# Latest **URL:** https://discuss.elastic.co/latest.md?page=840 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 841 --- ## [! i can't see kibana.yml when i use it using docker compose in ubuntu server does anyone have any idea why is this happening i want to make changes in kabana file in order use to alerting system](https://discuss.elastic.co/t/i-cant-see-kibana-yml-when-i-use-it-using-docker-compose-in-ubuntu-server-does-anyone-have-any-idea-why-is-this-happening-i-want-to-make-changes-in-kabana-file-in-order-use-to-alerting-system/318035)
**Author:** [@DIVYANSH\_SINGH](https://discuss.elastic.co/u/DIVYANSH_SINGH)\ **Replies:** 2\ **Last updated:** [November 3, 2022, 1:04pm UTC](https://discuss.elastic.co/t/i-cant-see-kibana-yml-when-i-use-it-using-docker-compose-in-ubuntu-server-does-anyone-have-any-idea-why-is-this-happening-i-want-to-make-changes-in-kabana-file-in-order-use-to-alerting-system/318035 "2022-11-03T13:04:34Z")
--- ## [Logstash pipeline worker stops processing events because of exception](https://discuss.elastic.co/t/logstash-pipeline-worker-stops-processing-events-because-of-exception/322126)
**Author:** [@tcapp24](https://discuss.elastic.co/u/tcapp24)\ **Replies:** 3\ **Last updated:** [December 29, 2022, 1:19am UTC](https://discuss.elastic.co/t/logstash-pipeline-worker-stops-processing-events-because-of-exception/322126 "2022-12-29T01:19:59Z")
Hello, Currently our beats-dead-letter-queue-processing-pipeline is causing a exception which makes events stop outputting to Elasticsearch: beats-dead-letter-queue-processing-pipeline\] Pipeline worker error, the pipe… --- ## [Kibana' Stack Monitoring is missing Logstash instance(s)](https://discuss.elastic.co/t/kibana-stack-monitoring-is-missing-logstash-instance-s/321046)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 4\ **Last updated:** [December 28, 2022, 3:41pm UTC](https://discuss.elastic.co/t/kibana-stack-monitoring-is-missing-logstash-instance-s/321046 "2022-12-28T15:41:11Z")
Hello World! I updated my Elastic stack from 7.17.7 release to 7.17.8, and now Kibana's monitoring app is missing the "Logstash" instance(s). I checked all the settings, and I didn't find any mistakes. I then double-ch… --- ## [Kibana alert rule behavior](https://discuss.elastic.co/t/kibana-alert-rule-behavior/319896)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 1\ **Last updated:** [December 1, 2022, 12:46am UTC](https://discuss.elastic.co/t/kibana-alert-rule-behavior/319896 "2022-12-01T00:46:24Z")
Hi, I am exploring the Kibana alerts feature by creating rules and trying to index the actions in an index.. I have it working, though the behavior of it seems unexpected (atleast from where I am standing).. The rules… --- ## [Logstash Filter for Cisco ASA Source Destination and Communication](https://discuss.elastic.co/t/logstash-filter-for-cisco-asa-source-destination-and-communication/322063)
**Author:** [@Pratik\_Srivastava](https://discuss.elastic.co/u/Pratik_Srivastava)\ **Replies:** 5\ **Last updated:** [December 28, 2022, 9:41pm UTC](https://discuss.elastic.co/t/logstash-filter-for-cisco-asa-source-destination-and-communication/322063 "2022-12-28T21:41:31Z")
I want to configure logstash filter to see asa logs with communication detail. LOG Sample: Dec 27 02:48:08 Test-FW : %ASA-6-302014: Teardown TCP connection 3505833084 for Test-OUT:192.168.1.10/58538 to Mgmt-IN:192.168.1… --- ## [How to troubleshoot "undefined method \`+' for nil:NilClass"](https://discuss.elastic.co/t/how-to-troubleshoot-undefined-method-for-nil-nilclass/322121)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 3\ **Last updated:** [December 28, 2022, 8:54pm UTC](https://discuss.elastic.co/t/how-to-troubleshoot-undefined-method-for-nil-nilclass/322121 "2022-12-28T20:54:47Z")
