# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1125

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1126

---

## [TSVB annotation row template field error](https://discuss.elastic.co/t/tsvb-annotation-row-template-field-error/257158)

<div class="topic-metadata">

**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\
**Replies:** 2\
**Last updated:** [December 5, 2020, 3:50am UTC](https://discuss.elastic.co/t/tsvb-annotation-row-template-field-error/257158 "2020-12-05T03:50:26Z")

</div>

Hi, there: My fields value is set to log.message and I set row template to {{log.message}} Clicking the annotated line showed value {{log.message}}. Not the actual message from index Kibana 7.9.1 is used How shal…

---

## [Metrics -\> Inventory tab shows all zero's, but Metrics -\> Explorer shows data](https://discuss.elastic.co/t/metrics-inventory-tab-shows-all-zeros-but-metrics-explorer-shows-data/254451)

<div class="topic-metadata">

**Author:** [@jmcclelland](https://discuss.elastic.co/u/jmcclelland)\
**Replies:** 6\
**Last updated:** [December 5, 2020, 3:08am UTC](https://discuss.elastic.co/t/metrics-inventory-tab-shows-all-zeros-but-metrics-explorer-shows-data/254451 "2020-12-05T03:08:38Z")

</div>

I'm collecting metrics via metricbeat. The inventory shows all 27 servers as boxes, but with 0 as the value for each server and each indicator. However, when I click on the Explorer tab I can create a graph showing data…

---

## [Event Correlation/Deviation](https://discuss.elastic.co/t/event-correlation-deviation/257572)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 4\
**Last updated:** [December 4, 2020, 9:48pm UTC](https://discuss.elastic.co/t/event-correlation-deviation/257572 "2020-12-04T21:48:56Z")

</div>

I have a series of endpoints that have hourly readings as well as a set of event times. A specific subset of the endpoints' readings are expected to drop during the events. I am trying to figure out a visualization tha…

---

## [Visualize a time counter](https://discuss.elastic.co/t/visualize-a-time-counter/257225)

<div class="topic-metadata">

**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\
**Replies:** 4\
**Last updated:** [December 4, 2020, 7:47pm UTC](https://discuss.elastic.co/t/visualize-a-time-counter/257225 "2020-12-04T19:47:03Z")

</div>

I am new to the ELK stack and trying to learn how to visualize some things. I have data coming in from one of our machine tools and I would like to make a simple counter that show the amount of time the machine has been …

---

## [Access denied stack monitoring под пользователем elastic](https://discuss.elastic.co/t/access-denied-stack-monitoring-elastic/257622)

<div class="topic-metadata">

**Author:** [@es7x](https://discuss.elastic.co/u/es7x)\
**Replies:** 8\
**Last updated:** [December 4, 2020, 7:22pm UTC](https://discuss.elastic.co/t/access-denied-stack-monitoring-elastic/257622 "2020-12-04T19:22:43Z")

</div>

Столкнулся с проблемой, под пользователем elastic не пускает в stack monitoring хотя до этого все работало. в логах кибаны такое "{ Error: \[security\_exception\] action \[indices:data/read/search\[can\_match\]\] is unauthor…

---

## [Set all nested fields value into master field](https://discuss.elastic.co/t/set-all-nested-fields-value-into-master-field/257676)

<div class="topic-metadata">

**Author:** [@Raynald](https://discuss.elastic.co/u/Raynald)\
**Replies:** 3\
**Last updated:** [December 4, 2020, 6:01pm UTC](https://discuss.elastic.co/t/set-all-nested-fields-value-into-master-field/257676 "2020-12-04T18:01:42Z")

</div>

Hi everyone, I have an index that can growth with many nested fileds, and we want to limit nested field to one sub-level for identified fields. But we want to keep value of this nested fields into the master field Exam…

---

## [Custom Logo Kibana 7.10.0 (guide)](https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 5:31pm UTC](https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686 "2020-12-04T17:31:08Z")

</div>

Verified on Kibana 7.10.0, running on Debian 10 (Buster). Applies for the same version in Windows. Hello, For all users like me, that need to customize the logos in Kibana, I share this guide that I have been creating …

---

## [Variance/Deviation Visualization](https://discuss.elastic.co/t/variance-deviation-visualization/257690)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 6:39pm UTC](https://discuss.elastic.co/t/variance-deviation-visualization/257690 "2020-12-04T18:39:51Z")

