# Latest **URL:** https://discuss.elastic.co/latest.md?page=691 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 692 --- ## [Kibana - the most used room - unique id](https://discuss.elastic.co/t/kibana-the-most-used-room-unique-id/330389)
**Author:** [@TheyCallMeTrinity](https://discuss.elastic.co/u/TheyCallMeTrinity)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 11:04am UTC](https://discuss.elastic.co/t/kibana-the-most-used-room-unique-id/330389 "2023-05-03T11:04:06Z")
Hello, I have a question about visualizations using a table - for booking sw. I have data in Kibana that contains room name, user name, time from and to, event time,.... and id. Every booking, confirmation and change co… --- ## [Control UI format in Kibana dashboard](https://discuss.elastic.co/t/control-ui-format-in-kibana-dashboard/332379)
**Author:** [@rituraj\_B](https://discuss.elastic.co/u/rituraj_B)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 10:49am UTC](https://discuss.elastic.co/t/control-ui-format-in-kibana-dashboard/332379 "2023-05-03T10:49:41Z")
Hi, is there any way to make the controls on the Kibana dashboard appear one below the other, say on the left hand side of my dashboard, instead of it defaulting to clustering on top of the dashboard? --- ## [Pie chart: Custom color settings and legend font size](https://discuss.elastic.co/t/pie-chart-custom-color-settings-and-legend-font-size/332280)
**Author:** [@Rama\_Krishna2](https://discuss.elastic.co/u/Rama_Krishna2)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 10:42am UTC](https://discuss.elastic.co/t/pie-chart-custom-color-settings-and-legend-font-size/332280 "2023-05-03T10:42:16Z")
I have recently started working with Kibana version 7.17.3 and have two issues that I need help with. Firstly, I want to create a custom color range for a pie chart. Specifically, I want to use shades of red for each sli… --- ## [Issue to read logs from radsecproxy](https://discuss.elastic.co/t/issue-to-read-logs-from-radsecproxy/332204)
**Author:** [@Ayah](https://discuss.elastic.co/u/Ayah)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 10:21am UTC](https://discuss.elastic.co/t/issue-to-read-logs-from-radsecproxy/332204 "2023-05-03T10:21:31Z")
Hello, we have implemented ELK to visualize eduroam log from radsecproxy. Our system was developed following this guideline GitHub - REANNZ/etcbd-public: eduroam tools container-based deployment - public tools it was w… --- ## [Do Kibana 6.8.1 have ability to create an interactive dashboards](https://discuss.elastic.co/t/do-kibana-6-8-1-have-ability-to-create-an-interactive-dashboards/332397)
**Author:** [@oraib](https://discuss.elastic.co/u/oraib)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 10:16am UTC](https://discuss.elastic.co/t/do-kibana-6-8-1-have-ability-to-create-an-interactive-dashboards/332397 "2023-05-03T10:16:22Z")
I created an a dashboard included a pie chart using Kibana dashboard version 6.8.1 . I am trying to allow the users to click on a pie chart to redirect them to a corresponding dashboard that provides detailed informat… --- ## [How to index my documents to aggregate similar item listings together](https://discuss.elastic.co/t/how-to-index-my-documents-to-aggregate-similar-item-listings-together/332342)
**Author:** [@searchwithme](https://discuss.elastic.co/u/searchwithme)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 8:22am UTC](https://discuss.elastic.co/t/how-to-index-my-documents-to-aggregate-similar-item-listings-together/332342 "2023-05-03T08:22:59Z")
Say I have a gaming website and there are panels that look like this: Panel A: Game: Super Mario Language : English Number of Players: Two Theme: Nature Panel B: Game:Super Mario Language : French Number of Player… --- ## [Logstash file input plugin picks different files other than specified path](https://discuss.elastic.co/t/logstash-file-input-plugin-picks-different-files-other-than-specified-path/332380)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 0\ **Last updated:** [May 3, 2023, 6:42am UTC](https://discuss.elastic.co/t/logstash-file-input-plugin-picks-different-files-other-than-specified-path/332380 "2023-05-03T06:42:15Z")
Hi , I am using the file input plugin , here is my config nput { file { type =\> "tomeeaccess\_passport" path =\> "/etc/logstash/logs/localhost\_access\_log..2023-04-20.txt" start\_posi… --- ## [SSD vs HDD performance? on ssd search takes 100ms on hdd 3000-6000ms](https://discuss.elastic.co/t/ssd-vs-hdd-performance-on-ssd-search-takes-100ms-on-hdd-3000-6000ms/332377)
