# Latest **URL:** https://discuss.elastic.co/latest.md?page=1961 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1962 --- ## [Kibana plugin limitations/constraints](https://discuss.elastic.co/t/kibana-plugin-limitations-constraints/257508)
**Author:** [@jnc943](https://discuss.elastic.co/u/jnc943)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 2:55pm UTC](https://discuss.elastic.co/t/kibana-plugin-limitations-constraints/257508 "2020-12-03T14:55:23Z")
I am having difficulty understanding or finding information that document what limitations if any, kibana plugins are subject to. For instance, what capabilities an external kibana plugin would be lacking, or what kind … --- ## [Error creating input: Can only start an input when all related states are finished](https://discuss.elastic.co/t/error-creating-input-can-only-start-an-input-when-all-related-states-are-finished/257527)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 2:54pm UTC](https://discuss.elastic.co/t/error-creating-input-can-only-start-an-input-when-all-related-states-are-finished/257527 "2020-12-03T14:54:49Z")
I am using Filebeat 7.10 to send elasticsearch audit file to my cluster and I am having this error: Error creating input: Can only start an input when all related states are finished in filebeat.yml I disabled all the … --- ## [Snapshot and restore : communication entre deux cluster](https://discuss.elastic.co/t/snapshot-and-restore-communication-entre-deux-cluster/257380)
**Author:** [@Dominique\_Lechaudel](https://discuss.elastic.co/u/Dominique_Lechaudel)\ **Replies:** 7\ **Last updated:** [December 3, 2020, 2:51pm UTC](https://discuss.elastic.co/t/snapshot-and-restore-communication-entre-deux-cluster/257380 "2020-12-03T14:51:06Z")
Bonjour, Je cherche à paramétrer la fonctionnalité snapshot/restore et utiliser un repository de type read-only URL pour utiliser le snapshot d'un autre cluster (communications prod/pre-prod) Les cluster sont protégés … --- ## [Batch transform done indicator](https://discuss.elastic.co/t/batch-transform-done-indicator/257345)
**Author:** [@kaijun](https://discuss.elastic.co/u/kaijun)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 2:30pm UTC](https://discuss.elastic.co/t/batch-transform-done-indicator/257345 "2020-12-03T14:30:32Z")
I am performing a batch transform on my ES index (only transforming for once and not a continuous job). Is there an API or indicator that returns a response once the transformation is done (so that I could then stop the … --- ## [Receive Authorization Header Logstash Http Input Plugin](https://discuss.elastic.co/t/receive-authorization-header-logstash-http-input-plugin/257407)
**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 2:18pm UTC](https://discuss.elastic.co/t/receive-authorization-header-logstash-http-input-plugin/257407 "2020-12-03T14:18:43Z")
Hi, I am using the HTTP input plugin to receive data from the postman with Basic Auth enabled, "Authorization" header is available in the postman response but when I print the data in logstash I don't see the Authorizat… --- ## [How to use context.panel.filters for drill down dashboard](https://discuss.elastic.co/t/how-to-use-context-panel-filters-for-drill-down-dashboard/256611)
**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 2:13pm UTC](https://discuss.elastic.co/t/how-to-use-context-panel-filters-for-drill-down-dashboard/256611 "2020-12-03T14:13:28Z")
How to use context.panel.filters for drill-down dashboard from one to another so that filters applied in the first dashboard will be applied in second and dashboard will be opened in new tab using Url drill-down. --- ## [Get the difference between different format of datetime](https://discuss.elastic.co/t/get-the-difference-between-different-format-of-datetime/257325)
**Author:** [@Izek\_Chen](https://discuss.elastic.co/u/Izek_Chen)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 2:10pm UTC](https://discuss.elastic.co/t/get-the-difference-between-different-format-of-datetime/257325 "2020-12-03T14:10:41Z")
I have data with two date field like this "@buildTimestamp": "2020-12-01T18:55:34.895-0800", "@timestamp": "2020-12-02T03:02:16.723Z" I'd like to use ingest pipeline script processor to get the difference. How can I… --- ## [Failed to get my heatbeat.yml to be used](https://discuss.elastic.co/t/failed-to-get-my-heatbeat-yml-to-be-used/255827)
