# Latest **URL:** https://discuss.elastic.co/latest.md?page=1720 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1721 --- ## [Best approach to create visualizations/dashboard via API calls?](https://discuss.elastic.co/t/best-approach-to-create-visualizations-dashboard-via-api-calls/270603)
**Author:** [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 4:44pm UTC](https://discuss.elastic.co/t/best-approach-to-create-visualizations-dashboard-via-api-calls/270603 "2021-04-21T16:44:43Z")
Hi. I'm trying to create a visualization in Kibana via API calls. So far i'm a little bit confused on how to do this. Please try to follow me.. and correct me if i'm wrong... So far i discovered two types of API call… --- ## [Group Element through query to use in Vega visualisation](https://discuss.elastic.co/t/group-element-through-query-to-use-in-vega-visualisation/270389)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 15\ **Last updated:** [April 21, 2021, 4:12pm UTC](https://discuss.elastic.co/t/group-element-through-query-to-use-in-vega-visualisation/270389 "2021-04-21T16:12:41Z")
Hi, I'm currently learning about query and stuffs. In order to do so I aim to have a vega visualisation that would allow me to visualise a per process memory usage. So far, i managed to do it using both Lens and TSVB.… --- ## [Canvas from minutes to hours](https://discuss.elastic.co/t/canvas-from-minutes-to-hours/270686)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 3:16pm UTC](https://discuss.elastic.co/t/canvas-from-minutes-to-hours/270686 "2021-04-21T15:16:25Z")
Hi, in Canvas I have a SQL query that returns me a time value in minutes. How do I turn it into "hours, days, months, etc"? filters | essql query="SELECT uptime FROM \\"device\_data\_bridgenuzoo\\" ORDER BY date DESC L… --- ## [Filebeat with Suricata module](https://discuss.elastic.co/t/filebeat-with-suricata-module/270863)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 3:13pm UTC](https://discuss.elastic.co/t/filebeat-with-suricata-module/270863 "2021-04-21T15:13:46Z")
Hi there! Here is my question. I have Filebeat sending Suricata logs directly to Elasticsearch (via Suricata module). My Suricata log files are divided by types of events (eve-alerts, eve-dns, eve-events). In Kibana is… --- ## [Seeking advice on parsing Nagios logs using pre-built pattern files from herokuapp.com](https://discuss.elastic.co/t/seeking-advice-on-parsing-nagios-logs-using-pre-built-pattern-files-from-herokuapp-com/270850)
**Author:** [@kgeil](https://discuss.elastic.co/u/kgeil)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 2:48pm UTC](https://discuss.elastic.co/t/seeking-advice-on-parsing-nagios-logs-using-pre-built-pattern-files-from-herokuapp-com/270850 "2021-04-21T14:48:09Z")
Good morning everyone. I'm early in the Elastic Stack learning curve, and I'm working on parsing some nagios logs this morning. I Have nagios logging to syslog, and can use the pattern file located on the herokuapp gro… --- ## [Kibana Discover not working as expected](https://discuss.elastic.co/t/kibana-discover-not-working-as-expected/262101)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 2:44pm UTC](https://discuss.elastic.co/t/kibana-discover-not-working-as-expected/262101 "2021-04-21T14:44:33Z")
I have setup a Kibana and ElasticSearch on my own GKE cluster. Following the guide -\> https://www.digitalocean.com/community/tutorials/how-to-set-up-an-elasticsearch-fluentd-and-kibana-efk-logging-stack-on-kubernetes H… --- ## [Kibana conflict type field](https://discuss.elastic.co/t/kibana-conflict-type-field/270667)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 2:22pm UTC](https://discuss.elastic.co/t/kibana-conflict-type-field/270667 "2021-04-21T14:22:52Z")
How i can resolve this issues. Kibana field type conflict --- ## [( Kibana visualize ) A value greater than "Max axis extents" is not displayed with on Line chart](https://discuss.elastic.co/t/kibana-visualize-a-value-greater-than-max-axis-extents-is-not-displayed-with-on-line-chart/269202)
**Author:** [@kash203](https://discuss.elastic.co/u/kash203)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 2:18pm UTC](https://discuss.elastic.co/t/kibana-visualize-a-value-greater-than-max-axis-extents-is-not-displayed-with-on-line-chart/269202 "2021-04-21T14:18:16Z")
When we update version of kibana from 7.11 to 7.12, a value greater than "Max axis extents(Y-axes)" is not displayed on Line chart of visualize. On prior to 7.11, When the value of the data exceeded "Max axis extents"… --- ## [Logstash json parsing](https://discuss.elastic.co/t/logstash-json-parsing/270851)