</div>

I have a dataset with readings every 30m. I want to set a start time and an end time at a single interval (eg 1:00 - 1:30) and rank the devices based on the amount they changed. I've been using the Top N feature in TSV…

---

## [Can I update existing dashboard using UPDATE api?](https://discuss.elastic.co/t/can-i-update-existing-dashboard-using-update-api/257682)

<div class="topic-metadata">

**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\
**Replies:** 3\
**Last updated:** [December 4, 2020, 5:39pm UTC](https://discuss.elastic.co/t/can-i-update-existing-dashboard-using-update-api/257682 "2020-12-04T17:39:09Z")

</div>

Hi, I am wondering if I can update existing dashboard using UPDATE api with saved json file. I am trying to see if I can revert my old changes back on dashboard back to Kibana. I am designing a way to have version contr…

---

## [Duplicates in ES Index](https://discuss.elastic.co/t/duplicates-in-es-index/256736)

<div class="topic-metadata">

**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 5:28pm UTC](https://discuss.elastic.co/t/duplicates-in-es-index/256736 "2020-12-04T17:28:55Z")

</div>

My ELK Stack is running a process which collects logs from 5-6 different PCs. The only issue I am facing at the moment is, my ES index is logging multiple entries for the same timestamp. Any suggestions on how I can fi…

---

## [Cannot create Data Stream](https://discuss.elastic.co/t/cannot-create-data-stream/256621)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 4\
**Last updated:** [December 4, 2020, 5:25pm UTC](https://discuss.elastic.co/t/cannot-create-data-stream/256621 "2020-12-04T17:25:52Z")

</div>

Hi, I am trying to create Data Streams by issuing: PUT \_data\_stream/test-index-pattern but I have this error: "error" : { "root\_cause" : \[ { "type" : "security\_exception", "reason" : "acti…

---

## [Control visualization issue in Dashboard](https://discuss.elastic.co/t/control-visualization-issue-in-dashboard/256645)

<div class="topic-metadata">

**Author:** [@sarthaksahu](https://discuss.elastic.co/u/sarthaksahu)\
**Replies:** 4\
**Last updated:** [December 4, 2020, 5:23pm UTC](https://discuss.elastic.co/t/control-visualization-issue-in-dashboard/256645 "2020-12-04T17:23:33Z")

</div>

We are upgrading kibana from 7.0.1 to 7.8.0 We had created Control Visualization in Kibana with 3 level parental control and using this in Dashboard. This was working as expected in 7.0.1 Issue: When we upgraded to 7.8…

---

## [Geohash Aggregation Question](https://discuss.elastic.co/t/geohash-aggregation-question/257681)

<div class="topic-metadata">

**Author:** [@johnrodey](https://discuss.elastic.co/u/johnrodey)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 5:08pm UTC](https://discuss.elastic.co/t/geohash-aggregation-question/257681 "2020-12-04T17:08:11Z")

</div>

Is there a way to create a geohash aggregation with counts for subtypes/numeric ranges within that geohash. For example if I have a collection of buildings and I want to know for each geohash, what is the count of offic…

---

## [Validation Failed: 1: this action would add \[2\] total shards, but this cluster currently has \[2122\]/\[2000\] maximum shards open](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2122-2000-maximum-shards-open/257678)

<div class="topic-metadata">

**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 4:59pm UTC](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2122-2000-maximum-shards-open/257678 "2020-12-04T16:59:27Z")

</div>

How can I solve this problem? \[2020-12-04T10:10:41,540\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>"e45d58acd2b072154d7ac57ceb05491db728…

---

## [Logstash](https://discuss.elastic.co/t/logstash/257661)

<div class="topic-metadata">

**Author:** [@bhuvaneswari](https://discuss.elastic.co/u/bhuvaneswari)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 2:12pm UTC](https://discuss.elastic.co/t/logstash/257661 "2020-12-04T14:12:52Z")

</div>

Is there any possibility to add logstash configuration to uberagent configuration file?

