# Latest

**URL:** https://discuss.elastic.co/latest.md?page=842

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 843

---

## [Trying to make a canvas workpad](https://discuss.elastic.co/t/trying-to-make-a-canvas-workpad/321219)

<div class="topic-metadata">

**Author:** [@bit1290](https://discuss.elastic.co/u/bit1290)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 3:42pm UTC](https://discuss.elastic.co/t/trying-to-make-a-canvas-workpad/321219 "2022-12-27T15:42:59Z")

</div>

Hello, I have this configuration: with this preview data: and the display has this configuration with the following error: Can someone help me understand why I'm having this error? Thank you very much

---

## [Kibana visualization using wildcards](https://discuss.elastic.co/t/kibana-visualization-using-wildcards/320302)

<div class="topic-metadata">

**Author:** [@tfinan](https://discuss.elastic.co/u/tfinan)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 3:05pm UTC](https://discuss.elastic.co/t/kibana-visualization-using-wildcards/320302 "2022-12-27T15:05:51Z")

</div>

Probably a very basic question here, but I am can't figure it out. I have an index with many fields named "process\_" with a numeric value assigned. I would like to create a table listing these fields, sorted by the va…

---

## [Failed to setup automated snapshot with elastic operator](https://discuss.elastic.co/t/failed-to-setup-automated-snapshot-with-elastic-operator/322041)

<div class="topic-metadata">

**Author:** [@Mahmoud\_Yasser](https://discuss.elastic.co/u/Mahmoud_Yasser)\
**Replies:** 0\
**Last updated:** [December 27, 2022, 2:27pm UTC](https://discuss.elastic.co/t/failed-to-setup-automated-snapshot-with-elastic-operator/322041 "2022-12-27T14:27:33Z")

</div>

I'm launching 3 elastic nodes using elastic operator and i tried to set up automated snapshots for these instances. I used elastic operator 2.5.0 on Kubernetes version v1.23.11-gke.300 and used Elasticsearch version 8.5…

---

## [Kibana SSL configuration for Windows Server Host](https://discuss.elastic.co/t/kibana-ssl-configuration-for-windows-server-host/321050)

<div class="topic-metadata">

**Author:** [@janis.cimins](https://discuss.elastic.co/u/janis.cimins)\
**Replies:** 3\
**Last updated:** [December 27, 2022, 2:53pm UTC](https://discuss.elastic.co/t/kibana-ssl-configuration-for-windows-server-host/321050 "2022-12-27T14:53:17Z")

</div>

Hey! I am trying to set up Elastic on my testlab Windows server 2019. All is good until I try to enable SSL. I am using this guide : But seem to get an error (possible syntax problem I suppose). C:\\kibana\>.\\bin\\kib…

---

## [Out of memory error and duplicate rows](https://discuss.elastic.co/t/out-of-memory-error-and-duplicate-rows/321932)

<div class="topic-metadata">

**Author:** [@darius12](https://discuss.elastic.co/u/darius12)\
**Replies:** 4\
**Last updated:** [December 27, 2022, 2:29pm UTC](https://discuss.elastic.co/t/out-of-memory-error-and-duplicate-rows/321932 "2022-12-27T14:29:06Z")

</div>

getting this error when trying to index using logstash: warning: thread "\[main\]\>worker1" terminated with exception (report\_on\_exception is true): java.lang.OutOfMemoryError: UTF16 String size is 1371255266, should be l…

---

## [How can I make trend line as a dotted line](https://discuss.elastic.co/t/how-can-i-make-trend-line-as-a-dotted-line/320213)

<div class="topic-metadata">

**Author:** [@princejaiswal03](https://discuss.elastic.co/u/princejaiswal03)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 2:24pm UTC](https://discuss.elastic.co/t/how-can-i-make-trend-line-as-a-dotted-line/320213 "2022-12-27T14:24:54Z")

</div>

I have used trend() function for generating the trend line. How can I make that trend line as a dotted line? I have one more question. Is it possible to remove the background grid lines in the timelion charts?

