# Latest

**URL:** https://discuss.elastic.co/latest.md?page=552

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 553

---

## [What does it mean a shard executing a search locally?](https://discuss.elastic.co/t/what-does-it-mean-a-shard-executing-a-search-locally/342298)

<div class="topic-metadata">

**Author:** [@Dhineshkumar\_R](https://discuss.elastic.co/u/Dhineshkumar_R)\
**Replies:** 1\
**Last updated:** [September 5, 2023, 4:31am UTC](https://discuss.elastic.co/t/what-does-it-mean-a-shard-executing-a-search-locally/342298 "2023-09-05T04:31:17Z")

</div>

Hi Folks, I need some help understanding Query phase of distributed search in ES better, step 2 specifically. Node 3 forwards the search request to a primary or replica copy of every shard in the index. Each shard ex…

---

## [New Control Panel widget not working in Kibana](https://discuss.elastic.co/t/new-control-panel-widget-not-working-in-kibana/340255)

<div class="topic-metadata">

**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\
**Replies:** 2\
**Last updated:** [September 5, 2023, 4:25am UTC](https://discuss.elastic.co/t/new-control-panel-widget-not-working-in-kibana/340255 "2023-09-05T04:25:07Z")

</div>

Hi Team, in 8.x version, Elastic has introduced controls option in kibana dashboard itself. however, in below case, it is not depicting the expected result. if i use control via visualization, it is working as expected…

---

## [Visualization widget for Jboss](https://discuss.elastic.co/t/visualization-widget-for-jboss/342300)

<div class="topic-metadata">

**Author:** [@sixsenseninja](https://discuss.elastic.co/u/sixsenseninja)\
**Replies:** 0\
**Last updated:** [September 5, 2023, 4:02am UTC](https://discuss.elastic.co/t/visualization-widget-for-jboss/342300 "2023-09-05T04:02:31Z")

</div>

Does anyone has or configured widget for jboss on new dashboard? i can try to replicate from apm page but i would like to have see if someone has done that to get some inspiration :smile:

---

## [Create a widget that change the color especially for uptime dashboard](https://discuss.elastic.co/t/create-a-widget-that-change-the-color-especially-for-uptime-dashboard/340323)

<div class="topic-metadata">

**Author:** [@sixsenseninja](https://discuss.elastic.co/u/sixsenseninja)\
**Replies:** 3\
**Last updated:** [September 5, 2023, 3:41am UTC](https://discuss.elastic.co/t/create-a-widget-that-change-the-color-especially-for-uptime-dashboard/340323 "2023-09-05T03:41:58Z")

</div>

Is there a way to create a widget in Kibana that able to change its color when hit certain threshold? for Example below, we have widget that will turn to orange when hit 80% and red if it is hit 90%. Below was captured …

---

## [How does kibana UI figures out that it has to scale up the interval if the query is going to results into too many buckets exception](https://discuss.elastic.co/t/how-does-kibana-ui-figures-out-that-it-has-to-scale-up-the-interval-if-the-query-is-going-to-results-into-too-many-buckets-exception/342193)

<div class="topic-metadata">

**Author:** [@S\_Star](https://discuss.elastic.co/u/S_Star)\
**Replies:** 4\
**Last updated:** [September 5, 2023, 12:03am UTC](https://discuss.elastic.co/t/how-does-kibana-ui-figures-out-that-it-has-to-scale-up-the-interval-if-the-query-is-going-to-results-into-too-many-buckets-exception/342193 "2023-09-05T00:03:19Z")

</div>

How does Kibana UI figures out that it has to scale up the interval if the query is going to results into too many buckets exception ? Is it some fixed logic or it determines this by actually making a query to ES which …

---

## [Connecting to elastic](https://discuss.elastic.co/t/connecting-to-elastic/342288)

<div class="topic-metadata">

**Author:** [@Guilhermitos](https://discuss.elastic.co/u/Guilhermitos)\
**Replies:** 3\
**Last updated:** [September 4, 2023, 11:34pm UTC](https://discuss.elastic.co/t/connecting-to-elastic/342288 "2023-09-04T23:34:28Z")

