# Latest **URL:** https://discuss.elastic.co/latest.md?page=1958 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1959 --- ## [Logstash elasticsearch filter plugin authentication issues](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-authentication-issues/257233)
**Author:** [@Dede\_Pessu](https://discuss.elastic.co/u/Dede_Pessu)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 4:21pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-authentication-issues/257233 "2020-12-04T16:21:28Z")
Hey Everyone, I am currently trying to use the elasticsearch filter plugin for logstash to do some calculations/aggregations and it seems to be having issues connecting to our elasticsearch node. based on the documenta… --- ## [Tracing which privileged user used a local admin account in windows](https://discuss.elastic.co/t/tracing-which-privileged-user-used-a-local-admin-account-in-windows/257473)
**Author:** [@mkanukur](https://discuss.elastic.co/u/mkanukur)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 4:18pm UTC](https://discuss.elastic.co/t/tracing-which-privileged-user-used-a-local-admin-account-in-windows/257473 "2020-12-04T16:18:35Z")
Hi All, Reaching out to the community to seek a response to find which privileged user has used a local admin account on a windows server from Kibana, can anyone suggest ? Regards, --- ## [Vega chart not plotting correctly](https://discuss.elastic.co/t/vega-chart-not-plotting-correctly/257675)
**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 4:17pm UTC](https://discuss.elastic.co/t/vega-chart-not-plotting-correctly/257675 "2020-12-04T16:17:08Z")
I have just upgraded to v7.10 and was pleased to see that the Vega visualisation has moved out of experimental. Unfortunately, exitsing charts show the marks offsets from where they should be. I have created a new chart … --- ## [Why the order of split rows change the displayed values on Kibana table visualization](https://discuss.elastic.co/t/why-the-order-of-split-rows-change-the-displayed-values-on-kibana-table-visualization/257168)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 4:15pm UTC](https://discuss.elastic.co/t/why-the-order-of-split-rows-change-the-displayed-values-on-kibana-table-visualization/257168 "2020-12-04T16:15:42Z")
Im counting documents with repeated values of the field throughput\_mb\_range grouped by the name of an interface. My metric is Count. My first split row is the name of the interface with a size of 600. My second split … --- ## [Kibana canvas collapse json inside table](https://discuss.elastic.co/t/kibana-canvas-collapse-json-inside-table/255263)
**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 3:51pm UTC](https://discuss.elastic.co/t/kibana-canvas-collapse-json-inside-table/255263 "2020-12-04T15:51:30Z")
Hello. I am showing some json inside a table. Thanks to this post: the json is shown correctly. I was wondering if there is a way to collapse said json when it gets really long, so the user does not have to use the mou… --- ## [Sequence diagram in Canvas](https://discuss.elastic.co/t/sequence-diagram-in-canvas/257021)
**Author:** [@Kasun\_Perera](https://discuss.elastic.co/u/Kasun_Perera)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 3:48pm UTC](https://discuss.elastic.co/t/sequence-diagram-in-canvas/257021 "2020-12-04T15:48:56Z")
Can we draw a sequence diagram using Canvas? --- ## [Bar length in Horizontal bar graph is differing based on color condition](https://discuss.elastic.co/t/bar-length-in-horizontal-bar-graph-is-differing-based-on-color-condition/255580)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 3:10pm UTC](https://discuss.elastic.co/t/bar-length-in-horizontal-bar-graph-is-differing-based-on-color-condition/255580 "2020-12-04T15:10:39Z")
This is the Code and result without color conditioning { "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "width":806 data: { url: { %context%: true index: index\_ssd\_2 body: { … --- ## [\[Help\] How to ship logs from Kubernetes Cluster to Elasticsearch/Kibana](https://discuss.elastic.co/t/help-how-to-ship-logs-from-kubernetes-cluster-to-elasticsearch-kibana/257545)
