# Latest **URL:** https://discuss.elastic.co/latest.md?page=1809 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1810 --- ## [TSVB Drill Down using Item URL](https://discuss.elastic.co/t/tsvb-drill-down-using-item-url/265744)
**Author:** [@Jesse-ECS](https://discuss.elastic.co/u/Jesse-ECS)\ **Replies:** 2\ **Last updated:** [March 1, 2021, 4:38pm UTC](https://discuss.elastic.co/t/tsvb-drill-down-using-item-url/265744 "2021-03-01T16:38:34Z")
Is it possible to access the event context from the "Item URL" optional parameter in the Panel Options screen of TSVB? I need to send the index pattern id from the current context with the resulting URL I am building. … --- ## [Mikrotik sending IPFIX to Logstarsh](https://discuss.elastic.co/t/mikrotik-sending-ipfix-to-logstarsh/265830)
**Author:** [@Roberto\_Williams\_Bat](https://discuss.elastic.co/u/Roberto_Williams_Bat)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 4:13pm UTC](https://discuss.elastic.co/t/mikrotik-sending-ipfix-to-logstarsh/265830 "2021-03-01T16:13:26Z")
Hello, I need to ingest IPFIX data from Mikrotik, which arrives in my ELK server in port 9880. How should I configure the Logstash to receive it and have elastcsearching ingesting it? Note: I can change IPFIX to NetFlo… --- ## [I deleted the indices and tried to restart kibana but it failed with this error](https://discuss.elastic.co/t/i-deleted-the-indices-and-tried-to-restart-kibana-but-it-failed-with-this-error/265807)
**Author:** [@ajeetsingh193](https://discuss.elastic.co/u/ajeetsingh193)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 4:13pm UTC](https://discuss.elastic.co/t/i-deleted-the-indices-and-tried-to-restart-kibana-but-it-failed-with-this-error/265807 "2021-03-01T16:13:09Z")
{"type":"log","@timestamp":"2021-03-01T13:34:37Z","tags":\["fatal","root"\],"pid":56422,"message":"Error: Unable to write Kibana UUID file, please check the uuid.server configuration value in kibana.yml and ensure Kibana h… --- ## [What happens when winlogbeat cant ship?](https://discuss.elastic.co/t/what-happens-when-winlogbeat-cant-ship/265828)
**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 4:01pm UTC](https://discuss.elastic.co/t/what-happens-when-winlogbeat-cant-ship/265828 "2021-03-01T16:01:42Z")
Hey folks, I was curious about what happens when winlogbeat cant communicate with logstash or elastic from the client impact side of things. I haven't seen any impact or issues occur but was curious what events occur. F… --- ## [Kibana Alerts issue](https://discuss.elastic.co/t/kibana-alerts-issue/265784)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 3:56pm UTC](https://discuss.elastic.co/t/kibana-alerts-issue/265784 "2021-03-01T15:56:57Z")
Hi all, I'm trying to configure Kibana Alerts in one of the kibana servers. The issue is that server is configured with Kibana 7.4.1 which doesn't have alerts feature. We are not allowed to upgrade the Kibana version … --- ## [\_update\_by\_query "lenient" flag not recognized](https://discuss.elastic.co/t/update-by-query-lenient-flag-not-recognized/265639)
**Author:** [@dan3](https://discuss.elastic.co/u/dan3)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 3:30pm UTC](https://discuss.elastic.co/t/update-by-query-lenient-flag-not-recognized/265639 "2021-03-01T15:30:36Z")
I'm having an issue with updating an index via \_update\_by\_query. I have certain fields that are causing format errors so I'm trying to skip them using the "lenient" flag outlined in the documentation. I'm using elasticse… --- ## [Audit beat warning](https://discuss.elastic.co/t/audit-beat-warning/265730)
**Author:** [@Paul\_Fleming](https://discuss.elastic.co/u/Paul_Fleming)\ **Replies:** 3\ **Last updated:** [March 1, 2021, 3:24pm UTC](https://discuss.elastic.co/t/audit-beat-warning/265730 "2021-03-01T15:24:01Z")
Hi Im seeing the following warning when I started auditbeat can someone please help me resolve the following issue thanks. ' feb 28 15:45:11 virtual-machine auditbeat\[4659\]: 2021-02-28T15:45:11.932Z WARN \[… --- ## [Dynamic Templates on Documents with Inner Objects](https://discuss.elastic.co/t/dynamic-templates-on-documents-with-inner-objects/265821)