**Author:** [@Eduard\_mart](https://discuss.elastic.co/u/Eduard_mart)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 6:01am UTC](https://discuss.elastic.co/t/ssd-vs-hdd-performance-on-ssd-search-takes-100ms-on-hdd-3000-6000ms/332377 "2023-05-03T06:01:08Z")
SSD vs HDD performance? on SSD search takes 100ms on HDD 3000-6000ms Is it possible to optimize performance on HDD? 130 millions of entries. 150gb of text. One server. Tried different amount of shards and nodes (usi… --- ## [The problem with getting a lot of logs](https://discuss.elastic.co/t/the-problem-with-getting-a-lot-of-logs/332291)
**Author:** [@DenisGr](https://discuss.elastic.co/u/DenisGr)\ **Replies:** 5\ **Last updated:** [May 3, 2023, 6:30am UTC](https://discuss.elastic.co/t/the-problem-with-getting-a-lot-of-logs/332291 "2023-05-03T06:30:03Z")
Hey guys. I'm new here and I apologize in advance if I opened a thread in the wrong section. I have the task of handling a large number of logs, generating up to 100,000 per minute or even more. I currently have elk mas… --- ## [Json codec failed with data bigger then 4k size](https://discuss.elastic.co/t/json-codec-failed-with-data-bigger-then-4k-size/330687)
**Author:** [@arunporwal](https://discuss.elastic.co/u/arunporwal)\ **Replies:** 12\ **Last updated:** [May 3, 2023, 4:49am UTC](https://discuss.elastic.co/t/json-codec-failed-with-data-bigger-then-4k-size/330687 "2023-05-03T04:49:18Z")
I am trying to read the JSON files using logstash input plugin. For this I used codec as JSON, it is working fine until it encounters a file containing a size of more than 4k. It is giving a parsing error for this. I did… --- ## [Change Scaled Date format by query](https://discuss.elastic.co/t/change-scaled-date-format-by-query/332203)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [May 3, 2023, 3:55am UTC](https://discuss.elastic.co/t/change-scaled-date-format-by-query/332203 "2023-05-03T03:55:42Z")
Hi all, I'm trying to change Scaled Date format by query. Here in scaled format , I want to add: \["P1MT", "MMM-YYYY"\], Basically, we can change in Kibana UI, but for this instance I do not have kibana access and h… --- ## [Elastic Stack 8.7.0, 7.17.10 Security Updates](https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [May 2, 2023, 4:01pm UTC](https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327 "2023-05-02T16:01:34Z")
Filebeat Information Exposure (ESA-2023-04) A flaw was discovered in the Filebeat httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logg… --- ## [Filebeat installation on AIX servers](https://discuss.elastic.co/t/filebeat-installation-on-aix-servers/332026)
**Author:** [@ryanamadala](https://discuss.elastic.co/u/ryanamadala)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 3:22am UTC](https://discuss.elastic.co/t/filebeat-installation-on-aix-servers/332026 "2023-05-03T03:22:12Z")
Need some help for installing Filebeat agents on AIX servers. Machine details: System Model: IBM,9040-MR9 Processor Type: PowerPC\_POWER9 Processor Implementation Mode: POWER 9 Platform Firmware level: VM940\_050 --- ## [Failed to use Synthetics Test](https://discuss.elastic.co/t/failed-to-use-synthetics-test/332181)
**Author:** [@jeffpang](https://discuss.elastic.co/u/jeffpang)\ **Replies:** 4\ **Last updated:** [May 3, 2023, 3:17am UTC](https://discuss.elastic.co/t/failed-to-use-synthetics-test/332181 "2023-05-03T03:17:47Z")
Failed to use Synthetics Test with the below steps. Steps are recorded with the recorder. It is working if the URL is changed to www.google.com.hk. May I know how to troubleshoot for this please? step('Go to https://… --- ## [Require Last 15 minutes from timestamp](https://discuss.elastic.co/t/require-last-15-minutes-from-timestamp/332039)
**Author:** [@rubhamra](https://discuss.elastic.co/u/rubhamra)\ **Replies:** 2\ **Last updated:** [May 3, 2023, 1:42am UTC](https://discuss.elastic.co/t/require-last-15-minutes-from-timestamp/332039 "2023-05-03T01:42:09Z")
I have REST API call and I need to pull records which were updated every last 15 minutes. I can pull last 24 records but I need just updated with in last 15 minutes based on the date field. This is the ruby code ruby … --- ## [Cluster with routing enabled has one node with consistently high CPU usage](https://discuss.elastic.co/t/cluster-with-routing-enabled-has-one-node-with-consistently-high-cpu-usage/330796)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 1:04am UTC](https://discuss.elastic.co/t/cluster-with-routing-enabled-has-one-node-with-consistently-high-cpu-usage/330796 "2023-05-03T01:04:34Z")
