# Latest **URL:** https://discuss.elastic.co/latest.md?page=847 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 848 --- ## [Selected Region Zoom or Selective Focus - In Kibana Graph Feature](https://discuss.elastic.co/t/selected-region-zoom-or-selective-focus-in-kibana-graph-feature/321809)
**Author:** [@Dimple.P](https://discuss.elastic.co/u/Dimple.P)\ **Replies:** 2\ **Last updated:** [December 22, 2022, 10:59am UTC](https://discuss.elastic.co/t/selected-region-zoom-or-selective-focus-in-kibana-graph-feature/321809 "2022-12-22T10:59:59Z")
Is it feasible? Draw a particular region with the cursor and Zoom In (Selective Zooming ) Is it possible to pick a node and then drag the selection? (like Selected focus) --- ## [The time zone is inconsistent with the value set](https://discuss.elastic.co/t/the-time-zone-is-inconsistent-with-the-value-set/321820)
**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\ **Replies:** 2\ **Last updated:** [December 22, 2022, 10:54am UTC](https://discuss.elastic.co/t/the-time-zone-is-inconsistent-with-the-value-set/321820 "2022-12-22T10:54:45Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Need to segregate the colors based on the condition (Percentage) in TSVB Gauge chart](https://discuss.elastic.co/t/need-to-segregate-the-colors-based-on-the-condition-percentage-in-tsvb-gauge-chart/321744)
**Author:** [@Abj\_Ins](https://discuss.elastic.co/u/Abj_Ins)\ **Replies:** 5\ **Last updated:** [December 22, 2022, 10:52am UTC](https://discuss.elastic.co/t/need-to-segregate-the-colors-based-on-the-condition-percentage-in-tsvb-gauge-chart/321744 "2022-12-22T10:52:35Z")
Hi Team, we are trying to apply the conditions to get the colors based on values under TSVB Gauge ---\> Panel options. We are not getting as expected mentioned in screens below. For ex... if percentage \<75 then we need… --- ## [Couchdb module not generating metrics](https://discuss.elastic.co/t/couchdb-module-not-generating-metrics/321048)
**Author:** [@jonnymccullagh](https://discuss.elastic.co/u/jonnymccullagh)\ **Replies:** 10\ **Last updated:** [December 22, 2022, 10:48am UTC](https://discuss.elastic.co/t/couchdb-module-not-generating-metrics/321048 "2022-12-22T10:48:31Z")
Hi, I'm having trouble getting metrics from CouchDB into ElasticCloud. System metrics are going ok. I have /etc/metricbeat/modules.d/couchdb.yml as follows: - module: couchdb metricsets: \["server"\] period: 10s hos… --- ## [Data stream update information](https://discuss.elastic.co/t/data-stream-update-information/321770)
**Author:** [@Svetlo](https://discuss.elastic.co/u/Svetlo)\ **Replies:** 3\ **Last updated:** [December 22, 2022, 10:18am UTC](https://discuss.elastic.co/t/data-stream-update-information/321770 "2022-12-22T10:18:29Z")
Hello, I am trying to troubleshoot disappearing logs. Logs that are associated with a particular data stream have disappeared (I am not able to find under the data stream) outside of office hours. As they have disappear… --- ## [Fleet output settings](https://discuss.elastic.co/t/fleet-output-settings/319836)
**Author:** [@adrien\_moreau](https://discuss.elastic.co/u/adrien_moreau)\ **Replies:** 1\ **Last updated:** [December 22, 2022, 10:14am UTC](https://discuss.elastic.co/t/fleet-output-settings/319836 "2022-12-22T10:14:08Z")
While debugging my self managed fleet server I came accross this discussion: This discussion mentions the is\_default\_monitoring amongst xpack.fleet.outputs parameters but I see no other mention of it in the documenta… --- ## [Missing methods for ingest pipelines in .NET client 8.0](https://discuss.elastic.co/t/missing-methods-for-ingest-pipelines-in-net-client-8-0/321822)
**Author:** [@UmLao](https://discuss.elastic.co/u/UmLao)\ **Replies:** 2\ **Last updated:** [December 22, 2022, 10:13am UTC](https://discuss.elastic.co/t/missing-methods-for-ingest-pipelines-in-net-client-8-0/321822 "2022-12-22T10:13:18Z")
Could you support methods for ingest pipeline API? https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest-apis.html Especially the Create/Update, Get and Delete APIs. I cannot find such methods in late… --- ## [How to create an index template with NGramTokenizer using .NET client 8.0](https://discuss.elastic.co/t/how-to-create-an-index-template-with-ngramtokenizer-using-net-client-8-0/321569)
