# Latest

**URL:** https://discuss.elastic.co/latest.md?page=841

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 842

---

## [Kibana canvas metrics font not working](https://discuss.elastic.co/t/kibana-canvas-metrics-font-not-working/320262)

<div class="topic-metadata">

**Author:** [@erloti](https://discuss.elastic.co/u/erloti)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 12:30pm UTC](https://discuss.elastic.co/t/kibana-canvas-metrics-font-not-working/320262 "2022-12-28T12:30:16Z")

</div>

Hello, I'm trying to create very simple metrics in canvas. I correctly set the data source et the SQL (data preview is showing the correct data). But whenever I try to add font in the expression, the value becomes '0'…

---

## [Make filter using own data in Vega Lite](https://discuss.elastic.co/t/make-filter-using-own-data-in-vega-lite/320223)

<div class="topic-metadata">

**Author:** [@Irwan\_Kurniawan](https://discuss.elastic.co/u/Irwan_Kurniawan)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 12:19pm UTC](https://discuss.elastic.co/t/make-filter-using-own-data-in-vega-lite/320223 "2022-12-28T12:19:48Z")

</div>

I want to make heat map from this data that show date as x-axis and y-axis as y-axis.. I want to do filter that show only last week data.. Can help me about this? Thank you!

---

## [Kibana User Experience UI does not update data when changing the environment](https://discuss.elastic.co/t/kibana-user-experience-ui-does-not-update-data-when-changing-the-environment/321896)

<div class="topic-metadata">

**Author:** [@apt-get\_install\_skil](https://discuss.elastic.co/u/apt-get_install_skil)\
**Replies:** 2\
**Last updated:** [December 28, 2022, 11:52am UTC](https://discuss.elastic.co/t/kibana-user-experience-ui-does-not-update-data-when-changing-the-environment/321896 "2022-12-28T11:52:28Z")

</div>

After installing the APM Java agent into our backend application, we've also installed the RUM JavaScript agent to gain insights of our frontend performance. We use the agents in two different environments: qa and prod. …

---

## [ElasticS Billing API](https://discuss.elastic.co/t/elastics-billing-api/321385)

<div class="topic-metadata">

**Author:** [@bh03](https://discuss.elastic.co/u/bh03)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 10:43am UTC](https://discuss.elastic.co/t/elastics-billing-api/321385 "2022-12-28T10:43:59Z")

</div>

Hi all, Currently, i am trying to fetch the billing details of my organization using the below API call curl -XGET https://api.elastic-cloud.com/api/v1/billing/costs/{organization\_id} \\ -H "Authorization: ApiKey $EC\_AP…

---

## [Limit number of rows count](https://discuss.elastic.co/t/limit-number-of-rows-count/322069)

<div class="topic-metadata">

**Author:** [@ayush-srivastava-ev](https://discuss.elastic.co/u/ayush-srivastava-ev)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 9:42am UTC](https://discuss.elastic.co/t/limit-number-of-rows-count/322069 "2022-12-28T09:42:44Z")

</div>

How we can limit number of rows per page so that we can get horizontal scroll bar. We don't want to limit no. of searches. We are using version 7.5

---

## [Typeがtextのfieldに長文を入れると、\_ignoredになってしまう。](https://discuss.elastic.co/t/type-text-field-ignored/321622)

<div class="topic-metadata">

**Author:** [@humo](https://discuss.elastic.co/u/humo)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 8:45am UTC](https://discuss.elastic.co/t/type-text-field-ignored/321622 "2022-12-28T08:45:23Z")

</div>

mappingで "full\_text\_colum\_ja": { "type": "text", "store": true, "analyzer": "sudachi\_analyzer" }, と定義しているフィールドにある一定の文字数の長文を入れると、 検索結果で、このfieldが自動的に\_ignoreに設定されてしまいます。 \[14\] =\> Array …

---

## [Do I need track\_total\_hits for reindex java api command?](https://discuss.elastic.co/t/do-i-need-track-total-hits-for-reindex-java-api-command/322058)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 8:36am UTC](https://discuss.elastic.co/t/do-i-need-track-total-hits-for-reindex-java-api-command/322058 "2022-12-28T08:36:20Z")

</div>

The title says it all. I have a query for time range within the reindex command. Just wondering if "track\_total\_hits" is necessary. My doc size will be in the millions.

