# Latest

**URL:** https://discuss.elastic.co/latest.md?page=896

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 897

---

## [Vega - Force Directed - Indexe problem](https://discuss.elastic.co/t/vega-force-directed-indexe-problem/316670)

<div class="topic-metadata">

**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\
**Replies:** 2\
**Last updated:** [October 18, 2022, 6:55pm UTC](https://discuss.elastic.co/t/vega-force-directed-indexe-problem/316670 "2022-10-18T18:55:49Z")

</div>

Hi all, I'm trying to make a force directed graph using this example ( vega code - Data ). until now I can't do it and I would like to know if the nodes and the links have to identified with a numerical index or if it'…

---

## [Kibana error in /app/security/manage](https://discuss.elastic.co/t/kibana-error-in-app-security-manage/317076)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 1:08am UTC](https://discuss.elastic.co/t/kibana-error-in-app-security-manage/317076 "2022-11-15T01:08:33Z")

</div>

Error Error: Cannot read properties of undefined (reading 'includes') at i (http://172.16.14.193:5601/55572/bundles/plugin/securitySolution/8.0.0/securitySolution.chunk.0.js:3:15967) at http://172.16.14.193:5601…

---

## [Kibana process crashes - high memory usage](https://discuss.elastic.co/t/kibana-process-crashes-high-memory-usage/317132)

<div class="topic-metadata">

**Author:** [@dslavescu](https://discuss.elastic.co/u/dslavescu)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 1:05am UTC](https://discuss.elastic.co/t/kibana-process-crashes-high-memory-usage/317132 "2022-11-15T01:05:01Z")

</div>

Hello, I am using ELK 7.12.1 and Kibana 7.12.1 in a production env. I am encountering an issue with my Kibana , the process keeps crashing. The app is hosted on 1 VM , having 8 GB of RAM. At first i did not do any modi…

---

## [Help with creating a search](https://discuss.elastic.co/t/help-with-creating-a-search/318450)

<div class="topic-metadata">

**Author:** [@cdeblois](https://discuss.elastic.co/u/cdeblois)\
**Replies:** 2\
**Last updated:** [November 10, 2022, 6:59pm UTC](https://discuss.elastic.co/t/help-with-creating-a-search/318450 "2022-11-10T18:59:16Z")

</div>

Hello, I'm trying to see if there's a way to make an API call so we can know when an index or an indices has not been written to for a specific period of time. Is there a way to do this? I've been wracking my brain try…

---

## [Install Kibana with Debian package | Kibana Guide \[7.17\] | Elastic - Error Index out of range](https://discuss.elastic.co/t/install-kibana-with-debian-package-kibana-guide-7-17-elastic-error-index-out-of-range/317088)

<div class="topic-metadata">

**Author:** [@vojrao](https://discuss.elastic.co/u/vojrao)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 12:59am UTC](https://discuss.elastic.co/t/install-kibana-with-debian-package-kibana-guide-7-17-elastic-error-index-out-of-range/317088 "2022-11-15T00:59:17Z")

</div>

Hi, When we try to install Kibana 7.17.6 on ubuntu 16.04 machine we got the following error: ubuntu@finn:~$ sudo apt-get install kibana Reading package lists... Done Building dependency tree Reading state info…

---

## [Kibana fieldFormatMap](https://discuss.elastic.co/t/kibana-fieldformatmap/318741)

<div class="topic-metadata">

**Author:** [@Santosh\_Sahu](https://discuss.elastic.co/u/Santosh_Sahu)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 12:51am UTC](https://discuss.elastic.co/t/kibana-fieldformatmap/318741 "2022-11-15T00:51:53Z")

</div>

using kibana version 5.4 Can we use the How to use the fieldFormatMap in the mapping JSON for a index? Sample Mapping json. { "meshping": { "\_meta": { "class": "com.pluribus.maestro.data.MeshPingEntity", "version"…

---

## [Alert on the count of running pods per node](https://discuss.elastic.co/t/alert-on-the-count-of-running-pods-per-node/318752)

<div class="topic-metadata">

**Author:** [@EDzhelyov](https://discuss.elastic.co/u/EDzhelyov)\
**Replies:** 0\
**Last updated:** [November 11, 2022, 3:48pm UTC](https://discuss.elastic.co/t/alert-on-the-count-of-running-pods-per-node/318752 "2022-11-11T15:48:06Z")

</div>

We have the following Prometheus alert: count ( kube\_pod\_info and on (pod, namespace, monitor) ( kube\_pod\_status\_phase{job="kube-state-metrics", phase="Running"} \> 0 ) …