**Author:** [@kekoks](https://discuss.elastic.co/u/kekoks)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 4:03pm UTC](https://discuss.elastic.co/t/help-how-to-ship-logs-from-kubernetes-cluster-to-elasticsearch-kibana/257545 "2020-12-03T16:03:29Z")
(topic withdrawn by author, will be automatically deleted in 24 hours unless flagged) --- ## [Logstash Apache Logs - pipeline ingest help needed](https://discuss.elastic.co/t/logstash-apache-logs-pipeline-ingest-help-needed/257655)
**Author:** [@retroisbest](https://discuss.elastic.co/u/retroisbest)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 3:03pm UTC](https://discuss.elastic.co/t/logstash-apache-logs-pipeline-ingest-help-needed/257655 "2020-12-04T15:03:29Z")
Hi there, I am using filebeat to push my logs and can see the apache logs using the kibana discover page. im using the apache module with filebeat 7.10 Im struggling ingesting this info so the fields are mapped correc… --- ## [Can we globally store the alert recipient mail and use it as to address watcher email actions](https://discuss.elastic.co/t/can-we-globally-store-the-alert-recipient-mail-and-use-it-as-to-address-watcher-email-actions/257152)
**Author:** [@Akhil\_Mohan](https://discuss.elastic.co/u/Akhil_Mohan)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 3:01pm UTC](https://discuss.elastic.co/t/can-we-globally-store-the-alert-recipient-mail-and-use-it-as-to-address-watcher-email-actions/257152 "2020-12-04T15:01:41Z")
Our aim is to store the mail address as global and use that email address in email actions in watcher as TO address.can you suggest is it possible? --- ## [Not able to start to logstash due could not find main class Xmx1024m](https://discuss.elastic.co/t/not-able-to-start-to-logstash-due-could-not-find-main-class-xmx1024m/257638)
**Author:** [@Siva\_Munnaluri](https://discuss.elastic.co/u/Siva_Munnaluri)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 2:47pm UTC](https://discuss.elastic.co/t/not-able-to-start-to-logstash-due-could-not-find-main-class-xmx1024m/257638 "2020-12-04T14:47:59Z")
Getting error as "Error: Could not find or load main class Xmx1024m" when we command "logstash.bat -e 'input {stdin{}} output {stdout{}}'" Logstash version : 7.6.2 Java version : Java 8.0 Please help me on this . --- ## [Kibana Alerts](https://discuss.elastic.co/t/kibana-alerts/256849)
**Author:** [@werner.fletcher](https://discuss.elastic.co/u/werner.fletcher)\ **Replies:** 12\ **Last updated:** [December 4, 2020, 2:40pm UTC](https://discuss.elastic.co/t/kibana-alerts/256849 "2020-12-04T14:40:10Z")
Good day, We've upgraded our subscription to Gold today but i still cannot see the Alerting option for Kibana. I want to set up email alerts to notify me when certain keywords appear in the logs shipped by the Filebeat… --- ## [\`-Infinity\` Scores during rolling upgrade](https://discuss.elastic.co/t/infinity-scores-during-rolling-upgrade/257667)
**Author:** [@ggdd](https://discuss.elastic.co/u/ggdd)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:35pm UTC](https://discuss.elastic.co/t/infinity-scores-during-rolling-upgrade/257667 "2020-12-04T14:35:57Z")
Hi, We are performing a rolling upgrade from ES6 to ES7 and we have 3 types of nodes: Coordinators Data-only Master eligible-only As recommended, we start the upgrade with the non-master-eligible nodes, in our case t… --- ## [Filebeat error](https://discuss.elastic.co/t/filebeat-error/257666)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:31pm UTC](https://discuss.elastic.co/t/filebeat-error/257666 "2020-12-04T14:31:51Z")
Hi. I am using the ELK with filebeat sending logs to elastic via suricata module. I have all configured but after some time the information on "discover" and "dashboard" just disappears. On the elastic and filebeat logs … --- ## [Filebeat registry not getting updated](https://discuss.elastic.co/t/filebeat-registry-not-getting-updated/257664)
**Author:** [@Ankush\_Goyal](https://discuss.elastic.co/u/Ankush_Goyal)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:25pm UTC](https://discuss.elastic.co/t/filebeat-registry-not-getting-updated/257664 "2020-12-04T14:25:59Z")
Hi There, Issue: Filebeat is not updating the custom filebeat.registry\_file according to the files present in the filebeat.prospector.paths Specs: System spec: 8 core 8GB ram Intel system Filebeat version: 6.2.2 OS: … --- ## [How to create and embedd Visualizaitions in kibana plugin](https://discuss.elastic.co/t/how-to-create-and-embedd-visualizaitions-in-kibana-plugin/257601)