Hi Maybe You have some idea how to troubleshoot in the long pipeline the bug referring to \[2022-12-28T19:47:41,016\]\[ERROR\]\[logstash.filters.ruby \]\[main\]\[1b91d552e5ff1ebff261eab8e51449b8aba605255321bb2b70376384a24931… --- ## [How to configure ILM hot phase, when cluster has only warm nodes](https://discuss.elastic.co/t/how-to-configure-ilm-hot-phase-when-cluster-has-only-warm-nodes/322118)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 3\ **Last updated:** [December 28, 2022, 8:16pm UTC](https://discuss.elastic.co/t/how-to-configure-ilm-hot-phase-when-cluster-has-only-warm-nodes/322118 "2022-12-28T20:16:34Z")
Hi, Elasticsearch version: 8.1.2 It has 4 warm nodes(no hot nodes). I want to configure ILM policy in this cluster. So, how can configure hot-warm ILM policy in Elastic cluster which has only warm node. Thank you...… --- ## [Failures not displayed in kibana](https://discuss.elastic.co/t/failures-not-displayed-in-kibana/322120)
**Author:** [@ant2ne](https://discuss.elastic.co/u/ant2ne)\ **Replies:** 1\ **Last updated:** [December 28, 2022, 7:39pm UTC](https://discuss.elastic.co/t/failures-not-displayed-in-kibana/322120 "2022-12-28T19:39:01Z")
this is probably a user error. But I don't know how to google this one. cat tcp.yml |grep -v "#" |uniq id: ssh-status name: ssh-status check enabled: true hosts: \["192.168.1.139:22", "192.168.1.96:22", "8.8.8.8… --- ## [Filebeat inconsistent with date-based index name when input type is "container"](https://discuss.elastic.co/t/filebeat-inconsistent-with-date-based-index-name-when-input-type-is-container/322050)
**Author:** [@GaijinSystems](https://discuss.elastic.co/u/GaijinSystems)\ **Replies:** 3\ **Last updated:** [December 28, 2022, 7:12pm UTC](https://discuss.elastic.co/t/filebeat-inconsistent-with-date-based-index-name-when-input-type-is-container/322050 "2022-12-28T19:12:24Z")
Hello, all. I was wondering if anyone has ever stumbled across this and if there are any workarounds (I've been bashing my head against it for entirely too long now...). I have multiple servers using filebeat to ship l… --- ## [Cluster yellow b/c .security-7 index in unassigned state](https://discuss.elastic.co/t/cluster-yellow-b-c-security-7-index-in-unassigned-state/322112)
**Author:** [@Dimitry\_Feigin](https://discuss.elastic.co/u/Dimitry_Feigin)\ **Replies:** 2\ **Last updated:** [December 28, 2022, 7:06pm UTC](https://discuss.elastic.co/t/cluster-yellow-b-c-security-7-index-in-unassigned-state/322112 "2022-12-28T19:06:53Z")
We started the upgrade of the cluster that was in green state. The upgrade (through ansible) failed on node1 while it was not able to download rpm. We found the issue and fixed. Now the cluster after restart w/o any actu… --- ## [Alert based on field](https://discuss.elastic.co/t/alert-based-on-field/319582)
**Author:** [@breakingcode](https://discuss.elastic.co/u/breakingcode)\ **Replies:** 4\ **Last updated:** [November 30, 2022, 7:16pm UTC](https://discuss.elastic.co/t/alert-based-on-field/319582 "2022-11-30T19:16:59Z")
Hii, This is my scenario. I have one index named "employee" which have 3 fields name, salary and created\_at. I want to trigger an alert everytime someone index the document with salary below certain value. For example i… --- ## [Macos M1 Ventura 13.0.1 Elastic agent install fail](https://discuss.elastic.co/t/macos-m1-ventura-13-0-1-elastic-agent-install-fail/319262)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 9\ **Last updated:** [December 28, 2022, 5:27pm UTC](https://discuss.elastic.co/t/macos-m1-ventura-13-0-1-elastic-agent-install-fail/319262 "2022-12-28T17:27:57Z")
