# Latest

**URL:** https://discuss.elastic.co/latest.md?page=838

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 839

---

## [List of Active indexes being written to](https://discuss.elastic.co/t/list-of-active-indexes-being-written-to/322140)

<div class="topic-metadata">

**Author:** [@deeksha](https://discuss.elastic.co/u/deeksha)\
**Replies:** 1\
**Last updated:** [December 31, 2022, 6:32am UTC](https://discuss.elastic.co/t/list-of-active-indexes-being-written-to/322140 "2022-12-31T06:32:06Z")

</div>

How can I get what indexes are being actively written to in my Elasticsearch cluster.

---

## [Kibana is Not Loading Properly using Nginx reverse Proxy](https://discuss.elastic.co/t/kibana-is-not-loading-properly-using-nginx-reverse-proxy/317098)

<div class="topic-metadata">

**Author:** [@sugriv\_1605](https://discuss.elastic.co/u/sugriv_1605)\
**Replies:** 2\
**Last updated:** [November 6, 2022, 3:16pm UTC](https://discuss.elastic.co/t/kibana-is-not-loading-properly-using-nginx-reverse-proxy/317098 "2022-11-06T15:16:47Z")

</div>

Hi, I am hosting Kibana using Nginx reverse proxy but the in browser getting 404 /spaces/enter output. Kibana is running on http://IP:5601 Elasticsearch Open on http://IP:9200 I am able to open Kibana on my servers u…

---

## [Logstash pipeline High avliliblity](https://discuss.elastic.co/t/logstash-pipeline-high-avliliblity/321965)

<div class="topic-metadata">

**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\
**Replies:** 13\
**Last updated:** [December 31, 2022, 1:30am UTC](https://discuss.elastic.co/t/logstash-pipeline-high-avliliblity/321965 "2022-12-31T01:30:02Z")

</div>

hello Everyone, How to achieve The Logstash Pipeline HA? I have 3 Nodes if any node opening count of pipeline after that the node is down what happen? what is the solutions to achieve the HA?

---

## [Windows Mass Beats Deployment](https://discuss.elastic.co/t/windows-mass-beats-deployment/322055)

<div class="topic-metadata">

**Author:** [@Nathan.Arnall](https://discuss.elastic.co/u/Nathan.Arnall)\
**Replies:** 3\
**Last updated:** [December 31, 2022, 12:37am UTC](https://discuss.elastic.co/t/windows-mass-beats-deployment/322055 "2022-12-31T00:37:08Z")

</div>

Powershell script for deploying beats modules. Can be used with group policy. Hopefully this can be of use to anyone else starting out with the ELK stack. $beats = "Metricbeat", "Heartbeat", "Auditbeat", "Winlogbeat", …

---

## [Could not retrieve Elasticsearch deprecation issues](https://discuss.elastic.co/t/could-not-retrieve-elasticsearch-deprecation-issues/315274)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 4\
**Last updated:** [November 5, 2022, 4:31pm UTC](https://discuss.elastic.co/t/could-not-retrieve-elasticsearch-deprecation-issues/315274 "2022-11-05T16:31:00Z")

</div>

I've got a test cluster with a separate monitoring cluster and a production cluster with a separate monitoring cluster. "Review deprecated settings and resolve issues" in the Kibana Upgrade Assistant works on all four cl…

---

## [Aggregate with dynamic time range](https://discuss.elastic.co/t/aggregate-with-dynamic-time-range/322205)

<div class="topic-metadata">

**Author:** [@pedro123](https://discuss.elastic.co/u/pedro123)\
**Replies:** 1\
**Last updated:** [December 30, 2022, 11:54pm UTC](https://discuss.elastic.co/t/aggregate-with-dynamic-time-range/322205 "2022-12-30T23:54:07Z")

</div>

Hello, I am trying to create an aggregation based on a dynamic time frame which I want to calculate. I was trying to do something like this But I cant get it to work... Any suggestions?

