# Latest **URL:** https://discuss.elastic.co/latest.md?page=533 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 534 --- ## [KIbana Maps Join Field not being displayed in the map](https://discuss.elastic.co/t/kibana-maps-join-field-not-being-displayed-in-the-map/343560)
**Author:** [@MartinGarcia](https://discuss.elastic.co/u/MartinGarcia)\ **Replies:** 3\ **Last updated:** [September 21, 2023, 5:41pm UTC](https://discuss.elastic.co/t/kibana-maps-join-field-not-being-displayed-in-the-map/343560 "2023-09-21T17:41:32Z")
Hi, I'm using Kibana Maps and trying to display a sum of capital on each boundary layer associated with it. Before I was able to display but with the latest Kibana version it doesn´t display the sum in the map itsefl, on… --- ## [Force starting Elasticsearch, even with incorrect index files](https://discuss.elastic.co/t/force-starting-elasticsearch-even-with-incorrect-index-files/343480)
**Author:** [@Leonid\_P](https://discuss.elastic.co/u/Leonid_P)\ **Replies:** 8\ **Last updated:** [September 21, 2023, 4:16pm UTC](https://discuss.elastic.co/t/force-starting-elasticsearch-even-with-incorrect-index-files/343480 "2023-09-21T16:16:07Z")
Hi there! I tried to start Elasticsearch 8.6 with loading data from index which was initially created by Elasticsearch 7.13. It fails to start with message \[2023-09-20T11:17:13,331\]\[ERROR\]\[o.e.b.Elasticsearch \] \[… --- ## [Ability to create multiple datastreams with Elastic integrations?](https://discuss.elastic.co/t/ability-to-create-multiple-datastreams-with-elastic-integrations/343325)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 4\ **Last updated:** [September 21, 2023, 2:42pm UTC](https://discuss.elastic.co/t/ability-to-create-multiple-datastreams-with-elastic-integrations/343325 "2023-09-21T14:42:32Z")
Hello everyone, I'm currently exploring Elastic integrations and have a question regarding the creation of multiple datastreams. I noticed that in the integration example with Cisco ISE, there are about ten Ingest Pipel… --- ## [Winlogbeat range doesnt seem to work for drop\_events filter](https://discuss.elastic.co/t/winlogbeat-range-doesnt-seem-to-work-for-drop-events-filter/343556)
**Author:** [@JJ007](https://discuss.elastic.co/u/JJ007)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 2:41pm UTC](https://discuss.elastic.co/t/winlogbeat-range-doesnt-seem-to-work-for-drop-events-filter/343556 "2023-09-21T14:41:43Z")
Using version 8.9.1 The range in drop events doesn't seem to work: range.winlog.event\_id: { gte: 1100, lte: 4609 } Its throws a waning and also doesnt send the data. Thanks, JJ --- ## [How can I represent the most recurring document in a Kibana table?](https://discuss.elastic.co/t/how-can-i-represent-the-most-recurring-document-in-a-kibana-table/343288)
**Author:** [@KristinaRaja](https://discuss.elastic.co/u/KristinaRaja)\ **Replies:** 2\ **Last updated:** [September 21, 2023, 1:44pm UTC](https://discuss.elastic.co/t/how-can-i-represent-the-most-recurring-document-in-a-kibana-table/343288 "2023-09-21T13:44:37Z")
We are using an aggregated based kibana table that displays a bunch of users who had poor calls and where the majority of those poor calls took place, etc...(the user is set as the bucket). For each user, we would like … --- ## [Implement Async profiler with elastic APM](https://discuss.elastic.co/t/implement-async-profiler-with-elastic-apm/343495)
**Author:** [@senyam08](https://discuss.elastic.co/u/senyam08)\ **Replies:** 2\ **Last updated:** [September 21, 2023, 1:31pm UTC](https://discuss.elastic.co/t/implement-async-profiler-with-elastic-apm/343495 "2023-09-21T13:31:50Z")
Could you help with setting up async profiler to use with APM Java agent. I have following properties added profiling\_inferred\_spans\_enabled=true profiling\_inferred\_spans\_sampling\_interval=50ms profiling\_inferred\_spans… --- ## [Failed to parse field \[request.body\] of type \[text\] in document with id](https://discuss.elastic.co/t/failed-to-parse-field-request-body-of-type-text-in-document-with-id/343543)
**Author:** [@kaldaray](https://discuss.elastic.co/u/kaldaray)\ **Replies:** 1\ **Last updated:** [September 21, 2023, 1:06pm UTC](https://discuss.elastic.co/t/failed-to-parse-field-request-body-of-type-text-in-document-with-id/343543 "2023-09-21T13:06:52Z")
Hi all, i have the following log {"@timestamp": "2023-09-21T15:04:43.583+03:00","@version": "1","message": "Request log","thread\_name": "http-nio-8080-exec-9","level": "INFO","level\_value": 20000,"X-REQUEST-ID": "ca17be… --- ## [Assigning lifecycle policy to diffent indices](https://discuss.elastic.co/t/assigning-lifecycle-policy-to-diffent-indices/343527)