**Author:** [@UmLao](https://discuss.elastic.co/u/UmLao)\ **Replies:** 4\ **Last updated:** [December 22, 2022, 9:58am UTC](https://discuss.elastic.co/t/how-to-create-an-index-template-with-ngramtokenizer-using-net-client-8-0/321569 "2022-12-22T09:58:33Z")
I try to convert our C# code from Nest to the new Elastic.Clients.Elasticsearch client. Got stuck on many details. Currently I can't see how to build a request for creating an index template. Code snippet: var createIn… --- ## [Why does elasticsearch NOT provide slicing functionality for reindexing from remote cluster?](https://discuss.elastic.co/t/why-does-elasticsearch-not-provide-slicing-functionality-for-reindexing-from-remote-cluster/321644)
**Author:** [@muskan](https://discuss.elastic.co/u/muskan)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 12:36pm UTC](https://discuss.elastic.co/t/why-does-elasticsearch-not-provide-slicing-functionality-for-reindexing-from-remote-cluster/321644 "2022-12-20T12:36:23Z")
why does elasticsearch NOT provide slicing functionality for reindexing from remote cluster?? --- ## [Add Elastic APM integration manually](https://discuss.elastic.co/t/add-elastic-apm-integration-manually/321816)
**Author:** [@Hassan\_Malabeh](https://discuss.elastic.co/u/Hassan_Malabeh)\ **Replies:** 0\ **Last updated:** [December 22, 2022, 8:16am UTC](https://discuss.elastic.co/t/add-elastic-apm-integration-manually/321816 "2022-12-22T08:16:04Z")
I've created a docker-compose file with some configurations that deploy Elasticsearch, Kibana, Elastic Agent all version 8.7.0. where in the Kibana configuration files I define the police I needed under xpack.fleet.agen… --- ## [Rename index and create alias for old name](https://discuss.elastic.co/t/rename-index-and-create-alias-for-old-name/321819)
**Author:** [@rafi0101](https://discuss.elastic.co/u/rafi0101)\ **Replies:** 0\ **Last updated:** [December 22, 2022, 8:34am UTC](https://discuss.elastic.co/t/rename-index-and-create-alias-for-old-name/321819 "2022-12-22T08:34:47Z")
Hello together, Normally we run the following scenario in our elasticserach: Index template with rollover alias and lifecycle policy. So for example Alias: testindex Index: testindex-000001 (current write index for t… --- ## [Dec 22th, 2022: \[EN\] How to run the official OpenTelemetry Demo with Elastic](https://discuss.elastic.co/t/dec-22th-2022-en-how-to-run-the-official-opentelemetry-demo-with-elastic/321229)
**Author:** [@Huage\_Chen](https://discuss.elastic.co/u/Huage_Chen)\ **Replies:** 0\ **Last updated:** [December 22, 2022, 8:00am UTC](https://discuss.elastic.co/t/dec-22th-2022-en-how-to-run-the-official-opentelemetry-demo-with-elastic/321229 "2022-12-22T08:00:26Z")
During the past 2 years, OpenTelemetry has emerged as the new open source observability standard and has become the 2nd most popular project in CNCF. While more and more companies are adopting OpenTelemetry for their… --- ## [Parse different time duration formats/units to common format](https://discuss.elastic.co/t/parse-different-time-duration-formats-units-to-common-format/321742)
**Author:** [@wespe](https://discuss.elastic.co/u/wespe)\ **Replies:** 4\ **Last updated:** [December 22, 2022, 7:49am UTC](https://discuss.elastic.co/t/parse-different-time-duration-formats-units-to-common-format/321742 "2022-12-22T07:49:27Z")
Hi there, Part of my input json looks as follows: "phaseTimes": { "authorize": "28.201µs", "filter": "27.522068ms", "indexScan": "2.004642056s", "instantiate": "40.002µs", "run": "2.041368619s" … --- ## [Kibana alerts to notify only if the error persisted in the last 1 hour](https://discuss.elastic.co/t/kibana-alerts-to-notify-only-if-the-error-persisted-in-the-last-1-hour/315683)
**Author:** [@gadelkareem](https://discuss.elastic.co/u/gadelkareem)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 11:33am UTC](https://discuss.elastic.co/t/kibana-alerts-to-notify-only-if-the-error-persisted-in-the-last-1-hour/315683 "2022-10-27T11:33:39Z")
I am scanning a time series index of logs and sending an alert every hour if an error occurred, the check is happening every min. But I would like to like to send the alerts only if the error was repeated in the last hou… --- ## [Looking to create multiple schedule for a Logstash input plugin](https://discuss.elastic.co/t/looking-to-create-multiple-schedule-for-a-logstash-input-plugin/321806)