---

## [Kibana scripted field is not showing value](https://discuss.elastic.co/t/kibana-scripted-field-is-not-showing-value/322183)

<div class="topic-metadata">

**Author:** [@gloria123451](https://discuss.elastic.co/u/gloria123451)\
**Replies:** 2\
**Last updated:** [December 30, 2022, 10:23pm UTC](https://discuss.elastic.co/t/kibana-scripted-field-is-not-showing-value/322183 "2022-12-30T22:23:40Z")

</div>

I am new to kibana.. I am trying to create a scripted field, when I run the script nothing is displayed in the result. however, when I filter the field I get the expected result.. why is this not propagating?... what …

---

## [Iptables intergrations Processors](https://discuss.elastic.co/t/iptables-intergrations-processors/321289)

<div class="topic-metadata">

**Author:** [@david-a76](https://discuss.elastic.co/u/david-a76)\
**Replies:** 1\
**Last updated:** [December 30, 2022, 7:52pm UTC](https://discuss.elastic.co/t/iptables-intergrations-processors/321289 "2022-12-30T19:52:52Z")

</div>

I wourd like to add a field when source ip is one of 192.168.100.0/24 or 172.17.100.0/24 subnet So i added this precocessor in iptables integration field on my agnet policy but It's totaly ignored. That's wrong with …

---

## [Kibana not starting. \[.kibana\_task\_manager\] Action failed with 'Request timed out'](https://discuss.elastic.co/t/kibana-not-starting-kibana-task-manager-action-failed-with-request-timed-out/317898)

<div class="topic-metadata">

**Author:** [@rkimera](https://discuss.elastic.co/u/rkimera)\
**Replies:** 7\
**Last updated:** [November 5, 2022, 11:31am UTC](https://discuss.elastic.co/t/kibana-not-starting-kibana-task-manager-action-failed-with-request-timed-out/317898 "2022-11-05T11:31:58Z")

</div>

I am able to run the elasticsearch server at port 9200. But this kibana server is failing to start throwing an error. I have downgraded to version 7. x.x from 8. x.x but still get the same error. I am using a Mac os. \</…

---

## [ESSingleNodeTestCase / unit tests / official recommendations?](https://discuss.elastic.co/t/essinglenodetestcase-unit-tests-official-recommendations/322222)

<div class="topic-metadata">

**Author:** [@PzYon](https://discuss.elastic.co/u/PzYon)\
**Replies:** 2\
**Last updated:** [December 30, 2022, 6:19pm UTC](https://discuss.elastic.co/t/essinglenodetestcase-unit-tests-official-recommendations/322222 "2022-12-30T18:19:33Z")

</div>

I asked this question regarding unit tests a couple of weeks ago: Best practices for automated tests Now I would like to come back to the ESSingleNodeTestCase-class. I managed to get it to start an elastic server with …

---

## [Need to apply filter to KIBANA dashboard automatically through html](https://discuss.elastic.co/t/need-to-apply-filter-to-kibana-dashboard-automatically-through-html/322122)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 4\
**Last updated:** [December 30, 2022, 4:41pm UTC](https://discuss.elastic.co/t/need-to-apply-filter-to-kibana-dashboard-automatically-through-html/322122 "2022-12-30T16:41:59Z")

</div>

My idea is that I have 2 cards - Virat Kohli and Leo Messi. And in the dashboard, I have 1 dashboard named "main" and in that, I have a filter called "event". In the "event" I have given 2 topics - viratkohli and lionelm…

---

## [\_delete\_by\_query with timestamp](https://discuss.elastic.co/t/delete-by-query-with-timestamp/318157)

<div class="topic-metadata">

**Author:** [@Yiming\_Gong](https://discuss.elastic.co/u/Yiming_Gong)\
**Replies:** 8\
**Last updated:** [December 30, 2022, 3:46pm UTC](https://discuss.elastic.co/t/delete-by-query-with-timestamp/318157 "2022-12-30T15:46:17Z")

</div>

The data I uploaded to Elasticsearch database is like the following { "took" : 0, "timed\_out" : false, "\_shards" : { "total" : 1, "successful" : 1, "skipped" : 0, "failed" : 0 }, "hits" : { …