---

## [Change Login Page Logo - Kibana 7.9.1 Docker](https://discuss.elastic.co/t/change-login-page-logo-kibana-7-9-1-docker/257647)

<div class="topic-metadata">

**Author:** [@Ayakashi97](https://discuss.elastic.co/u/Ayakashi97)\
**Replies:** 11\
**Last updated:** [December 4, 2020, 4:31pm UTC](https://discuss.elastic.co/t/change-login-page-logo-kibana-7-9-1-docker/257647 "2020-12-04T16:31:48Z")

</div>

Hi threre, i am on Version 7.9.1 and want to change the login page logo. I found this thread: Custom Logo Kibana 7.9.2 (guide) All is working fine in docker-container, but i cannot use this command in the kibana docker…

---

## [How can I automate version control Kibana Saved Object?](https://discuss.elastic.co/t/how-can-i-automate-version-control-kibana-saved-object/257677)

<div class="topic-metadata">

**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 4:23pm UTC](https://discuss.elastic.co/t/how-can-i-automate-version-control-kibana-saved-object/257677 "2020-12-04T16:23:22Z")

</div>

Hi, I am very new to Kibana. I create Dashboard using Kibana and found that I can save it by using Saved Object. I was thinking I can version control these json file in my Azure DevOps repo. Instead of export-\>saving i…

---

## [Logstash elasticsearch filter plugin authentication issues](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-authentication-issues/257233)

<div class="topic-metadata">

**Author:** [@Dede\_Pessu](https://discuss.elastic.co/u/Dede_Pessu)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 4:21pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-authentication-issues/257233 "2020-12-04T16:21:28Z")

</div>

Hey Everyone, I am currently trying to use the elasticsearch filter plugin for logstash to do some calculations/aggregations and it seems to be having issues connecting to our elasticsearch node. based on the documenta…

---

## [Vega chart not plotting correctly](https://discuss.elastic.co/t/vega-chart-not-plotting-correctly/257675)

<div class="topic-metadata">

**Author:** [@GavinBeattie](https://discuss.elastic.co/u/GavinBeattie)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 4:17pm UTC](https://discuss.elastic.co/t/vega-chart-not-plotting-correctly/257675 "2020-12-04T16:17:08Z")

</div>

I have just upgraded to v7.10 and was pleased to see that the Vega visualisation has moved out of experimental. Unfortunately, exitsing charts show the marks offsets from where they should be. I have created a new chart …

---

## [Why the order of split rows change the displayed values on Kibana table visualization](https://discuss.elastic.co/t/why-the-order-of-split-rows-change-the-displayed-values-on-kibana-table-visualization/257168)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 4:15pm UTC](https://discuss.elastic.co/t/why-the-order-of-split-rows-change-the-displayed-values-on-kibana-table-visualization/257168 "2020-12-04T16:15:42Z")

</div>

Im counting documents with repeated values of the field throughput\_mb\_range grouped by the name of an interface. My metric is Count. My first split row is the name of the interface with a size of 600. My second split …

---

## [Kibana canvas collapse json inside table](https://discuss.elastic.co/t/kibana-canvas-collapse-json-inside-table/255263)

<div class="topic-metadata">

**Author:** [@Carlos\_Fernando\_Palm](https://discuss.elastic.co/u/Carlos_Fernando_Palm)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 3:51pm UTC](https://discuss.elastic.co/t/kibana-canvas-collapse-json-inside-table/255263 "2020-12-04T15:51:30Z")

</div>

Hello. I am showing some json inside a table. Thanks to this post: the json is shown correctly. I was wondering if there is a way to collapse said json when it gets really long, so the user does not have to use the mou…

---

## [Bar length in Horizontal bar graph is differing based on color condition](https://discuss.elastic.co/t/bar-length-in-horizontal-bar-graph-is-differing-based-on-color-condition/255580)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 3\
**Last updated:** [December 4, 2020, 3:10pm UTC](https://discuss.elastic.co/t/bar-length-in-horizontal-bar-graph-is-differing-based-on-color-condition/255580 "2020-12-04T15:10:39Z")

</div>

This is the Code and result without color conditioning { "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "width":806 data: { url: { %context%: true index: index\_ssd\_2 body: { …

---

## [Not able to start to logstash due could not find main class Xmx1024m](https://discuss.elastic.co/t/not-able-to-start-to-logstash-due-could-not-find-main-class-xmx1024m/257638)

<div class="topic-metadata">

**Author:** [@Siva\_Munnaluri](https://discuss.elastic.co/u/Siva_Munnaluri)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 2:47pm UTC](https://discuss.elastic.co/t/not-able-to-start-to-logstash-due-could-not-find-main-class-xmx1024m/257638 "2020-12-04T14:47:59Z")

</div>

Getting error as "Error: Could not find or load main class Xmx1024m" when we command "logstash.bat -e 'input {stdin{}} output {stdout{}}'" Logstash version : 7.6.2 Java version : Java 8.0 Please help me on this .

