# Latest **URL:** https://discuss.elastic.co/latest.md?page=1791 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1792 --- ## [Call Elasticsearch service without exposing sensitive data in the client-side](https://discuss.elastic.co/t/call-elasticsearch-service-without-exposing-sensitive-data-in-the-client-side/266862)
**Author:** [@koyassan](https://discuss.elastic.co/u/koyassan)\ **Replies:** 3\ **Last updated:** [March 10, 2021, 10:27pm UTC](https://discuss.elastic.co/t/call-elasticsearch-service-without-exposing-sensitive-data-in-the-client-side/266862 "2021-03-10T22:27:35Z")
Hey guys, I've being playing with Kibana Plugins. Now I need to migrate one of my plugins from the Legacy to the Platform API, but I'm facing some problems when trying to made some Elasticsearch requests without exposit… --- ## [Metricbeat doesn't recognize the process](https://discuss.elastic.co/t/metricbeat-doesnt-recognize-the-process/263176)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 8\ **Last updated:** [March 10, 2021, 9:51pm UTC](https://discuss.elastic.co/t/metricbeat-doesnt-recognize-the-process/263176 "2021-03-10T21:51:10Z")
HI, I have configured metricbeat to check the process status. I have noticed that it doesn't get the process info sometimes even if the process was running. It is possible that the process was not active some times bu… --- ## [Single Value Visualization w/ Trend line](https://discuss.elastic.co/t/single-value-visualization-w-trend-line/266858)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 8:41pm UTC](https://discuss.elastic.co/t/single-value-visualization-w-trend-line/266858 "2021-03-10T20:41:42Z")
Hi there, Is it possible to generate a single value visualization w/ a trendline like Splunk does? see picture below TIA! Azulgrana --- ## [Enable TLS between ES and Kibana on an existing cluster](https://discuss.elastic.co/t/enable-tls-between-es-and-kibana-on-an-existing-cluster/266770)
**Author:** [@xcompass](https://discuss.elastic.co/u/xcompass)\ **Replies:** 3\ **Last updated:** [March 10, 2021, 8:20pm UTC](https://discuss.elastic.co/t/enable-tls-between-es-and-kibana-on-an-existing-cluster/266770 "2021-03-10T20:20:06Z")
Hi, I have a running ECK cluster (ES+Kibana) provisioned with http.tls.selfSignedCertificate.disabled: true. Now, I would like to try out alerts, which requires TLS to be enabled. I tried to change the above settings t… --- ## [\[publisher\_pipeline\_output\] pipeline /output.go:154 Failed to connect to backoff(async(tcp://logstash-xxx-xxx.apps.-xxx.xxx:443)): EOF](https://discuss.elastic.co/t/publisher-pipeline-output-pipeline-output-go-154-failed-to-connect-to-backoff-async-tcp-logstash-xxx-xxx-apps-xxx-xxx-443-eof/266451)
**Author:** [@Rohan-boogeyman](https://discuss.elastic.co/u/Rohan-boogeyman)\ **Replies:** 13\ **Last updated:** [March 10, 2021, 7:42pm UTC](https://discuss.elastic.co/t/publisher-pipeline-output-pipeline-output-go-154-failed-to-connect-to-backoff-async-tcp-logstash-xxx-xxx-apps-xxx-xxx-443-eof/266451 "2021-03-10T19:42:50Z")
Hello Guys, Thanks in advance for taking your time to look into the issue i am experiencing. Error in File beat at the time of Debug \[publisher\_pipeline\_output\] pipeline /output.go:154 Failed to connect to backof… --- ## [Metrics from logstash with custom index to show in Elastic Observability](https://discuss.elastic.co/t/metrics-from-logstash-with-custom-index-to-show-in-elastic-observability/266203)
**Author:** [@alidrsn](https://discuss.elastic.co/u/alidrsn)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 7:08pm UTC](https://discuss.elastic.co/t/metrics-from-logstash-with-custom-index-to-show-in-elastic-observability/266203 "2021-03-10T19:08:56Z")
Hello, I am trying to use Elasticsearch Observability Metrics with RabbitMQ dashboard. However, i am not sending metrics directly to elasticsearch, using logstash and custom index names. When i am trying to add data (Ra… --- ## [Create field form file name](https://discuss.elastic.co/t/create-field-form-file-name/266846)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 7:01pm UTC](https://discuss.elastic.co/t/create-field-form-file-name/266846 "2021-03-10T19:01:47Z")
Hi, Note: Running ELK 7.10.1 I am trying to generate a new field using Grok, by extracting data from the file name. File name comes from "path". path =\> "/opt/app\_logs/\*.log" Example: ip\_block-hgTest.Dev1test-2021-… --- ## [Elastic-apm-agent Ruby v3.13.0+](https://discuss.elastic.co/t/elastic-apm-agent-ruby-v3-13-0/266856)