---

## [Login to kibana iframe using ApiKey](https://discuss.elastic.co/t/login-to-kibana-iframe-using-apikey/322147)

<div class="topic-metadata">

**Author:** [@dinesh.mandrekar](https://discuss.elastic.co/u/dinesh.mandrekar)\
**Replies:** 1\
**Last updated:** [December 30, 2022, 3:20pm UTC](https://discuss.elastic.co/t/login-to-kibana-iframe-using-apikey/322147 "2022-12-30T15:20:48Z")

</div>

We want to use Attribute-Based Access Control for accessing kibana dashboard. For this we are generating multiple ApiKeys with different set of security attributes. We want to embed the kibana iframe into our applicatio…

---

## [Best practices for automated tests](https://discuss.elastic.co/t/best-practices-for-automated-tests/320872)

<div class="topic-metadata">

**Author:** [@PzYon](https://discuss.elastic.co/u/PzYon)\
**Replies:** 3\
**Last updated:** [December 30, 2022, 2:47pm UTC](https://discuss.elastic.co/t/best-practices-for-automated-tests/320872 "2022-12-30T14:47:34Z")

</div>

In our (Java) unit tests we would like to test the integration of Elasticsearch (e.g. do queries work, can docs be indexed correctly, etc.). I'm wondering if there are any best practices or recommendations regarding this…

---

## [From Filebeat to Logstash (and next to Elasticsearch) - pipeline processing](https://discuss.elastic.co/t/from-filebeat-to-logstash-and-next-to-elasticsearch-pipeline-processing/322171)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 2\
**Last updated:** [December 30, 2022, 2:35pm UTC](https://discuss.elastic.co/t/from-filebeat-to-logstash-and-next-to-elasticsearch-pipeline-processing/322171 "2022-12-30T14:35:42Z")

</div>

Hi, I'm having trouble getting data to transfer correctly from Filebeat to Logstash (then to Elasticsearch). When I configure in filebeat.yml output directly to Elasticsearch everything is ok. However, when I configur…

---

## [Embedded code not working](https://discuss.elastic.co/t/embedded-code-not-working/320307)

<div class="topic-metadata">

**Author:** [@Akjal](https://discuss.elastic.co/u/Akjal)\
**Replies:** 1\
**Last updated:** [December 2, 2022, 5:17pm UTC](https://discuss.elastic.co/t/embedded-code-not-working/320307 "2022-12-02T17:17:21Z")

</div>

Hello there, Having some issues rendering the embedded iframe code link from kibana to other platforms. For some reason it works when I run it on a local static file, but does not work when I test it on public platfor…

---

## [Show the \_slm/status somewhere in Kibana Managment](https://discuss.elastic.co/t/show-the-slm-status-somewhere-in-kibana-managment/322216)

<div class="topic-metadata">

**Author:** [@stouch](https://discuss.elastic.co/u/stouch)\
**Replies:** 4\
**Last updated:** [December 30, 2022, 2:21pm UTC](https://discuss.elastic.co/t/show-the-slm-status-somewhere-in-kibana-managment/322216 "2022-12-30T14:21:13Z")

</div>

Like some other users, I encountered this issue : \[slm\] Snapshots are just ignored when scheduled, but manual \_execute works - #5 by stouch Even if it can look like a dummy issue, I think it would be nice to get the \_sl…

---

## [We are getting "unindexed fields or ignored values cannot be searched"](https://discuss.elastic.co/t/we-are-getting-unindexed-fields-or-ignored-values-cannot-be-searched/322148)

<div class="topic-metadata">

**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\
**Replies:** 1\
**Last updated:** [December 30, 2022, 2:18pm UTC](https://discuss.elastic.co/t/we-are-getting-unindexed-fields-or-ignored-values-cannot-be-searched/322148 "2022-12-30T14:18:03Z")

</div>

Hi, In Kibana (7.16.2) discover there are so many fields whose format is text which is not searchable like if we hover on the field it gives below message "unindexed fields or ignored values cannot be searched". But s…

---

## [\[slm\] Snapshots are just ignored when scheduled, but manual \_execute works](https://discuss.elastic.co/t/slm-snapshots-are-just-ignored-when-scheduled-but-manual-execute-works/321429)

<div class="topic-metadata">

**Author:** [@stouch](https://discuss.elastic.co/u/stouch)\
**Replies:** 4\
**Last updated:** [December 30, 2022, 1:28pm UTC](https://discuss.elastic.co/t/slm-snapshots-are-just-ignored-when-scheduled-but-manual-execute-works/321429 "2022-12-30T13:28:18Z")