**Author:** [@DetlefG](https://discuss.elastic.co/u/DetlefG)\ **Replies:** 1\ **Last updated:** [September 21, 2023, 12:36pm UTC](https://discuss.elastic.co/t/assigning-lifecycle-policy-to-diffent-indices/343527 "2023-09-21T12:36:07Z")
Hi all, in our installation filebeat is writing indices with different name depending on fields of the message which are sent to elasticsearch. For all these indices the same index template is used. Is it possible to a… --- ## [SQL Lite aggregare on non grouped Column](https://discuss.elastic.co/t/sql-lite-aggregare-on-non-grouped-column/343539)
**Author:** [@Harinder\_Singh](https://discuss.elastic.co/u/Harinder_Singh)\ **Replies:** 1\ **Last updated:** [September 21, 2023, 12:32pm UTC](https://discuss.elastic.co/t/sql-lite-aggregare-on-non-grouped-column/343539 "2023-09-21T12:32:23Z")
Hi @leandrojmp , I have a requirement where I need to apply order on a filed in Elasticsearch which is formed dynamically on the fly and it is not part of original index. My Sample document looks like { "deviceType"… --- ## [Measure CPU/Memory for custom libbeat application](https://discuss.elastic.co/t/measure-cpu-memory-for-custom-libbeat-application/343538)
**Author:** [@Nikhil\_Khurana](https://discuss.elastic.co/u/Nikhil_Khurana)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 12:23pm UTC](https://discuss.elastic.co/t/measure-cpu-memory-for-custom-libbeat-application/343538 "2023-09-21T12:23:02Z")
I have built a custom beat using libbeat library that parses my application logs as intended. Is there an out of the box configuration that can be added in yml file to log cpu and memory stats for this beat. I can use Me… --- ## [Lab Autocomplete Missing Required Fields](https://discuss.elastic.co/t/lab-autocomplete-missing-required-fields/343489)
**Author:** [@Matt\_Clairmont](https://discuss.elastic.co/u/Matt_Clairmont)\ **Replies:** 2\ **Last updated:** [September 21, 2023, 12:17pm UTC](https://discuss.elastic.co/t/lab-autocomplete-missing-required-fields/343489 "2023-09-21T12:17:05Z")
Course: Elastic Certified Engineer Version: 8.10 Question: I was directed here by the general support folks for a potential instructor review. I’m working my way through 3.3 and noticed that there were several autoco… --- ## [How to make multiple lines of json file to single line json file](https://discuss.elastic.co/t/how-to-make-multiple-lines-of-json-file-to-single-line-json-file/343424)
**Author:** [@Narayan\_Rao](https://discuss.elastic.co/u/Narayan_Rao)\ **Replies:** 2\ **Last updated:** [September 21, 2023, 11:29am UTC](https://discuss.elastic.co/t/how-to-make-multiple-lines-of-json-file-to-single-line-json-file/343424 "2023-09-21T11:29:08Z")
I am having issue with multiple lines json file. With single line json file able to process the file with below configuration. logstash.conf input { beats{ port =\> "5044" codec =\> json } } filter { json… --- ## [How to set number\_of\_replicas at creation index at elasticsearch?](https://discuss.elastic.co/t/how-to-set-number-of-replicas-at-creation-index-at-elasticsearch/343529)
**Author:** [@emoxam](https://discuss.elastic.co/u/emoxam)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 10:42am UTC](https://discuss.elastic.co/t/how-to-set-number-of-replicas-at-creation-index-at-elasticsearch/343529 "2023-09-21T10:42:21Z")
How to set number\_of\_replicas at creation index at elasticsearch ? I am using template with { "index": { "number\_of\_replicas": "0", "mapping": { "total\_fields": { "limit": "10000" } }, "refresh\_interval": "5s" … --- ## [Unable to authenticate Kibana to Elasticsearch on v8.0.1](https://discuss.elastic.co/t/unable-to-authenticate-kibana-to-elasticsearch-on-v8-0-1/343524)
**Author:** [@Anushree](https://discuss.elastic.co/u/Anushree)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 10:11am UTC](https://discuss.elastic.co/t/unable-to-authenticate-kibana-to-elasticsearch-on-v8-0-1/343524 "2023-09-21T10:11:26Z")
I've been attempting to establish authentication between Kibana and Elasticsearch version 8.0.1, using the "kibana\_system" user. Unfortunately, I've encountered a 401 error. My Elasticsearch instance is a single-node set… --- ## [Implement Search After in Java](https://discuss.elastic.co/t/implement-search-after-in-java/343512)