**Author:** [@Eduardo\_Iglesias](https://discuss.elastic.co/u/Eduardo_Iglesias)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 2:50pm UTC](https://discuss.elastic.co/t/dynamic-templates-on-documents-with-inner-objects/265821 "2021-03-01T14:50:57Z")
Hello community, I'm trying to apply a dynamic template to my index, even though the console doesn't gives me any error when creating the dynamic template, my documents are still taking the default elasticsearch mappings… --- ## [Kibana Discover and Visualization screen is not showing correct results for the values provided via filters](https://discuss.elastic.co/t/kibana-discover-and-visualization-screen-is-not-showing-correct-results-for-the-values-provided-via-filters/265806)
**Author:** [@Mohitj252](https://discuss.elastic.co/u/Mohitj252)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 2:33pm UTC](https://discuss.elastic.co/t/kibana-discover-and-visualization-screen-is-not-showing-correct-results-for-the-values-provided-via-filters/265806 "2021-03-01T14:33:30Z")
Hi, I have few queries related to discover page and visualization page. I am trying to explain the different scenarios which I observed. Scenario 1. In the discover screen, there are counter values (counter\_value is a… --- ## [NLP - Typehead](https://discuss.elastic.co/t/nlp-typehead/265818)
**Author:** [@Chirasmita\_Mallick](https://discuss.elastic.co/u/Chirasmita_Mallick)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 2:28pm UTC](https://discuss.elastic.co/t/nlp-typehead/265818 "2021-03-01T14:28:41Z")
Hi, I am pretty new to Elastic Search and work primarily on the NLP aspects of improving Search on Elastic Search. I wanted to understand if there is any value if the ordered element was selected from the typeahead in t… --- ## [Openshift monitoring service-ca.crt: no such file or directory](https://discuss.elastic.co/t/openshift-monitoring-service-ca-crt-no-such-file-or-directory/265562)
**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 2:25pm UTC](https://discuss.elastic.co/t/openshift-monitoring-service-ca-crt-no-such-file-or-directory/265562 "2021-03-01T14:25:41Z")
hi all When I modified some namespaces, it happened after deploying the yaml file according to https://raw.githubusercontent.com/elastic/cloud-on-k8s/1.3/config/recipes/beats/openshift\_monitoring.yaml 2021-02-26T03:21:… --- ## [Index names are getting generated as 2021.53](https://discuss.elastic.co/t/index-names-are-getting-generated-as-2021-53/265763)
**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\ **Replies:** 4\ **Last updated:** [March 1, 2021, 2:18pm UTC](https://discuss.elastic.co/t/index-names-are-getting-generated-as-2021-53/265763 "2021-03-01T14:18:28Z")
Hi All.. The syntax for naming our indices for different applications is "application-YYYY-ww". But we are having some indices that are getting generated as application-2021.53. And they have significant sizes too, the… --- ## [Kibana\_system user management](https://discuss.elastic.co/t/kibana-system-user-management/265793)
**Author:** [@dimm](https://discuss.elastic.co/u/dimm)\ **Replies:** 2\ **Last updated:** [March 1, 2021, 1:58pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793 "2021-03-01T13:58:52Z")
Hi, I'm faced with strange situation while trying to change password for reserved kibana\_system user: This is looks like vicious circle, when I'm trying to update password I'm getting: "roles are missing" when I'm tr… --- ## [ECK readiness for Kubernetes 1.19 - deprecated APIVersions](https://discuss.elastic.co/t/eck-readiness-for-kubernetes-1-19-deprecated-apiversions/236670)
**Author:** [@Presence](https://discuss.elastic.co/u/Presence)\ **Replies:** 6\ **Last updated:** [March 1, 2021, 1:35pm UTC](https://discuss.elastic.co/t/eck-readiness-for-kubernetes-1-19-deprecated-apiversions/236670 "2021-03-01T13:35:00Z")
Hi, We're using ECK Elastic Cloud on Kubernetes v1.1.2 on Kubernetes 1.16 and we notice that some of the APIVersions used are deprecated and scheduled to be dropped in Kubernetes 1.19. CustomResourceDefinition/apmserv… --- ## [Limit size of a data field in kibana](https://discuss.elastic.co/t/limit-size-of-a-data-field-in-kibana/265804)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 1:33pm UTC](https://discuss.elastic.co/t/limit-size-of-a-data-field-in-kibana/265804 "2021-03-01T13:33:04Z")
