2 master, 1 data, and 1 voting node. Having 850 indices and 50 open indic…

---

## [Jar Hell - ES1Engineer Training - Lab 2](https://discuss.elastic.co/t/jar-hell-es1engineer-training-lab-2/271028)

<div class="topic-metadata">

**Author:** [@Fjord4](https://discuss.elastic.co/u/Fjord4)\
**Replies:** 1\
**Last updated:** [April 23, 2021, 3:01am UTC](https://discuss.elastic.co/t/jar-hell-es1engineer-training-lab-2/271028 "2021-04-23T03:01:02Z")

</div>

Hello, Lab 2 - the installation of elasticsearch from ssh1 fails \[2021-04-23T00:09:21,542\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[server1\] uncaught exception in thread \[main\] org.elasticsearch.bootstr…

---

## [Query for Unicode Character in process.name](https://discuss.elastic.co/t/query-for-unicode-character-in-process-name/270175)

<div class="topic-metadata">

**Author:** [@inf](https://discuss.elastic.co/u/inf)\
**Replies:** 2\
**Last updated:** [April 23, 2021, 2:49am UTC](https://discuss.elastic.co/t/query-for-unicode-character-in-process-name/270175 "2021-04-23T02:49:12Z")

</div>

Hi there, I am trying to query for a right-to-left override (RTLO) character (U+202E) within a process name. My query in Dev Tools in Kibana is this: GET /\[index\_name\]/\_eql/search { "query": """ process where pr…

---

## [Grok Pattern for date and time format "03-MAR-21 00:40:21"](https://discuss.elastic.co/t/grok-pattern-for-date-and-time-format-03-mar-21-0021/271014)

<div class="topic-metadata">

**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\
**Replies:** 3\
**Last updated:** [April 23, 2021, 1:12am UTC](https://discuss.elastic.co/t/grok-pattern-for-date-and-time-format-03-mar-21-0021/271014 "2021-04-23T01:12:04Z")

</div>

This is likely a simple one but what's the grok pattern for this? I have gone through all the ones I could find but I cant get a match for the format 03-MAR-21 00:40:2 Currently I am using a string but need to change i…

---

## [Replace @timestamp with actual timestamp from log file](https://discuss.elastic.co/t/replace-timestamp-with-actual-timestamp-from-log-file/271022)

<div class="topic-metadata">

**Author:** [@kommineni24](https://discuss.elastic.co/u/kommineni24)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 11:04pm UTC](https://discuss.elastic.co/t/replace-timestamp-with-actual-timestamp-from-log-file/271022 "2021-04-22T23:04:46Z")

</div>

Hi, I am trying to index my mail-relay log files to Elastic search. All the log entries are being indexed into a field named message . @timestamp field shows the time the entry was indexed and not the timestamp from the…

---

## [Nested aggregation of runtime nested field returns empty buckets](https://discuss.elastic.co/t/nested-aggregation-of-runtime-nested-field-returns-empty-buckets/271015)

<div class="topic-metadata">

**Author:** [@matheus.mohr](https://discuss.elastic.co/u/matheus.mohr)\
**Replies:** 0\
**Last updated:** [April 22, 2021, 8:40pm UTC](https://discuss.elastic.co/t/nested-aggregation-of-runtime-nested-field-returns-empty-buckets/271015 "2021-04-22T20:40:09Z")

</div>

Before I describe the issue, it's worth noting that this issue is happening at the end of a long process of migrating a 2.4 ES cluster to 7.12, with multiple updates to mappings and queries, so please have in mind that I…

---

## [Logstash dissect and grok pattern matching issue](https://discuss.elastic.co/t/logstash-dissect-and-grok-pattern-matching-issue/270983)

<div class="topic-metadata">

**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\
**Replies:** 6\
**Last updated:** [April 22, 2021, 8:38pm UTC](https://discuss.elastic.co/t/logstash-dissect-and-grok-pattern-matching-issue/270983 "2021-04-22T20:38:47Z")

</div>

Hi, I'm trying to use dissect and grok pattern matching together in order to get the desired field:value pair that I want. However, I don't understand why it's not working. I'm parsing the description field which can co…

---

## [Saved "field" parameter is now invalid. Please select a new field](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/268598)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 8:38pm UTC](https://discuss.elastic.co/t/saved-field-parameter-is-now-invalid-please-select-a-new-field/268598 "2021-04-22T20:38:09Z")

</div>

I am attempting to reload sample dashboards (in this case for Winlogbeat) associated with our custom index patterns - as opposed to the default winlogbeat-\*. Here are the steps I followed: Exported the target index pat…

