# Latest **URL:** https://discuss.elastic.co/latest.md?page=1815 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1816 --- ## [Legend Color](https://discuss.elastic.co/t/legend-color/265308)
**Author:** [@NourBM](https://discuss.elastic.co/u/NourBM)\ **Replies:** 6\ **Last updated:** [February 25, 2021, 4:20pm UTC](https://discuss.elastic.co/t/legend-color/265308 "2021-02-25T16:20:19Z")
Hello, I'm new with Kibana and Vega I want to customize the legend color in kibana: i need to make the color Green for the "Up" and Red for the "Down" Is this possible? --- ## [Beats modules grok](https://discuss.elastic.co/t/beats-modules-grok/265508)
**Author:** [@Romano](https://discuss.elastic.co/u/Romano)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 3:57pm UTC](https://discuss.elastic.co/t/beats-modules-grok/265508 "2021-02-25T15:57:40Z")
Hi. In my environment I have various hardware firewalls such as Cisco, and other vendors. And I also have Linux servers, so I log events from Apache, OS and auditd. I log all events to central syslog server, from there I… --- ## [Geo shape query radius problem](https://discuss.elastic.co/t/geo-shape-query-radius-problem/265323)
**Author:** [@Fatih\_Kurnaz](https://discuss.elastic.co/u/Fatih_Kurnaz)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 3:36pm UTC](https://discuss.elastic.co/t/geo-shape-query-radius-problem/265323 "2021-02-25T15:36:33Z")
Hi everyone; Here my mapping; \ PUT /circle-example { "mappings": { "properties": { "location": { "type": "geo\_shape", "strategy": "recursive" } } } } \ Here example docum… --- ## [EQL signal query return with error](https://discuss.elastic.co/t/eql-signal-query-return-with-error/265465)
**Author:** [@qiratnahraf](https://discuss.elastic.co/u/qiratnahraf)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 3:33pm UTC](https://discuss.elastic.co/t/eql-signal-query-return-with-error/265465 "2021-02-25T15:33:18Z")
Hi, We are on 7.10 and trying to use EQL signal but hit with error, although when we execute the same EQL query from console it successfully return results. please note in detection module we hit with error whenever we t… --- ## [Avoid override of log4j2.properties during upgrade](https://discuss.elastic.co/t/avoid-override-of-log4j2-properties-during-upgrade/265505)
**Author:** [@ALIT](https://discuss.elastic.co/u/ALIT)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 3:20pm UTC](https://discuss.elastic.co/t/avoid-override-of-log4j2-properties-during-upgrade/265505 "2021-02-25T15:20:45Z")
Hi, we want to edit our log4j2.properties to change the rotation of deprecation logs. But with upgrading ES (Ubuntu - APT) we need to merge the file with a new one (if there are any changes in the new version). Its eve… --- ## [ES 1.7.3 Elasticsearch java client significant terms aggregation unknown values](https://discuss.elastic.co/t/es-1-7-3-elasticsearch-java-client-significant-terms-aggregation-unknown-values/265504)
**Author:** [@IvannKurchenko](https://discuss.elastic.co/u/IvannKurchenko)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 3:14pm UTC](https://discuss.elastic.co/t/es-1-7-3-elasticsearch-java-client-significant-terms-aggregation-unknown-values/265504 "2021-02-25T15:14:14Z")
Hello, Elasticsearch Community! Out team currently on way of migration legacy project from Elasticsearch v1.7.3 to v7.8.0. It's in most part written in Scala, so along with this we would like to replace Java client : or… --- ## [Elasticsearch keystore distinguished name](https://discuss.elastic.co/t/elasticsearch-keystore-distinguished-name/265372)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 10:22pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-distinguished-name/265372 "2021-02-24T22:22:38Z")
Hi elastic engineers, Is there a way to create/generate/rename and use distinguished elasticsearch keystore file name instead of default name elasticsearch.keystore ? I'm running multiple elasticsearch clusters (v.7.9/… --- ## [Vertical line in vertical bar chart, possible?](https://discuss.elastic.co/t/vertical-line-in-vertical-bar-chart-possible/265232)