**Author:** [@willis](https://discuss.elastic.co/u/willis)\ **Replies:** 0\ **Last updated:** [March 10, 2021, 6:37pm UTC](https://discuss.elastic.co/t/elastic-apm-agent-ruby-v3-13-0/266856 "2021-03-10T18:37:10Z")
Hi! I am not sure if this is the right place to ask this, but when is the next release of elastic/apm-agent -ruby planned? There was a fix applied last month to master that would help us out greatly if we could get the … --- ## [How to detect network scan using EQL](https://discuss.elastic.co/t/how-to-detect-network-scan-using-eql/266466)
**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\ **Replies:** 4\ **Last updated:** [March 10, 2021, 6:34pm UTC](https://discuss.elastic.co/t/how-to-detect-network-scan-using-eql/266466 "2021-03-10T18:34:00Z")
Hi All, Can anyone please help me setting up a simple correlation rule using EQL that detect if same source.ip attempts more than 50 destination.ip within 15 minutes. I'm unable to write EQL. I've fortigate logs, my c… --- ## [EQL - Alert on different values for the same field in a sequence](https://discuss.elastic.co/t/eql-alert-on-different-values-for-the-same-field-in-a-sequence/255344)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 6\ **Last updated:** [March 10, 2021, 6:33pm UTC](https://discuss.elastic.co/t/eql-alert-on-different-values-for-the-same-field-in-a-sequence/255344 "2021-03-10T18:33:41Z")
Hi, I am trying to build a sequence, as an example to look for multiple different user.names from the same host over a period of time. How would i go about this condition 2 user.name != condition 1 user.name. There a … --- ## [Popover not working properly in v7.9.3](https://discuss.elastic.co/t/popover-not-working-properly-in-v7-9-3/265842)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 6:31pm UTC](https://discuss.elastic.co/t/popover-not-working-properly-in-v7-9-3/265842 "2021-03-10T18:31:15Z")
Hi, I recently upgrade from ES 7.6.0 to 7.9.3. I now have a weird behavior where a Popover click clears my Chart. I pass LineSeries into the Chart as {children}. It appears the children gets cleared I have no idea why. … --- ## [Possible workarounds for percentile in heatmaps?](https://discuss.elastic.co/t/possible-workarounds-for-percentile-in-heatmaps/266777)
**Author:** [@nnoop](https://discuss.elastic.co/u/nnoop)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 6:28pm UTC](https://discuss.elastic.co/t/possible-workarounds-for-percentile-in-heatmaps/266777 "2021-03-10T18:28:26Z")
Hi I'm new to ELK and currently trying to work on a heatmap that shows cpu utilisation and its percentile on Kibana 7.6.2. I have an index that contains kernel percent and user percent which I add together to create a sc… --- ## [Forming a new document with all the fields everytime a new event comes in](https://discuss.elastic.co/t/forming-a-new-document-with-all-the-fields-everytime-a-new-event-comes-in/265248)
**Author:** [@karanp](https://discuss.elastic.co/u/karanp)\ **Replies:** 7\ **Last updated:** [March 10, 2021, 6:27pm UTC](https://discuss.elastic.co/t/forming-a-new-document-with-all-the-fields-everytime-a-new-event-comes-in/265248 "2021-03-10T18:27:42Z")
Hello, So I am currently trying to figure this out and would love to know if my current approach is correct and if not, is there a way to do it. So, the question is We have these events coming in with each event having … --- ## [Using Nest.net indexing list\ where SomeType is abstract](https://discuss.elastic.co/t/using-nest-net-indexing-list-sometype-where-sometype-is-abstract/266848)
**Author:** [@RejectKid](https://discuss.elastic.co/u/RejectKid)\ **Replies:** 0\ **Last updated:** [March 10, 2021, 5:40pm UTC](https://discuss.elastic.co/t/using-nest-net-indexing-list-sometype-where-sometype-is-abstract/266848 "2021-03-10T17:40:32Z")
I have an object public class SomeObject { List\ } There are several derived types of SomeType and populated in the list. However when i push this data into ES using Nest.net it strips out … --- ## [Is there a Vega equivalent to the C #include directive](https://discuss.elastic.co/t/is-there-a-vega-equivalent-to-the-c-include-directive/266805)
**Author:** [@Kayak007](https://discuss.elastic.co/u/Kayak007)\ **Replies:** 4\ **Last updated:** [March 10, 2021, 5:34pm UTC](https://discuss.elastic.co/t/is-there-a-vega-equivalent-to-the-c-include-directive/266805 "2021-03-10T17:34:14Z")
Hi, Couldn't find any reference to an existing way to include code from a file in a Kibana Vega visualisation, like the #include directive in C. I have several Vega visualisations for which part of the code is the same… --- ## [Doing aggregations using flattened\_fields is slow](https://discuss.elastic.co/t/doing-aggregations-using-flattened-fields-is-slow/266832)
