# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1795

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1796

---

## [AWS elb and vpcflow log filebeat visualizations fail to load properly](https://discuss.elastic.co/t/aws-elb-and-vpcflow-log-filebeat-visualizations-fail-to-load-properly/266608)

<div class="topic-metadata">

**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 9:44pm UTC](https://discuss.elastic.co/t/aws-elb-and-vpcflow-log-filebeat-visualizations-fail-to-load-properly/266608 "2021-03-08T21:44:31Z")

</div>

I am trying to develop more visibility around aws. I'd really like to use the prebuilt dashboards that come with filebeat, but I seem to constantly run into issues with the visualizations for elb and vpcflow logs. My con…

---

## [JDBC\_Static Filter](https://discuss.elastic.co/t/jdbc-static-filter/266162)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 11\
**Last updated:** [March 8, 2021, 9:32pm UTC](https://discuss.elastic.co/t/jdbc-static-filter/266162 "2021-03-08T21:32:17Z")

</div>

I am pulling data from a database that has fields populated with numeric values. I need to perform subsequent lookups to additional tables to convert the numeric value to a named value. Since I'll be doing this frequen…

---

## [Kibana dashboard import api fails](https://discuss.elastic.co/t/kibana-dashboard-import-api-fails/265603)

<div class="topic-metadata">

**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Replies:** 4\
**Last updated:** [March 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-api-fails/265603 "2021-03-08T20:41:11Z")

</div>

Dear team, We use export api to export dashboard with other visualisations. This api url is used to export it: GET \<kibana host\>:\<port\>/s/\<space-id\>/api/kibana/dashboards/export?dashboard=dashboard\_id Export produces…

---

## [Error in getting all the snapshots under a repository](https://discuss.elastic.co/t/error-in-getting-all-the-snapshots-under-a-repository/266034)

<div class="topic-metadata">

**Author:** [@yabhishek](https://discuss.elastic.co/u/yabhishek)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/error-in-getting-all-the-snapshots-under-a-repository/266034 "2021-03-08T20:41:02Z")

</div>

Hi, I have registered a repository named repo123 to use one of my AWS buckets for storing snapshots. When I run GET \_snapshot/repo123 it returns the output as expected, containing repo name - {"repo123":{"type":"s3"…

---

## [Delay in Kibana logs even after the filebeat restart](https://discuss.elastic.co/t/delay-in-kibana-logs-even-after-the-filebeat-restart/266531)

<div class="topic-metadata">

**Author:** [@Akila11](https://discuss.elastic.co/u/Akila11)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 8:19pm UTC](https://discuss.elastic.co/t/delay-in-kibana-logs-even-after-the-filebeat-restart/266531 "2021-03-08T20:19:10Z")

</div>

Hi Team, We are getting old logs in kibana with previous date and it is not displaying logs with current date. We have restarted the filebeat also but still logs with old date we could see in kibana. Could you please …

---

## [How to write a script in Ingest Pipeline to detect the null values and pushed to separate index on failure (unformattedindex)](https://discuss.elastic.co/t/how-to-write-a-script-in-ingest-pipeline-to-detect-the-null-values-and-pushed-to-separate-index-on-failure-unformattedindex/266517)

<div class="topic-metadata">

**Author:** [@sravankayitha](https://discuss.elastic.co/u/sravankayitha)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 8:09pm UTC](https://discuss.elastic.co/t/how-to-write-a-script-in-ingest-pipeline-to-detect-the-null-values-and-pushed-to-separate-index-on-failure-unformattedindex/266517 "2021-03-08T20:09:40Z")

</div>

How to detect the null values in Ingest Pipeline and Index it. Actual index name: myindex Unformatted index name: unformattedindex i have tried the below Script Processor to detect the null values to Actual index(inde…

---

## [Monitore mikrotik router logs with ELK](https://discuss.elastic.co/t/monitore-mikrotik-router-logs-with-elk/266026)

<div class="topic-metadata">

**Author:** [@NZHP](https://discuss.elastic.co/u/NZHP)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 7:48pm UTC](https://discuss.elastic.co/t/monitore-mikrotik-router-logs-with-elk/266026 "2021-03-08T19:48:37Z")

</div>

Hi everybody, I installed ELK on my infrastructure, now i want to monitor logs data of my routers and switch with elk stack. So how can process it please ? Thank advance

---

## [Logstash Metricbeat monitoring - empty instance kibana display](https://discuss.elastic.co/t/logstash-metricbeat-monitoring-empty-instance-kibana-display/266599)

