# Latest **URL:** https://discuss.elastic.co/latest.md?page=1874 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1875 --- ## [Agents are running properly but no data in Data Stream](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111)
**Author:** [@nomoneynoproblems](https://discuss.elastic.co/u/nomoneynoproblems)\ **Replies:** 16\ **Last updated:** [January 26, 2021, 1:35pm UTC](https://discuss.elastic.co/t/agents-are-running-properly-but-no-data-in-data-stream/260111 "2021-01-26T13:35:23Z")
Using Elastic Cloud I'm not seeing any data in the data stream section even though a test "Rails Prod" server is showing "Online". --- ## [Kibana Visualization: How to display long legend string?](https://discuss.elastic.co/t/kibana-visualization-how-to-display-long-legend-string/262230)
**Author:** [@AmS](https://discuss.elastic.co/u/AmS)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 1:23pm UTC](https://discuss.elastic.co/t/kibana-visualization-how-to-display-long-legend-string/262230 "2021-01-26T13:23:04Z")
Hello , I am using Kibana 7.10. I would like to display a long string in the legend in my visualization . I have always a truncated part of the string like "Long string to..." rather then "long string to display" Are… --- ## [Logstah tcp input plugin](https://discuss.elastic.co/t/logstah-tcp-input-plugin/262116)
**Author:** [@gongon](https://discuss.elastic.co/u/gongon)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 1:18pm UTC](https://discuss.elastic.co/t/logstah-tcp-input-plugin/262116 "2021-01-26T13:18:20Z")
Hello, When I use the tcp input plugin in mode server, it works. But it does not work in mode client.It can connect to the server,but does not receive data.It's about a webserver : I try to extract data from a database … --- ## [APM Agent Settings Kibana Not Applying](https://discuss.elastic.co/t/apm-agent-settings-kibana-not-applying/261841)
**Author:** [@willis](https://discuss.elastic.co/u/willis)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 2:27pm UTC](https://discuss.elastic.co/t/apm-agent-settings-kibana-not-applying/261841 "2021-01-25T14:27:53Z")
Kibana version: 7.9.2 Elasticsearch version: 7.9.2 APM Server version: 7.9.2 APM Agent language and version: Ruby, 3.13.0 \*\* Problem \*\* I am looking to use the Kibana APM Agent remote configuration to manage a R… --- ## [Logstash pipeline service failed with X-Pack](https://discuss.elastic.co/t/logstash-pipeline-service-failed-with-x-pack/262119)
**Author:** [@esijati](https://discuss.elastic.co/u/esijati)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 12:58pm UTC](https://discuss.elastic.co/t/logstash-pipeline-service-failed-with-x-pack/262119 "2021-01-26T12:58:29Z")
Hi, I have created a logstash service (tarball) and enabled the x-pack management. But getting the below error while running the service. \[ERROR\]\[logstash.config.sourceloader\] Could not fetch all the sources {:exceptio… --- ## [Filebeat multiline.pattern set up](https://discuss.elastic.co/t/filebeat-multiline-pattern-set-up/262229)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 12:45pm UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-set-up/262229 "2021-01-26T12:45:18Z")
I have to ingest a text file with multilines running filebeat 7.1.1. But the format is different from anything I've had so far. Here below is an example. Each line starts with timestamp+loglevel+"\[stderr\]"+ "(componen… --- ## [S3 output event per file](https://discuss.elastic.co/t/s3-output-event-per-file/262037)
**Author:** [@Sunflower](https://discuss.elastic.co/u/Sunflower)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 12:23pm UTC](https://discuss.elastic.co/t/s3-output-event-per-file/262037 "2021-01-26T12:23:56Z")
Hi, I'm using the S3 output plugin and I noticed that I'm receiving files that include multiple events per file. How can I create a file for each event? I saw the option to limit the file size but I'm not sure it is g… --- ## [ES 6.8.0 on Ubuntu 16.04 starts properly but Systemd times out](https://discuss.elastic.co/t/es-6-8-0-on-ubuntu-16-04-starts-properly-but-systemd-times-out/262155)