---

## [Sparse page-load documents](https://discuss.elastic.co/t/sparse-page-load-documents/269404)

<div class="topic-metadata">

**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 8:13pm UTC](https://discuss.elastic.co/t/sparse-page-load-documents/269404 "2021-04-22T20:13:45Z")

</div>

Hi, The page-load documents seem to be sparse compared to the number of transactions, i.e around 5%. Is there a way to increase these to get more information or to analyse the issue? Versions: Kibana: 7.12 Javascrip…

---

## [Widget stay on "Edit" mode](https://discuss.elastic.co/t/widget-stay-on-edit-mode/270839)

<div class="topic-metadata">

**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\
**Replies:** 12\
**Last updated:** [April 22, 2021, 7:49pm UTC](https://discuss.elastic.co/t/widget-stay-on-edit-mode/270839 "2021-04-22T19:49:36Z")

</div>

Hello everyone, I'm on Kibana v 7.12.0 I have strange problem, on the same dashboard, some widget stay on "edit" mode, with the gear on top right of them, and other widget switch good on "View mode" (so the gear leave …

---

## [ML Job](https://discuss.elastic.co/t/ml-job/270906)

<div class="topic-metadata">

**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 7:45pm UTC](https://discuss.elastic.co/t/ml-job/270906 "2021-04-22T19:45:46Z")

</div>

Hi! I've created a machine learning job from scratch and, now, when I want to create a detection rules for this job, I cannot see it in that list. I have one node where can be opened 20 jobs, but it is the only one act…

---

## [Dense\_vector element-wise operation](https://discuss.elastic.co/t/dense-vector-element-wise-operation/270181)

<div class="topic-metadata">

**Author:** [@ruodingt\_trendii](https://discuss.elastic.co/u/ruodingt_trendii)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 7:40pm UTC](https://discuss.elastic.co/t/dense-vector-element-wise-operation/270181 "2021-04-22T19:40:17Z")

</div>

Hi mates, I just encountered an issue with dense\_vector I am trying to implement an additive\_chi2\_kernel as my score function. additive\_chi2\_kernel is a way to compare similarity of two histogram The function is as s…

---

## [7.10.1 vs 7.12.0 metricbeat problem](https://discuss.elastic.co/t/7-10-1-vs-7-12-0-metricbeat-problem/271007)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 0\
**Last updated:** [April 22, 2021, 7:37pm UTC](https://discuss.elastic.co/t/7-10-1-vs-7-12-0-metricbeat-problem/271007 "2021-04-22T19:37:15Z")

</div>

I upgraded 7.10.1 to 7.12.0 and now I have two index but it give me lot of weired problem Cannot use field \[agent.version\] due to ambiguities being mapped as \[2\] incompatible types: \[text\] I have data coming in to both…

---

## [How to get local time zone in painless field](https://discuss.elastic.co/t/how-to-get-local-time-zone-in-painless-field/270834)

<div class="topic-metadata">

**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 6:34pm UTC](https://discuss.elastic.co/t/how-to-get-local-time-zone-in-painless-field/270834 "2021-04-22T18:34:22Z")

</div>

int year = doc\['timestamp'\].value.year; int month = doc\['timestamp'\].value.monthOfYear; int day = doc\['timestamp'\].value.dayOfMonth; int hour = doc\['timestamp'\].value.hourOfDay; int minutes = doc\['timestamp'\].value.m…

---

## [Log Files are not getting generated in the defined path of logstash.yml](https://discuss.elastic.co/t/log-files-are-not-getting-generated-in-the-defined-path-of-logstash-yml/271003)

<div class="topic-metadata">

**Author:** [@Krishna\_Kumar](https://discuss.elastic.co/u/Krishna_Kumar)\
**Replies:** 0\
**Last updated:** [April 22, 2021, 6:32pm UTC](https://discuss.elastic.co/t/log-files-are-not-getting-generated-in-the-defined-path-of-logstash-yml/271003 "2021-04-22T18:32:09Z")

</div>

Hi All, I am a beginner in ELK. Could you please advise here. In one of the ec2 server we have installed Logstash in that we have mounted the EBS volume under /data path and we are providing this path under log.path in…

---

## [Log files are not getting generated in the defined path (logstash.yml)](https://discuss.elastic.co/t/log-files-are-not-getting-generated-in-the-defined-path-logstash-yml/271002)