---

## [Security module access - bundles/kbn-ui-shared-deps-npm/kbn-ui-shared-deps-npm.dll](https://discuss.elastic.co/t/security-module-access-bundles-kbn-ui-shared-deps-npm-kbn-ui-shared-deps-npm-dll/321133)

<div class="topic-metadata">

**Author:** [@Lamis](https://discuss.elastic.co/u/Lamis)\
**Replies:** 5\
**Last updated:** [December 27, 2022, 12:58pm UTC](https://discuss.elastic.co/t/security-module-access-bundles-kbn-ui-shared-deps-npm-kbn-ui-shared-deps-npm-dll/321133 "2022-12-27T12:58:38Z")

</div>

Hi I am getting this error when trying to access security module, // \`\`\` { "name": "Error", "body": { "message": "undefined: undefined", "status\_code": 400 }, "message": "Bad Request", "stack": "o@http://192.16…

---

## [Using jdbc in logstash to import Elasticsearch data Connection error](https://discuss.elastic.co/t/using-jdbc-in-logstash-to-import-elasticsearch-data-connection-error/322037)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 12:37pm UTC](https://discuss.elastic.co/t/using-jdbc-in-logstash-to-import-elasticsearch-data-connection-error/322037 "2022-12-27T12:37:27Z")

</div>

Hi all, I'm trying to import data from different databases from different clusters to my elasticsearch database. Before importing mysql data to my elasticsearch database , I'm trying to import elasticsearch database fr…

---

## [Kibana not showing Uptime Monitors added in Monitor Management or via Fleet Policy](https://discuss.elastic.co/t/kibana-not-showing-uptime-monitors-added-in-monitor-management-or-via-fleet-policy/321322)

<div class="topic-metadata">

**Author:** [@rowra](https://discuss.elastic.co/u/rowra)\
**Replies:** 3\
**Last updated:** [December 27, 2022, 11:58am UTC](https://discuss.elastic.co/t/kibana-not-showing-uptime-monitors-added-in-monitor-management-or-via-fleet-policy/321322 "2022-12-27T11:58:15Z")

</div>

I used to have several monitors added in Monitor Management and those showed up just fine in Uptime / Monitors. Now they don't. If I delete them / add them again nothing changes. If I add them manually via Integrations (…

---

## [I have a issue: \[es/index\] failed: \[index\_not\_found\_exception\] no such index when I write data into datastream using java client 8.5.3](https://discuss.elastic.co/t/i-have-a-issue-es-index-failed-index-not-found-exception-no-such-index-when-i-write-data-into-datastream-using-java-client-8-5-3/322035)

<div class="topic-metadata">

**Author:** [@xuxiao415](https://discuss.elastic.co/u/xuxiao415)\
**Replies:** 0\
**Last updated:** [December 27, 2022, 11:38am UTC](https://discuss.elastic.co/t/i-have-a-issue-es-index-failed-index-not-found-exception-no-such-index-when-i-write-data-into-datastream-using-java-client-8-5-3/322035 "2022-12-27T11:38:53Z")

</div>

I have a es cluster with three data nodes. I create a data stream: myindex. when I write data into data stream using java client 8.5.3, I met a problem: co.elastic.clients.elasticsearch.\_types.ElasticsearchException: \[e…

---

## [Clean filter when going back from a drilldown](https://discuss.elastic.co/t/clean-filter-when-going-back-from-a-drilldown/320045)

<div class="topic-metadata">

**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\
**Replies:** 0\
**Last updated:** [November 29, 2022, 12:52pm UTC](https://discuss.elastic.co/t/clean-filter-when-going-back-from-a-drilldown/320045 "2022-11-29T12:52:35Z")

</div>

Hi! I currently have a pie chart in dashboard A, and have set a drilldown to go into another dashboard B + apply the filter chosen in A. That works great. Now, I want the possibility to "go back" from B to A and drilld…

---

## [Installing Fleet Server on ECK Openshift deployment](https://discuss.elastic.co/t/installing-fleet-server-on-eck-openshift-deployment/322016)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 2\
**Last updated:** [December 27, 2022, 10:49am UTC](https://discuss.elastic.co/t/installing-fleet-server-on-eck-openshift-deployment/322016 "2022-12-27T10:49:47Z")

</div>

Hi all. I have deployed by using the operator, in a Openshift K8s cluster an ECK environment with 3 ES multirole nodes, 1 Kibana, 1 Logstash and 2+2 Metricbeats and Filebeat to get logs and metrics from my two nodes k8s…