**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 2:23pm UTC](https://discuss.elastic.co/t/how-to-create-and-embedd-visualizaitions-in-kibana-plugin/257601 "2020-12-04T14:23:47Z")
Hi, I am trying to create a visualization from gui in kibana. and then trying to fetch that visualization (later will export that visualization as json and include it in the package) into kibana plugin using visualizati… --- ## [Ingest-convert.sh getting exception while running the tool](https://discuss.elastic.co/t/ingest-convert-sh-getting-exception-while-running-the-tool/257659)
**Author:** [@anilreddyd](https://discuss.elastic.co/u/anilreddyd)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:09pm UTC](https://discuss.elastic.co/t/ingest-convert-sh-getting-exception-while-running-the-tool/257659 "2020-12-04T14:09:21Z")
I am getting exception while running the ingest-convert tool that converts elastic search parsing json to logstash configuration. Exception in thread "main" javax.script.ScriptException: TypeError: Cannot read property … --- ## [Cisco ASA module Source and Destination IP incorrect](https://discuss.elastic.co/t/cisco-asa-module-source-and-destination-ip-incorrect/257658)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:04pm UTC](https://discuss.elastic.co/t/cisco-asa-module-source-and-destination-ip-incorrect/257658 "2020-12-04T14:04:04Z")
Dear Team, We are currently ingesting Cisco ASA logs to our elasticsearch cluster using cisco asa module \[ECS\] which comes with filebeat. After verifying the logs in elasticsearch we could understand that Source.address… --- ## [Azure Marketplace Elasticsearch (self managed) installation failed with VMExtensionProvisioningError](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-self-managed-installation-failed-with-vmextensionprovisioningerror/257657)
**Author:** [@uhikram](https://discuss.elastic.co/u/uhikram)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 1:57pm UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-self-managed-installation-failed-with-vmextensionprovisioningerror/257657 "2020-12-04T13:57:12Z")
Deployed the Elasticsearch (Self-Managed) from Azure Marketplace, it is failing every time. Tried on multiple subscription as well. Version: 7.9.0 Deployment Erorr: {"code":"DeploymentFailed","message":"At least one r… --- ## [Create Kibana plugin to write x-large queries](https://discuss.elastic.co/t/create-kibana-plugin-to-write-x-large-queries/257616)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 1:50pm UTC](https://discuss.elastic.co/t/create-kibana-plugin-to-write-x-large-queries/257616 "2020-12-04T13:50:15Z")
I have an Elasticsearch index of millions of documents. Elasticsearch provides the ability to build statistics and aggregations out of this data and Kibana provides a nice out-of-the-box way to visualize this data. Howe… --- ## [How to set up looging level in Kibana](https://discuss.elastic.co/t/how-to-set-up-looging-level-in-kibana/257649)
**Author:** [@grynhtjnyuk](https://discuss.elastic.co/u/grynhtjnyuk)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 1:06pm UTC](https://discuss.elastic.co/t/how-to-set-up-looging-level-in-kibana/257649 "2020-12-04T13:06:32Z")
hi, could you tell me how to set up explicitly logging level in Kibana as INFO? --- ## [Ingest-convert.sh TypeError](https://discuss.elastic.co/t/ingest-convert-sh-typeerror/256152)
**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 12:55pm UTC](https://discuss.elastic.co/t/ingest-convert-sh-typeerror/256152 "2020-12-04T12:55:33Z")
I'm trying to convert filebeat-7.10.0-iis-error-pipeline to logstash config with ./ingest-convert.sh --input file:///root/error.json --output file:///root/iss-access.conf I tried with java bundled with logstash 7.10.0 … --- ## [TSVB derivative not showing data when time \< 4 hours](https://discuss.elastic.co/t/tsvb-derivative-not-showing-data-when-time-4-hours/257614)
**Author:** [@bering](https://discuss.elastic.co/u/bering)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 12:42pm UTC](https://discuss.elastic.co/t/tsvb-derivative-not-showing-data-when-time-4-hours/257614 "2020-12-04T12:42:16Z")
My use case is collecting wait stats from MS SQL server, these metrics records waits on different things, I collect these waits every 5 minutes. These waits are just growing until the server restarts, so using TSVB with… --- ## [Question about default refresh\_interval and upsert](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581)
