# Latest **URL:** https://discuss.elastic.co/latest.md?page=1925 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1926 --- ## [Overwrite message field issue in grok match](https://discuss.elastic.co/t/overwrite-message-field-issue-in-grok-match/259300)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 3\ **Last updated:** [December 22, 2020, 2:22pm UTC](https://discuss.elastic.co/t/overwrite-message-field-issue-in-grok-match/259300 "2020-12-22T14:22:03Z")
i want to overwrite message field , but it only overwrites last match i.e. IP and is not overwriting first match i.e. number \`input { stdin{} } filter { grok { match =\> { "message" =\> "%{DATA}(?\(\\d{9,12})|… --- ## [Cannot create map in Kibana because my index is not listed](https://discuss.elastic.co/t/cannot-create-map-in-kibana-because-my-index-is-not-listed/259389)
**Author:** [@Catalin\_Roman](https://discuss.elastic.co/u/Catalin_Roman)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 2:18pm UTC](https://discuss.elastic.co/t/cannot-create-map-in-kibana-because-my-index-is-not-listed/259389 "2020-12-22T14:18:16Z")
Hi, I am trying to create a map in Kibana, but my index is not visible in the Index Pattern dropdown (only the kibana\_sample\_data\_flights). My index does contain a geo\_shape field, here are my mappings: { "mappi… --- ## [Kibana iframes issue](https://discuss.elastic.co/t/kibana-iframes-issue/257320)
**Author:** [@Iyashwant](https://discuss.elastic.co/u/Iyashwant)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 2:03pm UTC](https://discuss.elastic.co/t/kibana-iframes-issue/257320 "2020-12-22T14:03:22Z")
I have created a website which displays an iframe of the kibana dashboard and I have a filter option in my website and it shows a side bar with an iframe of another dashboard in kibana with only filters visualization. W… --- ## [Logstash configuration advice needed](https://discuss.elastic.co/t/logstash-configuration-advice-needed/259376)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 12:17pm UTC](https://discuss.elastic.co/t/logstash-configuration-advice-needed/259376 "2020-12-22T12:17:08Z")
Dears, I need your advice in case of configuration of Logstash. Currently the configuration looks like this one: cat /etc/logstash/conf.d/logstash.conf input { beats { port =\> 5044 ssl =\> true ssl\_certif… --- ## [Displaying numbers as 1M,1B,1K in kibana](https://discuss.elastic.co/t/displaying-numbers-as-1m-1b-1k-in-kibana/259227)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 6\ **Last updated:** [December 22, 2020, 12:12pm UTC](https://discuss.elastic.co/t/displaying-numbers-as-1m-1b-1k-in-kibana/259227 "2020-12-22T12:12:37Z")
Hi Team, I'm are using Visual builder to show some metrices over the time, as these number are very big I have customized the format as "0.0a" It shows the number in proper format ,but the issue is with the abbreviati… --- ## [Uptime alert filtering](https://discuss.elastic.co/t/uptime-alert-filtering/258820)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 5\ **Last updated:** [December 22, 2020, 11:51am UTC](https://discuss.elastic.co/t/uptime-alert-filtering/258820 "2020-12-22T11:51:11Z")
If I would like to create an uptime alert with filtering only to certain monitor.name or monitor.type the filtering does not effects - all the monitors are checked and the alerts are fired. In the result index (test… --- ## [Logstash replace string and insert new line](https://discuss.elastic.co/t/logstash-replace-string-and-insert-new-line/259377)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 11:49am UTC](https://discuss.elastic.co/t/logstash-replace-string-and-insert-new-line/259377 "2020-12-22T11:49:35Z")
hi guys, need to replace all occurrences of | with newline in field , gsub does not accept \\n or \\r...any idea as it will replace it with actual \\n mutate { gsub =\> \[ "message", "|", "\\n" \]}\` --- ## [Unable to parse the mule logs in logstash](https://discuss.elastic.co/t/unable-to-parse-the-mule-logs-in-logstash/259265)