---

## [Logstash - Aggregate xpath data](https://discuss.elastic.co/t/logstash-aggregate-xpath-data/321567)

<div class="topic-metadata">

**Author:** [@Basti97](https://discuss.elastic.co/u/Basti97)\
**Replies:** 8\
**Last updated:** [December 21, 2022, 1:14pm UTC](https://discuss.elastic.co/t/logstash-aggregate-xpath-data/321567 "2022-12-21T13:14:29Z")

</div>

Hello, I am a Logstash beginner and have probably a relatively simple question. Im using xpath to get data from a xml document (have shortened the code on purpose): filter { xml { source =\> "message" store\_xml =\> f…

---

## [Elastic search Reindex Count of Document not match](https://discuss.elastic.co/t/elastic-search-reindex-count-of-document-not-match/321898)

<div class="topic-metadata">

**Author:** [@Voon\_see\_hong](https://discuss.elastic.co/u/Voon_see_hong)\
**Replies:** 11\
**Last updated:** [December 27, 2022, 8:37am UTC](https://discuss.elastic.co/t/elastic-search-reindex-count-of-document-not-match/321898 "2022-12-27T08:37:00Z")

</div>

hi all, i face a weird situation here where i ran reindex POST \_reindex?wait\_for\_completion=false { "source": { "index": "stage-user" }, "conflicts": "proceed", "dest": {"index": "stage-user-test-v1", "op\_…

---

## [If there are multiple js files after build, how to upload them to APM server Make it valid on the Source Map](https://discuss.elastic.co/t/if-there-are-multiple-js-files-after-build-how-to-upload-them-to-apm-server-make-it-valid-on-the-source-map/322025)

<div class="topic-metadata">

**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 7:39am UTC](https://discuss.elastic.co/t/if-there-are-multiple-js-files-after-build-how-to-upload-them-to-apm-server-make-it-valid-on-the-source-map/322025 "2022-12-27T07:39:36Z")

</div>

The example I saw from the official documentation was a single file upload ： However, there will be multiple files after I build. How can I upload them? I tried to package only one file but got an error

---

## [Kibana Calculation of a particular row under a particular column](https://discuss.elastic.co/t/kibana-calculation-of-a-particular-row-under-a-particular-column/320000)

<div class="topic-metadata">

**Author:** [@akhil\_yl](https://discuss.elastic.co/u/akhil_yl)\
**Replies:** 0\
**Last updated:** [November 29, 2022, 6:56am UTC](https://discuss.elastic.co/t/kibana-calculation-of-a-particular-row-under-a-particular-column/320000 "2022-11-29T06:56:19Z")

</div>

Hi, I am using 6.8.0 kibana and i use 2 different indexes which have 2 different queries and i need to be compare those and output should be in % and index 1 only query1 will work and in another index query 2 will work …

---

## [Dec 23rd, 2022: \[pt\_BR\] IoT, coletando dados de um drone em tempo real](https://discuss.elastic.co/t/dec-23rd-2022-pt-br-iot-coletando-dados-de-um-drone-em-tempo-real/318816)

<div class="topic-metadata">

**Author:** [@Alex\_Salgado-Elastic](https://discuss.elastic.co/u/Alex_Salgado-Elastic)\
**Replies:** 3\
**Last updated:** [December 27, 2022, 5:36am UTC](https://discuss.elastic.co/t/dec-23rd-2022-pt-br-iot-coletando-dados-de-um-drone-em-tempo-real/318816 "2022-12-27T05:36:55Z")

</div>

Introdução Imagine que o papai Noel esteja sobrevoando Copacabana, a caminho de sua casa para entregar os presentes. Mas você gostaria de saber o momento exato que ele chega para garantir que as crianças estejam dorm…

---

## [How to use multiple snapshot repository directory's](https://discuss.elastic.co/t/how-to-use-multiple-snapshot-repository-directorys/321991)

<div class="topic-metadata">

**Author:** [@Santhosh\_K](https://discuss.elastic.co/u/Santhosh_K)\
**Replies:** 2\
**Last updated:** [December 27, 2022, 5:26am UTC](https://discuss.elastic.co/t/how-to-use-multiple-snapshot-repository-directorys/321991 "2022-12-27T05:26:37Z")