---

## [Repository-azure for 7.17](https://discuss.elastic.co/t/repository-azure-for-7-17/318845)

<div class="topic-metadata">

**Author:** [@rwiker](https://discuss.elastic.co/u/rwiker)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 12:42am UTC](https://discuss.elastic.co/t/repository-azure-for-7-17/318845 "2022-11-15T00:42:48Z")

</div>

Hi, We're using repository-azure with our 7.17 installation of Elasticsearch, running on Azure VMs. Last week, we got a notification from Microsoft that there are known issues with one of the packages used by the repos…

---

## [XContentType.Json not working](https://discuss.elastic.co/t/xcontenttype-json-not-working/318834)

<div class="topic-metadata">

**Author:** [@suresh\_chaudhari](https://discuss.elastic.co/u/suresh_chaudhari)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 12:38am UTC](https://discuss.elastic.co/t/xcontenttype-json-not-working/318834 "2022-11-15T00:38:57Z")

</div>

IndexRequest iRequest = new IndexRequest(LoadBalancerVip+"9" , "\_doc"); iRequest.source(flattenedJson,XContentType.JSON); This innocent XContentType.Json cannot insert more than 150 records neither it shows any bug try…

---

## [Watcher with Json body](https://discuss.elastic.co/t/watcher-with-json-body/318847)

<div class="topic-metadata">

**Author:** [@sudheendra](https://discuss.elastic.co/u/sudheendra)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 9:47am UTC](https://discuss.elastic.co/t/watcher-with-json-body/318847 "2022-11-14T09:47:01Z")

</div>

I am using the watcher to send post request to webhook listener ,but I am failing to convert output array into json object . "actions": { "send\_alert\_to\_jumpstart\_server": { "webhook": { "scheme": "http", "host": "\*\*\*\*\*…

---

## [Nested JSON data to Logstash](https://discuss.elastic.co/t/nested-json-data-to-logstash/318895)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 7\
**Last updated:** [November 14, 2022, 11:38pm UTC](https://discuss.elastic.co/t/nested-json-data-to-logstash/318895 "2022-11-14T23:38:06Z")

</div>

Hi Can You point me out how to use data filter to making correct timestamp from file, below data (already prepared in JSON format) timestamp should be taken from "collectionBeginTime" field. Thanks for help { "meas…

---

## [ElasticSearch TASKS API - Task is given to a different node after 1 minute](https://discuss.elastic.co/t/elasticsearch-tasks-api-task-is-given-to-a-different-node-after-1-minute/318600)

<div class="topic-metadata">

**Author:** [@vedalas21](https://discuss.elastic.co/u/vedalas21)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 12:20am UTC](https://discuss.elastic.co/t/elasticsearch-tasks-api-task-is-given-to-a-different-node-after-1-minute/318600 "2022-11-15T00:20:20Z")

</div>

Hi Team, I had a weird observation in our Elasticsearch Cluster. We have an ES Query that will be executed from a python script. When the Query is being fired from python, right away a task will get created under GET /…

---

## [Web Crawler Stuck on Pending / Suspended](https://discuss.elastic.co/t/web-crawler-stuck-on-pending-suspended/318768)

<div class="topic-metadata">

**Author:** [@moassafiri](https://discuss.elastic.co/u/moassafiri)\
**Replies:** 2\
**Last updated:** [November 15, 2022, 12:19am UTC](https://discuss.elastic.co/t/web-crawler-stuck-on-pending-suspended/318768 "2022-11-15T00:19:25Z")

</div>

Version: v8.4.3 Steps to reproduce: Started crawling across 13 different engines. 9 successfully completed but at engine number 10 this was the first log message: The crawler worker responsible for this crawl has fai…

---

## [Zeek monitoring using filebeats](https://discuss.elastic.co/t/zeek-monitoring-using-filebeats/318760)

<div class="topic-metadata">

**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\
**Replies:** 6\
**Last updated:** [November 15, 2022, 12:16am UTC](https://discuss.elastic.co/t/zeek-monitoring-using-filebeats/318760 "2022-11-15T00:16:24Z")

</div>

Hi, I'm using filebeats to monitor or try to monitor zeek. But I can't see any of the zeek files content in elastic, I've also enabled the system module and that burst straight into life. So I know the module config i…

---

## [Direct link to a session ID](https://discuss.elastic.co/t/direct-link-to-a-session-id/318890)

<div class="topic-metadata">

**Author:** [@emacri](https://discuss.elastic.co/u/emacri)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 12:09am UTC](https://discuss.elastic.co/t/direct-link-to-a-session-id/318890 "2022-11-15T00:09:25Z")

</div>

Hi everyone, I am looking for a way to get a Kibana URL / link that points directly to a session ID. So, the idea is to get this link clicked and that it goes straight to the log details of each session, an example belo…

---

## [Ingest data through ElasticSearch (instead of AppSearch)](https://discuss.elastic.co/t/ingest-data-through-elasticsearch-instead-of-appsearch/318881)