**Author:** [@vinodkumar](https://discuss.elastic.co/u/vinodkumar)\ **Replies:** 10\ **Last updated:** [December 22, 2020, 7:31am UTC](https://discuss.elastic.co/t/unable-to-parse-the-mule-logs-in-logstash/259265 "2020-12-22T07:31:57Z")
Hi Team, I am trying to parse the mule application logs logstash, tried different options but unable to achieve it. My sample logs: 2020-12-18 10:27:10,666 \[\[hl7v2-ORU-message-processor-api\].hl7v2-fhir-api-flowsFlow.s… --- ## [Path "/usr/share/logstash/data" must be a writable directory -- Most secure way to make it so?](https://discuss.elastic.co/t/path-usr-share-logstash-data-must-be-a-writable-directory-most-secure-way-to-make-it-so/259338)
**Author:** [@danibe](https://discuss.elastic.co/u/danibe)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 7:38am UTC](https://discuss.elastic.co/t/path-usr-share-logstash-data-must-be-a-writable-directory-most-secure-way-to-make-it-so/259338 "2020-12-22T07:38:56Z")
Running '/usr/share/logstash/bin/logstash' as root works perfectly but obviously is not the recommended long term mode of use. So, I did: chown -R logstash:logstash conf.d chmod -R 775 /usr/share/logstash/data sudo use… --- ## [Elastic Maps Displaying Numbers in the format of Thousand separator (,)](https://discuss.elastic.co/t/elastic-maps-displaying-numbers-in-the-format-of-thousand-separator/259224)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 11:32am UTC](https://discuss.elastic.co/t/elastic-maps-displaying-numbers-in-the-format-of-thousand-separator/259224 "2020-12-22T11:32:23Z")
Hi Team, Is there anyway to make Thousands separator with commas in Maps? It will be easy for an user to catch the numbers without counting digits. Unfortunately in version 7.9 Maps doesn't show digits with commas. … --- ## [Apm-server disconnections after upgrading to 7.10](https://discuss.elastic.co/t/apm-server-disconnections-after-upgrading-to-7-10/257653)
**Author:** [@moixcruz](https://discuss.elastic.co/u/moixcruz)\ **Replies:** 4\ **Last updated:** [December 22, 2020, 11:26am UTC](https://discuss.elastic.co/t/apm-server-disconnections-after-upgrading-to-7-10/257653 "2020-12-22T11:26:44Z")
Kibana version: 7.5.1 Elasticsearch version: 7.5.1 APM Server version: 7.10.0 APM Agent language and version: java and rum Original install method (e.g. download page, yum, deb, from source, etc.) and version… --- ## [Does the .tar.gz archive include the systemd module?](https://discuss.elastic.co/t/does-the-tar-gz-archive-include-the-systemd-module/259372)
**Author:** [@JDP](https://discuss.elastic.co/u/JDP)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 11:20am UTC](https://discuss.elastic.co/t/does-the-tar-gz-archive-include-the-systemd-module/259372 "2020-12-22T11:20:58Z")
Hi all, I have a working installation of Elasticsearch 7.10.1 on Debian 10.7, which was installed via the tar.gz archive into /opt/elasticseach, however I'm having trouble using systemd to control startup\\shutdown. Bec… --- ## [Document Preview in elasticsearch](https://discuss.elastic.co/t/document-preview-in-elasticsearch/259242)
**Author:** [@sagar.pattnayak](https://discuss.elastic.co/u/sagar.pattnayak)\ **Replies:** 5\ **Last updated:** [December 22, 2020, 11:16am UTC](https://discuss.elastic.co/t/document-preview-in-elasticsearch/259242 "2020-12-22T11:16:40Z")
Hi There, I am new to Elasticsearch. I do have 10 years of experience in SharePoint search. I wanted to know if there is any OOB feature availabe to preview documents those appear in search results in stead of really op… --- ## [How to hide inspect option from the visualization](https://discuss.elastic.co/t/how-to-hide-inspect-option-from-the-visualization/259223)
**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\ **Replies:** 8\ **Last updated:** [December 22, 2020, 11:15am UTC](https://discuss.elastic.co/t/how-to-hide-inspect-option-from-the-visualization/259223 "2020-12-22T11:15:32Z")
\-I have created a dashboard in default space. -Created a role with read only permission and given access the role to a user. -When i login from user , i see the dashboard in read only mode but if we can hide the "OPTIO… --- ## [Search template inclusion](https://discuss.elastic.co/t/search-template-inclusion/259374)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 11:15am UTC](https://discuss.elastic.co/t/search-template-inclusion/259374 "2020-12-22T11:15:15Z")