</div>

Hi, I have to use multiple snapshot repositories, Does that support multiple directories, if so, how? I want to know how to put multiple snapshot repository directory's in elasticsearch.yml file. And what about singl…

---

## [Needs suggestion to execute painless script as part of HTTP filter plugin](https://discuss.elastic.co/t/needs-suggestion-to-execute-painless-script-as-part-of-http-filter-plugin/321981)

<div class="topic-metadata">

**Author:** [@rvadiga](https://discuss.elastic.co/u/rvadiga)\
**Replies:** 1\
**Last updated:** [December 27, 2022, 4:32am UTC](https://discuss.elastic.co/t/needs-suggestion-to-execute-painless-script-as-part-of-http-filter-plugin/321981 "2022-12-27T04:32:17Z")

</div>

Hello, I have a requirement to execute(via GET) a painless script to find a maximum value of a field in http logstash filter. I am getting parse error as the keyword 'max' is not understood by http filter. Do we have …

---

## [Matching documents with subset of queries in Percolation Index](https://discuss.elastic.co/t/matching-documents-with-subset-of-queries-in-percolation-index/322019)

<div class="topic-metadata">

**Author:** [@aneeshkoya](https://discuss.elastic.co/u/aneeshkoya)\
**Replies:** 0\
**Last updated:** [December 27, 2022, 3:41am UTC](https://discuss.elastic.co/t/matching-documents-with-subset-of-queries-in-percolation-index/322019 "2022-12-27T03:41:12Z")

</div>

Each individual document is matched against all the queries stored in the associated percolation index. This can affect the performance of the percolate queries where documents need to be matched with only a subset of qu…

---

## [How to calculate max qps with a nginx log index by a kibana visualization?](https://discuss.elastic.co/t/how-to-calculate-max-qps-with-a-nginx-log-index-by-a-kibana-visualization/321980)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 2\
**Last updated:** [December 27, 2022, 1:51am UTC](https://discuss.elastic.co/t/how-to-calculate-max-qps-with-a-nginx-log-index-by-a-kibana-visualization/321980 "2022-12-27T01:51:44Z")

</div>

I create a line type visualization like below, and I don't know how to aggregate the buckets and get the max value. Here is the request body: { "size": 0, "\_source": { "excludes": \[\] }, "aggs": { "2"…

---

## [TSVB Metric to display score change](https://discuss.elastic.co/t/tsvb-metric-to-display-score-change/319577)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 3\
**Last updated:** [November 29, 2022, 2:25am UTC](https://discuss.elastic.co/t/tsvb-metric-to-display-score-change/319577 "2022-11-29T02:25:50Z")

</div>

Hi there, I have a TSVB metric w/ a cumulative sum that shows the "Score" for the environment and I'm looking at adding a 2nd metric to the same visualization to display +/- offset (score change) over the last 7 days. C…

---

## [Storage on elastic search](https://discuss.elastic.co/t/storage-on-elastic-search/321996)

<div class="topic-metadata">

**Author:** [@mail2shanth](https://discuss.elastic.co/u/mail2shanth)\
**Replies:** 13\
**Last updated:** [December 26, 2022, 11:44pm UTC](https://discuss.elastic.co/t/storage-on-elastic-search/321996 "2022-12-26T23:44:30Z")

</div>

Hi, I am trying to build a benchmark on how much storage likely needed for Elasticsearch, below are some stats whenever I sent new records from logstash to Elasticsearch. I checked in Elasticsearch after every interval,…

---

## [It's not clear that it's not possible to access the \`ctx\['\_source'\]\` inside a function in a painless script](https://discuss.elastic.co/t/its-not-clear-that-its-not-possible-to-access-the-ctx-source-inside-a-function-in-a-painless-script/322013)

<div class="topic-metadata">

**Author:** [@RafaelAdao](https://discuss.elastic.co/u/RafaelAdao)\
**Replies:** 0\
**Last updated:** [December 26, 2022, 9:24pm UTC](https://discuss.elastic.co/t/its-not-clear-that-its-not-possible-to-access-the-ctx-source-inside-a-function-in-a-painless-script/322013 "2022-12-26T21:24:50Z")

