# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1883

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1884

---

## [Calculate the percentage based on two calculations - one for future data and another for past data and finally create a bar chart for every team](https://discuss.elastic.co/t/calculate-the-percentage-based-on-two-calculations-one-for-future-data-and-another-for-past-data-and-finally-create-a-bar-chart-for-every-team/261429)

<div class="topic-metadata">

**Author:** [@preeti1211](https://discuss.elastic.co/u/preeti1211)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 7:18pm UTC](https://discuss.elastic.co/t/calculate-the-percentage-based-on-two-calculations-one-for-future-data-and-another-for-past-data-and-finally-create-a-bar-chart-for-every-team/261429 "2021-01-20T19:18:03Z")

</div>

Calculation - 95/120 (First value being the number of PBIs approved for future 3 sprints and second value being the number of PBIs completed in the past 3 sprints). If the divided value is =\<33% the bar chart should be …

---

## [\[Logstash\] Can't update document for status (entity-centric)](https://discuss.elastic.co/t/logstash-cant-update-document-for-status-entity-centric/261692)

<div class="topic-metadata">

**Author:** [@Joao\_Palma](https://discuss.elastic.co/u/Joao_Palma)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 7:17pm UTC](https://discuss.elastic.co/t/logstash-cant-update-document-for-status-entity-centric/261692 "2021-01-20T19:17:26Z")

</div>

Hello, I have this logs: {"process": "123", "status:red", "@timestamp":"2020-12-31T16:14:13.886+0000" } {"process": "122", "status:red", "@timestamp":"2020-12-31T16:14:14.886+0000" } {"process": "123", "status:green", …

---

## [Restrict the kibana user for one machine only](https://discuss.elastic.co/t/restrict-the-kibana-user-for-one-machine-only/261568)

<div class="topic-metadata">

**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 6:48pm UTC](https://discuss.elastic.co/t/restrict-the-kibana-user-for-one-machine-only/261568 "2021-01-20T18:48:23Z")

</div>

HI , My basic requirement here is to restrict any Kibana user for one machine only ,so that same user can not login from different machine at the same time. is there any setting needs to modify in kibana.yml file or an…

---

## [Generate a pdf report from kibana](https://discuss.elastic.co/t/generate-a-pdf-report-from-kibana/261654)

<div class="topic-metadata">

**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 6:47pm UTC](https://discuss.elastic.co/t/generate-a-pdf-report-from-kibana/261654 "2021-01-20T18:47:24Z")

</div>

Hello Team, when i want to genarate a pdf report from Kibana ,I have this issue message: {"type":"error","@timestamp":"2021-01-18T14:43:54Z","tags":\["reporting","printable\_pdf","execute","kk2oi8v30bb44cba349ldzfe","err…

---

## [I need guy who can install and configure elasticsearch](https://discuss.elastic.co/t/i-need-guy-who-can-install-and-configure-elasticsearch/261358)

<div class="topic-metadata">

**Author:** [@avagyanlevon](https://discuss.elastic.co/u/avagyanlevon)\
**Replies:** 22\
**Last updated:** [January 20, 2021, 6:44pm UTC](https://discuss.elastic.co/t/i-need-guy-who-can-install-and-configure-elasticsearch/261358 "2021-01-20T18:44:31Z")

</div>

I need guy who can install and configure elasticsearch. I have problem with elasticsearch with my website, it was stop works after restarting server, now I need expert who can install and configuration it. Sorry for my E…

---

## [Unable to limit FileBeat fields](https://discuss.elastic.co/t/unable-to-limit-filebeat-fields/261405)

<div class="topic-metadata">

**Author:** [@ChrisaT](https://discuss.elastic.co/u/ChrisaT)\
**Replies:** 2\
**Last updated:** [January 20, 2021, 5:50pm UTC](https://discuss.elastic.co/t/unable-to-limit-filebeat-fields/261405 "2021-01-20T17:50:27Z")