**Author:** [@Iseyin](https://discuss.elastic.co/u/Iseyin)\ **Replies:** 0\ **Last updated:** [December 22, 2022, 4:17am UTC](https://discuss.elastic.co/t/looking-to-create-multiple-schedule-for-a-logstash-input-plugin/321806 "2022-12-22T04:17:25Z")
Hello, I'm looking to create multiple schedule for an input plugin in logstash. Is there a way to do this currently is there a workaround? The schedule parameter is of string type, so it would not accept and array of s… --- ## [Centralized list for query filter in visualization](https://discuss.elastic.co/t/centralized-list-for-query-filter-in-visualization/317412)
**Author:** [@Volodymyr\_Komarynsky](https://discuss.elastic.co/u/Volodymyr_Komarynsky)\ **Replies:** 4\ **Last updated:** [October 27, 2022, 9:08am UTC](https://discuss.elastic.co/t/centralized-list-for-query-filter-in-visualization/317412 "2022-10-27T09:08:15Z")
Hello. Please help me with this task: I need to filter the list of IP addresses in different visualizations, in different dashboards and then correct this list, how can this be done with a centralized list so as not to … --- ## [What's the difference between s3 input in filebeat and s3 input in logstash](https://discuss.elastic.co/t/whats-the-difference-between-s3-input-in-filebeat-and-s3-input-in-logstash/321798)
**Author:** [@stwang](https://discuss.elastic.co/u/stwang)\ **Replies:** 1\ **Last updated:** [December 22, 2022, 12:05am UTC](https://discuss.elastic.co/t/whats-the-difference-between-s3-input-in-filebeat-and-s3-input-in-logstash/321798 "2022-12-22T00:05:43Z")
Hi There, We try to ingest data from s3 to Elasticsearch, and I know filebeat and logstash all support S3 input. Which one should I use, is there has any guidence, in which situation to use filebeat or logstash. Cheer… --- ## [How to ship app logs from multiple pods using filebeat](https://discuss.elastic.co/t/how-to-ship-app-logs-from-multiple-pods-using-filebeat/321800)
**Author:** [@SumitSingh](https://discuss.elastic.co/u/SumitSingh)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 11:20pm UTC](https://discuss.elastic.co/t/how-to-ship-app-logs-from-multiple-pods-using-filebeat/321800 "2022-12-21T23:20:00Z")
Hi, I have installed a application using helm and it deployed in AKS. This application have multiples pods spread all over the nodes in AKS. Application logs saved at /opt/app-name/service-name/logs folder in containe… --- ## [Multi Query and Querying with Spaces](https://discuss.elastic.co/t/multi-query-and-querying-with-spaces/321704)
**Author:** [@Cal](https://discuss.elastic.co/u/Cal)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 10:44pm UTC](https://discuss.elastic.co/t/multi-query-and-querying-with-spaces/321704 "2022-12-21T22:44:05Z")
Hello, I'm setting various visualizations to filter on Kibana and I need to be able to search by specific words in a text description. Let's say I have a paragraph description and I want to populate results when "Blue"… --- ## [Cisco ISE Netflow Error](https://discuss.elastic.co/t/cisco-ise-netflow-error/321510)
**Author:** [@eagles40cnuh](https://discuss.elastic.co/u/eagles40cnuh)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 10:00pm UTC](https://discuss.elastic.co/t/cisco-ise-netflow-error/321510 "2022-12-21T22:00:14Z")
I installed "Cisco Ise Integration" in Kibana And Elastic Agent setting + "Cisco Ise Netflow" Output is completed Cisco ise -\> ELK TCP Session Established (Also Sending Packet Check) But.... Kibana Dashboar… --- ## [Filebeat modules ECS 8.0 support plan](https://discuss.elastic.co/t/filebeat-modules-ecs-8-0-support-plan/321797)
**Author:** [@brsolomon](https://discuss.elastic.co/u/brsolomon)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 9:19pm UTC](https://discuss.elastic.co/t/filebeat-modules-ecs-8-0-support-plan/321797 "2022-12-21T21:19:36Z")
It appears that all Filebeat modules currently export ECS version 1.12 fields. Running command from beats/x-pack/filebeat/module: $ ggrep -Fr 'ecs.version: 1.12' | wc -l 140 brsolomon ~/dev/3pty/beats/x-pack/file… --- ## [Missing records after bulk insert](https://discuss.elastic.co/t/missing-records-after-bulk-insert/321796)
**Author:** [@Ostr1969](https://discuss.elastic.co/u/Ostr1969)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 8:51pm UTC](https://discuss.elastic.co/t/missing-records-after-bulk-insert/321796 "2022-12-21T20:51:21Z")
I have inserted with bulk 100milion records, but the count does not show the right number. the bulk insert had not shown errors. I have a field which is 1 to 100milion integer. how can I search for the missing record … --- ## [Filebeat is not reading logs](https://discuss.elastic.co/t/filebeat-is-not-reading-logs/321794)