---

## [Elastic Observability Engineer course - mysql docker container unhealthy](https://discuss.elastic.co/t/elastic-observability-engineer-course-mysql-docker-container-unhealthy/322075)

<div class="topic-metadata">

**Author:** [@sl3vin](https://discuss.elastic.co/u/sl3vin)\
**Replies:** 0\
**Last updated:** [December 28, 2022, 8:00am UTC](https://discuss.elastic.co/t/elastic-observability-engineer-course-mysql-docker-container-unhealthy/322075 "2022-12-28T08:00:58Z")

</div>

Hi Elastic Team, I was sent to you by the support training@elastic team. I just got my Strigo environment reset for the 3rd time but the problem still persists. My mysql docker container ( ubuntu\_mysql) is shown as unhe…

---

## [Unable to export actions](https://discuss.elastic.co/t/unable-to-export-actions/320118)

<div class="topic-metadata">

**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\
**Replies:** 0\
**Last updated:** [November 30, 2022, 8:13am UTC](https://discuss.elastic.co/t/unable-to-export-actions/320118 "2022-11-30T08:13:23Z")

</div>

Hi all, when trying to export some (5) actions using the Kibana Saved Objects UI, we receive the following unspecific error: Unable to generate export: Error transforming objects to export This error does not occur wi…

---

## [Kibana ECK users](https://discuss.elastic.co/t/kibana-eck-users/321480)

<div class="topic-metadata">

**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\
**Replies:** 2\
**Last updated:** [December 28, 2022, 5:08am UTC](https://discuss.elastic.co/t/kibana-eck-users/321480 "2022-12-28T05:08:00Z")

</div>

How to define users in Kibana ECK manifests? I don't / haven't found any doc.

---

## [Iptables events not being published in elasticsearch](https://discuss.elastic.co/t/iptables-events-not-being-published-in-elasticsearch/320994)

<div class="topic-metadata">

**Author:** [@jasongil](https://discuss.elastic.co/u/jasongil)\
**Replies:** 3\
**Last updated:** [December 28, 2022, 4:02am UTC](https://discuss.elastic.co/t/iptables-events-not-being-published-in-elasticsearch/320994 "2022-12-28T04:02:25Z")

</div>

Beginner / intermediate Elastic user here. I have filebeat configured to listen on port 9001/UDP for iptables events that are sent to it via syslogd by my firewall. This has worked fine for years. I recently noticed th…

---

## [Specifying path to kibana in fleet-server.yaml](https://discuss.elastic.co/t/specifying-path-to-kibana-in-fleet-server-yaml/321776)

<div class="topic-metadata">

**Author:** [@natbronislavska](https://discuss.elastic.co/u/natbronislavska)\
**Replies:** 1\
**Last updated:** [December 28, 2022, 3:42am UTC](https://discuss.elastic.co/t/specifying-path-to-kibana-in-fleet-server-yaml/321776 "2022-12-28T03:42:26Z")

</div>

I am running Elastic on kubernetes and I would like to have my infrastructure defined in yaml files. There are few things however that I cannot find in the documentation... I can't find the way to specify a path to Kiba…

---

## [FATAL CLI ERROR YAMLException: can not read a block mapping entry; a multiline key may not be an implicit](https://discuss.elastic.co/t/fatal-cli-error-yamlexception-can-not-read-a-block-mapping-entry-a-multiline-key-may-not-be-an-implicit/317644)

<div class="topic-metadata">

**Author:** [@Vitoria\_De\_Lara](https://discuss.elastic.co/u/Vitoria_De_Lara)\
**Replies:** 1\
**Last updated:** [November 2, 2022, 11:20pm UTC](https://discuss.elastic.co/t/fatal-cli-error-yamlexception-can-not-read-a-block-mapping-entry-a-multiline-key-may-not-be-an-implicit/317644 "2022-11-02T23:20:46Z")

</div>

I'm not able to run kibana

---

## [Logstash - Schedule files](https://discuss.elastic.co/t/logstash-schedule-files/322057)

<div class="topic-metadata">

**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\
**Replies:** 6\
**Last updated:** [December 28, 2022, 1:59am UTC](https://discuss.elastic.co/t/logstash-schedule-files/322057 "2022-12-28T01:59:29Z")

</div>

Hello, I need read new files inside one directory. I have a script that every 10 minutes send news files for this directory. I created this setup in my pipeline: When the first files were insert in the directory ev…

---

## [Checksum confirmation during kibana installation for rpm](https://discuss.elastic.co/t/checksum-confirmation-during-kibana-installation-for-rpm/320425)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [December 28, 2022, 1:28am UTC](https://discuss.elastic.co/t/checksum-confirmation-during-kibana-installation-for-rpm/320425 "2022-12-28T01:28:35Z")

</div>

Hello . Walking through the document and came up with below thought. NIT though. Kibana doc suggest user to MANUALLY to compare checksum ,where elasticsearch doc do this automatically in shasum command . I thought it …