I installed the elastic agent on macos Ventura 13.0.1 using the command line and the installation failed showing： panic: getwd: invalid argument goroutine 1 \[running\]: github.com/elastic/elastic-agent/internal/pkg/age… --- ## [API key: unable to find apikey with id](https://discuss.elastic.co/t/api-key-unable-to-find-apikey-with-id/322104)
**Author:** [@chaserb](https://discuss.elastic.co/u/chaserb)\ **Replies:** 2\ **Last updated:** [December 28, 2022, 5:20pm UTC](https://discuss.elastic.co/t/api-key-unable-to-find-apikey-with-id/322104 "2022-12-28T17:20:26Z")
I appear to be having the same issue that @inbox.ex was having here, in that I'm receiving 401 when interacting with the Elastcisearch endpoint. According to this doc, I've created an API key for my deployment, and now I… --- ## [Restored from snapshoots 2 master nodes but several indecies are in unassigned state](https://discuss.elastic.co/t/restored-from-snapshoots-2-master-nodes-but-several-indecies-are-in-unassigned-state/322113)
**Author:** [@Dimitry\_Feigin](https://discuss.elastic.co/u/Dimitry_Feigin)\ **Replies:** 3\ **Last updated:** [December 28, 2022, 4:57pm UTC](https://discuss.elastic.co/t/restored-from-snapshoots-2-master-nodes-but-several-indecies-are-in-unassigned-state/322113 "2022-12-28T16:57:03Z")
We had 3 node cluster where all nodes were masters. We accidently deleted 2 master nodes. We restore them from snapshots. However we have several indecies in unassign state:| externalkeyhandler-000005 4 p START… --- ## [Exiting: Failed to start crawler: creating module reloader failed:](https://discuss.elastic.co/t/exiting-failed-to-start-crawler-creating-module-reloader-failed/321604)
**Author:** [@ant2ne](https://discuss.elastic.co/u/ant2ne)\ **Replies:** 9\ **Last updated:** [December 28, 2022, 4:37pm UTC](https://discuss.elastic.co/t/exiting-failed-to-start-crawler-creating-module-reloader-failed/321604 "2022-12-28T16:37:42Z")
using: https://www.elastic.co/guide/en/elastic-stack/current/installing-elastic-stack.html Versions on ubuntu 22.04. /usr/share/logstash/bin/logstash -V Using bundled JDK: /usr/share/logstash/jdk logstash 8.5.3 /usr… --- ## [Beats instance detected Click 'Set up monitoring' below to start monitoring this instance](https://discuss.elastic.co/t/beats-instance-detected-click-set-up-monitoring-below-to-start-monitoring-this-instance/322008)
**Author:** [@ant2ne](https://discuss.elastic.co/u/ant2ne)\ **Replies:** 7\ **Last updated:** [December 28, 2022, 4:27pm UTC](https://discuss.elastic.co/t/beats-instance-detected-click-set-up-monitoring-below-to-start-monitoring-this-instance/322008 "2022-12-28T16:27:41Z")
All services are running. I log into 5601, click the drop down hamburger | Management | Stack Monitoring But there is no 'Set up monitoring' to click on. root@ub2204elk:/etc# cat metricbeat/metricbeat.yml | grep -v … --- ## [Has anyone worked with Language Analyzers, Arabic analyzer in specific?](https://discuss.elastic.co/t/has-anyone-worked-with-language-analyzers-arabic-analyzer-in-specific/316611)
**Author:** [@Hassan\_Abbas](https://discuss.elastic.co/u/Hassan_Abbas)\ **Replies:** 1\ **Last updated:** [December 28, 2022, 3:41pm UTC](https://discuss.elastic.co/t/has-anyone-worked-with-language-analyzers-arabic-analyzer-in-specific/316611 "2022-12-28T15:41:37Z")
I'm finding difficulties implementing the analyzer on a certain field that will be used in a search function for an Arabic news platform --- ## [(413) Request Entity Too Large Error In Filebeat Logs](https://discuss.elastic.co/t/413-request-entity-too-large-error-in-filebeat-logs/322108)