**Author:** [@Kumar25](https://discuss.elastic.co/u/Kumar25)\ **Replies:** 1\ **Last updated:** [September 21, 2023, 9:46am UTC](https://discuss.elastic.co/t/implement-search-after-in-java/343512 "2023-09-21T09:46:42Z")
Hi All, I just migrated Elastic search from 7.17 to 8.2 in Java, but my code is breaking because many libraries are deprecated now, previously we used scroll but now I need to use search after, can you please help me on… --- ## [Elastic license](https://discuss.elastic.co/t/elastic-license/343515)
**Author:** [@DVCS](https://discuss.elastic.co/u/DVCS)\ **Replies:** 4\ **Last updated:** [September 21, 2023, 9:46am UTC](https://discuss.elastic.co/t/elastic-license/343515 "2023-09-21T09:46:01Z")
Hi all, I have elastic cloud istance with Enterprise license. I opened a ticket to get information about ingest pipline. Support give me same info about it but also tell me that my current subscription level is outside… --- ## [Kubernetes Monitoring using Elastic-Agent](https://discuss.elastic.co/t/kubernetes-monitoring-using-elastic-agent/343521)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 9:40am UTC](https://discuss.elastic.co/t/kubernetes-monitoring-using-elastic-agent/343521 "2023-09-21T09:40:34Z")
Hello, We would like to use " Add Kubernetes integration" to our existing policy in Fleet. So, would like to understand where we need the configurations of our Kubernetes clusters which need to be monitored and authetic… --- ## [Ingesting Strange Behavior](https://discuss.elastic.co/t/ingesting-strange-behavior/343520)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 9:32am UTC](https://discuss.elastic.co/t/ingesting-strange-behavior/343520 "2023-09-21T09:32:26Z")
Hi there, I have trouble with ingesting from one of our logs. let me tell you the conditions first: we have been ingesting our logs from OCP4 to Elastic through Logstash and generally, we have 2 sites of the Elastic … --- ## [Split string variable by Mustache in Rules (Kibana)](https://discuss.elastic.co/t/split-string-variable-by-mustache-in-rules-kibana/343519)
**Author:** [@VolodymyrPopyk](https://discuss.elastic.co/u/VolodymyrPopyk)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 9:32am UTC](https://discuss.elastic.co/t/split-string-variable-by-mustache-in-rules-kibana/343519 "2023-09-21T09:32:12Z")
Is it possible split Rule action variable {{rule.name}} by Mustache. Split symbol \_ I didn´t find some way to do this! --- ## [Filter Alerts by data\_stream.namespace](https://discuss.elastic.co/t/filter-alerts-by-data-stream-namespace/343517)
**Author:** [@DVCS](https://discuss.elastic.co/u/DVCS)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 8:56am UTC](https://discuss.elastic.co/t/filter-alerts-by-data-stream-namespace/343517 "2023-09-21T08:56:57Z")
Hi All, I'm trying to filter alerts with KQL using "data\_stream.namespace" in Security -\> Alerts but no results. Even using "Group alerts by" with "data\_stream.namespace" gives no result. But the field is visible and … --- ## [No event.category in Winlogbeat](https://discuss.elastic.co/t/no-event-category-in-winlogbeat/343346)
**Author:** [@Ronger03](https://discuss.elastic.co/u/Ronger03)\ **Replies:** 6\ **Last updated:** [September 21, 2023, 8:33am UTC](https://discuss.elastic.co/t/no-event-category-in-winlogbeat/343346 "2023-09-21T08:33:15Z")
Hello, I configured winlogbeat to send windows events to Logstash but I see no event.category field in the events received on Logstash. Then I tried to debug by disable Logstash output, enable file output and still see… --- ## [Calculate max value of each http code](https://discuss.elastic.co/t/calculate-max-value-of-each-http-code/343019)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 2\ **Last updated:** [September 21, 2023, 8:23am UTC](https://discuss.elastic.co/t/calculate-max-value-of-each-http-code/343019 "2023-09-21T08:23:21Z")
Hello there, I have a question about visualization here. First, this is an overview of my panel as you can see there are 3 HTTP codes at 11:00 and I used breakdown by http\_status field. So, the question is how if I … --- ## [Data is not saved in Elasticsearch](https://discuss.elastic.co/t/data-is-not-saved-in-elasticsearch/343506)