We use several search templates with the same query: { ... } section. I'm wondering, if it is possible to store that part as another template and include it in the main ones? Thanks! --- ## [Elastic Maps - Drill Down option to another dashboard](https://discuss.elastic.co/t/elastic-maps-drill-down-option-to-another-dashboard/259226)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 11:14am UTC](https://discuss.elastic.co/t/elastic-maps-drill-down-option-to-another-dashboard/259226 "2020-12-22T11:14:08Z")
Hi Team, In current version of kibana ,maps doesn't have an option of drilldown to another page. This is a great feature which gives more insights to user if it gives drilldown option. We have an use case to display g… --- ## [\[Filebeat\] Redis Cluster support](https://discuss.elastic.co/t/filebeat-redis-cluster-support/259107)
**Author:** [@Henrikaya](https://discuss.elastic.co/u/Henrikaya)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 10:42am UTC](https://discuss.elastic.co/t/filebeat-redis-cluster-support/259107 "2020-12-22T10:42:04Z")
Hi Beats team, My company is planning to move from Redis "classic" (single instance) to Redis Cluster very soon, which is used in our platform for business usages, but also for logging purposes with Filebeat. When tryi… --- ## [Painless Script Caching Question](https://discuss.elastic.co/t/painless-script-caching-question/259361)
**Author:** [@Arthur\_Zheng](https://discuss.elastic.co/u/Arthur_Zheng)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 10:14am UTC](https://discuss.elastic.co/t/painless-script-caching-question/259361 "2020-12-22T10:14:17Z")
We are using es 7.1. We have an error “Too many dynamic script compilations within”。 It can be fixed by increase some params： script.context.$CONTEXT.max\_compilations\_rate My question is ： Es 7.1 Supports a monitori… --- ## [Decode kafka message](https://discuss.elastic.co/t/decode-kafka-message/259355)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 9:47am UTC](https://discuss.elastic.co/t/decode-kafka-message/259355 "2020-12-22T09:47:13Z")
Hi there i have a logstash config like this: input{ kafka { bootstrap\_servers =\> "localhost:9092" topics =\> \["xx"\] client\_id =\> "v1" group\_id =\> "v1-g" } } out… --- ## [Index health status coming as 'red\*'](https://discuss.elastic.co/t/index-health-status-coming-as-red/259049)
**Author:** [@NinjaMonkey](https://discuss.elastic.co/u/NinjaMonkey)\ **Replies:** 7\ **Last updated:** [December 22, 2020, 9:27am UTC](https://discuss.elastic.co/t/index-health-status-coming-as-red/259049 "2020-12-22T09:27:39Z")
Using ES 6.5.4 I am using NEST query that basically looks for cat indices for my client and gets health status for all the indices. The expected health statuses are green, yellow and red. However, for one of my lower e… --- ## [Login directly to a certain dashboard](https://discuss.elastic.co/t/login-directly-to-a-certain-dashboard/259317)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 9:17am UTC](https://discuss.elastic.co/t/login-directly-to-a-certain-dashboard/259317 "2020-12-22T09:17:50Z")
Hello, I know you can set in Kibana.yml to login directly to the dashboard page. I was wondering if you can specify a particular dashboard name or something similar? I have several spaces with each with a dashboard of… --- ## [Kibana did not load properly while connecting with VPN](https://discuss.elastic.co/t/kibana-did-not-load-properly-while-connecting-with-vpn/259343)
**Author:** [@adiel\_siman\_tov](https://discuss.elastic.co/u/adiel_siman_tov)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 9:10am UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-while-connecting-with-vpn/259343 "2020-12-22T09:10:29Z")
Hi I'm using Kibana 7.2.0 on K8S behind AWS load balancer, and it works fine till yesterday. Usually I'm connecting with my work VPN to Kibana, but from yesterday it just show the error: 'Kibana did not load properly'… --- ## [Integer field behaving as string](https://discuss.elastic.co/t/integer-field-behaving-as-string/259280)
**Author:** [@wissam](https://discuss.elastic.co/u/wissam)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 9:08am UTC](https://discuss.elastic.co/t/integer-field-behaving-as-string/259280 "2020-12-22T09:08:33Z")
Hi, I'm facing a weird problem with field types in Elasticsearch (7.5.3). I have a field of type "integer" (explicitly mapped), but every time I try to update it via a painless script by doing ctx.\_source.myfield += 1,… --- ## [Canvas kibana visualization filter](https://discuss.elastic.co/t/canvas-kibana-visualization-filter/259288)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 8:45am UTC](https://discuss.elastic.co/t/canvas-kibana-visualization-filter/259288 "2020-12-22T08:45:11Z")