**Author:** [@vijaykumar](https://discuss.elastic.co/u/vijaykumar)\ **Replies:** 0\ **Last updated:** [December 28, 2022, 3:32pm UTC](https://discuss.elastic.co/t/413-request-entity-too-large-error-in-filebeat-logs/322108 "2022-12-28T15:32:42Z")
I setup EFK Stack Using Helm Chart and versions of Elasticsearch Kibana and filebeat are 7.17.3 Helm Chart Link: Used default values.yaml file across all three components Installation is successful Filebeat indexe… --- ## [Increase ignore above threshold - Kibana UI](https://discuss.elastic.co/t/increase-ignore-above-threshold-kibana-ui/319880)
**Author:** [@Murali\_Y](https://discuss.elastic.co/u/Murali_Y)\ **Replies:** 4\ **Last updated:** [December 28, 2022, 3:30pm UTC](https://discuss.elastic.co/t/increase-ignore-above-threshold-kibana-ui/319880 "2022-12-28T15:30:15Z")
Hello all, We are using Kibana for logging/viewing/reporting our UiPath BOT logs. But we are unable to view one field on Kibana due to the 256 characters threshold that is set on that field mapping. From How to set the… --- ## [Unhealthy status yet sending events - agent via logstash](https://discuss.elastic.co/t/unhealthy-status-yet-sending-events-agent-via-logstash/321801)
**Author:** [@rossw](https://discuss.elastic.co/u/rossw)\ **Replies:** 6\ **Last updated:** [December 28, 2022, 3:21pm UTC](https://discuss.elastic.co/t/unhealthy-status-yet-sending-events-agent-via-logstash/321801 "2022-12-28T15:21:04Z")
We have converted an agent policy to use the Logstash ingest path instead of direct to the cluster. Events are being received by the logstash, and they appear in Elastic, so the end to end path is working ok. However t… --- ## [JVM heap recommendations on k8s cluster](https://discuss.elastic.co/t/jvm-heap-recommendations-on-k8s-cluster/322017)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 5\ **Last updated:** [December 28, 2022, 3:02pm UTC](https://discuss.elastic.co/t/jvm-heap-recommendations-on-k8s-cluster/322017 "2022-12-28T15:02:05Z")
Hi, I would like to know what is the recommendation about the heap size when operating ES nodes in a k8s cluster. I have referred this and it is not fully clear what is the recommendation. Manage compute resources | Ela… --- ## [Observability Engineer 5.1 - Ingest Pipeline](https://discuss.elastic.co/t/observability-engineer-5-1-ingest-pipeline/322103)
**Author:** [@sl3vin](https://discuss.elastic.co/u/sl3vin)\ **Replies:** 0\ **Last updated:** [December 28, 2022, 2:29pm UTC](https://discuss.elastic.co/t/observability-engineer-5-1-ingest-pipeline/322103 "2022-12-28T14:29:57Z")
Hey, I'm creating an ingest pipeline for the Elastic Observability Engineer lab with the following condition: ctx.mysql.status.max\_used\_connections \>= 10 This is the suggestion from the solution and is working fine. … --- ## [Kibana import error in python](https://discuss.elastic.co/t/kibana-import-error-in-python/320643)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 1\ **Last updated:** [December 28, 2022, 2:22pm UTC](https://discuss.elastic.co/t/kibana-import-error-in-python/320643 "2022-12-28T14:22:17Z")
This is the error I'm getting while I'm trying to create a data view in Kibana using python. I'm trying to create a data view in Kibana cloud. ImportError: cannot import name 'Kibana' from 'kibana'. Can someone help me w… --- ## [Sql where condition with case is not converting to bool query](https://discuss.elastic.co/t/sql-where-condition-with-case-is-not-converting-to-bool-query/322071)
**Author:** [@Alok.Singh](https://discuss.elastic.co/u/Alok.Singh)\ **Replies:** 0\ **Last updated:** [December 28, 2022, 6:47am UTC](https://discuss.elastic.co/t/sql-where-condition-with-case-is-not-converting-to-bool-query/322071 "2022-12-28T06:47:49Z")
Hello @elastic I have a view called V1, I want to filter data based on role. If role is 1 or 2 then role can see all record else for other role they can see only those record which is assign to them. sql query: select… --- ## [Поиск по вложенному nested type](https://discuss.elastic.co/t/nested-type/322102)