**Author:** [@jtbis](https://discuss.elastic.co/u/jtbis)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 12:15pm UTC](https://discuss.elastic.co/t/es-6-8-0-on-ubuntu-16-04-starts-properly-but-systemd-times-out/262155 "2021-01-26T12:15:30Z")
Hello, I have a server where ES is starting properly, but the service is always showing activating. With TimeoutStartSec=infinity in the service file, everything functions as normal except for the service always stayin… --- ## [Can I use "script" to truncate a field so it's 950 characters or less in a watcher?](https://discuss.elastic.co/t/can-i-use-script-to-truncate-a-field-so-its-950-characters-or-less-in-a-watcher/261277)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 12:06pm UTC](https://discuss.elastic.co/t/can-i-use-script-to-truncate-a-field-so-its-950-characters-or-less-in-a-watcher/261277 "2021-01-26T12:06:38Z")
So, we use PagerDuty as an action for our alerts. Unfortunately, with this action you can only set description so we must try to plug as much information into the field before we fire off the alert. Sometimes this means… --- ## [Create a view mysql with logstash](https://discuss.elastic.co/t/create-a-view-mysql-with-logstash/262223)
**Author:** [@MatteoM](https://discuss.elastic.co/u/MatteoM)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 11:01am UTC](https://discuss.elastic.co/t/create-a-view-mysql-with-logstash/262223 "2021-01-26T11:01:02Z")
Hi there!, I was wondering if exists a way to create a view mysql through by the statement in the pipeline input jdbc. I need to create some views because these are involved in a query that I need it to save in a index… --- ## [I have problem method path: POST](https://discuss.elastic.co/t/i-have-problem-method-path-post/262222)
**Author:** [@wanindyz](https://discuss.elastic.co/u/wanindyz)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 10:58am UTC](https://discuss.elastic.co/t/i-have-problem-method-path-post/262222 "2021-01-26T10:58:39Z")
DEBUG kibana/client.go:170 Request method: POST, path: /api/ingest\_manager/fleet/agents/enroll and no data hosts show this page --- ## [On startup run filebeat restart upon fail](https://discuss.elastic.co/t/on-startup-run-filebeat-restart-upon-fail/262204)
**Author:** [@Peter\_Boos](https://discuss.elastic.co/u/Peter_Boos)\ **Replies:** 6\ **Last updated:** [January 26, 2021, 10:51am UTC](https://discuss.elastic.co/t/on-startup-run-filebeat-restart-upon-fail/262204 "2021-01-26T10:51:21Z")
On a test machine with Debian 10 with a desktop, filebeat did not startup after a hard VM reset. I would like to be sure that on Debian systems with a desktop and headless systems this service restart it self upon failu… --- ## [Timezone with negative (minus) value return more bucket before gte range](https://discuss.elastic.co/t/timezone-with-negative-minus-value-return-more-bucket-before-gte-range/262133)
**Author:** [@anas-hossam](https://discuss.elastic.co/u/anas-hossam)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 4:13pm UTC](https://discuss.elastic.co/t/timezone-with-negative-minus-value-return-more-bucket-before-gte-range/262133 "2021-01-25T16:13:00Z")
i am trying to get docs matching query from elastic v1.5 { "range": { "create\_time": { "gte": "2020-07-20T00:00:00", "lte": "2020-07-30T23:59:59", "time\_zone": "-2:00" … --- ## [What regex to use to exclude 30s status messages](https://discuss.elastic.co/t/what-regex-to-use-to-exclude-30s-status-messages/262219)
**Author:** [@Peter\_Boos](https://discuss.elastic.co/u/Peter_Boos)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 10:46am UTC](https://discuss.elastic.co/t/what-regex-to-use-to-exclude-30s-status-messages/262219 "2021-01-26T10:46:33Z")
What should be the working regex to exclude the 30s filebeat status updates The 30s status starts with, (but are quite a bit longer) : 2021-01-26T05:29:10.562-0500#011INFO#011\[monitoring\]#011log/log.go:145#011Non-zero… --- ## [Gestion des user et des roles](https://discuss.elastic.co/t/gestion-des-user-et-des-roles/262208)
**Author:** [@Corben\_Dallas](https://discuss.elastic.co/u/Corben_Dallas)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 9:55am UTC](https://discuss.elastic.co/t/gestion-des-user-et-des-roles/262208 "2021-01-26T09:55:51Z")
Bonjour, je suis en license basic, j'utilise le mécanisme des security api pour gérer les utilisateur et leur role avec les privilèges, ca marche très bien Mais il y a un truc que je n'arrive pas à tester Dans la déf… --- ## [Can I define the color of each value in Kibana visualization by assigning it specific RGB?](https://discuss.elastic.co/t/can-i-define-the-color-of-each-value-in-kibana-visualization-by-assigning-it-specific-rgb/261401)