---

## [Questions about terms aggregations and too many buckets exception](https://discuss.elastic.co/t/questions-about-terms-aggregations-and-too-many-buckets-exception/322060)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 0\
**Last updated:** [December 28, 2022, 12:35am UTC](https://discuss.elastic.co/t/questions-about-terms-aggregations-and-too-many-buckets-exception/322060 "2022-12-28T00:35:25Z")

</div>

A question about internals, so hopefully I can get some response regarding some vague questions. :slight\_smile: Do not actually have access to the cluster to test out hypothesis. First of all, according to the docs "…

---

## [Kibana - Data Format didn't see at discover](https://discuss.elastic.co/t/kibana-data-format-didnt-see-at-discover/321929)

<div class="topic-metadata">

**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\
**Replies:** 2\
**Last updated:** [December 27, 2022, 9:34pm UTC](https://discuss.elastic.co/t/kibana-data-format-didnt-see-at-discover/321929 "2022-12-27T21:34:57Z")

</div>

Hello, I was receiving log with this date format Dec 20 12:58:00, for instance. I used SYSLOGTIMESTAMP and it working well. However when I use this field in Kibana to timestamp field I didn't see nothing at discover. …

---

## [Kibana issues](https://discuss.elastic.co/t/kibana-issues/322022)

<div class="topic-metadata">

**Author:** [@Biswajit](https://discuss.elastic.co/u/Biswajit)\
**Replies:** 2\
**Last updated:** [December 27, 2022, 9:32pm UTC](https://discuss.elastic.co/t/kibana-issues/322022 "2022-12-27T21:32:39Z")

</div>

I have kibana 7.5 its running but when i installed 8.5 in same server i started but in browser its showing server is not ready yet. Another thing is in kibana 7.5 i want request & response of a visualisation. Im unable …

---

## [Add the data from a table in a watcher](https://discuss.elastic.co/t/add-the-data-from-a-table-in-a-watcher/317689)

<div class="topic-metadata">

**Author:** [@Nalin](https://discuss.elastic.co/u/Nalin)\
**Replies:** 4\
**Last updated:** [November 2, 2022, 6:21pm UTC](https://discuss.elastic.co/t/add-the-data-from-a-table-in-a-watcher/317689 "2022-11-02T18:21:28Z")

</div>

Hi All, We are able to generate data in a tabular format through a watcher IndexName StoreSize(in MB) DocumentCount index1 23 220 index-2 20 129 index-3 26 178 Is there any way in which we could add the …

---

## [Unable to Parse response body for response bla... bla... from TicketService(module) in Java Spring Data Elasticsearch](https://discuss.elastic.co/t/unable-to-parse-response-body-for-response-bla-bla-from-ticketservice-module-in-java-spring-data-elasticsearch/322052)

<div class="topic-metadata">

**Author:** [@Davut](https://discuss.elastic.co/u/Davut)\
**Replies:** 0\
**Last updated:** [December 27, 2022, 7:12pm UTC](https://discuss.elastic.co/t/unable-to-parse-response-body-for-response-bla-bla-from-ticketservice-module-in-java-spring-data-elasticsearch/322052 "2022-12-27T19:12:54Z")

</div>

I m take same error. I have account-service,ticket-service,notification-service,eureka-service.(Java spring cloud microservice app) Ticket-service is using elasticsearch. Ticket-service database is mysql 8.0.31 on docker…

---

## [How to create new logstash grok field](https://discuss.elastic.co/t/how-to-create-new-logstash-grok-field/320722)

<div class="topic-metadata">

**Author:** [@anon74213320](https://discuss.elastic.co/u/anon74213320)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 6:35pm UTC](https://discuss.elastic.co/t/how-to-create-new-logstash-grok-field/320722 "2022-12-27T18:35:57Z")

</div>

I have an ELK stack Filebeat---\>Logstash----\>Elasticsearch\<----Kibana. I m shipping the logs in a proper way, but I would need to add a custom fields available in Kibana, for searching puproses. The Log file contains a…

---

## [Alerts on SIEM](https://discuss.elastic.co/t/alerts-on-siem/321297)

<div class="topic-metadata">

**Author:** [@Samara\_Brych](https://discuss.elastic.co/u/Samara_Brych)\
**Replies:** 2\
**Last updated:** [December 27, 2022, 6:34pm UTC](https://discuss.elastic.co/t/alerts-on-siem/321297 "2022-12-27T18:34:27Z")

</div>

If I mark an alert as ackowledged on Elastic SIEM, and the alert occurs again, it will notify me again or never more will display on open alerts?