</div>

Hi guys, i have some doubt about connecting elasticsearch on python, is it really needed to have ca\_certs? i have tried to use verify\_certs=False but i'm getting an error, in this case is SSLError(\[SSL: DH\_KEY\_TOO\_SMALL\]…

---

## [Looking for developers for a UX Research study!](https://discuss.elastic.co/t/looking-for-developers-for-a-ux-research-study/342272)

<div class="topic-metadata">

**Author:** [@Gabriel\_Hughes](https://discuss.elastic.co/u/Gabriel_Hughes)\
**Replies:** 2\
**Last updated:** [September 4, 2023, 8:24pm UTC](https://discuss.elastic.co/t/looking-for-developers-for-a-ux-research-study/342272 "2023-09-04T20:24:36Z")

</div>

Hi all, The Search product team at Elastic is looking for developers with experience building applications using Elasticsearch to participate in a study on the application development experience with Elastic. Our goal i…

---

## [Tomcat access log analysis](https://discuss.elastic.co/t/tomcat-access-log-analysis/341688)

<div class="topic-metadata">

**Author:** [@Brian\_Michelsen](https://discuss.elastic.co/u/Brian_Michelsen)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 5:39pm UTC](https://discuss.elastic.co/t/tomcat-access-log-analysis/341688 "2023-09-04T17:39:14Z")

</div>

Hi, I have setup Elasticseach, Logstash and Kibana to analyse response times on a application. The pattern of the access log is: %a %{request.id}r %{request.username}r %t &quot;%m %U%{sanitized.query}r %H&quot; %s %b %…

---

## [Deploying elastic agent apm server on kubernates from fleet server](https://discuss.elastic.co/t/deploying-elastic-agent-apm-server-on-kubernates-from-fleet-server/342284)

<div class="topic-metadata">

**Author:** [@Mansoor\_Ur\_Rehman](https://discuss.elastic.co/u/Mansoor_Ur_Rehman)\
**Replies:** 0\
**Last updated:** [September 4, 2023, 6:44pm UTC](https://discuss.elastic.co/t/deploying-elastic-agent-apm-server-on-kubernates-from-fleet-server/342284 "2023-09-04T18:44:24Z")

</div>

i have setup a elasticsearch, kibana and fleet server with elasticsearch self signed certificates successfully, i have also deployed a apm integration on a server with fleet server. the apm server listens on port http:/…

---

## [Adding Links to a Dashboard When the Linked Dashboards are in a Different Space](https://discuss.elastic.co/t/adding-links-to-a-dashboard-when-the-linked-dashboards-are-in-a-different-space/341407)

<div class="topic-metadata">

**Author:** [@kevfar](https://discuss.elastic.co/u/kevfar)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 5:25pm UTC](https://discuss.elastic.co/t/adding-links-to-a-dashboard-when-the-linked-dashboards-are-in-a-different-space/341407 "2023-09-04T17:25:07Z")

</div>

Hello! I am working on a Kibana dashboard (version 7.17) that contains links to two other dashboards. One of the links works, however the second linked dashboard exists in a separate space. Also, depending on the environ…

---

## [Logstash dateparse error](https://discuss.elastic.co/t/logstash-dateparse-error/342209)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [September 4, 2023, 5:16pm UTC](https://discuss.elastic.co/t/logstash-dateparse-error/342209 "2023-09-04T17:16:42Z")

</div>

I have a logstash pipleline working from years. worked since 7.1 till 8.5.3 (no problem on any upgrade) two month ago when I upgraded to 8.5.3 it was still working fine. suddenly it stop working due to date parsing fai…

---

## [Multi-node cluster across multiple virtual machines](https://discuss.elastic.co/t/multi-node-cluster-across-multiple-virtual-machines/341951)

<div class="topic-metadata">

**Author:** [@Cody](https://discuss.elastic.co/u/Cody)\
**Replies:** 0\
**Last updated:** [August 30, 2023, 7:53am UTC](https://discuss.elastic.co/t/multi-node-cluster-across-multiple-virtual-machines/341951 "2023-08-30T07:53:09Z")

