# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1141

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1142

---

## [Chart: Put multiple metrix on differenet axis](https://discuss.elastic.co/t/chart-put-multiple-metrix-on-differenet-axis/256305)

<div class="topic-metadata">

**Author:** [@Emiliani](https://discuss.elastic.co/u/Emiliani)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 8:31pm UTC](https://discuss.elastic.co/t/chart-put-multiple-metrix-on-differenet-axis/256305 "2020-11-23T20:31:54Z")

</div>

I have added multiple metrics to my chart. And mutiple axis. How can I assign different metric to different axis Seems I was able to do it few mothns ago, but now I can't This is Kibana 6.8.12

---

## [Set Master node ID for discovery](https://discuss.elastic.co/t/set-master-node-id-for-discovery/256193)

<div class="topic-metadata">

**Author:** [@albbapm](https://discuss.elastic.co/u/albbapm)\
**Replies:** 7\
**Last updated:** [November 23, 2020, 8:17pm UTC](https://discuss.elastic.co/t/set-master-node-id-for-discovery/256193 "2020-11-23T20:17:30Z")

</div>

Long story short, I screwed up in the process of migrating to a new datastore and removed the original one from the config file before I was ready causing some issues. Luckily, this is a new cluster build and not yet pr…

---

## [While reindexing can I add geoip info to a record](https://discuss.elastic.co/t/while-reindexing-can-i-add-geoip-info-to-a-record/256396)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [November 23, 2020, 7:57pm UTC](https://discuss.elastic.co/t/while-reindexing-can-i-add-geoip-info-to-a-record/256396 "2020-11-23T19:57:12Z")

</div>

I am using a script to tidy up old indexes and get all the data consistent. Later indexes have geoip information for ip addresses but older ones don't. I can't figure out how to explicitly invoke a geoip lookup in a sc…

---

## [Add an image to kibana header](https://discuss.elastic.co/t/add-an-image-to-kibana-header/256271)

<div class="topic-metadata">

**Author:** [@namakdoon](https://discuss.elastic.co/u/namakdoon)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 7:29pm UTC](https://discuss.elastic.co/t/add-an-image-to-kibana-header/256271 "2020-11-23T19:29:33Z")

</div>

hi,how and where can i add an image to the top of kibana and can i also change the top menu of it?

---

## [Visualising Nested Objects in Kibana](https://discuss.elastic.co/t/visualising-nested-objects-in-kibana/254643)

<div class="topic-metadata">

**Author:** [@weiyentan](https://discuss.elastic.co/u/weiyentan)\
**Replies:** 7\
**Last updated:** [November 23, 2020, 6:59pm UTC](https://discuss.elastic.co/t/visualising-nested-objects-in-kibana/254643 "2020-11-23T18:59:44Z")

</div>

Hi, I am exploring using ELK and imported in this json document: { "\_index": "system-inventory-\[version\]}-2020.11.07", "\_type": "\_doc", "\_id": "O0X1o3UBD7PZ5Lh--gIu", "\_version": 1, "\_score": null, "\_source…

---

## [Kibana Index patter issue with alias](https://discuss.elastic.co/t/kibana-index-patter-issue-with-alias/256086)

<div class="topic-metadata">

**Author:** [@ananta05](https://discuss.elastic.co/u/ananta05)\
**Replies:** 5\
**Last updated:** [November 23, 2020, 6:29pm UTC](https://discuss.elastic.co/t/kibana-index-patter-issue-with-alias/256086 "2020-11-23T18:29:19Z")

</div>

I am working on existing index pattern where field alias does not work when used as a part of filter. I have tried below things so far Index pattern refresh try to fetch the query sent from Kibana and it has \[object o…

---

## [One of three pods stop but Elasticsearch thinks it's still running](https://discuss.elastic.co/t/one-of-three-pods-stop-but-elasticsearch-thinks-its-still-running/256158)

<div class="topic-metadata">

**Author:** [@lahpman](https://discuss.elastic.co/u/lahpman)\
**Replies:** 4\
**Last updated:** [November 23, 2020, 5:44pm UTC](https://discuss.elastic.co/t/one-of-three-pods-stop-but-elasticsearch-thinks-its-still-running/256158 "2020-11-23T17:44:29Z")