**Author:** [@Fredrik\_Cronholm](https://discuss.elastic.co/u/Fredrik_Cronholm)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 2:05pm UTC](https://discuss.elastic.co/t/failed-to-get-my-heatbeat-yml-to-be-used/255827 "2020-12-03T14:05:55Z")
Hi! Tried it, but the pings (actually received to my clud instance) were to the default heartbeat.yml (2 http 2 icmp) inside the container (I believe that is what happened). In examples\\docker\\heartbeat.docker.yml: h… --- ## [Search without field name](https://discuss.elastic.co/t/search-without-field-name/257495)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 4\ **Last updated:** [December 3, 2020, 1:57pm UTC](https://discuss.elastic.co/t/search-without-field-name/257495 "2020-12-03T13:57:54Z")
Hi, I'm with Kibana 7.10, and in discover, I try to just search without the field name. It seems to me for some fields, this works, for others, not. For example, I have a string field fields.log\_type: "log-type" In Ki… --- ## [Not able to view Overview page ,Analytics page ,API logs page in AppSearch](https://discuss.elastic.co/t/not-able-to-view-overview-page-analytics-page-api-logs-page-in-appsearch/251081)
**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 1:50pm UTC](https://discuss.elastic.co/t/not-able-to-view-overview-page-analytics-page-api-logs-page-in-appsearch/251081 "2020-12-03T13:50:34Z")
Hi , While clicking on Overview Metrics or Analytics(similar error) page we get the following error logs: \[2020-10-06T07:01:44.151+00:00\]\[25\]\[2298\]\[action\_controller\]\[INFO\]: \[b5d5890cc0a1bcabb2e2a2fec1927002\] Processing… --- ## [Logstash: error when use date filter](https://discuss.elastic.co/t/logstash-error-when-use-date-filter/257517)
**Author:** [@raistlin2912](https://discuss.elastic.co/u/raistlin2912)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 1:46pm UTC](https://discuss.elastic.co/t/logstash-error-when-use-date-filter/257517 "2020-12-03T13:46:01Z")
Hi, I'm setting up an ELK Stack to process some logs that are sent to us from AKAMAI. An example line: 2020-11-18 14:58:27 2.17.200.11 - - - - GET /unaurl.es/N3X3QDOPYNHGPO5R6ZYCEOWCNM.png - 200 1 36513 848 1 80 HTTP/1… --- ## [Elasticsearch dead but subsys locked](https://discuss.elastic.co/t/elasticsearch-dead-but-subsys-locked/257066)
**Author:** [@ItsMee](https://discuss.elastic.co/u/ItsMee)\ **Replies:** 5\ **Last updated:** [December 3, 2020, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-dead-but-subsys-locked/257066 "2020-12-03T13:33:22Z")
Dear All, I have tried to restart the elasticsearch but getting 'elasticsearch dead but subsys locked' after start. I have removed the lock the file(elasticsearch) under /var/lock/subsys/ multiple times but no luck. Co… --- ## [Data type of fields created in ingest pipeline with KV processor](https://discuss.elastic.co/t/data-type-of-fields-created-in-ingest-pipeline-with-kv-processor/257512)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 1:21pm UTC](https://discuss.elastic.co/t/data-type-of-fields-created-in-ingest-pipeline-with-kv-processor/257512 "2020-12-03T13:21:06Z")
Hi, My Rasberry Pi’s are sending some information via a Syslog server to Elastic (with the Elastic Agent/Filebeat). The event looks like this: "Dec 3 14:00:01 PiMirror piinfo: gpu\_temp=50.1| cpu\_temp=49.1| model=4" I … --- ## [Need Help with kibana Plugin development](https://discuss.elastic.co/t/need-help-with-kibana-plugin-development/257454)
**Author:** [@vehere-ccu3](https://discuss.elastic.co/u/vehere-ccu3)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 1:05pm UTC](https://discuss.elastic.co/t/need-help-with-kibana-plugin-development/257454 "2020-12-03T13:05:00Z")
Hi, I am using kibana 7.9.1 OSS as base and developing my custom app plugins, and I would be implementing a basic app level RBAC, by hiding the navlinks as per privileges stored in an index for each role/users. I need … --- ## [Kibana canvas datatable in multiple pages](https://discuss.elastic.co/t/kibana-canvas-datatable-in-multiple-pages/257483)
**Author:** [@Hugo\_Barbachano](https://discuss.elastic.co/u/Hugo_Barbachano)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 12:54pm UTC](https://discuss.elastic.co/t/kibana-canvas-datatable-in-multiple-pages/257483 "2020-12-03T12:54:10Z")
Hello, Is there a way to display data tables in a canvas in such a way that each data table takes multiple pages if needed instead of having it displayed in a scrollbar view? I am asking this because my client needs pr… --- ## [How to relate elasticsearc event error to input log line?](https://discuss.elastic.co/t/how-to-relate-elasticsearc-event-error-to-input-log-line/257375)