</div>

Hello, i am trying to run a 3 node cluster for Elasticsearch and kibana across 3 Virtual machines, each VM running 1 node each. I refer to the documentation " Start a multi-node cluster with Docker Compose" at https://ww…

---

## [(1) Can Kibana users enter in-line comments with # or // alongside query and (2) will these be picked up by query logging?](https://discuss.elastic.co/t/1-can-kibana-users-enter-in-line-comments-with-or-alongside-query-and-2-will-these-be-picked-up-by-query-logging/340565)

<div class="topic-metadata">

**Author:** [@Interspektikal](https://discuss.elastic.co/u/Interspektikal)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 4:24pm UTC](https://discuss.elastic.co/t/1-can-kibana-users-enter-in-line-comments-with-or-alongside-query-and-2-will-these-be-picked-up-by-query-logging/340565 "2023-09-04T16:24:42Z")

</div>

I've searched google and the GitHub repo alongside the forums but haven't been able to find an answer to this question (doesn't help searching "comment" brings up French posts asking "how" to do something!). From search…

---

## [Intermittent exception in index call](https://discuss.elastic.co/t/intermittent-exception-in-index-call/340903)

<div class="topic-metadata">

**Author:** [@Luiz\_Basile](https://discuss.elastic.co/u/Luiz_Basile)\
**Replies:** 2\
**Last updated:** [September 4, 2023, 4:06pm UTC](https://discuss.elastic.co/t/intermittent-exception-in-index-call/340903 "2023-09-04T16:06:00Z")

</div>

We are using Elasticsearch java, in a lambda function. The below log is in lambda Apparently this exception is happening when you use the Elastic of other component and quickly trigger the lambda function. Any suggestio…

---

## ["The media could not be loaded..." in training video](https://discuss.elastic.co/t/the-media-could-not-be-loaded-in-training-video/342277)

<div class="topic-metadata">

**Author:** [@ArthurGeorge](https://discuss.elastic.co/u/ArthurGeorge)\
**Replies:** 0\
**Last updated:** [September 4, 2023, 3:37pm UTC](https://discuss.elastic.co/t/the-media-could-not-be-loaded-in-training-video/342277 "2023-09-04T15:37:07Z")

</div>

Course: Elasticsearch Engineer (On-Demand), Module 2, Lesson 3: Text Analysis Question: Clicking Play on the training video associated with Module 2, Lesson 3 (Text Analysis) of the above course produces the following e…

---

## [How to grab subset parts of a string, using its keys to map onto return value](https://discuss.elastic.co/t/how-to-grab-subset-parts-of-a-string-using-its-keys-to-map-onto-return-value/340855)

<div class="topic-metadata">

**Author:** [@michael\_c\_michael](https://discuss.elastic.co/u/michael_c_michael)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 3:35pm UTC](https://discuss.elastic.co/t/how-to-grab-subset-parts-of-a-string-using-its-keys-to-map-onto-return-value/340855 "2023-09-04T15:35:47Z")

</div>

Trying to do something which should be simple. Using Painless, take a value like "1.4" and another like "1.5", and using the first and second number, pop the name from a dictionary. I know there are methods like substr, …

---

## [Cleaning up of indexes](https://discuss.elastic.co/t/cleaning-up-of-indexes/340885)

<div class="topic-metadata">

**Author:** [@vishnu\_ishpujani](https://discuss.elastic.co/u/vishnu_ishpujani)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 3:32pm UTC](https://discuss.elastic.co/t/cleaning-up-of-indexes/340885 "2023-09-04T15:32:57Z")

</div>

Hi , I need to cleanup indexes data from Elastic cluster, what is the best way to perform the task as deleting from Dev tools is taking too much time and affecting cluster as well?