Hi all, I'm trying to restrict value of data entry(value) of my field to 30 characters in my kibana visualizations I think there is some advanced json method by painless to do this,but i'm unable to figure out command. … --- ## [Perform division of two fields in a Kibana visualisation](https://discuss.elastic.co/t/perform-division-of-two-fields-in-a-kibana-visualisation/265772)
**Author:** [@2f404140b7ab0f69189f](https://discuss.elastic.co/u/2f404140b7ab0f69189f)\ **Replies:** 5\ **Last updated:** [March 1, 2021, 1:19pm UTC](https://discuss.elastic.co/t/perform-division-of-two-fields-in-a-kibana-visualisation/265772 "2021-03-01T13:19:54Z")
I'm unable to perform a basic division of two fields on Kibana. First, I tried to do so in a Line Chart bu using the Advanced Json Input section with this script: {"script": "if(doc\['kpi.abc'\].value \> 0) then {(doc\['kpi… --- ## [Understanding fielddata mapping parameter](https://discuss.elastic.co/t/understanding-fielddata-mapping-parameter/265798)
**Author:** [@stravag](https://discuss.elastic.co/u/stravag)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 12:58pm UTC](https://discuss.elastic.co/t/understanding-fielddata-mapping-parameter/265798 "2021-03-01T12:58:54Z")
I'm attempting to build a kind of "next word prediction" using elasticsearch. The goal is to have suggest search terms based on different fields of the index. I found a solution based on the work done here https://bilya… --- ## [A question on anomaly detection](https://discuss.elastic.co/t/a-question-on-anomaly-detection/265719)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 4\ **Last updated:** [March 1, 2021, 12:56pm UTC](https://discuss.elastic.co/t/a-question-on-anomaly-detection/265719 "2021-03-01T12:56:06Z")
So we have succeeded in putting in a process which can ingest one line csv logs. Lots of them. Now the next stage is to put in some sort of anomaly detection. However here is the problem I am facing. I am not a domain e… --- ## [Rs.8000.00 withdrawn from ATM using logstash](https://discuss.elastic.co/t/rs-8000-00-withdrawn-from-atm-using-logstash/265778)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [March 1, 2021, 12:10pm UTC](https://discuss.elastic.co/t/rs-8000-00-withdrawn-from-atm-using-logstash/265778 "2021-03-01T12:10:19Z")
how to get amount from above sentence and convert into integer. --- ## [Filebeat not considering registry and resending data](https://discuss.elastic.co/t/filebeat-not-considering-registry-and-resending-data/265788)
**Author:** [@gasparuben](https://discuss.elastic.co/u/gasparuben)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 12:00pm UTC](https://discuss.elastic.co/t/filebeat-not-considering-registry-and-resending-data/265788 "2021-03-01T12:00:19Z")
hi, I am running filebeat on a pod in kubernetes. Filebeat has its registry on an external volume, on a CEPHFS cluster, so I dont lose memory of files being sent after each reboot. Some how this is happening and it lo… --- ## [Fields are not populating in the kibana filter](https://discuss.elastic.co/t/fields-are-not-populating-in-the-kibana-filter/265589)
**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\ **Replies:** 3\ **Last updated:** [March 1, 2021, 11:38am UTC](https://discuss.elastic.co/t/fields-are-not-populating-in-the-kibana-filter/265589 "2021-03-01T11:38:51Z")
Fields are not populating in the kibana filter. whereas i could see fields in the search. can you pls let me know if I need to add anything. --- ## [How to access data created by Greylog](https://discuss.elastic.co/t/how-to-access-data-created-by-greylog/265786)
**Author:** [@daniel90](https://discuss.elastic.co/u/daniel90)\ **Replies:** 2\ **Last updated:** [March 1, 2021, 11:32am UTC](https://discuss.elastic.co/t/how-to-access-data-created-by-greylog/265786 "2021-03-01T11:32:42Z")
According to I would do a select statement like this: curl -X POST "localhost:9200/\_sql?format=txt&pretty" -H 'Content-Type: application/json' -d' { "query": "SELECT \* FROM greylog\_10" } ' But that gives me an er… --- ## [% calculation doesn't seem correct](https://discuss.elastic.co/t/calculation-doesnt-seem-correct/265590)