</div>

Hey y'all, We are running Elasticsearch 7.9.3 with the help of helm-charts/elasticsearch and lately we have been having a pod go down out of the blue. When I check on the health of Elasticsearch via CURL \_cluster/health…

---

## [Can saved objects be read-only?](https://discuss.elastic.co/t/can-saved-objects-be-read-only/256206)

<div class="topic-metadata">

**Author:** [@south](https://discuss.elastic.co/u/south)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 5:14pm UTC](https://discuss.elastic.co/t/can-saved-objects-be-read-only/256206 "2020-11-23T17:14:00Z")

</div>

Hi, I am looking for a way to make some of the saved objects(dashboard, visualization, etc) in a space to be read-only so those saved objects can not be edited by the user. The user has multiple dashbards and visualizat…

---

## [URL Links from Index Patterns Redirect to Port 5601](https://discuss.elastic.co/t/url-links-from-index-patterns-redirect-to-port-5601/256156)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 4:45pm UTC](https://discuss.elastic.co/t/url-links-from-index-patterns-redirect-to-port-5601/256156 "2020-11-23T16:45:04Z")

</div>

Good morning! We just recently spun up a second Kibana instance and threw both behind a load-balancer for HA. We previously accessed Kibana via https://kb1.contoso.com:5601, but now with the second server of https://kb2…

---

## [ES 7.3 - restarting data node doesn't rejoin cluster](https://discuss.elastic.co/t/es-7-3-restarting-data-node-doesnt-rejoin-cluster/256286)

<div class="topic-metadata">

**Author:** [@charlatan](https://discuss.elastic.co/u/charlatan)\
**Replies:** 5\
**Last updated:** [November 23, 2020, 4:42pm UTC](https://discuss.elastic.co/t/es-7-3-restarting-data-node-doesnt-rejoin-cluster/256286 "2020-11-23T16:42:00Z")

</div>

We have the following cluster: 3 x ES 7.3 on CentOS 7.8 VMs, "master eligible" + coordinating nodes 15 x ES 7.3 on CentOS 7.8 physical nodes, data-only 1 x ES 7.3 on CentOS 7.8 VM, running on the Kibana node purely to…

---

## [How to put two groks for IIS Logs?](https://discuss.elastic.co/t/how-to-put-two-groks-for-iis-logs/256111)

<div class="topic-metadata">

**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\
**Replies:** 4\
**Last updated:** [November 23, 2020, 4:38pm UTC](https://discuss.elastic.co/t/how-to-put-two-groks-for-iis-logs/256111 "2020-11-23T16:38:05Z")

</div>

\<grok { break\_on\_match =\> true match =\> \["message", "%{TIMESTAMP\_ISO8601:log\_timestamp} %{IPORHOST:site} %{WORD:method} %{URIPATH:request}(?:%{URIPARAM:requestparam})? - %{NUMBER:port} - %{IPORHOST:clienthost} %{NOTSP…

---

## [Ноды вылетают из кластера 7.9.1 и другие проблемы](https://discuss.elastic.co/t/7-9-1/256304)

<div class="topic-metadata">

**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\
**Replies:** 1\
**Last updated:** [November 23, 2020, 4:19pm UTC](https://discuss.elastic.co/t/7-9-1/256304 "2020-11-23T16:19:42Z")

</div>

Здравствуйте, имеем следующую проблему: ноды могут периодически вылетать из кластера \[2020-11-19T09:00:37,415\]\[INFO \]\[o.e.c.s.MasterService \] \[h1-es03\] node-left\[{h1-es02}{qgmMV2UbT-ScN9uRr6YM8g}{klj1K8UMRHGtYpYozIuq…

---

## [Перестали идти логи от winlogbeat](https://discuss.elastic.co/t/winlogbeat/256103)

<div class="topic-metadata">

**Author:** [@Kosh](https://discuss.elastic.co/u/Kosh)\
**Replies:** 1\
**Last updated:** [November 23, 2020, 4:16pm UTC](https://discuss.elastic.co/t/winlogbeat/256103 "2020-11-23T16:16:38Z")

</div>

Всем привет, подскажите пожалуйста новичку удалил из "Index Management" индексы(winlogbeat-\*) которые прилетали от виндовых машин, и всё больше они там не появляются, как вернуть всё назад? прилагаю скрин чтобы было по…