</div>

Good morning, a housekeeping question We are processing data from a number of API's using Filebeat. The fields we define are working fine but what we have found is that field for all modules are also being added. The in…

---

## [How to configure kibana docker to redirect kibana logs to syslog](https://discuss.elastic.co/t/how-to-configure-kibana-docker-to-redirect-kibana-logs-to-syslog/260499)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 3\
**Last updated:** [January 20, 2021, 4:11pm UTC](https://discuss.elastic.co/t/how-to-configure-kibana-docker-to-redirect-kibana-logs-to-syslog/260499 "2021-01-20T16:11:16Z")

</div>

Hi, Currently, Kibana generates logs as plain text and outputs them to stdout. For our use-case, we need to reformat kibana logs in a different format, for which we need to send Kibana's container logs to Syslog sidecar…

---

## [What future for Curator?](https://discuss.elastic.co/t/what-future-for-curator/261661)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 1\
**Last updated:** [January 20, 2021, 3:56pm UTC](https://discuss.elastic.co/t/what-future-for-curator/261661 "2021-01-20T15:56:28Z")

</div>

The most recent release notes for Curator contain this: No, Curator isn't going away. But as you can tell, it's not as actively developed as it once was. I am gratified to find there are still users who make it a par…

---

## [Security when using Selenium RemoteWebdriver with Kibana](https://discuss.elastic.co/t/security-when-using-selenium-remotewebdriver-with-kibana/260418)

<div class="topic-metadata">

**Author:** [@NicklausKew](https://discuss.elastic.co/u/NicklausKew)\
**Replies:** 3\
**Last updated:** [January 20, 2021, 3:29pm UTC](https://discuss.elastic.co/t/security-when-using-selenium-remotewebdriver-with-kibana/260418 "2021-01-20T15:29:38Z")

</div>

Morning all, I am having some issues with how selenium is interacting with Kibana. For the body of work completed I was running on version 7.6.1 of Kibana with all of my automated tests passing on both the Selenium Chro…

---

## [Add users in Kibana with basic license using 7.10.1](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535)

<div class="topic-metadata">

**Author:** [@Richie](https://discuss.elastic.co/u/Richie)\
**Replies:** 15\
**Last updated:** [January 20, 2021, 3:24pm UTC](https://discuss.elastic.co/t/add-users-in-kibana-with-basic-license-using-7-10-1/261535 "2021-01-20T15:24:49Z")

</div>

Hi, I recently upgraded my ELK stack from 6.6 to 7.10. I wanted to use the role management feature to allow users to only view dashboards specific to them which would be secured via authentication. I tried this function…

---

## [Question about doing a rolling upgrade from 6.8.6 to 7.9.3](https://discuss.elastic.co/t/question-about-doing-a-rolling-upgrade-from-6-8-6-to-7-9-3/261659)

<div class="topic-metadata">

**Author:** [@johnbonanchovy](https://discuss.elastic.co/u/johnbonanchovy)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 3:24pm UTC](https://discuss.elastic.co/t/question-about-doing-a-rolling-upgrade-from-6-8-6-to-7-9-3/261659 "2021-01-20T15:24:22Z")

</div>

Hi, We are preparing to do a rolling upgrade on a fairly large cluster. As part of that, we have done the rolling upgrade on a much smaller development cluster. We left it half upgraded to see how the services will beh…

---

## [Create custom fields for each host in heartbeat.yml](https://discuss.elastic.co/t/create-custom-fields-for-each-host-in-heartbeat-yml/261410)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 3\
**Last updated:** [January 20, 2021, 3:40am UTC](https://discuss.elastic.co/t/create-custom-fields-for-each-host-in-heartbeat-yml/261410 "2021-01-20T03:40:49Z")

</div>

I am trying to combine my heartbeat visualization with APM visualization in same dashboards. Since the field names are not similar, the filter wont work correctly. So I was thinking of creating similar field names and la…

---

## [Spring Data Elastic - FIxing Client Version issue](https://discuss.elastic.co/t/spring-data-elastic-fixing-client-version-issue/261524)