---

## [Jira Connector](https://discuss.elastic.co/t/jira-connector/321682)

<div class="topic-metadata">

**Author:** [@merayray](https://discuss.elastic.co/u/merayray)\
**Replies:** 7\
**Last updated:** [December 27, 2022, 6:30pm UTC](https://discuss.elastic.co/t/jira-connector/321682 "2022-12-27T18:30:55Z")

</div>

I am using a Jira connector but when I test it I see the following error: Unable to get issue types \[Action\]\[Jira\]: Unable to get capabilities. Error: read ECONNRESET. Reason: unknown: errorResponse was null Any idea …

---

## [ALLOCATION\_FAILED while draining nodes](https://discuss.elastic.co/t/allocation-failed-while-draining-nodes/322048)

<div class="topic-metadata">

**Author:** [@Reg\_Dancy](https://discuss.elastic.co/u/Reg_Dancy)\
**Replies:** 0\
**Last updated:** [December 27, 2022, 6:24pm UTC](https://discuss.elastic.co/t/allocation-failed-while-draining-nodes/322048 "2022-12-27T18:24:07Z")

</div>

Hello all, I was draining each node in my cluster one at a time. All of a sudden the draining paused. I received the error below: $ curl -s -H 'content-type: application/json' -XGET http://localhost:9200/\_cluster/alloca…

---

## [Hot nodes are having high cpu usage](https://discuss.elastic.co/t/hot-nodes-are-having-high-cpu-usage/322046)

<div class="topic-metadata">

**Author:** [@vamsi2](https://discuss.elastic.co/u/vamsi2)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 6:10pm UTC](https://discuss.elastic.co/t/hot-nodes-are-having-high-cpu-usage/322046 "2022-12-27T18:10:13Z")

</div>

Hello, Currently I'm having three hot nodes and all the three hot nodes are having high % of CPU usage which is around 80%-100%. So can I add dedicated coordinating and Ingest instance which will help me to solve this …

---

## [JSON Array treatment in a visualization](https://discuss.elastic.co/t/json-array-treatment-in-a-visualization/321058)

<div class="topic-metadata">

**Author:** [@pedrodantas](https://discuss.elastic.co/u/pedrodantas)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 6:07pm UTC](https://discuss.elastic.co/t/json-array-treatment-in-a-visualization/321058 "2022-12-27T18:07:23Z")

</div>

Hello! I was wondering if there is any way to display the contents of a JSON Array that is received in the Elastic logs in a Kibana visualization. My application is sending JSON logs to Kibana. One of the log fields is…

---

## [Compare current data with previous day's data based on time](https://discuss.elastic.co/t/compare-current-data-with-previous-days-data-based-on-time/320197)

<div class="topic-metadata">

**Author:** [@viveks](https://discuss.elastic.co/u/viveks)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 5:49pm UTC](https://discuss.elastic.co/t/compare-current-data-with-previous-days-data-based-on-time/320197 "2022-12-27T17:49:05Z")

</div>

Hi, I have events that are generated throughout the day based on API processing. These events are available in Elastic and are generated throughout the day. I am trying to figure out a way to create an alert when the num…

---

## [Updating ES records : Ingestion lag and Search returns empty](https://discuss.elastic.co/t/updating-es-records-ingestion-lag-and-search-returns-empty/321167)

<div class="topic-metadata">

**Author:** [@VV1002](https://discuss.elastic.co/u/VV1002)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 10:41pm UTC](https://discuss.elastic.co/t/updating-es-records-ingestion-lag-and-search-returns-empty/321167 "2022-12-13T22:41:45Z")

</div>

Hi ES team, We currently have a Nodejs import script running to process our XML,HTML files followed by ingestion to ES. The XML,HTML files are uploaded in S3 bucket and queued up in the SQS triggering the Lambda functio…

---

## [Anonymous access](https://discuss.elastic.co/t/anonymous-access/322033)

<div class="topic-metadata">

**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 3:59pm UTC](https://discuss.elastic.co/t/anonymous-access/322033 "2022-12-27T15:59:42Z")

</div>

Hi Team, User would like to change Elasticsearch config to allow anonymous to post data to our Elastic search. No other accesses like read or delete shall be given to anonymous.

---

## [Trying to make a canvas workpad](https://discuss.elastic.co/t/trying-to-make-a-canvas-workpad/321219)

<div class="topic-metadata">

**Author:** [@bit1290](https://discuss.elastic.co/u/bit1290)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 3:42pm UTC](https://discuss.elastic.co/t/trying-to-make-a-canvas-workpad/321219 "2022-12-27T15:42:59Z")

</div>

Hello, I have this configuration: with this preview data: and the display has this configuration with the following error: Can someone help me understand why I'm having this error? Thank you very much

[Previous page](https://discuss.elastic.co/latest.md?page=840)

[Next page](https://discuss.elastic.co/latest.md?page=842)