<div class="topic-metadata">

**Author:** [@Clyton](https://discuss.elastic.co/u/Clyton)\
**Replies:** 0\
**Last updated:** [April 22, 2021, 6:28pm UTC](https://discuss.elastic.co/t/log-files-are-not-getting-generated-in-the-defined-path-logstash-yml/271002 "2021-04-22T18:28:00Z")

</div>

Hi All, In Debugging Settings of logstash.yml, I'm defining as below, log.level: info path.log: /var/log/logstash However, for some reason, the logs are getting generated in /usr/share/logstash/logs Besides, I hav…

---

## [Disable cut time windows to data in Kibana 7.12.0 visualizations](https://discuss.elastic.co/t/disable-cut-time-windows-to-data-in-kibana-7-12-0-visualizations/270488)

<div class="topic-metadata">

**Author:** [@Bastian\_Jager](https://discuss.elastic.co/u/Bastian_Jager)\
**Replies:** 3\
**Last updated:** [April 22, 2021, 6:03pm UTC](https://discuss.elastic.co/t/disable-cut-time-windows-to-data-in-kibana-7-12-0-visualizations/270488 "2021-04-22T18:03:15Z")

</div>

I have a new question regarding Kibana 7.12. Since the update the x-axis (by timestamp) gets cut/limited to the available data and this is not like it was before. Here is the data from last 2 days. The red line is the …

---

## [Problem when splitting a nested JSON array](https://discuss.elastic.co/t/problem-when-splitting-a-nested-json-array/270864)

<div class="topic-metadata">

**Author:** [@pedro\_gonzalez](https://discuss.elastic.co/u/pedro_gonzalez)\
**Replies:** 4\
**Last updated:** [April 22, 2021, 5:59pm UTC](https://discuss.elastic.co/t/problem-when-splitting-a-nested-json-array/270864 "2021-04-22T17:59:15Z")

</div>

Hi, I have seen multiple thread talking about this problem but with some differences. I have the following log schema: "messageId": 123, "timestamp": "2020-09-14T03:35:37", "extra": { "name": "typefood", "food\_…

---

## [Adding logstash IP address field when processing filter](https://discuss.elastic.co/t/adding-logstash-ip-address-field-when-processing-filter/270055)

<div class="topic-metadata">

**Author:** [@yquirion](https://discuss.elastic.co/u/yquirion)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 5:48pm UTC](https://discuss.elastic.co/t/adding-logstash-ip-address-field-when-processing-filter/270055 "2021-04-22T17:48:33Z")

</div>

Dear Elastic Community, We are using several logstash servers behind a loadbalancer. All you client are sending their logs through those VIP created on the load balancer, not directly to the logstash servers. For the "b…

---

## [Winlogbeat unable to connect ELK Ubuntu](https://discuss.elastic.co/t/winlogbeat-unable-to-connect-elk-ubuntu/270675)

<div class="topic-metadata">

**Author:** [@Coeus.IT](https://discuss.elastic.co/u/Coeus.IT)\
**Replies:** 3\
**Last updated:** [April 22, 2021, 5:21pm UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-connect-elk-ubuntu/270675 "2021-04-22T17:21:43Z")

</div>

Hi Good Day, I have setup a Ubuntu with ELK installed. Wants to receive logs from Windows 10 machine. The ELK and the Windows currently on same network since testing. Have enabled xpack.security to true. Get auto gener…

---

## [Conditions are not working properly. Seems to match documentation](https://discuss.elastic.co/t/conditions-are-not-working-properly-seems-to-match-documentation/270966)

<div class="topic-metadata">

**Author:** [@ARDiver86](https://discuss.elastic.co/u/ARDiver86)\
**Replies:** 9\
**Last updated:** [April 22, 2021, 5:14pm UTC](https://discuss.elastic.co/t/conditions-are-not-working-properly-seems-to-match-documentation/270966 "2021-04-22T17:14:52Z")

</div>

I am attempting to send documents to specific indexes so I can handle the lifecycle better with various types of documents. I just cannot get it to work when trying to involve multiple fields. For example this works: -…

---

## [Index Not Available in Kibana Maps](https://discuss.elastic.co/t/index-not-available-in-kibana-maps/270992)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 5:07pm UTC](https://discuss.elastic.co/t/index-not-available-in-kibana-maps/270992 "2021-04-22T17:07:40Z")

</div>

I am attempting to create a Map in Kibana, but my index is not available as an option. I have found several posts around this, but the common issue in those cases was that no geo\_point field is specified in the Index Tem…

[Previous page](https://discuss.elastic.co/latest.md?page=1715)

[Next page](https://discuss.elastic.co/latest.md?page=1717)