**Author:** [@Ronald\_de\_Haan](https://discuss.elastic.co/u/Ronald_de_Haan)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 4:41pm UTC](https://discuss.elastic.co/t/doing-aggregations-using-flattened-fields-is-slow/266832 "2021-03-10T16:41:31Z")
We consume and store data containing a field filter\_properties containing key =\> value fields. Up until now we use dynamic mapping to store that data but that's creating a lot of unique fields. So I decided to try the f… --- ## [2 different time](https://discuss.elastic.co/t/2-different-time/266640)
**Author:** [@111435](https://discuss.elastic.co/u/111435)\ **Replies:** 4\ **Last updated:** [March 10, 2021, 4:34pm UTC](https://discuss.elastic.co/t/2-different-time/266640 "2021-03-10T16:34:33Z")
Hello guys! Please, I need your advise. From one client server to logstash comming 2 different logs with different time template: \[2021-02-24 00:00:06,335\] \[\[ACTIVE\] ExecuteThread: '121' for queue: 'weblogic.kernel.… --- ## [Crowdstrike dashboard doesn't load on Kibana](https://discuss.elastic.co/t/crowdstrike-dashboard-doesnt-load-on-kibana/266840)
**Author:** [@uforoid](https://discuss.elastic.co/u/uforoid)\ **Replies:** 0\ **Last updated:** [March 10, 2021, 4:32pm UTC](https://discuss.elastic.co/t/crowdstrike-dashboard-doesnt-load-on-kibana/266840 "2021-03-10T16:32:36Z")
Hi everyone, I installed all the crowdstrike falcon SIEM, filebeat is able to retrieve all the data and upload them on elastic, I did "filebeat setup" to upload all the dashboards on kibana, but the crowdstrike dashboar… --- ## [Custom CSS code for dashboards](https://discuss.elastic.co/t/custom-css-code-for-dashboards/266740)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 4:31pm UTC](https://discuss.elastic.co/t/custom-css-code-for-dashboards/266740 "2021-03-10T16:31:28Z")
Hi there! I'm looking into adding some custom CSS code to personalize a bit my dashboard. Say that I have a custom dashboard, I want the panels to have rounded corners. I have tested this code w/ the Firefox inspector (… --- ## [Forcemerge multiple indices = high fragmentation on disk?](https://discuss.elastic.co/t/forcemerge-multiple-indices-high-fragmentation-on-disk/265586)
**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\ **Replies:** 8\ **Last updated:** [March 10, 2021, 4:25pm UTC](https://discuss.elastic.co/t/forcemerge-multiple-indices-high-fragmentation-on-disk/265586 "2021-03-10T16:25:42Z")
I'm applying an ILM policy on older (daily) indices. In warm phase I have enabled forcemerge to reduce the number of segments. If I assign the ILM policy to multiple indices, say 30 days, will the forcemerge run on all … --- ## [ILM is not getting disabled in metricbeat with helm chart install](https://discuss.elastic.co/t/ilm-is-not-getting-disabled-in-metricbeat-with-helm-chart-install/266838)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 0\ **Last updated:** [March 10, 2021, 4:14pm UTC](https://discuss.elastic.co/t/ilm-is-not-getting-disabled-in-metricbeat-with-helm-chart-install/266838 "2021-03-10T16:14:08Z")
Hi I am trying. to disable ILM on metricbeat in k8s environment. I am installing metricbeat using helm chart and modified values.yml to disable the ILM. However, in the logs, I see that ILM is always enabled. Can yo… --- ## [Auditd log - creating a single event from log lines with same ID](https://discuss.elastic.co/t/auditd-log-creating-a-single-event-from-log-lines-with-same-id/266827)
**Author:** [@alanoe](https://discuss.elastic.co/u/alanoe)\ **Replies:** 0\ **Last updated:** [March 10, 2021, 3:09pm UTC](https://discuss.elastic.co/t/auditd-log-creating-a-single-event-from-log-lines-with-same-id/266827 "2021-03-10T15:09:00Z")
I was using auditbeat to track audit events. However, if it goes down for a long time, I lose events, as I mentioned in https://discuss.elastic.co/t/auditd-events-created-while-auditbeat-is-down/266369. Due to that, my t… --- ## [No dynamic or static mapping - data not searchable?](https://discuss.elastic.co/t/no-dynamic-or-static-mapping-data-not-searchable/266270)