---

## [\`-Infinity\` Scores during rolling upgrade](https://discuss.elastic.co/t/infinity-scores-during-rolling-upgrade/257667)

<div class="topic-metadata">

**Author:** [@ggdd](https://discuss.elastic.co/u/ggdd)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 2:35pm UTC](https://discuss.elastic.co/t/infinity-scores-during-rolling-upgrade/257667 "2020-12-04T14:35:57Z")

</div>

Hi, We are performing a rolling upgrade from ES6 to ES7 and we have 3 types of nodes: Coordinators Data-only Master eligible-only As recommended, we start the upgrade with the non-master-eligible nodes, in our case t…

---

## [Azure Marketplace Elasticsearch (self managed) installation failed with VMExtensionProvisioningError](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-self-managed-installation-failed-with-vmextensionprovisioningerror/257657)

<div class="topic-metadata">

**Author:** [@uhikram](https://discuss.elastic.co/u/uhikram)\
**Replies:** 0\
**Last updated:** [December 4, 2020, 1:57pm UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-self-managed-installation-failed-with-vmextensionprovisioningerror/257657 "2020-12-04T13:57:12Z")

</div>

Deployed the Elasticsearch (Self-Managed) from Azure Marketplace, it is failing every time. Tried on multiple subscription as well. Version: 7.9.0 Deployment Erorr: {"code":"DeploymentFailed","message":"At least one r…

---

## [Create Kibana plugin to write x-large queries](https://discuss.elastic.co/t/create-kibana-plugin-to-write-x-large-queries/257616)

<div class="topic-metadata">

**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 1:50pm UTC](https://discuss.elastic.co/t/create-kibana-plugin-to-write-x-large-queries/257616 "2020-12-04T13:50:15Z")

</div>

I have an Elasticsearch index of millions of documents. Elasticsearch provides the ability to build statistics and aggregations out of this data and Kibana provides a nice out-of-the-box way to visualize this data. Howe…

---

## [How to set up looging level in Kibana](https://discuss.elastic.co/t/how-to-set-up-looging-level-in-kibana/257649)

<div class="topic-metadata">

**Author:** [@grynhtjnyuk](https://discuss.elastic.co/u/grynhtjnyuk)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 1:06pm UTC](https://discuss.elastic.co/t/how-to-set-up-looging-level-in-kibana/257649 "2020-12-04T13:06:32Z")

</div>

hi, could you tell me how to set up explicitly logging level in Kibana as INFO?

---

## [Ingest-convert.sh TypeError](https://discuss.elastic.co/t/ingest-convert-sh-typeerror/256152)

<div class="topic-metadata">

**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\
**Replies:** 2\
**Last updated:** [December 4, 2020, 12:55pm UTC](https://discuss.elastic.co/t/ingest-convert-sh-typeerror/256152 "2020-12-04T12:55:33Z")

</div>

I'm trying to convert filebeat-7.10.0-iis-error-pipeline to logstash config with ./ingest-convert.sh --input file:///root/error.json --output file:///root/iss-access.conf I tried with java bundled with logstash 7.10.0 …

---

## [TSVB derivative not showing data when time \< 4 hours](https://discuss.elastic.co/t/tsvb-derivative-not-showing-data-when-time-4-hours/257614)

<div class="topic-metadata">

**Author:** [@bering](https://discuss.elastic.co/u/bering)\
**Replies:** 1\
**Last updated:** [December 4, 2020, 12:42pm UTC](https://discuss.elastic.co/t/tsvb-derivative-not-showing-data-when-time-4-hours/257614 "2020-12-04T12:42:16Z")

</div>

My use case is collecting wait stats from MS SQL server, these metrics records waits on different things, I collect these waits every 5 minutes. These waits are just growing until the server restarts, so using TSVB with…

---

## [Question about default refresh\_interval and upsert](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581)

<div class="topic-metadata">

**Author:** [@dbrt](https://discuss.elastic.co/u/dbrt)\
**Replies:** 6\
**Last updated:** [December 4, 2020, 12:17pm UTC](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581 "2020-12-04T12:17:40Z")

</div>

Hello everyone, First of all, I am pretty new to ElasticSearch; please forgive me if the answer to my questions are obvious. We have switched to ElasticSearch 7.x from ElasticSearch 6.8 and I was very interested by the…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1124)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1126)