<div class="topic-metadata">

**Author:** [@Julie\_Montels](https://discuss.elastic.co/u/Julie_Montels)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 3:32pm UTC](https://discuss.elastic.co/t/ingest-data-through-elasticsearch-instead-of-appsearch/318881 "2022-11-14T15:32:18Z")

</div>

Hello, We are using AppSearch but indexing in bulk was quite slow, so we decided to create engines based on Elasticsearch indexes. The indexation is really much faster when indexing Elasticsearch indexes. Do you see a…

---

## [Unable to login in kibana](https://discuss.elastic.co/t/unable-to-login-in-kibana/318893)

<div class="topic-metadata">

**Author:** [@AnkitaP](https://discuss.elastic.co/u/AnkitaP)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 10:32pm UTC](https://discuss.elastic.co/t/unable-to-login-in-kibana/318893 "2022-11-14T22:32:52Z")

</div>

Hello, I am unable to login into kibana. I am getting error as incorrect username/Password even after entering correct credentials. Please find attached screenshots of the Logs. Note--ELK stack version--7.16 Kindly he…

---

## [Filebeat Logstash Elasticsearch Kibana](https://discuss.elastic.co/t/filebeat-logstash-elasticsearch-kibana/318905)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 10:30pm UTC](https://discuss.elastic.co/t/filebeat-logstash-elasticsearch-kibana/318905 "2022-11-14T22:30:06Z")

</div>

Hello, from a Linux machine, the syslog information is displayed via filebeat - logstash - elasticsearch in Kibana via Discover. How do I get the syslog information from another Linux server in the same index under Kib…

---

## [Several filebeat installations on a Kibana / Elasticsearch server in one log file](https://discuss.elastic.co/t/several-filebeat-installations-on-a-kibana-elasticsearch-server-in-one-log-file/318754)

<div class="topic-metadata">

**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\
**Replies:** 3\
**Last updated:** [November 14, 2022, 8:32pm UTC](https://discuss.elastic.co/t/several-filebeat-installations-on-a-kibana-elasticsearch-server-in-one-log-file/318754 "2022-11-14T20:32:01Z")

</div>

Hello, I have filebeat installed on a host and all syslog data is sent to Elasticsearch / Kibana. Visible via (Discover / Dashboard). Now I would like to install filebeat on another host and also transfer the syslog da…

---

## [Generate alert for error message in metrics dataset](https://discuss.elastic.co/t/generate-alert-for-error-message-in-metrics-dataset/318888)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 5:48pm UTC](https://discuss.elastic.co/t/generate-alert-for-error-message-in-metrics-dataset/318888 "2022-11-14T17:48:44Z")

</div>

We have a situation where dockerd will periodically crash on a host, creating issues with jobs running in a timely fashion. Our application team would like to be notified when dockerd goes down. Unfortunately, we do not …

---

## [Agent List](https://discuss.elastic.co/t/agent-list/318673)

<div class="topic-metadata">

**Author:** [@branden.heifner](https://discuss.elastic.co/u/branden.heifner)\
**Replies:** 4\
**Last updated:** [November 14, 2022, 6:21pm UTC](https://discuss.elastic.co/t/agent-list/318673 "2022-11-14T18:21:40Z")

</div>

Hello, Is there an API or some other method to export a list of agents enrolled with the fleet server and their status (Healthy, Offline, etc.)? What I need to do is audit the agents currently enrolled with fleet with o…

---

## [Elastic\_agent.process not found](https://discuss.elastic.co/t/elastic-agent-process-not-found/317804)

<div class="topic-metadata">

**Author:** [@Xigrealf](https://discuss.elastic.co/u/Xigrealf)\
**Replies:** 5\
**Last updated:** [November 14, 2022, 6:21pm UTC](https://discuss.elastic.co/t/elastic-agent-process-not-found/317804 "2022-11-14T18:21:22Z")

</div>

Hello, I am currently trying to set up Elastic Stack. After i've installed elasticsearch, kibana and enrolled my elastic-agent to the fleet server i can see that my agent looks healthy in kibana but when i click view ag…

---

## [ELK On Prem License](https://discuss.elastic.co/t/elk-on-prem-license/318884)

<div class="topic-metadata">

**Author:** [@akrog79](https://discuss.elastic.co/u/akrog79)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 5:28pm UTC](https://discuss.elastic.co/t/elk-on-prem-license/318884 "2022-11-14T17:28:12Z")

</div>

I want to integrate the ELK that I have On Premise with my Active Directory. However, I don't know what license I have to acquire or where I should buy it since the information I find is usually from Elastic Cloud. Som…

---

## [Filebeat does not read field when it includes a new line](https://discuss.elastic.co/t/filebeat-does-not-read-field-when-it-includes-a-new-line/318886)