<div class="topic-metadata">

**Author:** [@Fran\_Raknic](https://discuss.elastic.co/u/Fran_Raknic)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 7:47pm UTC](https://discuss.elastic.co/t/logstash-metricbeat-monitoring-empty-instance-kibana-display/266599 "2021-03-08T19:47:32Z")

</div>

I am having problems monitoring Logstash instances with Metricbeat, to be more precise the problem is with Kibana instance Node tab. Metricbeat service is running with logstash-xpack.yml properly configured, I can curl l…

---

## [Uptime monitor status](https://discuss.elastic.co/t/uptime-monitor-status/266585)

<div class="topic-metadata">

**Author:** [@vee](https://discuss.elastic.co/u/vee)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 7:35pm UTC](https://discuss.elastic.co/t/uptime-monitor-status/266585 "2021-03-08T19:35:25Z")

</div>

Hi - we have hearbeat installed/configured in our environment. When we check on the uptime status, I do see the historic count of the services that were down listed in the dashboard but nothing shows up in the "Monitor s…

---

## [Logstash doesnt stop when config.reload.automatic is enabled](https://discuss.elastic.co/t/logstash-doesnt-stop-when-config-reload-automatic-is-enabled/266596)

<div class="topic-metadata">

**Author:** [@hayo](https://discuss.elastic.co/u/hayo)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 7:39pm UTC](https://discuss.elastic.co/t/logstash-doesnt-stop-when-config-reload-automatic-is-enabled/266596 "2021-03-08T19:39:44Z")

</div>

Hello, I am running a logstash pipeline with JDBC input triggered via crontab, to ensure also a process runs afterwards. Besides that i have also a logstash pipeline with JDBC input but with schedule as a service. I w…

---

## [Kibana drill down in space](https://discuss.elastic.co/t/kibana-drill-down-in-space/266543)

<div class="topic-metadata">

**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 7:36pm UTC](https://discuss.elastic.co/t/kibana-drill-down-in-space/266543 "2021-03-08T19:36:31Z")

</div>

I created a dashboard in kibana, inside that created one data table with drill down to redirect on Discover page, once I moved that dashboard to a space and gave all permission for Dashboard and Discover but drill down…

---

## [Deletion of indices action not enforced](https://discuss.elastic.co/t/deletion-of-indices-action-not-enforced/266561)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 7:32pm UTC](https://discuss.elastic.co/t/deletion-of-indices-action-not-enforced/266561 "2021-03-08T19:32:23Z")

</div>

Hi Team, I deployed EFK stack in my cluster with default settings except storage size and secrets settings. Everything is working so far. Now, I wanted to configure elasticsearch curator for managing indices in elasti…

---

## [A way to index Azure's Secure Scores](https://discuss.elastic.co/t/a-way-to-index-azures-secure-scores/263042)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 7:07pm UTC](https://discuss.elastic.co/t/a-way-to-index-azures-secure-scores/263042 "2021-03-08T19:07:39Z")

</div>

Hello, I was wondering if there is already a way to index Azure's Secure Score metrics into Elasticsearch. A bit like: Grtz Willem

---

## [Kibana Queries - depends on the order of the fields?](https://discuss.elastic.co/t/kibana-queries-depends-on-the-order-of-the-fields/266538)

<div class="topic-metadata">

**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 10:41am UTC](https://discuss.elastic.co/t/kibana-queries-depends-on-the-order-of-the-fields/266538 "2021-03-08T10:41:37Z")

</div>

Hi, I did not find answer on the Internet:( I would like to know - from cluster utilization perspective - if depends on order of fields in query. Specifically, lets say I have index and data below: "\_index": "firewall" …

---

## [Metricbeat Visualization - What does this mean?](https://discuss.elastic.co/t/metricbeat-visualization-what-does-this-mean/266484)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 4\
**Last updated:** [March 8, 2021, 4:36pm UTC](https://discuss.elastic.co/t/metricbeat-visualization-what-does-this-mean/266484 "2021-03-08T16:36:08Z")

</div>

Hello, Can someone tell me what does this mean for the CPU visualization for Metricbeat dashboard: Where can I find more about TSVB's Bucket Script's Painless support?