**Author:** [@One\_Two](https://discuss.elastic.co/u/One_Two)\ **Replies:** 0\ **Last updated:** [December 28, 2022, 2:13pm UTC](https://discuss.elastic.co/t/nested-type/322102 "2022-12-28T14:13:40Z")
Здравствуйте, возможно ли в одном запросе сделать две разные query. Изначально мой запрос выглядел так { "query": { "bool": { "must": { "match\_all": {} }, "filter": \[ { … --- ## [Is there any way to add custom date like financial year (01 April to 31 March) in Time filter quick ranges in Kibana 8.5](https://discuss.elastic.co/t/is-there-any-way-to-add-custom-date-like-financial-year-01-april-to-31-march-in-time-filter-quick-ranges-in-kibana-8-5/321977)
**Author:** [@ysattvik](https://discuss.elastic.co/u/ysattvik)\ **Replies:** 4\ **Last updated:** [December 28, 2022, 1:37pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-add-custom-date-like-financial-year-01-april-to-31-march-in-time-filter-quick-ranges-in-kibana-8-5/321977 "2022-12-28T13:37:34Z")
{ "from": "now-1y/d", "to": "now", "display": "Last 1 year" } Here, can we add a date range like (01 April to 31 March) as Financial Year? --- ## [Is there any way to make some changes in available time picker format or disable some option in Kibana?](https://discuss.elastic.co/t/is-there-any-way-to-make-some-changes-in-available-time-picker-format-or-disable-some-option-in-kibana/322090)
**Author:** [@ysattvik](https://discuss.elastic.co/u/ysattvik)\ **Replies:** 1\ **Last updated:** [December 28, 2022, 1:34pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-make-some-changes-in-available-time-picker-format-or-disable-some-option-in-kibana/322090 "2022-12-28T13:34:12Z")
In the given image if we want only absolute date not relative section, now section and time section. Is it possible to do this? If possible, then please suggest the way. My second requirement is that in the below … --- ## [API intgrations](https://discuss.elastic.co/t/api-intgrations/321627)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 4\ **Last updated:** [December 28, 2022, 1:08pm UTC](https://discuss.elastic.co/t/api-intgrations/321627 "2022-12-28T13:08:46Z")
hello everyone, What is the best way to exploit Elasticsearch RESTful API to integrate with other services can supported APIs? --- ## [How to add an analyzer that can remove duplicate tokens from the analyzed field?](https://discuss.elastic.co/t/how-to-add-an-analyzer-that-can-remove-duplicate-tokens-from-the-analyzed-field/322098)
**Author:** [@hemangr8](https://discuss.elastic.co/u/hemangr8)\ **Replies:** 0\ **Last updated:** [December 28, 2022, 12:45pm UTC](https://discuss.elastic.co/t/how-to-add-an-analyzer-that-can-remove-duplicate-tokens-from-the-analyzed-field/322098 "2022-12-28T12:45:00Z")
I want to add a token filter in my custom analyzer to remove duplicate tokens in the text field while matching. Eg: Input: "random petrol pump, beside random2 petrol pump" After analyzer: \["random", "petrol", "pump", "… --- ## [Building Kibana Dashboard Dynamically](https://discuss.elastic.co/t/building-kibana-dashboard-dynamically/33713)
**Author:** [@Asad\_Rehman](https://discuss.elastic.co/u/Asad_Rehman)\ **Replies:** 9\ **Last updated:** [June 13, 2017, 12:55am UTC](https://discuss.elastic.co/t/building-kibana-dashboard-dynamically/33713 "2017-06-13T00:55:07Z")
Hi All, I have some indexes in elasticsearch and I have build my required dashboard with required visualizations in Kibana. My index contains data from different shops regarding their sales and revenues and visualization… [Previous page](https://discuss.elastic.co/latest.md?page=839) [Next page](https://discuss.elastic.co/latest.md?page=841)