</div>

It's not clear to me that it's not possible to access the ctx\['\_source'\] inside a function in a painless script. I looked in the documentation and couldn't find anything about it. Below is an example of the code I was t…

---

## [Painless script to enrich data in an index GPO GUID to Name](https://discuss.elastic.co/t/painless-script-to-enrich-data-in-an-index-gpo-guid-to-name/322011)

<div class="topic-metadata">

**Author:** [@welch27330](https://discuss.elastic.co/u/welch27330)\
**Replies:** 0\
**Last updated:** [December 26, 2022, 9:00pm UTC](https://discuss.elastic.co/t/painless-script-to-enrich-data-in-an-index-gpo-guid-to-name/322011 "2022-12-26T21:00:55Z")

</div>

When Winlogbeat ingest data from a domain controller it uses the GUID from GPO. I wanted to see if there was a way to create a new field within the index that would translate the GUID to the actual GPO name. I've looked …

---

## [Account removal/anonymizing](https://discuss.elastic.co/t/account-removal-anonymizing/322003)

<div class="topic-metadata">

**Author:** [@anon43570709](https://discuss.elastic.co/u/anon43570709)\
**Replies:** 1\
**Last updated:** [December 26, 2022, 8:46pm UTC](https://discuss.elastic.co/t/account-removal-anonymizing/322003 "2022-12-26T20:46:19Z")

</div>

Can someone from support remove my account and any associated data? From what I understand, you'll anonymize it so anything I've contributed will stay up. I'm perfectly fine with that. My role shifted a few years ago …

---

## [Indices with lifecycle error](https://discuss.elastic.co/t/indices-with-lifecycle-error/319519)

<div class="topic-metadata">

**Author:** [@zenzedoon](https://discuss.elastic.co/u/zenzedoon)\
**Replies:** 1\
**Last updated:** [November 28, 2022, 10:23pm UTC](https://discuss.elastic.co/t/indices-with-lifecycle-error/319519 "2022-11-28T22:23:12Z")

</div>

Hello, I have an ELK cluster with 3 nodes (3 are masters , 1 hot , 1warm and1 cold ) I have a few indices with life cycle error when i check the error i got this : and i you see the indices current action i shri…

---

## [Curl to ES from outside of the K8s cluster using the certificate I can't find](https://discuss.elastic.co/t/curl-to-es-from-outside-of-the-k8s-cluster-using-the-certificate-i-cant-find/322004)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 0\
**Last updated:** [December 26, 2022, 8:05pm UTC](https://discuss.elastic.co/t/curl-to-es-from-outside-of-the-k8s-cluster-using-the-certificate-i-cant-find/322004 "2022-12-26T20:05:26Z")

</div>

Good morning everyone. I'm creating a ECK environment in Openshift that I have installed by using the ECK operator. So far I have 3 multirole ES node pods, 1 kibana, 1 Logstash and 2+2 filebeat and metricbeat daemons se…

---

## [Default ILM creating issues](https://discuss.elastic.co/t/default-ilm-creating-issues/321882)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 1\
**Last updated:** [December 26, 2022, 5:52pm UTC](https://discuss.elastic.co/t/default-ilm-creating-issues/321882 "2022-12-26T17:52:20Z")

</div>

Hi Team, I am using vmetricbeat and heartbeat to collect data from multiple devices. I want to setup ILM for automatic index cleaning as well. However, both creates a default policy and are not allowing to use other ILM…

---

## [No system Metrics reported by \_cat/nodes](https://discuss.elastic.co/t/no-system-metrics-reported-by-cat-nodes/321969)

<div class="topic-metadata">

**Author:** [@ben75020](https://discuss.elastic.co/u/ben75020)\
**Replies:** 6\
**Last updated:** [December 26, 2022, 6:22pm UTC](https://discuss.elastic.co/t/no-system-metrics-reported-by-cat-nodes/321969 "2022-12-26T18:22:21Z")

</div>

Hello ! I'm a beginner and I might have missed something important. Elasticsearch is not returning any system metrics when I'm invoking the following command GET \_cat/nodes?v=true ip heap.percent ram.percent …

[Previous page](https://discuss.elastic.co/latest.md?page=841)

[Next page](https://discuss.elastic.co/latest.md?page=843)