**Author:** [@Bootta](https://discuss.elastic.co/u/Bootta)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 12:54pm UTC](https://discuss.elastic.co/t/how-to-relate-elasticsearc-event-error-to-input-log-line/257375 "2020-12-03T12:54:06Z")
Is there any way that I can link Elasticsearch error with my input logline so I can fix it? I'm trying to fix Elasticsearch event errors from large log file(500MB), so testing line by line is impossible. Here is Eleasti… --- ## [Unable to login when disk is full](https://discuss.elastic.co/t/unable-to-login-when-disk-is-full/257314)
**Author:** [@hazcod](https://discuss.elastic.co/u/hazcod)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 12:40pm UTC](https://discuss.elastic.co/t/unable-to-login-when-disk-is-full/257314 "2020-12-03T12:40:10Z")
Hi, I am unable to login into Kibana when my elasticsearch cluster is getting full. The log will contain: org.elasticsearch.xpack.monitoring.exporter.ExportException: CLusterBlockException: blocked by: \[TOO\_MANY\_REQUE… --- ## [Filebeat, ECS and fieds.\* namespace](https://discuss.elastic.co/t/filebeat-ecs-and-fieds-namespace/255062)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 12:05pm UTC](https://discuss.elastic.co/t/filebeat-ecs-and-fieds-namespace/255062 "2020-12-03T12:05:36Z")
Hello all, I'm looking for some suggestions for the following situation. Some context I'm trying to convince our developers to adopt ECS as their log format for container logs. We run our containers in Kubernetes and… --- ## [90k files amount - cleaning registry too slow?](https://discuss.elastic.co/t/90k-files-amount-cleaning-registry-too-slow/255573)
**Author:** [@Rnx](https://discuss.elastic.co/u/Rnx)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 11:15am UTC](https://discuss.elastic.co/t/90k-files-amount-cleaning-registry-too-slow/255573 "2020-12-03T11:15:32Z")
Hi, It's bit frustrating to understand what is Filebeat doing during startup. My situation is, I needed to ingest about 90k files from fs, which were simple xml logs. It happend quite fast. No problems at all. Afterwar… --- ## [Visualizations based on values](https://discuss.elastic.co/t/visualizations-based-on-values/257466)
**Author:** [@Niranjan\_Acharya](https://discuss.elastic.co/u/Niranjan_Acharya)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 11:14am UTC](https://discuss.elastic.co/t/visualizations-based-on-values/257466 "2020-12-03T11:14:53Z")
Hello all I am trying to create a visualization based on AWS logs, where I want to count the number of hits on a specific host. the host information is within the json as below. I tried all possible ways, but I cannot … --- ## [Kibana markdown hyperlink](https://discuss.elastic.co/t/kibana-markdown-hyperlink/257488)
**Author:** [@Tlm\_Konstantinos](https://discuss.elastic.co/u/Tlm_Konstantinos)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 11:04am UTC](https://discuss.elastic.co/t/kibana-markdown-hyperlink/257488 "2020-12-03T11:04:54Z")
Hi community I'm having the following issue. I have installed wazuh through docker on a machine and created a hyperlink in a markdown to a visualization(the hyperlink looks like localhost/../../). Im accessing the kiban… --- ## [Disable Kibana login for user elastic](https://discuss.elastic.co/t/disable-kibana-login-for-user-elastic/257365)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 10:52am UTC](https://discuss.elastic.co/t/disable-kibana-login-for-user-elastic/257365 "2020-12-03T10:52:47Z")
Hi Team, Could you please let me know if there are any tweaks that can be done is elasticsearch or kibana to only disable kibana UI login for user elastic. Currently we are using user elastic in beats to send the logs t… --- ## [Error while fetching resource (Forbidden 403) for APM transactions on Kibana](https://discuss.elastic.co/t/error-while-fetching-resource-forbidden-403-for-apm-transactions-on-kibana/257447)