---

## [Kibana\_system password reset but only affected one master node in the ELK cluster](https://discuss.elastic.co/t/kibana-system-password-reset-but-only-affected-one-master-node-in-the-elk-cluster/342205)

<div class="topic-metadata">

**Author:** [@vpelagatti](https://discuss.elastic.co/u/vpelagatti)\
**Replies:** 2\
**Last updated:** [September 4, 2023, 2:45pm UTC](https://discuss.elastic.co/t/kibana-system-password-reset-but-only-affected-one-master-node-in-the-elk-cluster/342205 "2023-09-04T14:45:02Z")

</div>

Hi, I'm using an ELK cluster with two master nodes elastic01 and elastic02. Cluster has been upgraded from version 7.17 to 8.2. I've reset kibana\_system password on elastic01 but it didn't reset on second master node (e…

---

## [Can i configure Mikrotik Router in Elastic ELK?](https://discuss.elastic.co/t/can-i-configure-mikrotik-router-in-elastic-elk/341227)

<div class="topic-metadata">

**Author:** [@Heetav](https://discuss.elastic.co/u/Heetav)\
**Replies:** 0\
**Last updated:** [August 21, 2023, 11:01am UTC](https://discuss.elastic.co/t/can-i-configure-mikrotik-router-in-elastic-elk/341227 "2023-08-21T11:01:06Z")

</div>

Hi, We are using Elastic ELK with Kibana version. If there any way that I can configure Mikrotik Router in SIEM/SOC operations ?

---

## [Add Multiple CSV Files to Kibana Dsahboard](https://discuss.elastic.co/t/add-multiple-csv-files-to-kibana-dsahboard/342115)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 2\
**Last updated:** [September 4, 2023, 2:35pm UTC](https://discuss.elastic.co/t/add-multiple-csv-files-to-kibana-dsahboard/342115 "2023-09-04T14:35:55Z")

</div>

Hi Team, Is there any way to upload multiple CSV files into kibana dashboard? Thanks, Debasis

---

## [APM license for On-premise elasticsearch installation](https://discuss.elastic.co/t/apm-license-for-on-premise-elasticsearch-installation/342264)

<div class="topic-metadata">

**Author:** [@parvvam](https://discuss.elastic.co/u/parvvam)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 2:33pm UTC](https://discuss.elastic.co/t/apm-license-for-on-premise-elasticsearch-installation/342264 "2023-09-04T14:33:00Z")

</div>

Hi, I am trying to explore elasticsearch-APM license for on-premise installation, however, the solutions I am getting are for cloud-based installation, can anyone help me on whether the license is available for on-premi…

---

## [Kibana login with service account](https://discuss.elastic.co/t/kibana-login-with-service-account/342130)

<div class="topic-metadata">

**Author:** [@HiteshSingh](https://discuss.elastic.co/u/HiteshSingh)\
**Replies:** 3\
**Last updated:** [September 4, 2023, 2:23pm UTC](https://discuss.elastic.co/t/kibana-login-with-service-account/342130 "2023-09-04T14:23:42Z")

</div>

We have embedded kibana dashboard into our application and do not want to show login page of kibana to the user once the user has already logged-in to the application. We are using basic license of Elasticsearch. Can w…

---

## [Fortinet FortiGate Firewall Logs integration](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration/342116)

<div class="topic-metadata">

**Author:** [@francesco.amato](https://discuss.elastic.co/u/francesco.amato)\
**Replies:** 2\
**Last updated:** [September 1, 2023, 12:40pm UTC](https://discuss.elastic.co/t/fortinet-fortigate-firewall-logs-integration/342116 "2023-09-01T12:40:00Z")

</div>

Hi to all I can't figure out why the Fortigate Firewall Logs Integration doesn't send logs to my Elasticsearch server I can use the filebeat module but not the fleet integration I have setup the Fortigate Firewall to …

---

## [Uptime Monitor Alert Maintenance Window](https://discuss.elastic.co/t/uptime-monitor-alert-maintenance-window/341702)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 1:33pm UTC](https://discuss.elastic.co/t/uptime-monitor-alert-maintenance-window/341702 "2023-09-04T13:33:26Z")

</div>

I have an uptime monitor configured to look at a website. There is an automated task that restarts SQL for this application, which causes an HTTP 5xx code during restart. This causes the uptime monitor to report the site…

---

## [Choose the second Value in Query Table for Canvas](https://discuss.elastic.co/t/choose-the-second-value-in-query-table-for-canvas/342059)