Hi, We have an 8-node cluster with routing enabled and we're seeing consistently high CPU usage on one node in particular (over 90%). The other 7 nodes flash high at times but don't remain or do so as often. Is this m… --- ## [Bus factor study for ElasticSearch](https://discuss.elastic.co/t/bus-factor-study-for-elasticsearch/332258)
**Author:** [@Mikhail\_Evtikhiev](https://discuss.elastic.co/u/Mikhail_Evtikhiev)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 12:39am UTC](https://discuss.elastic.co/t/bus-factor-study-for-elasticsearch/332258 "2023-05-03T00:39:46Z")
Hi, my name is Mikhail Evtikhiev, I am a researcher at JetBrains Research. We are currently doing a scientific study in order to better understand the knowledge distribution in the software projects. As a result of this … --- ## [What are the rough criteria for having dedicated masternodes in elasticsearch?](https://discuss.elastic.co/t/what-are-the-rough-criteria-for-having-dedicated-masternodes-in-elasticsearch/332351)
**Author:** [@winteriscomming](https://discuss.elastic.co/u/winteriscomming)\ **Replies:** 1\ **Last updated:** [May 3, 2023, 12:27am UTC](https://discuss.elastic.co/t/what-are-the-rough-criteria-for-having-dedicated-masternodes-in-elasticsearch/332351 "2023-05-03T00:27:50Z")
We know that having dedicated masternodes is good for stability and resource management. In a relatively small scale, there are many cases where it seems that there is no need to have a dedicated master node. Can you g… --- ## [Invalid NEST response built from a unsuccessful () low level call on PUT:](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put/332295)
**Author:** [@Maedeh\_Rafiei](https://discuss.elastic.co/u/Maedeh_Rafiei)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 11:50pm UTC](https://discuss.elastic.co/t/invalid-nest-response-built-from-a-unsuccessful-low-level-call-on-put/332295 "2023-05-02T23:50:26Z")
hi , I've used multi-instance elastic but when I use the hostname I get this error Elasticsearch.Net.ElasticsearchClientException: Failed to ping the specified node.. Call: unknown resource But using IP in output elast… --- ## [System.process.cpu.total.norm.pct is always zero, metricbeat 7.17.9](https://discuss.elastic.co/t/system-process-cpu-total-norm-pct-is-always-zero-metricbeat-7-17-9/332346)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 9:49pm UTC](https://discuss.elastic.co/t/system-process-cpu-total-norm-pct-is-always-zero-metricbeat-7-17-9/332346 "2023-05-02T21:49:20Z")
Hi, Im using system module of metricbeat and process metricset, this is the configuration - module: system period: 300s metricsets: - cpu - memory - network - process system.process.cpu.total.norm.p… --- ## [Logs not pushed to elasticsearch](https://discuss.elastic.co/t/logs-not-pushed-to-elasticsearch/330590)
**Author:** [@aaronlbk](https://discuss.elastic.co/u/aaronlbk)\ **Replies:** 5\ **Last updated:** [May 2, 2023, 8:25pm UTC](https://discuss.elastic.co/t/logs-not-pushed-to-elasticsearch/330590 "2023-05-02T20:25:48Z")
I have an issue with logstash that is not pushing logs to elastic. Below is the config file filebeat.yml that is used. I have tried to check on kibana if the index is even created and it is not. # Sample Logstash config… --- ## [Adding GeoIP pipeline to APM data](https://discuss.elastic.co/t/adding-geoip-pipeline-to-apm-data/332035)
**Author:** [@Scott\_Chapman1](https://discuss.elastic.co/u/Scott_Chapman1)\ **Replies:** 15\ **Last updated:** [May 2, 2023, 7:02pm UTC](https://discuss.elastic.co/t/adding-geoip-pipeline-to-apm-data/332035 "2023-05-02T19:02:27Z")
Hi, We're essentially on ES 8.7 and I've interested on adding Geo Location data to our APM data from our Java application. I did see what I think is an old post that talked about it, but I suspect that a new mechanism w… --- ## [Ssl error on accessing Kibana interface](https://discuss.elastic.co/t/ssl-error-on-accessing-kibana-interface/331999)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 17\ **Last updated:** [May 2, 2023, 7:01pm UTC](https://discuss.elastic.co/t/ssl-error-on-accessing-kibana-interface/331999 "2023-05-02T19:01:07Z")