</div>

I have a got a S3 repository and a slm policy. I can execute this policy manually : Snapshot is created, last success of this manual execution appears well, no failures. So I set up the scheduled cron : After the cron t…

---

## [Failed to install template](https://discuss.elastic.co/t/failed-to-install-template/322210)

<div class="topic-metadata">

**Author:** [@camilovietnam](https://discuss.elastic.co/u/camilovietnam)\
**Replies:** 2\
**Last updated:** [December 30, 2022, 1:15pm UTC](https://discuss.elastic.co/t/failed-to-install-template/322210 "2022-12-30T13:15:43Z")

</div>

Trying to demo the Elasticsearch stack, but having trouble figuring out why aren't things working. To start with, I have the following docker-compose file for mongo, logstash and elasticsearch. version: '3' # referenc…

---

## [Not able to get Source filename in the logstash output](https://discuss.elastic.co/t/not-able-to-get-source-filename-in-the-logstash-output/322130)

<div class="topic-metadata">

**Author:** [@Ramesh\_Perumal](https://discuss.elastic.co/u/Ramesh_Perumal)\
**Replies:** 2\
**Last updated:** [December 30, 2022, 10:57am UTC](https://discuss.elastic.co/t/not-able-to-get-source-filename-in-the-logstash-output/322130 "2022-12-30T10:57:43Z")

</div>

Hi, We are using filebeat 7.10.2 and logstash 8.10.4. Filebeat transfer the files from Machine A (Filebeat) to Machine B (Logstash) and Logstash writes the same in machine B's path (/va/pm/sfile/%{hostname}/%{\[log\]\[file…

---

## [Cant access field when creating runtime field](https://discuss.elastic.co/t/cant-access-field-when-creating-runtime-field/321759)

<div class="topic-metadata">

**Author:** [@pedro123](https://discuss.elastic.co/u/pedro123)\
**Replies:** 7\
**Last updated:** [December 30, 2022, 10:02am UTC](https://discuss.elastic.co/t/cant-access-field-when-creating-runtime-field/321759 "2022-12-30T10:02:22Z")

</div>

Hello, I am new to the elastic stack and I am currently creating a runtime field based on rum data. More specifically I want to do calculations based on the field transaction.duration.us. However when I am creating a …

---

## [로그스태시 동작이 안 됩니다](https://discuss.elastic.co/t/topic/322200)

<div class="topic-metadata">

**Author:** [@Horang](https://discuss.elastic.co/u/Horang)\
**Replies:** 0\
**Last updated:** [December 30, 2022, 8:58am UTC](https://discuss.elastic.co/t/topic/322200 "2022-12-30T08:58:20Z")

</div>

로그스태시 파이프라인 설정파일은 다음과 같습니다 path를 여러 개 지정해서 가져오는데요 파이프라인 ID가 jdbc\_app\_tr\_mon, jdbc\_app\_bm\_tr\_mon 두 개는 동작하지가 않네요 나머지는 데이터 잘 가져옵니다 jdbc 이용해서 오라클 DB 붙어서 sql로 들고 오고 있습니다. es 로그를 봐도 별다른 오류가 뜨지도 않고, 파이프라인 연결은 성공했다고 남습니다. …

---

## [Add custom index in Observability/alerts section](https://discuss.elastic.co/t/add-custom-index-in-observability-alerts-section/318088)

<div class="topic-metadata">

**Author:** [@federica.forti](https://discuss.elastic.co/u/federica.forti)\
**Replies:** 2\
**Last updated:** [November 4, 2022, 12:55pm UTC](https://discuss.elastic.co/t/add-custom-index-in-observability-alerts-section/318088 "2022-11-04T12:55:45Z")

</div>

Hi, do you know if is it possible, working on Kibana's Advanced Settings (or otherwise), to consider in the Alerts (Observability) section also alerts that trigger from custom indexes, in order to have a single dashboar…

---

## [How to Show multiple project log in differnt dashborad?](https://discuss.elastic.co/t/how-to-show-multiple-project-log-in-differnt-dashborad/322191)

<div class="topic-metadata">

**Author:** [@manish2](https://discuss.elastic.co/u/manish2)\
**Replies:** 0\
**Last updated:** [December 30, 2022, 6:44am UTC](https://discuss.elastic.co/t/how-to-show-multiple-project-log-in-differnt-dashborad/322191 "2022-12-30T06:44:56Z")

</div>

please anyone help me!... in my dashboard i get all log of different project but now i am want to filter all log of multiple project in differnet dashboard......i am new in ELK . Help me !