<div class="topic-metadata">

**Author:** [@Rademu1349](https://discuss.elastic.co/u/Rademu1349)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 1:23pm UTC](https://discuss.elastic.co/t/choose-the-second-value-in-query-table-for-canvas/342059 "2023-09-04T13:23:14Z")

</div>

Hello all, I am trying to display a top 3 ranking in a canvas. For this I need the highest score, the middle score and the lowest score. The highest score is correctly queried but I am not able to determine the 2nd sco…

---

## [java.lang.IllegalArgumentException: Mapping file \_settings.json does not exist for elasticsearch version 8](https://discuss.elastic.co/t/java-lang-illegalargumentexception-mapping-file-settings-json-does-not-exist-for-elasticsearch-version-8/340910)

<div class="topic-metadata">

**Author:** [@prashant\_chaturvedi](https://discuss.elastic.co/u/prashant_chaturvedi)\
**Replies:** 0\
**Last updated:** [August 16, 2023, 11:41am UTC](https://discuss.elastic.co/t/java-lang-illegalargumentexception-mapping-file-settings-json-does-not-exist-for-elasticsearch-version-8/340910 "2023-08-16T11:41:01Z")

</div>

i have installed elasticsearch(8.9.0) and fscrawler (2.10) which shows that its been tested in document but still the fscrawaler is throwing the below error "java.lang.IllegalArgumentException: Mapping file \_settings.js…

---

## [Run remote KQL query](https://discuss.elastic.co/t/run-remote-kql-query/341615)

<div class="topic-metadata">

**Author:** [@mladen](https://discuss.elastic.co/u/mladen)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 1:19pm UTC](https://discuss.elastic.co/t/run-remote-kql-query/341615 "2023-09-04T13:19:42Z")

</div>

Hi, We have some saved searches written using Kibana Query Language in Kibana. Now we have an idea to automatize the process of getting data. Idea is to create some bash scripts and using curl to run saved queries in Ki…

---

## [Observing index of an Elastic node with Metricbeat not possible?](https://discuss.elastic.co/t/observing-index-of-an-elastic-node-with-metricbeat-not-possible/335791)

<div class="topic-metadata">

**Author:** [@Zaphod](https://discuss.elastic.co/u/Zaphod)\
**Replies:** 1\
**Last updated:** [September 4, 2023, 12:35pm UTC](https://discuss.elastic.co/t/observing-index-of-an-elastic-node-with-metricbeat-not-possible/335791 "2023-09-04T12:35:34Z")

</div>

I would like to monitor an existing Elasticsearch node (ES A) (in Docker container) to control the performance concerning a distinct index, because the CPU of the node increases to 200%-500% intermittently for a few hour…

---

## [Salesforce logstash input sensible to changes](https://discuss.elastic.co/t/salesforce-logstash-input-sensible-to-changes/341784)

<div class="topic-metadata">

**Author:** [@Samuele\_Lolli](https://discuss.elastic.co/u/Samuele_Lolli)\
**Replies:** 4\
**Last updated:** [September 4, 2023, 12:34pm UTC](https://discuss.elastic.co/t/salesforce-logstash-input-sensible-to-changes/341784 "2023-09-04T12:34:29Z")

</div>

Hi everyone, i implemented a pipeline using logstash that is currently working fine but i have some question. Im importing the data from salesforce but im not able to understand if the salesforce plugin is sensible to …

---

## [How to make map clustering through elastic search more flexible?](https://discuss.elastic.co/t/how-to-make-map-clustering-through-elastic-search-more-flexible/342266)

<div class="topic-metadata">

**Author:** [@Vladislav\_Kochurko](https://discuss.elastic.co/u/Vladislav_Kochurko)\
**Replies:** 0\
**Last updated:** [September 4, 2023, 12:29pm UTC](https://discuss.elastic.co/t/how-to-make-map-clustering-through-elastic-search-more-flexible/342266 "2023-09-04T12:29:36Z")

</div>

I am developing an interactive map and my technology stack includes NodeJS, Angular, MapBox, and Elasticsearch. My application is a complex data aggregator, and I am trying to cluster my data on the map using Elasticsear…

[Previous page](https://discuss.elastic.co/latest.md?page=551)

[Next page](https://discuss.elastic.co/latest.md?page=553)