I have set up Elasticsearch and Kibana on my server loganalysisclass1.cacr.camp. I have also setup Certbot for loganalysisclass1.cacr.camp using this. I can access Kibana on http://loganalysisclass1.cacr.camp:5601 but wh… --- ## [Issue parsing azure platform properties](https://discuss.elastic.co/t/issue-parsing-azure-platform-properties/332042)
**Author:** [@intsec](https://discuss.elastic.co/u/intsec)\ **Replies:** 10\ **Last updated:** [May 2, 2023, 4:35pm UTC](https://discuss.elastic.co/t/issue-parsing-azure-platform-properties/332042 "2023-05-02T16:35:51Z")
I am also working with support on this but was hoping to get a faster response here. Anyone using Azure Eventhubs forAppServiceHTTPLogs, I can get the logs to come in but I need to parse the azure.platform.properties fi… --- ## [Filebeat: permission denied](https://discuss.elastic.co/t/filebeat-permission-denied/330592)
**Author:** [@y34rz3r0](https://discuss.elastic.co/u/y34rz3r0)\ **Replies:** 6\ **Last updated:** [May 2, 2023, 4:33pm UTC](https://discuss.elastic.co/t/filebeat-permission-denied/330592 "2023-05-02T16:33:15Z")
Hi all! Need your help in solving the problem: Unexpected file opening error: "Failed opening /mnt/var/log/auth.log: open /mnt/var/log/auth.log: permission denied" My environment: docker-compose filebeat:8.7.0 user … --- ## [Arch Linux: jre19 openjdk EOL dependency](https://discuss.elastic.co/t/arch-linux-jre19-openjdk-eol-dependency/331124)
**Author:** [@D3vil0p3r](https://discuss.elastic.co/u/D3vil0p3r)\ **Replies:** 4\ **Last updated:** [May 2, 2023, 4:13pm UTC](https://discuss.elastic.co/t/arch-linux-jre19-openjdk-eol-dependency/331124 "2023-05-02T16:13:32Z")
Hello, I'm using Elasticsearch on Arch Linux, version 8.7.0, but this latest version use jre19 openjdk that reached its EOL ( Java/OpenJDK | endoflife.date) so, on Arch Linux it cannot be installed anymore because this d… --- ## [RestHighLevelClient and SyncedFlushRequest](https://discuss.elastic.co/t/resthighlevelclient-and-syncedflushrequest/332279)
**Author:** [@William\_Goss](https://discuss.elastic.co/u/William_Goss)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 3:59pm UTC](https://discuss.elastic.co/t/resthighlevelclient-and-syncedflushrequest/332279 "2023-05-02T15:59:34Z")
I just shifted from 7.6.2 to 8.6.2 with Elasticsearch, and I wanted to continue to use the RestHighLevelClient. After doing some research, I found out about compatibility mode, and read that this was a way to make it all… --- ## [Why do custom deployment templates lack an Integrations Server entry?](https://discuss.elastic.co/t/why-do-custom-deployment-templates-lack-an-integrations-server-entry/332293)
**Author:** [@jan.stap](https://discuss.elastic.co/u/jan.stap)\ **Replies:** 0\ **Last updated:** [May 2, 2023, 1:56pm UTC](https://discuss.elastic.co/t/why-do-custom-deployment-templates-lack-an-integrations-server-entry/332293 "2023-05-02T13:56:38Z")
Hi, We run ECE version 3.3.0. In the UI, when I open the form to create a deployment template (menu Platform/Templates), I don't have an Integrations Server entry in the form, just the previously used APM instance (labe… --- ## [Kibana banner new announcement](https://discuss.elastic.co/t/kibana-banner-new-announcement/331017)
**Author:** [@ShubhamKumarJena](https://discuss.elastic.co/u/ShubhamKumarJena)\ **Replies:** 3\ **Last updated:** [May 2, 2023, 3:33pm UTC](https://discuss.elastic.co/t/kibana-banner-new-announcement/331017 "2023-05-02T15:33:43Z")
Hello Guys, I am trying to add a new banner for my Kibana home page, can somebody share some of their experience with it. I checked the official Elastic page but unable to find an example. Also we are using the PLATINUM… --- ## [Upgrade elastic agents using Fleet API](https://discuss.elastic.co/t/upgrade-elastic-agents-using-fleet-api/332194)
**Author:** [@alextg](https://discuss.elastic.co/u/alextg)\ **Replies:** 2\ **Last updated:** [May 2, 2023, 2:06pm UTC](https://discuss.elastic.co/t/upgrade-elastic-agents-using-fleet-api/332194 "2023-05-02T14:06:50Z")
Hi, Is there a way to upgrade elastic agents using Fleet API for both Windows and Linux? [Previous page](https://discuss.elastic.co/latest.md?page=690) [Next page](https://discuss.elastic.co/latest.md?page=692)