**Author:** [@dbrt](https://discuss.elastic.co/u/dbrt)\ **Replies:** 6\ **Last updated:** [December 4, 2020, 12:17pm UTC](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581 "2020-12-04T12:17:40Z")
Hello everyone, First of all, I am pretty new to ElasticSearch; please forgive me if the answer to my questions are obvious. We have switched to ElasticSearch 7.x from ElasticSearch 6.8 and I was very interested by the… --- ## [Multiple projects in same Kibana](https://discuss.elastic.co/t/multiple-projects-in-same-kibana/257347)
**Author:** [@xacobecm](https://discuss.elastic.co/u/xacobecm)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 11:36am UTC](https://discuss.elastic.co/t/multiple-projects-in-same-kibana/257347 "2020-12-04T11:36:57Z")
This is my first post here, so hello everybody and thanks in advance for any help given. I've been working with elastic for a while now, until now I implemented it in the project's k8s cluster. Now, for multiple develo… --- ## [Location based dashboard](https://discuss.elastic.co/t/location-based-dashboard/257559)
**Author:** [@vibhz](https://discuss.elastic.co/u/vibhz)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 11:22am UTC](https://discuss.elastic.co/t/location-based-dashboard/257559 "2020-12-04T11:22:51Z")
Hi, I am trying to create location based dashboard in kibana. location details are not available in the log message, we have to add a logic to map these. Please help. Usecase : Each location contains 400 servers, once w… --- ## [Helm Chart - existingClaim](https://discuss.elastic.co/t/helm-chart-existingclaim/255887)
**Author:** [@voipas](https://discuss.elastic.co/u/voipas)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 10:48am UTC](https://discuss.elastic.co/t/helm-chart-existingclaim/255887 "2020-12-04T10:48:37Z")
Hey, I would like to ask if there are any option to use existingClaim setting to install elasticsearch using helm? I was not able to find this information here: https://github.com/elastic/helm-charts/tree/master/elastics… --- ## [\[Filebeat\] HAProxy module in combination with autodiscover](https://discuss.elastic.co/t/filebeat-haproxy-module-in-combination-with-autodiscover/257539)
**Author:** [@dacamposol](https://discuss.elastic.co/u/dacamposol)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 3:51pm UTC](https://discuss.elastic.co/t/filebeat-haproxy-module-in-combination-with-autodiscover/257539 "2020-12-03T15:51:20Z")
Good afternoon everyone, I have a server where are running one instance of haproxy and one instance of filebeat in different containers. In order to have the output of haproxy accesible by docker logs, I have configure… --- ## [\[ERROR\]\[logstashoutputselasticsearch\] Attempted to send a bulk request to elasticsearch but Elasticsearch appears to be unreachable or down](https://discuss.elastic.co/t/error-logstashoutputselasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/257646)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 10:25am UTC](https://discuss.elastic.co/t/error-logstashoutputselasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/257646 "2020-12-04T10:25:35Z")
What to do when this appears in the logstash log? \[2020-12-04T09:46:50,568\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Marking url as dead. Last error: \[LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreacha… --- ## [Filebeat stops harvesting files after logrotate](https://discuss.elastic.co/t/filebeat-stops-harvesting-files-after-logrotate/257013)
**Author:** [@\_Sree](https://discuss.elastic.co/u/_Sree)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 9:50am UTC](https://discuss.elastic.co/t/filebeat-stops-harvesting-files-after-logrotate/257013 "2020-12-04T09:50:30Z")
I'm using wazuh kibana plugin and using filebeat to ship alerts to elasticsearch. Filebeat stop indexing data to wazuh-alerts index daily at midnight. I will be able to see new data only after restarting filebeat and it … [Previous page](https://discuss.elastic.co/latest.md?page=1957) [Next page](https://discuss.elastic.co/latest.md?page=1959)