<div class="topic-metadata">

**Author:** [@hcaupert](https://discuss.elastic.co/u/hcaupert)\
**Replies:** 3\
**Last updated:** [January 20, 2021, 2:44pm UTC](https://discuss.elastic.co/t/spring-data-elastic-fixing-client-version-issue/261524 "2021-01-20T14:44:51Z")

</div>

Hi, I am using a 7.3.1 cluster. Using Spring Data Elastic in Spring Boot 2.3 brings a client in version 7.6.2. As seen on this forum I add the version to match my cluster in my pom.xml : \<properties\> \<elasticsearch.v…

---

## [Event.action field for cloudTrail logs not being assigned event name when pulling cloud-trail logs using aws module](https://discuss.elastic.co/t/event-action-field-for-cloudtrail-logs-not-being-assigned-event-name-when-pulling-cloud-trail-logs-using-aws-module/261621)

<div class="topic-metadata">

**Author:** [@kbirhan](https://discuss.elastic.co/u/kbirhan)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 8:16am UTC](https://discuss.elastic.co/t/event-action-field-for-cloudtrail-logs-not-being-assigned-event-name-when-pulling-cloud-trail-logs-using-aws-module/261621 "2021-01-20T08:16:35Z")

</div>

Hi I was looking into my cloudtrail logs i am pulling from s3 bucket, and it seems aws module of filebeat seems to give a generic value ("mangement") for the event.action field. As shown in the image,all event.action fi…

---

## [How to reduce index mapping fields while keeping data continuity](https://discuss.elastic.co/t/how-to-reduce-index-mapping-fields-while-keeping-data-continuity/260376)

<div class="topic-metadata">

**Author:** [@NadavKal](https://discuss.elastic.co/u/NadavKal)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 1:28pm UTC](https://discuss.elastic.co/t/how-to-reduce-index-mapping-fields-while-keeping-data-continuity/260376 "2021-01-20T13:28:17Z")

</div>

my issue is like this. I am trying to switch a dynamic mapping to static without impacting the users. We have many text and keyword fields which are redundant. the trick is... if field A has both A (text) and A.keywor…

---

## [Elastic Search Query help](https://discuss.elastic.co/t/elastic-search-query-help/261656)

<div class="topic-metadata">

**Author:** [@Pazhanikanthan](https://discuss.elastic.co/u/Pazhanikanthan)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 1:26pm UTC](https://discuss.elastic.co/t/elastic-search-query-help/261656 "2021-01-20T13:26:02Z")

</div>

Hello experts I have an index with accepts docs in JSON format. I have a specific JSON structure. { "title": "ABC", "admissions": \[ { "location": "Sydney", "year": 2020 }, { "location": "Melbourne", "year": 20…

---

## [Can filebeat be can initialed using initcontiner to forward logs](https://discuss.elastic.co/t/can-filebeat-be-can-initialed-using-initcontiner-to-forward-logs/261649)

<div class="topic-metadata">

**Author:** [@srini54](https://discuss.elastic.co/u/srini54)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 12:54pm UTC](https://discuss.elastic.co/t/can-filebeat-be-can-initialed-using-initcontiner-to-forward-logs/261649 "2021-01-20T12:54:48Z")

</div>

We are exloring options to trigger the filebeat process as part of an initContainer to push the tomcat logs. Is it possible to initialize scirpt to copy tomcat log to another volume and push it to logstash/elastic. Plea…

---

## [Remove empty buckets from the query response](https://discuss.elastic.co/t/remove-empty-buckets-from-the-query-response/261648)

<div class="topic-metadata">

**Author:** [@wedkarz014](https://discuss.elastic.co/u/wedkarz014)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 12:49pm UTC](https://discuss.elastic.co/t/remove-empty-buckets-from-the-query-response/261648 "2021-01-20T12:49:40Z")