---

## [Extract fields from kibana logs](https://discuss.elastic.co/t/extract-fields-from-kibana-logs/266511)

<div class="topic-metadata">

**Author:** [@aagarwal3](https://discuss.elastic.co/u/aagarwal3)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 5:59pm UTC](https://discuss.elastic.co/t/extract-fields-from-kibana-logs/266511 "2021-03-08T17:59:10Z")

</div>

I have the Status Code in log field only on kibana logs which I want to extract. Is there any way in which we can parse the log field from Kibana itself? "2021-03-08 06:16:16.631 INFO ; Status\_Code=200; Response\_Body=…

---

## [OSS filebeat error "No such input type exist 'httpjson'"](https://discuss.elastic.co/t/oss-filebeat-error-no-such-input-type-exist-httpjson/266578)

<div class="topic-metadata">

**Author:** [@estebanes22](https://discuss.elastic.co/u/estebanes22)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 4:46pm UTC](https://discuss.elastic.co/t/oss-filebeat-error-no-such-input-type-exist-httpjson/266578 "2021-03-08T16:46:55Z")

</div>

I switched from the elastic licensed filebeat to OSS version and am getting this new error when trying to use httpjson input: Not doing anything special here; was working fine with elastic licensed version.

---

## [Display Gauge/Goal with current percent of month](https://discuss.elastic.co/t/display-gauge-goal-with-current-percent-of-month/266584)

<div class="topic-metadata">

**Author:** [@paulwellnerbou](https://discuss.elastic.co/u/paulwellnerbou)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 5:55pm UTC](https://discuss.elastic.co/t/display-gauge-goal-with-current-percent-of-month/266584 "2021-03-08T17:55:42Z")

</div>

I am trying to display data related to the current month (in Gauge/Goal visualization), and to compare the progress, I would like to add another Gauge/Goal displaying the progress of the current month (28, 30 or 31 days)…

---

## [Logstash access dynamic field with ruby filter](https://discuss.elastic.co/t/logstash-access-dynamic-field-with-ruby-filter/266489)

<div class="topic-metadata">

**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\
**Replies:** 8\
**Last updated:** [March 8, 2021, 5:45pm UTC](https://discuss.elastic.co/t/logstash-access-dynamic-field-with-ruby-filter/266489 "2021-03-08T17:45:19Z")

</div>

Hello I have nested field looks like this \[field1\]\[field2\]\[field3\] I want to remove field1 and field2 so the expected output will be \[field3\] I already manage to remove field1 with this ruby filter ruby { …

---

## [Geoip for using maps](https://discuss.elastic.co/t/geoip-for-using-maps/266592)

<div class="topic-metadata">

**Author:** [@David\_Mohamad](https://discuss.elastic.co/u/David_Mohamad)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 5:40pm UTC](https://discuss.elastic.co/t/geoip-for-using-maps/266592 "2021-03-08T17:40:32Z")

</div>

Hi everyone, I'm trying to use geoip to show data on a map. The problem is that the wrong index is showing up. I tried adding a new index template with no luck. This is what I get when I check the json code: "src": { …

---

## [Panel dependency](https://discuss.elastic.co/t/panel-dependency/266039)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 5:22pm UTC](https://discuss.elastic.co/t/panel-dependency/266039 "2021-03-08T17:22:06Z")

</div>

Hi there! I'm new to Kibana, all my previous experience is with Splunk, and I wanted to ask you (the experts) if it is possible to set dependencies on panel. Say that you have a panel displaying a value and you only wan…

---

## [Wrong output](https://discuss.elastic.co/t/wrong-output/266446)

<div class="topic-metadata">

**Author:** [@David\_Mohamad](https://discuss.elastic.co/u/David_Mohamad)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 5:02pm UTC](https://discuss.elastic.co/t/wrong-output/266446 "2021-03-08T17:02:41Z")

</div>

Hi everyone, I recently started using the elastic stack for the first time and I cant seem to find a way to get the desired output. I'm trying to use this data: admintool\[899\] browser=Mozilla%2F5.0 %28Windows NT 10.0…

---

## [Logstash Grok Pattern for Timestamp with Timezone](https://discuss.elastic.co/t/logstash-grok-pattern-for-timestamp-with-timezone/266268)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 4:59pm UTC](https://discuss.elastic.co/t/logstash-grok-pattern-for-timestamp-with-timezone/266268 "2021-03-08T16:59:35Z")

</div>

Hi, I am trying to match following logs for icinga2 using grok filter: \[2021-03-04 17:03:27 +0100\] warning/GraphiteWriter: Ignoring invalid perfdata for checkable 'host!service' and command 'by\_ssh' with value: /foo/ba…