**Author:** [@Andrey\_RF](https://discuss.elastic.co/u/Andrey_RF)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 2:01pm UTC](https://discuss.elastic.co/t/logstash-json-parsing/270851 "2021-04-21T14:01:52Z")
Hello. I have incoming JSON log. It has nested JSON. I want to parse main JSON and nested. Example: { "value": "123", "nested": { "value-two": "555" } } . I have a filter like this json { source =\> "messag… --- ## [Kibana Shards](https://discuss.elastic.co/t/kibana-shards/270835)
**Author:** [@sanketj1112](https://discuss.elastic.co/u/sanketj1112)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 2:01pm UTC](https://discuss.elastic.co/t/kibana-shards/270835 "2021-04-21T14:01:09Z")
Currently I am using Kibana in AWS-Elasticsearch. Is there any chance while creating index I can change the default number of shards? Thanks. --- ## [Uploading csv file: Failed to parse date field dd/MM/yyyy HH:mm](https://discuss.elastic.co/t/uploading-csv-file-failed-to-parse-date-field-dd-mm-yyyy-hh-mm/270813)
**Author:** [@MARCO\_RAMBALDI](https://discuss.elastic.co/u/MARCO_RAMBALDI)\ **Replies:** 23\ **Last updated:** [April 21, 2021, 1:46pm UTC](https://discuss.elastic.co/t/uploading-csv-file-failed-to-parse-date-field-dd-mm-yyyy-hh-mm/270813 "2021-04-21T13:46:16Z")
Hi, I'm uploading a csv file (; as separator). I identified one of the columns as Machine Time. The format on excel is "customized" as seen in the image below: To parse the date as a date type on Elastic I used the … --- ## [Input controls don't work in embed or iframe mode](https://discuss.elastic.co/t/input-controls-dont-work-in-embed-or-iframe-mode/270848)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 1:36pm UTC](https://discuss.elastic.co/t/input-controls-dont-work-in-embed-or-iframe-mode/270848 "2021-04-21T13:36:02Z")
Hello, I recently upgraded Kibana from 7.8.1 to 7.12.0 version. I'm seeing this issue in the 7.12.0 version. When I try to use input controls on embedded dashboard, the controls don't work as expected.. Steps I follow… --- ## [Metricbeat unable to connect to MongoDB using SCRAM-SHA-256](https://discuss.elastic.co/t/metricbeat-unable-to-connect-to-mongodb-using-scram-sha-256/270849)
**Author:** [@lchdev](https://discuss.elastic.co/u/lchdev)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 1:34pm UTC](https://discuss.elastic.co/t/metricbeat-unable-to-connect-to-mongodb-using-scram-sha-256/270849 "2021-04-21T13:34:14Z")
Hello ! Metricbeat relies on the community GO driver to connect to a MongoDB cluster. This driver is quite old and has been replaced by an official driver. Since it is now unmaintained, it has not received any updates … --- ## [Kibana - APM - Errors - Stacktrace variables in the discover panel](https://discuss.elastic.co/t/kibana-apm-errors-stacktrace-variables-in-the-discover-panel/270832)
**Author:** [@Anton\_Matviyenko](https://discuss.elastic.co/u/Anton_Matviyenko)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 11:08am UTC](https://discuss.elastic.co/t/kibana-apm-errors-stacktrace-variables-in-the-discover-panel/270832 "2021-04-21T11:08:24Z")
In previous versions of Kibana Discover it was possible to see/display the exception stack along with the variables. Is it possible to display them in 7.12? In the output of the endpoint: https://xxx.found.io:9243/api/… --- ## [Elasticsearch readiness probe failures](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failures/270581)
**Author:** [@Janos\_Csorvasi](https://discuss.elastic.co/u/Janos_Csorvasi)\ **Replies:** 4\ **Last updated:** [April 21, 2021, 12:58pm UTC](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failures/270581 "2021-04-21T12:58:18Z")
Hi, tl;dr: Elasticsearch ingest nodes are exhibiting frequent readiness probe failures e.g. {"timestamp": "2021-04-19T09:58:01+00:00", "message": "readiness probe failed", "curl\_rc": "28"}. We would like to understand w… --- ## [Why does filebeat create dashboards for disabled modules?](https://discuss.elastic.co/t/why-does-filebeat-create-dashboards-for-disabled-modules/270840)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 12:55pm UTC](https://discuss.elastic.co/t/why-does-filebeat-create-dashboards-for-disabled-modules/270840 "2021-04-21T12:55:08Z")