**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 4:00pm UTC](https://discuss.elastic.co/t/no-dynamic-or-static-mapping-data-not-searchable/266270 "2021-03-10T16:00:52Z")
I have a template that disables dynamic mapping and statically maps a few specific fields. When data is ingested that does not fit the static mappings, I can see the data in elasticsearch, but I can't search it. Queryin… --- ## [ConnectTransportException non-master-eligible node found](https://discuss.elastic.co/t/connecttransportexception-non-master-eligible-node-found/266417)
**Author:** [@SSRR](https://discuss.elastic.co/u/SSRR)\ **Replies:** 2\ **Last updated:** [March 10, 2021, 4:00pm UTC](https://discuss.elastic.co/t/connecttransportexception-non-master-eligible-node-found/266417 "2021-03-10T16:00:28Z")
I'm configuring Elasticserach 7.9.0 cluster with 2 hosts. The elasticsearch.yml in host1 is setup with node.master as true and host2 is setup with node.master as false. Both hosts have elasticsearch started but with err… --- ## [EuiOverlayMask is over the EuiCollapsibleNav it comes from](https://discuss.elastic.co/t/euioverlaymask-is-over-the-euicollapsiblenav-it-comes-from/266410)
**Author:** [@Thomas\_Vaudry-Read](https://discuss.elastic.co/u/Thomas_Vaudry-Read)\ **Replies:** 6\ **Last updated:** [March 10, 2021, 3:57pm UTC](https://discuss.elastic.co/t/euioverlaymask-is-over-the-euicollapsiblenav-it-comes-from/266410 "2021-03-10T15:57:00Z")
Developing a Kibana plugin, and have a 3rd header layer in the page. When I set-up a button in the EuiHeader to open a EuiCollapsibleNav, the overlay covers the nav element and nothing is selectable. Here is a slice of t… --- ## [How to change logstash default timezone](https://discuss.elastic.co/t/how-to-change-logstash-default-timezone/266771)
**Author:** [@sreedhar1](https://discuss.elastic.co/u/sreedhar1)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 3:53pm UTC](https://discuss.elastic.co/t/how-to-change-logstash-default-timezone/266771 "2021-03-10T15:53:04Z")
I am using Logstash to populate data to Elasticsearch server. By default Elasticsearch using UTC format to populate the data. How to change UTC to local time zone? --- ## [Logstash not using bundled JDK](https://discuss.elastic.co/t/logstash-not-using-bundled-jdk/266814)
**Author:** [@Daniel\_Carmel](https://discuss.elastic.co/u/Daniel_Carmel)\ **Replies:** 1\ **Last updated:** [March 10, 2021, 3:47pm UTC](https://discuss.elastic.co/t/logstash-not-using-bundled-jdk/266814 "2021-03-10T15:47:59Z")
Hey Elastic team, im using logstash 7.11.0 and ubuntu 14.04 Whenever i run it manually like this sudo /usr/share/logstash/bin/logstash --path.settings /etc/logstash logstash running as expected and using bundled JDK,… --- ## [HttpUrlConnectionInstrumentation not work when use in different thread](https://discuss.elastic.co/t/httpurlconnectioninstrumentation-not-work-when-use-in-different-thread/266560)
**Author:** [@sadu](https://discuss.elastic.co/u/sadu)\ **Replies:** 7\ **Last updated:** [March 10, 2021, 3:46pm UTC](https://discuss.elastic.co/t/httpurlconnectioninstrumentation-not-work-when-use-in-different-thread/266560 "2021-03-10T15:46:12Z")
Kibana version : 7.10.2 Elasticsearch version : 7.10.2 APM Server version : 1.17.0 APM Agent language and version : Java Browser version : Chrome 79.0.3945.117 Original install method (e.g. download page, yum, de… --- ## [EL7.11 Index recoveries stuck at translog stage](https://discuss.elastic.co/t/el7-11-index-recoveries-stuck-at-translog-stage/266830)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 0\ **Last updated:** [March 10, 2021, 3:15pm UTC](https://discuss.elastic.co/t/el7-11-index-recoveries-stuck-at-translog-stage/266830 "2021-03-10T15:15:58Z")
Hi community. I'm experiencing a problem I never saw before during index recovery... after the loss of a server, where a master and data nodes where running (something I've seen EL clustering managing exceptionally well… --- ## [API REST AWS COST EXPLORER](https://discuss.elastic.co/t/api-rest-aws-cost-explorer/266828)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\ **Replies:** 0\ **Last updated:** [March 10, 2021, 3:09pm UTC](https://discuss.elastic.co/t/api-rest-aws-cost-explorer/266828 "2021-03-10T15:09:27Z")
Good morning, does anyone know if it is feasible to consume the aws cost explorer rest api with logstash, I know that there are three options in aws, one is through the CLI, another through a JDK and the last one that is… [Previous page](https://discuss.elastic.co/latest.md?page=1790) [Next page](https://discuss.elastic.co/latest.md?page=1792)