**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\ **Replies:** 4\ **Last updated:** [January 26, 2021, 9:44am UTC](https://discuss.elastic.co/t/can-i-define-the-color-of-each-value-in-kibana-visualization-by-assigning-it-specific-rgb/261401 "2021-01-26T09:44:34Z")
hi, I have a data set which includes x and y position of each measurement, and its corresponding RGB. is there a way to Visualize it with Kibana? This is actually a heat map where each point has x and y values, but th… --- ## [Can I filter an array in elastic?](https://discuss.elastic.co/t/can-i-filter-an-array-in-elastic/262198)
**Author:** [@ShreyaBhat](https://discuss.elastic.co/u/ShreyaBhat)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 8:33am UTC](https://discuss.elastic.co/t/can-i-filter-an-array-in-elastic/262198 "2021-01-26T08:33:41Z")
is there a way to filter an array in elastic ? I have inserted the following data into elastic "\_source":{ "FileName": "fileName.log" "logData": \[ { "LineNumber": 1, … --- ## [Filtering out unwanted infobeat hartbeat 30s](https://discuss.elastic.co/t/filtering-out-unwanted-infobeat-hartbeat-30s/262202)
**Author:** [@Peter\_Boos](https://discuss.elastic.co/u/Peter_Boos)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 8:11am UTC](https://discuss.elastic.co/t/filtering-out-unwanted-infobeat-hartbeat-30s/262202 "2021-01-26T08:11:09Z")
I'd like to remove the log that filebeat generates every 30s, It starts with : 021-01-18T08:29:59.656-0500#011INFO#011\[monitoring\]#011log/log.go:145#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"b… --- ## [Sort by every element of array](https://discuss.elastic.co/t/sort-by-every-element-of-array/262201)
**Author:** [@Dmitrii](https://discuss.elastic.co/u/Dmitrii)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 8:02am UTC](https://discuss.elastic.co/t/sort-by-every-element-of-array/262201 "2021-01-26T08:02:50Z")
Hello, I have some problems with sorting by element of array. If I have for example 2 documents like: { "\_id" : "1", "\_source" : { "users" : \[{"name" : "John"},{"name" : "Paul"}\] } } { "\_id" : "2", "\_so… --- ## [How customizable Is Tooltip when tooltips=false in the configuration?](https://discuss.elastic.co/t/how-customizable-is-tooltip-when-tooltips-false-in-the-configuration/259563)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 7:41am UTC](https://discuss.elastic.co/t/how-customizable-is-tooltip-when-tooltips-false-in-the-configuration/259563 "2021-01-26T07:41:27Z")
I am using Elasticsearch and Kibana v.7.6.1 and Vega v.4.3.0. I added tooltips:false in configuration of Vega to show full length of text in tooltips. Unless I add this code, the text does not show up in full length if … --- ## [Docker services stop working when loosing connection from elastic-logging-plugin to ElasticDB](https://discuss.elastic.co/t/docker-services-stop-working-when-loosing-connection-from-elastic-logging-plugin-to-elasticdb/262196)
**Author:** [@LeeAn](https://discuss.elastic.co/u/LeeAn)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 6:38am UTC](https://discuss.elastic.co/t/docker-services-stop-working-when-loosing-connection-from-elastic-logging-plugin-to-elasticdb/262196 "2021-01-26T06:38:03Z")
Hi, Im using Elastic-logging-plugin to collect logs from my docker containers and send them to Kibana but sometime the connection to ElasticDB got lost for reasons like internal error from ElasticDB server or network p… --- ## [Pagination with HighLevelRestClient](https://discuss.elastic.co/t/pagination-with-highlevelrestclient/262146)
**Author:** [@filmac79](https://discuss.elastic.co/u/filmac79)\ **Replies:** 8\ **Last updated:** [January 26, 2021, 6:18am UTC](https://discuss.elastic.co/t/pagination-with-highlevelrestclient/262146 "2021-01-26T06:18:47Z")
Hello, I would like to use HighLevelRestClient to fetch all results matching a given query using pagination. Now, checking on the rest api I can found that scroll api have been replaced by search\_after. So I checked th… --- ## [Kibana service fails regularly and following errors are displayed at startup](https://discuss.elastic.co/t/kibana-service-fails-regularly-and-following-errors-are-displayed-at-startup/262172)