I recently installed filebeat to monitor and ship my nginx logs. I followed the setup instructions, and included the setup.kibana config details because I wanted the nginx dashboards. However, when running setup filebe… --- ## [File paths must be absolute, relative path specified error while running logstash on docker](https://discuss.elastic.co/t/file-paths-must-be-absolute-relative-path-specified-error-while-running-logstash-on-docker/270704)
**Author:** [@pradeep\_gadkari](https://discuss.elastic.co/u/pradeep_gadkari)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 12:40pm UTC](https://discuss.elastic.co/t/file-paths-must-be-absolute-relative-path-specified-error-while-running-logstash-on-docker/270704 "2021-04-21T12:40:59Z")
I am running ELK stack on docker using deviantony/docker-elk from Github. When I try reading log files from my local machine, logstash stops with error \[2021-04-20T12:36:43,101\]\[ERROR\]\[logstash.javapipeline \]\[main\] Pipe… --- ## [How to triggered mail in watcher if two alphanumeric key difference is more than 2 sec](https://discuss.elastic.co/t/how-to-triggered-mail-in-watcher-if-two-alphanumeric-key-difference-is-more-than-2-sec/270838)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 12:34pm UTC](https://discuss.elastic.co/t/how-to-triggered-mail-in-watcher-if-two-alphanumeric-key-difference-is-more-than-2-sec/270838 "2021-04-21T12:34:31Z")
Hello all, PFB two log lines: \[0915adf2-ff62-421e-97a8-0a00cbb7df7f\] \[07:53:43 Information\] SpotQuote Response "ResponseId":"5679ty678" \[0915adf2-ff62-421e-97a8-0a00cbb7df7f\] \[07:53:41 Information\] SpotQuote Request "R… --- ## [Create instance of elasticsearch](https://discuss.elastic.co/t/create-instance-of-elasticsearch/270831)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 12:14pm UTC](https://discuss.elastic.co/t/create-instance-of-elasticsearch/270831 "2021-04-21T12:14:49Z")
Hi I have a cluster with 4 nodes of Elasticsearch. 2 of them are in datacenter A and the other 2 are in datacenter B Here is my concern: I want to run an instance of each node in another datacenter. For example node1 … --- ## [Data too large circuit breaking exception after migrating to 7.12](https://discuss.elastic.co/t/data-too-large-circuit-breaking-exception-after-migrating-to-7-12/269029)
**Author:** [@voharunado](https://discuss.elastic.co/u/voharunado)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 12:10pm UTC](https://discuss.elastic.co/t/data-too-large-circuit-breaking-exception-after-migrating-to-7-12/269029 "2021-04-21T12:10:45Z")
Hello, We have just migrated our cluster from 6.8 to 7.12 and just noticed some recurring errors during intensive parallel indexations. Here is the kind of error we have: \[parent\] Data too large, data for \[\ **Author:** [@Kuo\_Hugo](https://discuss.elastic.co/u/Kuo_Hugo)\ **Replies:** 4\ **Last updated:** [April 21, 2021, 11:38am UTC](https://discuss.elastic.co/t/elasticsearch-visualization-search-error-with-empty-response/270706 "2021-04-21T11:38:03Z") The batch query for rendering a visualization from the search programname:"proxy-server" AND status\_int:\[200 TO 299\] and request\_method:GET . The search works fine even with 7days period. But the visualization as below a… --- ## [Collapse with multi value](https://discuss.elastic.co/t/collapse-with-multi-value/270437)
**Author:** [@arcturuscom](https://discuss.elastic.co/u/arcturuscom)\ **Replies:** 13\ **Last updated:** [April 21, 2021, 11:15am UTC](https://discuss.elastic.co/t/collapse-with-multi-value/270437 "2021-04-21T11:15:16Z")
Hello, i tried to collapse multivalued field and its doesnt work e.g: "field": \[id1, id2, id3\] i'm asking if there's a workaround to solve this issue. any suggestions please !! --- ## [ECK Coordinating only node 7.10.2 has all node roles](https://discuss.elastic.co/t/eck-coordinating-only-node-7-10-2-has-all-node-roles/270591)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 11:04am UTC](https://discuss.elastic.co/t/eck-coordinating-only-node-7-10-2-has-all-node-roles/270591 "2021-04-21T11:04:03Z")