**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\ **Replies:** 5\ **Last updated:** [February 25, 2021, 2:52pm UTC](https://discuss.elastic.co/t/vertical-line-in-vertical-bar-chart-possible/265232 "2021-02-25T14:52:38Z")
Hi, I created a vertical histogram bar chart. My Y-axis is count. X axis is histogram range of the field I am interested in. Is it possible to add vertical fixed value lines to this vertical bar chart? Or add a vertical … --- ## [Developer mode fail](https://discuss.elastic.co/t/developer-mode-fail/265482)
**Author:** [@Matias\_Gerstner](https://discuss.elastic.co/u/Matias_Gerstner)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 2:33pm UTC](https://discuss.elastic.co/t/developer-mode-fail/265482 "2021-02-25T14:33:39Z")
Hello good morning, I am having problems starting kibana in developer mode, it uses 100% of the cpu and gpu, my computer freezes, the idea is to make a plugin, but I cannot start the system, do you have any idea that it … --- ## [Metricbeat zookeeper module connecting to zookeeper using ssl connection](https://discuss.elastic.co/t/metricbeat-zookeeper-module-connecting-to-zookeeper-using-ssl-connection/262973)
**Author:** [@atamarnath](https://discuss.elastic.co/u/atamarnath)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 2:24pm UTC](https://discuss.elastic.co/t/metricbeat-zookeeper-module-connecting-to-zookeeper-using-ssl-connection/262973 "2021-02-25T14:24:21Z")
Hi, I am trying to connect to metricbeat zookeeper module to zookeeper through ssl connection. Though I am able to connect in non ssl mode I am unable to connect through ssl. I get the below errors srvr command failed… --- ## [Aggregation over big data](https://discuss.elastic.co/t/aggregation-over-big-data/265486)
**Author:** [@Filip\_Sirc](https://discuss.elastic.co/u/Filip_Sirc)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 2:22pm UTC](https://discuss.elastic.co/t/aggregation-over-big-data/265486 "2021-02-25T14:22:47Z")
Hello, i would like to ask you for advice. I have index with milions of documents and need to query it (query will return cca. 100 000 documents) and use results for aggregations. My current code is: { "query": { … --- ## [Wildcard query rewrite parameter not working with new wildcard field type?](https://discuss.elastic.co/t/wildcard-query-rewrite-parameter-not-working-with-new-wildcard-field-type/265453)
**Author:** [@cads](https://discuss.elastic.co/u/cads)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 1:48pm UTC](https://discuss.elastic.co/t/wildcard-query-rewrite-parameter-not-working-with-new-wildcard-field-type/265453 "2021-02-25T13:48:53Z")
The Wildcard Query offers a rewrite parameter to influence how Lucene calculates the relevance scores. On keyword fields this works as expected but it does not seem to work with the new wildcard field type which belongs … --- ## [Generating the password hash](https://discuss.elastic.co/t/generating-the-password-hash/262432)
**Author:** [@mchudinov](https://discuss.elastic.co/u/mchudinov)\ **Replies:** 7\ **Last updated:** [February 25, 2021, 2:05pm UTC](https://discuss.elastic.co/t/generating-the-password-hash/262432 "2021-02-25T14:05:28Z")
How to generate a hash for file realm? as described here: I use Elasticsearch in K8S ECK and use this document for define users: kind: Secret apiVersion: v1 metadata: name: my-filerealm-secret… --- ## [Elastic-Agent vs Metricbeat standalone](https://discuss.elastic.co/t/elastic-agent-vs-metricbeat-standalone/252270)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 4\ **Last updated:** [February 25, 2021, 1:48pm UTC](https://discuss.elastic.co/t/elastic-agent-vs-metricbeat-standalone/252270 "2021-02-25T13:48:21Z")
Hi, Note: Running in Windows Server 2012 I have a couple of questions about the Metricbeat service running under Elastic-Agent: Can modules (for example MSSQL) be activated like the standalone version of Metricbeat? H… --- ## [How can I check logstash throughput(event per second)?](https://discuss.elastic.co/t/how-can-i-check-logstash-throughput-event-per-second/265340)
**Author:** [@jang](https://discuss.elastic.co/u/jang)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 1:33pm UTC](https://discuss.elastic.co/t/how-can-i-check-logstash-throughput-event-per-second/265340 "2021-02-25T13:33:33Z")
I am sending data from Logstash to Elasticsearch. (filebeat -\> kafka -\> logstash -\> elasticsearch) I want to know the Logstash Event Per Second(EPS) (it is assumed that the environment of Elasticsearch is the same.) P… --- ## [Kibana Time Histogram x-axis Dates and Time Overlapping](https://discuss.elastic.co/t/kibana-time-histogram-x-axis-dates-and-time-overlapping/265448)