**Author:** [@gwa99a9](https://discuss.elastic.co/u/gwa99a9)\ **Replies:** 1\ **Last updated:** [September 21, 2023, 7:46am UTC](https://discuss.elastic.co/t/data-is-not-saved-in-elasticsearch/343506 "2023-09-21T07:46:28Z")
Hi All, My ELK setup is, Logstash running in k8s, version 7.16.2 Elasticsearch in vm with cluster of 4 data nodes and 2 coordinators all running version 7.16.2 Issue: Data is not saved into Elasticsearch and there ar… --- ## [Kibana SSO via Azure role permissions issue](https://discuss.elastic.co/t/kibana-sso-via-azure-role-permissions-issue/343514)
**Author:** [@najeeb](https://discuss.elastic.co/u/najeeb)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 8:17am UTC](https://discuss.elastic.co/t/kibana-sso-via-azure-role-permissions-issue/343514 "2023-09-21T08:17:45Z")
We've implemented single sign-on (SSO) for Kibana 8.10.1, using Azure, and created two roles "superuser" and "basic user." The "basic user" role has security tab restrictions in workspace, yet when a basic user logs in,… --- ## [How to parse multiple nested arrays](https://discuss.elastic.co/t/how-to-parse-multiple-nested-arrays/343409)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 2\ **Last updated:** [September 21, 2023, 8:17am UTC](https://discuss.elastic.co/t/how-to-parse-multiple-nested-arrays/343409 "2023-09-21T08:17:16Z")
Hello everyone, I am trying to parse a json document using logstash version 8.3.3. The json document has multiple nested arrays, to flatten the document split is being used inside the filter. The issue is that the split… --- ## [Kibana arbitrary code execution (ESA-2023-07) Does this affect Elasticsearch 8.5.2 with Kibana 8.5.2](https://discuss.elastic.co/t/kibana-arbitrary-code-execution-esa-2023-07-does-this-affect-elasticsearch-8-5-2-with-kibana-8-5-2/343508)
**Author:** [@Chel](https://discuss.elastic.co/u/Chel)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 7:38am UTC](https://discuss.elastic.co/t/kibana-arbitrary-code-execution-esa-2023-07-does-this-affect-elasticsearch-8-5-2-with-kibana-8-5-2/343508 "2023-09-21T07:38:32Z")
Does CVE-2023-31414 and CVE-2023-31415 affects the users using ES 8.5.2 with Kibana 8.5.2 in self managed docker container? Could you please elobarate how it can affect us like where the attacker can run the javascript w… --- ## [Logstash not create index in Elasticsearch](https://discuss.elastic.co/t/logstash-not-create-index-in-elasticsearch/343429)
**Author:** [@Raffy\_Revanza](https://discuss.elastic.co/u/Raffy_Revanza)\ **Replies:** 3\ **Last updated:** [September 21, 2023, 7:15am UTC](https://discuss.elastic.co/t/logstash-not-create-index-in-elasticsearch/343429 "2023-09-21T07:15:15Z")
So, i want to send my CSV file in my laptop to elasticsearch to build a dashboard. I have configured the conf files and it success on my logstash, but the index not readable by elastic ? why ? here's the logs "response:… --- ## [Logged out of elk](https://discuss.elastic.co/t/logged-out-of-elk/343445)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 4\ **Last updated:** [September 21, 2023, 6:46am UTC](https://discuss.elastic.co/t/logged-out-of-elk/343445 "2023-09-21T06:46:51Z")
I am logged out of my admin account of elk and am not able to log in again. any idea how to get back to my account? --- ## [Error restoring state from URL - Kibana Dashboard](https://discuss.elastic.co/t/error-restoring-state-from-url-kibana-dashboard/343281)
**Author:** [@Kumar\_Abhinav](https://discuss.elastic.co/u/Kumar_Abhinav)\ **Replies:** 2\ **Last updated:** [September 21, 2023, 5:53am UTC](https://discuss.elastic.co/t/error-restoring-state-from-url-kibana-dashboard/343281 "2023-09-21T05:53:54Z")
Hello Elastic community, I am currently facing an issue with constructing a URL for Kibana dashboards with specific filters based on a given parameter. The objective is to filter the dashboard based on the user login ar… --- ## [How to get or extract Count of fields using logstash](https://discuss.elastic.co/t/how-to-get-or-extract-count-of-fields-using-logstash/343501)
**Author:** [@Ayushi\_bhardwaj](https://discuss.elastic.co/u/Ayushi_bhardwaj)\ **Replies:** 0\ **Last updated:** [September 21, 2023, 4:42am UTC](https://discuss.elastic.co/t/how-to-get-or-extract-count-of-fields-using-logstash/343501 "2023-09-21T04:42:50Z")
Hello, I want to extract or get count of fields using logstash. Below is the query i have written but when i put this query in logstash it does not work this query does not give me the count. pls help GET /abc-int-apl… [Previous page](https://discuss.elastic.co/latest.md?page=532) [Next page](https://discuss.elastic.co/latest.md?page=534)