**Author:** [@Daniel\_Haverporth](https://discuss.elastic.co/u/Daniel_Haverporth)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 5:28am UTC](https://discuss.elastic.co/t/kibana-service-fails-regularly-and-following-errors-are-displayed-at-startup/262172 "2021-01-26T05:28:50Z")
Hello: The Kibana service fails regularly and when I go to restart Kibana the following errors are displayed in the log: log \[21:15:09.874\] \[error\]\[data\]\[elasticsearch\] \[version\_conflict\_engine\_exception\]: \[task:Len… --- ## [Kibana field Aliases](https://discuss.elastic.co/t/kibana-field-aliases/261588)
**Author:** [@griffer98](https://discuss.elastic.co/u/griffer98)\ **Replies:** 3\ **Last updated:** [January 26, 2021, 5:10am UTC](https://discuss.elastic.co/t/kibana-field-aliases/261588 "2021-01-26T05:10:36Z")
I have two indices that have a field with the same name. I want to join both into one data table. I know I can change the display name in a table but I wont know which index each one is coming from to name appropriately.… --- ## [Adding config for custom log integration on an agent](https://discuss.elastic.co/t/adding-config-for-custom-log-integration-on-an-agent/262181)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 5\ **Last updated:** [January 26, 2021, 4:55am UTC](https://discuss.elastic.co/t/adding-config-for-custom-log-integration-on-an-agent/262181 "2021-01-26T04:55:08Z")
Hello, I'm trying to index json logs with a Fleet-managed agent using a custom log configuration. I successfully downloaded the agent to my computer and specified a path where the log files live. However, when I genera… --- ## [Issue using searchable snapshots in an ILM policy](https://discuss.elastic.co/t/issue-using-searchable-snapshots-in-an-ilm-policy/262001)
**Author:** [@3266miles](https://discuss.elastic.co/u/3266miles)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 3:33am UTC](https://discuss.elastic.co/t/issue-using-searchable-snapshots-in-an-ilm-policy/262001 "2021-01-26T03:33:40Z")
Taking searchable snapshots as part of an ILM policy for a spin, the indexes seem to be moving through the stages fine until it reaches the cold stage, where it takes the snapshot but then utterly fails to mount it. Run… --- ## [If condition Statement](https://discuss.elastic.co/t/if-condition-statement/262167)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 2\ **Last updated:** [January 26, 2021, 2:53am UTC](https://discuss.elastic.co/t/if-condition-statement/262167 "2021-01-26T02:53:35Z")
Hi All, Could you please tell me what is wrong with the following IF condition if \[ DOCUMENT\_MODEL \] == "10000" { mutate { replace =\> { "DOCUMENT\_MODEL" =\> "INVOICE" } } } Even though the DOCUM… --- ## [How to import Nested JSON?](https://discuss.elastic.co/t/how-to-import-nested-json/262183)
**Author:** [@hourtest](https://discuss.elastic.co/u/hourtest)\ **Replies:** 0\ **Last updated:** [January 26, 2021, 1:33am UTC](https://discuss.elastic.co/t/how-to-import-nested-json/262183 "2021-01-26T01:33:43Z")
Nested JSON like this { "boolean\_key": "--- true\\n", "empty\_string\_translation": "", "key\_with\_description": "Check it out! This key has a description! (At least in some formats)", "key\_with\_line-break": "This … --- ## [Kibana 7.10: how can I pass a custom parameter/header in response.redirect](https://discuss.elastic.co/t/kibana-7-10-how-can-i-pass-a-custom-parameter-header-in-response-redirect/262139)
**Author:** [@Prathibha\_Y](https://discuss.elastic.co/u/Prathibha_Y)\ **Replies:** 1\ **Last updated:** [January 26, 2021, 12:00am UTC](https://discuss.elastic.co/t/kibana-7-10-how-can-i-pass-a-custom-parameter-header-in-response-redirect/262139 "2021-01-26T00:00:45Z")
Hi, I am trying to use redirect method as below, const urlToADashboard = core.http.basePath.prepend(/app/dashboards#/list); response.redirected({ headers: { location: urlToADashboard,authorization:authorizParams } })… --- ## [Global index settings](https://discuss.elastic.co/t/global-index-settings/262176)
**Author:** [@cdalexndr](https://discuss.elastic.co/u/cdalexndr)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 11:07pm UTC](https://discuss.elastic.co/t/global-index-settings/262176 "2021-01-25T23:07:30Z")
I want to apply some global index settings (index.number\_of\_replicas, index.codec) to any new created index. From https://discuss.elastic.co/t/index-settings-in-configuration-file-does-not-take-effect/113120 I understan… [Previous page](https://discuss.elastic.co/latest.md?page=1873) [Next page](https://discuss.elastic.co/latest.md?page=1875)