**Author:** [@Judeee](https://discuss.elastic.co/u/Judeee)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 10:43am UTC](https://discuss.elastic.co/t/error-while-fetching-resource-forbidden-403-for-apm-transactions-on-kibana/257447 "2020-12-03T10:43:22Z")
Hello support, When I expand the APM transactions on kibana web console, I faces the error message below. " Error while fetching resource Error Forbidden (403) URL https://kibana.xxxx.com/api/apm/settings/custom\_link… --- ## [LogLevel DEBUG and INFO not required](https://discuss.elastic.co/t/loglevel-debug-and-info-not-required/257484)
**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 10:07am UTC](https://discuss.elastic.co/t/loglevel-debug-and-info-not-required/257484 "2020-12-03T10:07:27Z")
We do not need DEBUG and INFO logs coming into ELK but only for one or more components e.g. hostname and index name. From below link add exclude\_lines for DEBUG and INFO - Exclude\_lines: \[‘^DEBUG’, ‘^INFO’\] but to inclu… --- ## [Logstash mutate error for hostname](https://discuss.elastic.co/t/logstash-mutate-error-for-hostname/257474)
**Author:** [@aaron111com](https://discuss.elastic.co/u/aaron111com)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-mutate-error-for-hostname/257474 "2020-12-03T10:02:15Z")
hi I meet a weird problem, I want to parse my hostname is "alexworkstation-alex", I wanna get the string "alexworkstation" , so I split the hostname by "-" . but I can't add\_field . this is follow with official do… --- ## [Mapping Issues](https://discuss.elastic.co/t/mapping-issues/257461)
**Author:** [@muaz761](https://discuss.elastic.co/u/muaz761)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 9:56am UTC](https://discuss.elastic.co/t/mapping-issues/257461 "2020-12-03T09:56:10Z")
Hey, I am facing a problem with elastic search mapping. currently, my elastic search version is 1.7.2. When I index my data in a cluster it workes perfectly. But when I want to map it for search purposes it gives me an … --- ## [Logstash is not indexing data to elasticsearch](https://discuss.elastic.co/t/logstash-is-not-indexing-data-to-elasticsearch/257470)
**Author:** [@Aryaman\_Gupta](https://discuss.elastic.co/u/Aryaman_Gupta)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 9:52am UTC](https://discuss.elastic.co/t/logstash-is-not-indexing-data-to-elasticsearch/257470 "2020-12-03T09:52:58Z")
I am not able index data from logstash to elasticsearch, hence I am not able to view the data index at the kibana UI. This issue I saw only when, running the logstash command from the php file, I guess it's www-data use… --- ## [Why is reindex from remote constantly slowing down on large indices?](https://discuss.elastic.co/t/why-is-reindex-from-remote-constantly-slowing-down-on-large-indices/257354)
**Author:** [@Dmitry\_O](https://discuss.elastic.co/u/Dmitry_O)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 9:47am UTC](https://discuss.elastic.co/t/why-is-reindex-from-remote-constantly-slowing-down-on-large-indices/257354 "2020-12-03T09:47:54Z")
Hey, I have 2 clusters: Source cluster: 5.6 version, 3 node with 126 GB RAM on each. Dest cluster: 7.9 version, 3 node with 6 GB RAM on each and ES\_JAVA\_OPTS -Xms3g -Xmx3g I have ~60 indices of different sizes from (… --- ## [ElasticSearch running, problems connecting (ipTables problem)](https://discuss.elastic.co/t/elasticsearch-running-problems-connecting-iptables-problem/257468)
**Author:** [@Mikel\_U](https://discuss.elastic.co/u/Mikel_U)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-running-problems-connecting-iptables-problem/257468 "2020-12-03T09:35:20Z")
Hi, I want to create 3 nodes of ES and Kibana in production network. I would like to see ES in local network (site) and Kibana from Internet. My first (master) node is running. If I put network.host: 0.0.0.0: I can c… --- ## [Optimizing Aggregation Performance](https://discuss.elastic.co/t/optimizing-aggregation-performance/257477)
**Author:** [@muhammad\_ayoub](https://discuss.elastic.co/u/muhammad_ayoub)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 9:34am UTC](https://discuss.elastic.co/t/optimizing-aggregation-performance/257477 "2020-12-03T09:34:25Z")
Hi all, firstly, please excuse me if my questione is not very well formed as I am new to elasticsearch and not very familiar with what details I should list. We have an elasticearch cluster with three nodes where all o… [Previous page](https://discuss.elastic.co/latest.md?page=1960) [Next page](https://discuss.elastic.co/latest.md?page=1962)