**Author:** [@ant2ne](https://discuss.elastic.co/u/ant2ne)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 8:43pm UTC](https://discuss.elastic.co/t/filebeat-is-not-reading-logs/321794 "2022-12-21T20:43:15Z")
root@ub2204elk:/etc/elasticsearch# grep -v "#" elasticsearch.yml |uniq path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch network.host: localhost xpack.security.enabled: true xpack.security.enrollme… --- ## [Extracting Substrings Using Runtime Fileds](https://discuss.elastic.co/t/extracting-substrings-using-runtime-fileds/317547)
**Author:** [@hi\_xavier](https://discuss.elastic.co/u/hi_xavier)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 8:51am UTC](https://discuss.elastic.co/t/extracting-substrings-using-runtime-fileds/317547 "2022-10-27T08:51:44Z")
Hello, With runtime fields, is it possible to extract a substring from a given field? For example, "url" : "https://hello.com/random?username" How would I create a runtime field to grab the "username" string ? --- ## [Log floods: error salvaging message / handle is invalid](https://discuss.elastic.co/t/log-floods-error-salvaging-message-handle-is-invalid/319974)
**Author:** [@psears](https://discuss.elastic.co/u/psears)\ **Replies:** 2\ **Last updated:** [December 21, 2022, 8:03pm UTC](https://discuss.elastic.co/t/log-floods-error-salvaging-message-handle-is-invalid/319974 "2022-12-21T20:03:04Z")
Winlogbeat 8.4.3, set to log about itself to eventlog logging.level: info logging.selectors: \["\*"\] logging.to\_eventlog: true logging.metrics.period: 5m Every now and then on startup, winlogbeat will go nuts on a host a… --- ## [Vulnerability ESA-2019-04](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670)
**Author:** [@test\_qweqwe](https://discuss.elastic.co/u/test_qweqwe)\ **Replies:** 4\ **Last updated:** [December 21, 2022, 7:56pm UTC](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670 "2022-12-21T19:56:44Z")
Hi, I have this vulnerability But we don't have xpack-security installed. Does it apply to me? --- ## [Delete index by query](https://discuss.elastic.co/t/delete-index-by-query/321789)
**Author:** [@Ammar\_Khan1](https://discuss.elastic.co/u/Ammar_Khan1)\ **Replies:** 1\ **Last updated:** [December 21, 2022, 7:55pm UTC](https://discuss.elastic.co/t/delete-index-by-query/321789 "2022-12-21T19:55:41Z")
I want to delete indexes that are older than 7 days old and also possess 0 docs in it by DSL query. if anybody know, kindly let me know Thanks --- ## [Nested array field in ES](https://discuss.elastic.co/t/nested-array-field-in-es/321745)
**Author:** [@Ali5](https://discuss.elastic.co/u/Ali5)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 10:04am UTC](https://discuss.elastic.co/t/nested-array-field-in-es/321745 "2022-12-21T10:04:48Z")
GET feeds/\_search { "query": { "nested": { "path": "comment", "query": { "multi\_match": { "query": "ali", "fields": \["body","title","comment.c\_text"\] } } … --- ## [Error creating index with mappings and dynamic\_templates using java ElasticsearchClient 8.5.3el](https://discuss.elastic.co/t/error-creating-index-with-mappings-and-dynamic-templates-using-java-elasticsearchclient-8-5-3el/321785)
**Author:** [@massimiliano.ruffolo](https://discuss.elastic.co/u/massimiliano.ruffolo)\ **Replies:** 0\ **Last updated:** [December 21, 2022, 4:15pm UTC](https://discuss.elastic.co/t/error-creating-index-with-mappings-and-dynamic-templates-using-java-elasticsearchclient-8-5-3el/321785 "2022-12-21T16:15:06Z")
Hi all, i tried to create an index with mappings and dynamic\_templates using Java ElasticsearchClient. My maven-dependency is the following: \ \co.elastic.clients\ \elasti… --- ## [Getting SIEM alerts through API](https://discuss.elastic.co/t/getting-siem-alerts-through-api/321603)
**Author:** [@reg\_reginald](https://discuss.elastic.co/u/reg_reginald)\ **Replies:** 4\ **Last updated:** [December 21, 2022, 7:13pm UTC](https://discuss.elastic.co/t/getting-siem-alerts-through-api/321603 "2022-12-21T19:13:21Z")
Hello, Is it possible to get alerts from Kibana SIEM through an api? it seems like \:\/api/detection\_engine/signals could be a way but there's no example with individual alerts, just an aggregation. … [Previous page](https://discuss.elastic.co/latest.md?page=846) [Next page](https://discuss.elastic.co/latest.md?page=848)