</div>

Hi, do you have any idea how i can remove empty buckets from my response? My query looks like that: GET kubernetes-prod-metrics/\_search { "\_source": \[ "@timestamp", "kubernetes.namespace", "kubernetes.con…

---

## [Sane design thougts?](https://discuss.elastic.co/t/sane-design-thougts/261502)

<div class="topic-metadata">

**Author:** [@Andreas\_Falk](https://discuss.elastic.co/u/Andreas_Falk)\
**Replies:** 4\
**Last updated:** [January 20, 2021, 12:41pm UTC](https://discuss.elastic.co/t/sane-design-thougts/261502 "2021-01-20T12:41:56Z")

</div>

Hi, This is a x-post from Slack, but I think that it is perhaps easier to have a discussion here. :slight\_smile: We are setting up a new logcluster that should handle .. logs.. :slight\_smile: from our infrastructure mo…

---

## [Dissector mapping, pattern not found in Logstash](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261210)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 0\
**Last updated:** [January 15, 2021, 5:50am UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261210 "2021-01-15T05:50:25Z")

</div>

Hi Team, After a long time I am getting below error in my logstash config. \["beats\_input\_codec\_plain\_applied", "\_dissectfailure"\], "input"=\>{"type"=\>"log"}}} \[2021-01-15T04:02:07,055\]\[WARN \]\[org.logstash.dissect.Disse…

---

## [Dissector mapping, pattern not found in Logstash](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261444)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 7\
**Last updated:** [January 20, 2021, 12:29pm UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-in-logstash/261444 "2021-01-20T12:29:32Z")

</div>

Hi Team, I am getting Dissector mapping, pattern not found in Logstash while start logstash.

---

## [Fleet agent tls settings](https://discuss.elastic.co/t/fleet-agent-tls-settings/261191)

<div class="topic-metadata">

**Author:** [@gregorys](https://discuss.elastic.co/u/gregorys)\
**Replies:** 8\
**Last updated:** [January 20, 2021, 12:09pm UTC](https://discuss.elastic.co/t/fleet-agent-tls-settings/261191 "2021-01-20T12:09:10Z")

</div>

Hi, I installed a fleet agent, its state in Kibana is online and its receiving logs over the UDP port configured in an integration. However I don't see a data stream, looks like it's not sending these logs to elasticse…

---

## [How to set elasticsearch jvm heap size?](https://discuss.elastic.co/t/how-to-set-elasticsearch-jvm-heap-size/261611)

<div class="topic-metadata">

**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\
**Replies:** 10\
**Last updated:** [January 20, 2021, 11:54am UTC](https://discuss.elastic.co/t/how-to-set-elasticsearch-jvm-heap-size/261611 "2021-01-20T11:54:57Z")

</div>

If I have a 16C64G machine and install CentOS7.6 on it, There is 62gb available memory. total used free shared buff/cache available Mem: 62 34 0 …

---

## [Elastic Agent service stops after launching but doesn't throw any error in command line](https://discuss.elastic.co/t/elastic-agent-service-stops-after-launching-but-doesnt-throw-any-error-in-command-line/260547)

<div class="topic-metadata">

**Author:** [@icious](https://discuss.elastic.co/u/icious)\
**Replies:** 9\
**Last updated:** [January 20, 2021, 11:48am UTC](https://discuss.elastic.co/t/elastic-agent-service-stops-after-launching-but-doesnt-throw-any-error-in-command-line/260547 "2021-01-20T11:48:27Z")

</div>

Hi, I set up a Fleet environment and tested multiple integrations of Elastic Agent on Linux and Windows machines without any problem, but there is a specific Windows machine where it does not work, and I couldn't find t…

---

## [Why elasticsearch index log size larger than the actual size on the server?](https://discuss.elastic.co/t/why-elasticsearch-index-log-size-larger-than-the-actual-size-on-the-server/261636)