**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 1:22pm UTC](https://discuss.elastic.co/t/kibana-time-histogram-x-axis-dates-and-time-overlapping/265448 "2021-02-25T13:22:55Z")
HI, I am using OSS kibana version - 7.5.0, I have created visuals bar charts ,Line charts selected x-axis as Date Histogram with field @timestamp with minimum interval as a Auto. When selecting time range to see visua… --- ## [Node couldn't rejoin cluster because "version not supported"](https://discuss.elastic.co/t/node-couldnt-rejoin-cluster-because-version-not-supported/265473)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 1:21pm UTC](https://discuss.elastic.co/t/node-couldnt-rejoin-cluster-because-version-not-supported/265473 "2021-02-25T13:21:43Z")
I've got an Elasticsearch cluster of four nodes. Three can hold data and are master eligible. One cannot hold data, isn't master eligible and has Kibana on it. Two of the master eligible nodes became unhappy resulting in… --- ## [Bulk upload file data into app search from a json file](https://discuss.elastic.co/t/bulk-upload-file-data-into-app-search-from-a-json-file/264640)
**Author:** [@pakwai122](https://discuss.elastic.co/u/pakwai122)\ **Replies:** 4\ **Last updated:** [February 25, 2021, 12:41pm UTC](https://discuss.elastic.co/t/bulk-upload-file-data-into-app-search-from-a-json-file/264640 "2021-02-25T12:41:45Z")
I tried to use postman to post over 10 million lines of data into app search, but it returned i/o timeout. Think it's too large to digest in postman, how can I import the data into app search from a json file(3gb) --- ## [In Vega trying to show the number in percentage form](https://discuss.elastic.co/t/in-vega-trying-to-show-the-number-in-percentage-form/265476)
**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 12:20pm UTC](https://discuss.elastic.co/t/in-vega-trying-to-show-the-number-in-percentage-form/265476 "2021-02-25T12:20:13Z")
I am new to Kibana and trying to create a Vega visualization for displaying percentage of effort. The data (result of an analysis) we need to display is in percentage. As text in Vega are based on position. When results … --- ## [Date Math Support in index names while defining SLM policy](https://discuss.elastic.co/t/date-math-support-in-index-names-while-defining-slm-policy/263613)
**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 12:04pm UTC](https://discuss.elastic.co/t/date-math-support-in-index-names-while-defining-slm-policy/263613 "2021-02-25T12:04:14Z")
Hi, I want to backup only last months index using SLM policy and trying to use date Math while configuring the indices in SLM policy. Unfortunately, it doesn't work and can't find the index. However the same date math p… --- ## [KIBANA: xpack.spaces.enabled: false](https://discuss.elastic.co/t/kibana-xpack-spaces-enabled-false/265466)
**Author:** [@MaximK](https://discuss.elastic.co/u/MaximK)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 11:32am UTC](https://discuss.elastic.co/t/kibana-xpack-spaces-enabled-false/265466 "2021-02-25T11:32:08Z")
Hi Team, Could you please let me know if set xpack.spaces.enabled: false i dont have in kibana UI: logs\\metric. Can I use features such as Logs UI , Metric ,... without xpack.spaces.enabled: true ? or spaces is requ… --- ## [Export Emojis and Special Characters in CSV Reports](https://discuss.elastic.co/t/export-emojis-and-special-characters-in-csv-reports/265425)
**Author:** [@zah](https://discuss.elastic.co/u/zah)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 10:45am UTC](https://discuss.elastic.co/t/export-emojis-and-special-characters-in-csv-reports/265425 "2021-02-25T10:45:38Z")
Is there a way to export special characters (eg accented letters) and emojis from a Kibana table to CSV format? Whenever I export a data table with special characters and emojis in the text as a CSV report, the csv rende… --- ## [Inner\_hits segment omitted while querying with elasticsearch-hadoop](https://discuss.elastic.co/t/inner-hits-segment-omitted-while-querying-with-elasticsearch-hadoop/265464)