Hi, Deploying ECK and trying to configure a client/coordinating-only node. The node roles is configured to: node.roles: \[ \] As stated here. But the client node seem to have all the roles and shards are wrongfully cr… --- ## [Cluster Monitoring Error 7.12.0](https://discuss.elastic.co/t/cluster-monitoring-error-7-12-0/270822)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 11:02am UTC](https://discuss.elastic.co/t/cluster-monitoring-error-7-12-0/270822 "2021-04-21T11:02:52Z")
Hi, I'm in the process of a rolling upgrade from 7.10.0 to 7.12.0 my process is to drop an ELS server from the cluster, and bring up a new blank one on the latest version and let it reassign the shards. During this pro… --- ## [APM RUM Angular CORS error](https://discuss.elastic.co/t/apm-rum-angular-cors-error/270226)
**Author:** [@snowfrogdev](https://discuss.elastic.co/u/snowfrogdev)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 10:23am UTC](https://discuss.elastic.co/t/apm-rum-angular-cors-error/270226 "2021-04-21T10:23:18Z")
I have an Angular app and I am using the Angular APM Rum library. My APM server is behind an nginx reverse proxy. I'm getting CORS errors as per attached screenshot. Kibana version: 7.11.0 Elasticsearch version: 7.11… --- ## ["reason"=\>"object mapping for \[host\] tried to parse field \[host\] as object, but found a concrete value"](https://discuss.elastic.co/t/reason-object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/270790)
**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 10:09am UTC](https://discuss.elastic.co/t/reason-object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/270790 "2021-04-21T10:09:36Z")
Please how to do resolve. Logstash outputs below error log. \[2021-04-21T15:31:47,803\]\[WARN \]\[logstash.outputs.elasticsearch\]\[＜pipeline.id＞\]\[b0981f4f69ba05c595e4bfce70b5e813c0b082207400c67bd72b366d2d36ba65\] Could not in… --- ## [Logstash installed on Windows based container using zip download. Not running using bin/logstash -f logstash.conf](https://discuss.elastic.co/t/logstash-installed-on-windows-based-container-using-zip-download-not-running-using-bin-logstash-f-logstash-conf/270816)
**Author:** [@omkarg81](https://discuss.elastic.co/u/omkarg81)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 9:46am UTC](https://discuss.elastic.co/t/logstash-installed-on-windows-based-container-using-zip-download-not-running-using-bin-logstash-f-logstash-conf/270816 "2021-04-21T09:46:55Z")
Looking at the Logstash docker images, I went ahead and created a custom image, including base .net framework and adding the logstash installation folder to it, by virtue of downloading the zip file, extracting it and cu… --- ## [Logstash fails with not an SSL/TLS record](https://discuss.elastic.co/t/logstash-fails-with-not-an-ssl-tls-record/270812)
**Author:** [@Enrique\_Pedroza](https://discuss.elastic.co/u/Enrique_Pedroza)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 9:20am UTC](https://discuss.elastic.co/t/logstash-fails-with-not-an-ssl-tls-record/270812 "2021-04-21T09:20:49Z")
I'm running Logstash with Elasticsearch and Kibana, and all configuration setted up. The problem is that the services is giving the following error \[2021-04-21T10:08:56,344\]\[INFO \]\[org.logstash.beats.BeatsHandler\]\[main\]… --- ## [Kibana field is not show on Visualization](https://discuss.elastic.co/t/kibana-field-is-not-show-on-visualization/270789)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 7\ **Last updated:** [April 21, 2021, 9:07am UTC](https://discuss.elastic.co/t/kibana-field-is-not-show-on-visualization/270789 "2021-04-21T09:07:03Z")
Kibana field is show on discover. But It not show create visualization This is my discover page This i create visualization --- ## [Stop the search request once it finds first 10 hits](https://discuss.elastic.co/t/stop-the-search-request-once-it-finds-first-10-hits/270783)
**Author:** [@DEEPTHI\_SONA\_G](https://discuss.elastic.co/u/DEEPTHI_SONA_G)\ **Replies:** 8\ **Last updated:** [April 21, 2021, 9:02am UTC](https://discuss.elastic.co/t/stop-the-search-request-once-it-finds-first-10-hits/270783 "2021-04-21T09:02:35Z")
I am doing some performance testing on Elasticsearch. So I am comparing Oracle db with Elasticsearch. The Oracle query is able to stop it's search once it finds the first 10matches by using the code select \* from mtd\_s… [Previous page](https://discuss.elastic.co/latest.md?page=1719) [Next page](https://discuss.elastic.co/latest.md?page=1721)