Hi, Is it possible to add filters to Kibana visualizations within Canvas? We create reports for customers and it would be useful to create the generic visualizations, create reports for each customer and and the filter … --- ## [Change limit on max. number of spaces for Elastic Cloud SaaS deployment](https://discuss.elastic.co/t/change-limit-on-max-number-of-spaces-for-elastic-cloud-saas-deployment/259344)
**Author:** [@sharmashrayansh](https://discuss.elastic.co/u/sharmashrayansh)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 8:44am UTC](https://discuss.elastic.co/t/change-limit-on-max-number-of-spaces-for-elastic-cloud-saas-deployment/259344 "2020-12-22T08:44:52Z")
Hello, We are evaluating Elastic's managed cloud service for a big project. We would like to assign a personal Kibana Space for each user. We would have approx. 20k users. I created a trial account with Elastic and Ki… --- ## [Does Protections and settings work separately in Endpoint Security integration?](https://discuss.elastic.co/t/does-protections-and-settings-work-separately-in-endpoint-security-integration/259318)
**Author:** [@roh](https://discuss.elastic.co/u/roh)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 8:19am UTC](https://discuss.elastic.co/t/does-protections-and-settings-work-separately-in-endpoint-security-integration/259318 "2020-12-22T08:19:22Z")
Hi all! There's two configuration when you click Endpoint Security integration. One is "Protections" and the other one is "Settings". My question is : If you disable malware protection, does agent only collects events… --- ## [Login from external application to kibana](https://discuss.elastic.co/t/login-from-external-application-to-kibana/259336)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 8:12am UTC](https://discuss.elastic.co/t/login-from-external-application-to-kibana/259336 "2020-12-22T08:12:51Z")
Hi, I need help for login from external application to Kibana with the same credentials . I don't want my application users to login again in kibana. My Application user's login credentials are saved in postgresql. Ple… --- ## [Opsgenie SIEM Case connector](https://discuss.elastic.co/t/opsgenie-siem-case-connector/257889)
**Author:** [@Felipe\_Fuller](https://discuss.elastic.co/u/Felipe_Fuller)\ **Replies:** 1\ **Last updated:** [December 22, 2020, 8:11am UTC](https://discuss.elastic.co/t/opsgenie-siem-case-connector/257889 "2020-12-22T08:11:04Z")
Hi! I'm trying to create a connector to push cases to Jira's Opsgenie from Elastic SIEM. Is it possible? The idea is to do the same that Jiras connector does, but adapted to Opsgenie. Thank you in advance! --- ## [Dec 22nd, 2020: \[DE\] Index-Patterns und ihre Tradeoffs für Logs, Metriken und Traces](https://discuss.elastic.co/t/dec-22nd-2020-de-index-patterns-und-ihre-tradeoffs-fur-logs-metriken-und-traces/258155)
**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 8:00am UTC](https://discuss.elastic.co/t/dec-22nd-2020-de-index-patterns-und-ihre-tradeoffs-fur-logs-metriken-und-traces/258155 "2020-12-22T08:00:03Z")
Zeitserien-Daten, wie Logs, Metriken und Traces, sind einer der Hauptanwendungsfälle des Elastic Stack. Doch wie strukturiert man diese Daten am besten, um neben performantem Schreiben und Lesen noch andere Anforderungen… --- ## [Sending metadata with external users](https://discuss.elastic.co/t/sending-metadata-with-external-users/258551)
**Author:** [@mahi2](https://discuss.elastic.co/u/mahi2)\ **Replies:** 4\ **Last updated:** [December 22, 2020, 7:53am UTC](https://discuss.elastic.co/t/sending-metadata-with-external-users/258551 "2020-12-22T07:53:17Z")
Hi, I have a scenario where the OpenID Connect users (external users) login to elastic search cloud. Is there a way to send some metadata along with the external user using an API ? To explain clearly, I've given an ex… [Previous page](https://discuss.elastic.co/latest.md?page=1924) [Next page](https://discuss.elastic.co/latest.md?page=1926)