**Author:** [@siddharthsourabh](https://discuss.elastic.co/u/siddharthsourabh)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 10:35am UTC](https://discuss.elastic.co/t/inner-hits-segment-omitted-while-querying-with-elasticsearch-hadoop/265464 "2021-02-25T10:35:00Z")
A query with inner\_hits is only returning the \_source segment from within all the hits, and the inner\_hits are being ignored. The ScrollReader only has logic to extract \_source & id fields, see here - https://github.com/… --- ## [Rollup bugs on 7.11.0 in kibana](https://discuss.elastic.co/t/rollup-bugs-on-7-11-0-in-kibana/264986)
**Author:** [@Jeremy\_Gachet](https://discuss.elastic.co/u/Jeremy_Gachet)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 10:22am UTC](https://discuss.elastic.co/t/rollup-bugs-on-7-11-0-in-kibana/264986 "2021-02-25T10:22:25Z")
Hello, I upgraded on the 7.11.0 on the elastic cloud this week. Since then, I got new issues with my rollups. At first the option to create an index pattern on rollups index disapeared. Before I got this button : N… --- ## [Agent can't sent data to host](https://discuss.elastic.co/t/agent-cant-sent-data-to-host/264393)
**Author:** [@Wan\_IndyKz](https://discuss.elastic.co/u/Wan_IndyKz)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 10:15am UTC](https://discuss.elastic.co/t/agent-cant-sent-data-to-host/264393 "2021-02-25T10:15:16Z")
Agent can't sent data to host Behind Agent config "Default config" haven't "rev. xx" and status swap to offline Error Message Application: endpoint-security--7:9 3 \[abe34abd -8a88-4f6e-942c-87 442addd7 aa\]: State c… --- ## [Unexpected Shingle Behaviour](https://discuss.elastic.co/t/unexpected-shingle-behaviour/265461)
**Author:** [@rishabhm12](https://discuss.elastic.co/u/rishabhm12)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 9:48am UTC](https://discuss.elastic.co/t/unexpected-shingle-behaviour/265461 "2021-02-25T09:48:17Z")
Hey, I have a field locality in my index having 'ashok vihar phase 2' as one of the document. The corresponding setting is {"settings": { "analysis": { "analyzer": { "custom\_analyzer": … --- ## [How to query geo data from Elastic Maps Service](https://discuss.elastic.co/t/how-to-query-geo-data-from-elastic-maps-service/265334)
**Author:** [@Zhifei](https://discuss.elastic.co/u/Zhifei)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 10:03am UTC](https://discuss.elastic.co/t/how-to-query-geo-data-from-elastic-maps-service/265334 "2021-02-25T10:03:32Z")
Hi, I found Elastic recently introduced a new brilliant feature called Elastic Maps Service, and I have tried to create Maps with it by adding Vector Layers. I wonder can I query the GeoJSON data of each of the Vector L… --- ## [Preserve @timestamp Field for Custom Filebeat JSON logs](https://discuss.elastic.co/t/preserve-timestamp-field-for-custom-filebeat-json-logs/264495)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:54am UTC](https://discuss.elastic.co/t/preserve-timestamp-field-for-custom-filebeat-json-logs/264495 "2021-02-25T09:54:39Z")
I've deployed agents across two machines that are ingesting custom log data stored in json files. However, the @timestamp field present in the log files are not getting preserved. For example, here's a json log generate… --- ## [Kibana Fleet Agents upgrade issues](https://discuss.elastic.co/t/kibana-fleet-agents-upgrade-issues/264727)
**Author:** [@S3l3ct3d](https://discuss.elastic.co/u/S3l3ct3d)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:51am UTC](https://discuss.elastic.co/t/kibana-fleet-agents-upgrade-issues/264727 "2021-02-25T09:51:21Z")
Good morning, I am currently testing out "Fleet" and I really like it so far, but now that version 7.11 has come out I am seeing all these issues. My main concern on this one is the upgrade. I am seeing the following i… --- ## [Dynamic data type for one field](https://discuss.elastic.co/t/dynamic-data-type-for-one-field/264844)
**Author:** [@tutpaw](https://discuss.elastic.co/u/tutpaw)\ **Replies:** 4\ **Last updated:** [February 25, 2021, 9:39am UTC](https://discuss.elastic.co/t/dynamic-data-type-for-one-field/264844 "2021-02-25T09:39:27Z")
Hi, I don't know, if this topic has been already discussed, but I didn't find an appropriate one - hence, I'm creating a new one. I've got an nginx log whose partial representation is as follows. First, the record stati… [Previous page](https://discuss.elastic.co/latest.md?page=1814) [Next page](https://discuss.elastic.co/latest.md?page=1816)