---

## [Ruby syntax error only in logstash](https://discuss.elastic.co/t/ruby-syntax-error-only-in-logstash/266488)

<div class="topic-metadata">

**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 4:57pm UTC](https://discuss.elastic.co/t/ruby-syntax-error-only-in-logstash/266488 "2021-03-08T16:57:10Z")

</div>

Hi, I am trying to use the ruby plugin to parse a field of array type and then generate new fields out of some of elements. However, I encountered the following error. Similar ruby codes(i.e. the statement to set event)…

---

## [What is the difference a between "system.memory.used.bytes" and "vsphere.virtualmachine.memory.used.guest.bytes"?](https://discuss.elastic.co/t/what-is-the-difference-a-between-system-memory-used-bytes-and-vsphere-virtualmachine-memory-used-guest-bytes/266591)

<div class="topic-metadata">

**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 4:48pm UTC](https://discuss.elastic.co/t/what-is-the-difference-a-between-system-memory-used-bytes-and-vsphere-virtualmachine-memory-used-guest-bytes/266591 "2021-03-08T16:48:36Z")

</div>

Hello, I have installed metricbeat agent on one of my linux virtual machines, and I'm also collecting metrics using vSphere module from vCenter. So the above virtual machine where the metricbeat agent is installed is a…

---

## [Query get error when using serial\_diff with bucket\_selector](https://discuss.elastic.co/t/query-get-error-when-using-serial-diff-with-bucket-selector/263716)

<div class="topic-metadata">

**Author:** [@pablocp](https://discuss.elastic.co/u/pablocp)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 4:47pm UTC](https://discuss.elastic.co/t/query-get-error-when-using-serial-diff-with-bucket-selector/263716 "2021-03-08T16:47:35Z")

</div>

I have a set of products, and each product has a price that varies in time. I want to find those products that comparing to week -1 have decreased its average value a %. I thought it would be fine to make a query and to …

---

## [Docker.elastic.co Rate Limits](https://discuss.elastic.co/t/docker-elastic-co-rate-limits/266589)

<div class="topic-metadata">

**Author:** [@ed\_smith](https://discuss.elastic.co/u/ed_smith)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 4:36pm UTC](https://discuss.elastic.co/t/docker-elastic-co-rate-limits/266589 "2021-03-08T16:36:42Z")

</div>

Hi all, Hopefully this is an easy one, but I couldn't find any supporting documentation. Does Elastic rate limit pulls from docker.elastic.co? We aren't expecting to pull often at all but we would like to know if there…

---

## [ECK operator throws "certificate signed by unknown authority"](https://discuss.elastic.co/t/eck-operator-throws-certificate-signed-by-unknown-authority/265558)

<div class="topic-metadata">

**Author:** [@leonz](https://discuss.elastic.co/u/leonz)\
**Replies:** 4\
**Last updated:** [March 8, 2021, 4:29pm UTC](https://discuss.elastic.co/t/eck-operator-throws-certificate-signed-by-unknown-authority/265558 "2021-03-08T16:29:14Z")

</div>

Hi! We are trying to configure an ECK operator (version 1.3.2) that manages an Elasticsearch (6.8.14). We have configured the Elasticsearch to use our own custom certificates via xpack: xpack.security.http.ssl.certifi…

---

## [Time line visualisation](https://discuss.elastic.co/t/time-line-visualisation/266564)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 4:06pm UTC](https://discuss.elastic.co/t/time-line-visualisation/266564 "2021-03-08T16:06:46Z")

</div>

Hi all, i'm trying to build a time line visualization on kibana using Date field on X axis and Terms field on y Aces, but i see that all Kibana visualization must have a metric on y-axis, which is a count or avg and so …

---

## [Java agent and rabbitmq](https://discuss.elastic.co/t/java-agent-and-rabbitmq/266569)

<div class="topic-metadata">

**Author:** [@fernando\_dominguez](https://discuss.elastic.co/u/fernando_dominguez)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 3:20pm UTC](https://discuss.elastic.co/t/java-agent-and-rabbitmq/266569 "2021-03-08T15:20:53Z")

</div>

Kibana version: 7.11 Elasticsearch version: 7.11 APM Server version: 7.11 APM Agent language and version: java agent 1.21.0 Browser version: Chrome 88.0.4324.190 (Build oficial) (64 bits) Fresh install or upgraded …

[Previous page](https://discuss.elastic.co/latest.md?page=1794)

[Next page](https://discuss.elastic.co/latest.md?page=1796)