---

## [Vegalite Pivot with Index data](https://discuss.elastic.co/t/vegalite-pivot-with-index-data/321881)

<div class="topic-metadata">

**Author:** [@Siva\_Kumar\_Menta](https://discuss.elastic.co/u/Siva_Kumar_Menta)\
**Replies:** 2\
**Last updated:** [December 30, 2022, 9:08am UTC](https://discuss.elastic.co/t/vegalite-pivot-with-index-data/321881 "2022-12-30T09:08:35Z")

</div>

Hi All, I have data in Elasticsearch index "vegalite\_pivot". While trying to create bar chart with pivot transformation getting below error. FYI...Provided below index data & vegalite script. Please suggest required…

---

## [Your Query Is Taking While-Kibana/Report download (Aggregation on documents with unique id more than 20000)](https://discuss.elastic.co/t/your-query-is-taking-while-kibana-report-download-aggregation-on-documents-with-unique-id-more-than-20000/322156)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 1\
**Last updated:** [December 29, 2022, 4:35pm UTC](https://discuss.elastic.co/t/your-query-is-taking-while-kibana-report-download-aggregation-on-documents-with-unique-id-more-than-20000/322156 "2022-12-29T16:35:06Z")

</div>

Hello All, Issue 1: In my dashboard I've intrgrated 5 visuals,4 bar charts and 1 enhanced data table. While I select time range for 2 week,it fetches around 18000 unique documents that is visible in enhanced data tabl…

---

## [How to display only direct connections on elastic Graph](https://discuss.elastic.co/t/how-to-display-only-direct-connections-on-elastic-graph/321848)

<div class="topic-metadata">

**Author:** [@Leonardo\_Carlos](https://discuss.elastic.co/u/Leonardo_Carlos)\
**Replies:** 4\
**Last updated:** [December 30, 2022, 8:44am UTC](https://discuss.elastic.co/t/how-to-display-only-direct-connections-on-elastic-graph/321848 "2022-12-30T08:44:18Z")

</div>

Hello everyone, We would like to know how we could display only direct connections through the Elastic Graph functionality. Currently, we are only able to see all connections in a shot which is making a certain difficul…

---

## [Applying ilm to system template](https://discuss.elastic.co/t/applying-ilm-to-system-template/321751)

<div class="topic-metadata">

**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\
**Replies:** 2\
**Last updated:** [December 30, 2022, 7:53am UTC](https://discuss.elastic.co/t/applying-ilm-to-system-template/321751 "2022-12-30T07:53:29Z")

</div>

Hello, i enabled monitoring in stack monitoring section in kibana, and it generated indexes .monitoring-es-7-\* and .monitoring-kibana-7-\*. I wanted to apply ILM to this indexes as there's currently no ilm attached. I tri…

---

## [Filebeat netflow port 2055 bound to host](https://discuss.elastic.co/t/filebeat-netflow-port-2055-bound-to-host/322101)

<div class="topic-metadata">

**Author:** [@shaikmuzakkir](https://discuss.elastic.co/u/shaikmuzakkir)\
**Replies:** 2\
**Last updated:** [December 30, 2022, 7:16am UTC](https://discuss.elastic.co/t/filebeat-netflow-port-2055-bound-to-host/322101 "2022-12-30T07:16:45Z")

</div>

Hi We are using the filebeat image - docker.elastic.co/beats/filebeat:8.4.3 and see the netflow port 2055 is bound to the host. We are using the below config for netflow as input: - type: netflow max\_message…

[Previous page](https://discuss.elastic.co/latest.md?page=837)

[Next page](https://discuss.elastic.co/latest.md?page=839)