**Author:** [@vivekshukla](https://discuss.elastic.co/u/vivekshukla)\ **Replies:** 4\ **Last updated:** [March 1, 2021, 11:27am UTC](https://discuss.elastic.co/t/calculation-doesnt-seem-correct/265590 "2021-03-01T11:27:34Z")
Hi Team, I drew a Metric using TSVB by following the excellent article https://www.elastic.co/blog/how-to-display-data-as-a-percentage-in-kibana-visualizations So far so good. But when I am calculating the % manually,… --- ## [Engineer 2 : Lab 3.1, no Kibana has been installed on server7](https://discuss.elastic.co/t/engineer-2-lab-3-1-no-kibana-has-been-installed-on-server7/265751)
**Author:** [@suselena22](https://discuss.elastic.co/u/suselena22)\ **Replies:** 3\ **Last updated:** [March 1, 2021, 11:10am UTC](https://discuss.elastic.co/t/engineer-2-lab-3-1-no-kibana-has-been-installed-on-server7/265751 "2021-03-01T11:10:05Z")
Hi there: I was having trouble to restart the Kibana after I configured the security in Lab 3.1. I noticed that, I won't able to find Kibana installation directory when I ssh to server7 and I tried to install it but cou… --- ## [Alerts don't show](https://discuss.elastic.co/t/alerts-dont-show/264835)
**Author:** [@MABN](https://discuss.elastic.co/u/MABN)\ **Replies:** 3\ **Last updated:** [March 1, 2021, 11:03am UTC](https://discuss.elastic.co/t/alerts-dont-show/264835 "2021-03-01T11:03:50Z")
Hi ELK 7.10 single node ( all ELK are installed in one os) I create custom rule but alert does not appear! what should i do? should I config SSL/TLS? I Create API & and add xpack.security.authc.api\_key.enabled & x… --- ## [Kubectl top vs kubernetes.pod.memory.usage.bytes / kubernetes.pod.cpu.usage.nanocores](https://discuss.elastic.co/t/kubectl-top-vs-kubernetes-pod-memory-usage-bytes-kubernetes-pod-cpu-usage-nanocores/265395)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 10:44am UTC](https://discuss.elastic.co/t/kubectl-top-vs-kubernetes-pod-memory-usage-bytes-kubernetes-pod-cpu-usage-nanocores/265395 "2021-03-01T10:44:32Z")
I am comparing the output of kubectl top with kubernetes.pod.memory.usage.bytes and kubernetes.pod.cpu.usage.nanocores I am looking for a stat which is closest to kubectl top for both memory and cpu. --- ## [Kibana and logstash](https://discuss.elastic.co/t/kibana-and-logstash/265781)
**Author:** [@Gharsa\_Khouloud](https://discuss.elastic.co/u/Gharsa_Khouloud)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 10:42am UTC](https://discuss.elastic.co/t/kibana-and-logstash/265781 "2021-03-01T10:42:59Z")
What is the best way to integrate more than one collection of mongodb into Kibana via Logstash and Elasticsearch . i want to join two or 3 collection from my database and index it in one index to elasticsearch ? --- ## [Elasticsearch Number of Replicas](https://discuss.elastic.co/t/elasticsearch-number-of-replicas/265593)
**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\ **Replies:** 2\ **Last updated:** [March 1, 2021, 10:39am UTC](https://discuss.elastic.co/t/elasticsearch-number-of-replicas/265593 "2021-03-01T10:39:18Z")
Elasticsearch only has one node I created template in error e.g. 1 shard (Primary) and 1 replica so I have updated the template for no replica. PUT friday-000012/\_settings {"number\_of\_replicas": 0} I checked the templ… --- ## [Logstash has stopped processing logs suddenly](https://discuss.elastic.co/t/logstash-has-stopped-processing-logs-suddenly/264273)
**Author:** [@amanpradhan](https://discuss.elastic.co/u/amanpradhan)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 10:33am UTC](https://discuss.elastic.co/t/logstash-has-stopped-processing-logs-suddenly/264273 "2021-03-01T10:33:12Z")
Hi Everyone, My logstash stopped processing logs all of sudden when i checked in kibana one day. I did not make any changes in any config and it was working earlier from past one year. Now it is giving below error At… --- ## [How to index PDF file data and search data from attachment PDF file](https://discuss.elastic.co/t/how-to-index-pdf-file-data-and-search-data-from-attachment-pdf-file/265565)
**Author:** [@genero](https://discuss.elastic.co/u/genero)\ **Replies:** 6\ **Last updated:** [March 1, 2021, 10:32am UTC](https://discuss.elastic.co/t/how-to-index-pdf-file-data-and-search-data-from-attachment-pdf-file/265565 "2021-03-01T10:32:29Z")
Hello, I want to index PDF file data in Elastic App Search and search data from PDF file. Please suggested is it possible to handle attachment PDF in Elastic App search? Regards [Previous page](https://discuss.elastic.co/latest.md?page=1808) [Next page](https://discuss.elastic.co/latest.md?page=1810)