<div class="topic-metadata">

**Author:** [@xax](https://discuss.elastic.co/u/xax)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 11:29am UTC](https://discuss.elastic.co/t/why-elasticsearch-index-log-size-larger-than-the-actual-size-on-the-server/261636 "2021-01-20T11:29:18Z")

</div>

If you look picture no.1 my server have 64G and used 39G. Container elasticsearch and logstash use like 2.2G, docker image 3.4G = 5.6 G. Then the volume use like 30.7 G. Meanwhile, if i check my index size at index …

---

## [How to take filter and selected timeframe from Visualize to Logs view?](https://discuss.elastic.co/t/how-to-take-filter-and-selected-timeframe-from-visualize-to-logs-view/259460)

<div class="topic-metadata">

**Author:** [@bluepuma77](https://discuss.elastic.co/u/bluepuma77)\
**Replies:** 6\
**Last updated:** [January 20, 2021, 11:22am UTC](https://discuss.elastic.co/t/how-to-take-filter-and-selected-timeframe-from-visualize-to-logs-view/259460 "2021-01-20T11:22:22Z")

</div>

Hi all, I have identified an anomaly (strange user behavior) in my logs with Visualize in Kibana. How can I now switch to log view to see the same matching log entries and details? Take the filter and selected timefra…

---

## [Endpoint Agent two host showing in logs-\* per host](https://discuss.elastic.co/t/endpoint-agent-two-host-showing-in-logs-per-host/261551)

<div class="topic-metadata">

**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\
**Replies:** 2\
**Last updated:** [January 20, 2021, 10:58am UTC](https://discuss.elastic.co/t/endpoint-agent-two-host-showing-in-logs-per-host/261551 "2021-01-20T10:58:51Z")

</div>

Re-created with elastic-agent tag for better visibility. Hi, I have recently been rolling out the Endpoint agent to some host for testing. Within the fleet agents tab, there is a single entry for each host in the form…

---

## [FiltersAggregation does not use query filter and/or parent aggregation filter](https://discuss.elastic.co/t/filtersaggregation-does-not-use-query-filter-and-or-parent-aggregation-filter/261629)

<div class="topic-metadata">

**Author:** [@panthony](https://discuss.elastic.co/u/panthony)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 10:32am UTC](https://discuss.elastic.co/t/filtersaggregation-does-not-use-query-filter-and-or-parent-aggregation-filter/261629 "2021-01-20T10:32:26Z")

</div>

Hi, I'm not sure if the issue was already reported but I couldn't find anything. It appears that the FiltersAggregation does not leverage the parent's aggregation filter and/or the query filter. Using: PUT /logs/\_bul…

---

## [Error parsing json](https://discuss.elastic.co/t/error-parsing-json/261618)

<div class="topic-metadata">

**Author:** [@shoaib\_akram](https://discuss.elastic.co/u/shoaib_akram)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 7:49am UTC](https://discuss.elastic.co/t/error-parsing-json/261618 "2021-01-20T07:49:03Z")

</div>

Hi i am getting the following errors while ingesting urls into elasticsearch through logstash. Data is ingesting properly but i am getting these errors in log files please help me thanks, Error parsing json {:source=\>"…

---

## [Looks like you either have a bad certificate, an invalid key or your private key was not in PKCS8 format in logstash](https://discuss.elastic.co/t/looks-like-you-either-have-a-bad-certificate-an-invalid-key-or-your-private-key-was-not-in-pkcs8-format-in-logstash/261627)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 0\
**Last updated:** [January 20, 2021, 10:12am UTC](https://discuss.elastic.co/t/looks-like-you-either-have-a-bad-certificate-an-invalid-key-or-your-private-key-was-not-in-pkcs8-format-in-logstash/261627 "2021-01-20T10:12:37Z")

</div>

Hi Team, Im using below configuration in logstash beats and im getting below error, Could anyone help to resolve this issue, input { beats { port =\> 5044 host =\> server" …

[Previous page](https://discuss.elastic.co/latest.md?page=1882)

[Next page](https://discuss.elastic.co/latest.md?page=1884)