<div class="topic-metadata">

**Author:** [@arhodoula](https://discuss.elastic.co/u/arhodoula)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 4:46pm UTC](https://discuss.elastic.co/t/filebeat-does-not-read-field-when-it-includes-a-new-line/318886 "2022-11-14T16:46:24Z")

</div>

I have the following data which filebeat cannot process due to the new line "field\_1","field\_2","field\_3","field\_4","field\_5", "921122.27872"," 34905888319","FRGG","2022-09-23","XYZ" What I need is that the second fi…

---

## [Problem adding document field to alert's webhook body](https://discuss.elastic.co/t/problem-adding-document-field-to-alerts-webhook-body/318794)

<div class="topic-metadata">

**Author:** [@TXBigDawg1836](https://discuss.elastic.co/u/TXBigDawg1836)\
**Replies:** 3\
**Last updated:** [November 14, 2022, 4:23pm UTC](https://discuss.elastic.co/t/problem-adding-document-field-to-alerts-webhook-body/318794 "2022-11-14T16:23:49Z")

</div>

New to ES and having an issue with adding details in the body of a webhook. I am wanting to add the field information (ex: city) so that it will be included in the alert details. I have tried adding "City": "{{\_source.…

---

## [Rate limit processor not working as it should](https://discuss.elastic.co/t/rate-limit-processor-not-working-as-it-should/318882)

<div class="topic-metadata">

**Author:** [@NejcK](https://discuss.elastic.co/u/NejcK)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 3:32pm UTC](https://discuss.elastic.co/t/rate-limit-processor-not-working-as-it-should/318882 "2022-11-14T15:32:37Z")

</div>

Hi. We've been using ES for a while now and saw that some apps are producing duplicate logs we'd like to limit the rate of (not drop them entirely) and have thus started using the rate\_limit processor (Rate limit the fl…

---

## [Kibana 7.17 Hide/Collapse Filter View](https://discuss.elastic.co/t/kibana-7-17-hide-collapse-filter-view/318678)

<div class="topic-metadata">

**Author:** [@kibanauser2022](https://discuss.elastic.co/u/kibanauser2022)\
**Replies:** 2\
**Last updated:** [November 14, 2022, 3:48pm UTC](https://discuss.elastic.co/t/kibana-7-17-hide-collapse-filter-view/318678 "2022-11-14T15:48:54Z")

</div>

Where can I find the setting to collapse the filters? If I add 15-20 filters then there is barely any space to view the chart and the log output.

---

## [Doubts and possible 'curl' problem to create and restore indices snapshot from pods CLI](https://discuss.elastic.co/t/doubts-and-possible-curl-problem-to-create-and-restore-indices-snapshot-from-pods-cli/318797)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 2\
**Last updated:** [November 14, 2022, 3:20pm UTC](https://discuss.elastic.co/t/doubts-and-possible-curl-problem-to-create-and-restore-indices-snapshot-from-pods-cli/318797 "2022-11-14T15:20:47Z")

</div>

Good morning. Some colleagues in the office requested me to investigate how could they create a backup policy for their indices. The first doubt I have is if using a NFS directory could work as an approach. The master…

---

## [Interactive legend doesn't work with orient type 'none'](https://discuss.elastic.co/t/interactive-legend-doesnt-work-with-orient-type-none/316652)

<div class="topic-metadata">

**Author:** [@karlanakamura](https://discuss.elastic.co/u/karlanakamura)\
**Replies:** 2\
**Last updated:** [October 18, 2022, 6:02pm UTC](https://discuss.elastic.co/t/interactive-legend-doesnt-work-with-orient-type-none/316652 "2022-10-18T18:02:10Z")

</div>

Hello, I'm using version 8.4.3 of elastic cloud. I'm having problems with the legends, I need to use the 'none' orient type because the legend was not getting the position I would like. After I changed it to 'none', th…

---

## [Add leading zeroes in sort script](https://discuss.elastic.co/t/add-leading-zeroes-in-sort-script/318870)

<div class="topic-metadata">

**Author:** [@undefined\_Undefined](https://discuss.elastic.co/u/undefined_Undefined)\
**Replies:** 1\
**Last updated:** [November 14, 2022, 3:08pm UTC](https://discuss.elastic.co/t/add-leading-zeroes-in-sort-script/318870 "2022-11-14T15:08:54Z")

</div>

Hello, im use elastic 7.10.1 and i need help I wanna sort my numbers, but i can't use number type, so i decide sort it with leading zeroes { "sort": { "\_script": { "type": "string", "order": "asc", …

[Previous page](https://discuss.elastic.co/latest.md?page=895)

[Next page](https://discuss.elastic.co/latest.md?page=897)