---

## [Kibana arm64 packages missing in Debian repo](https://discuss.elastic.co/t/kibana-arm64-packages-missing-in-debian-repo/256275)

<div class="topic-metadata">

**Author:** [@captbrando](https://discuss.elastic.co/u/captbrando)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 4:06pm UTC](https://discuss.elastic.co/t/kibana-arm64-packages-missing-in-debian-repo/256275 "2020-11-23T16:06:58Z")

</div>

Hi there! I was able to download the arm64 Kibana package from here, but unlike all the other ELK stack components, the Kibana .deb is missing in the repository. Can you add the Kibana .deb to the repo? Thanks

---

## [Aggregation filter error](https://discuss.elastic.co/t/aggregation-filter-error/256372)

<div class="topic-metadata">

**Author:** [@Andex](https://discuss.elastic.co/u/Andex)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 3:51pm UTC](https://discuss.elastic.co/t/aggregation-filter-error/256372 "2020-11-23T15:51:01Z")

</div>

Hi, i have this problem on aggregation filter : String can't be coerced into Integer , this is the log message : \[2020-11-23T15:55:13,479\]\[ERROR\]\[logstash.filters.aggregate\]\[main\]\[13ac83016d9f4ef50e52f1df4fd7eba1bf205…

---

## [Help with Logstash filter and private geoip data](https://discuss.elastic.co/t/help-with-logstash-filter-and-private-geoip-data/256007)

<div class="topic-metadata">

**Author:** [@ccofer](https://discuss.elastic.co/u/ccofer)\
**Replies:** 8\
**Last updated:** [November 23, 2020, 3:46pm UTC](https://discuss.elastic.co/t/help-with-logstash-filter-and-private-geoip-data/256007 "2020-11-23T15:46:17Z")

</div>

I realize I should have a better understanding of elastic, indexes, mappings, logstash and beats before coming here asking for help, but I really need to put this behind me. I have spent days searching and reading about …

---

## [Logstash failed to create template on target server](https://discuss.elastic.co/t/logstash-failed-to-create-template-on-target-server/256232)

<div class="topic-metadata">

**Author:** [@amralieg](https://discuss.elastic.co/u/amralieg)\
**Replies:** 3\
**Last updated:** [November 23, 2020, 2:17pm UTC](https://discuss.elastic.co/t/logstash-failed-to-create-template-on-target-server/256232 "2020-11-23T14:17:46Z")

</div>

Hi, I have the following logstash configuration, and when I run it it gives me the error. the input server is hosted on elastic cloud v7.9 and the output server is hosted on AWS elasticsearch v7.8, any clue how to solve…

---

## [Unable to parse field in Kibana](https://discuss.elastic.co/t/unable-to-parse-field-in-kibana/255851)

<div class="topic-metadata">

**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\
**Replies:** 1\
**Last updated:** [November 23, 2020, 3:33pm UTC](https://discuss.elastic.co/t/unable-to-parse-field-in-kibana/255851 "2020-11-23T15:33:59Z")

</div>

Hi Team, I am gathering JSON formats to logstash and then parsing it to elasticsearch. In that process, there is a key which has array brackets to it. The key gets saved in Elasticsearch as unknown field9Already tried…

---

## [7.10 and UseConcMarkSweepGC](https://discuss.elastic.co/t/7-10-and-useconcmarksweepgc/256153)

<div class="topic-metadata">

**Author:** [@teej](https://discuss.elastic.co/u/teej)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 3:30pm UTC](https://discuss.elastic.co/t/7-10-and-useconcmarksweepgc/256153 "2020-11-23T15:30:54Z")

</div>

Just upgraded to 7.10 and when restarting I get, "Unrecognized VM option 'UseConcMarkSweepGC". Is this to do with options.jvm?

---

## [Logstash datetime filter if else](https://discuss.elastic.co/t/logstash-datetime-filter-if-else/254430)

<div class="topic-metadata">

**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\
**Replies:** 7\
**Last updated:** [November 23, 2020, 3:22pm UTC](https://discuss.elastic.co/t/logstash-datetime-filter-if-else/254430 "2020-11-23T15:22:18Z")

</div>

Hi Team, This is regarding the Logstash Input filter. Sometimes the application from which I receive the data(Via logstash http) sends the value in one dateformat(ISO) and at times in another(UNIX). Is there anyway I …

---

## [CSV Ingest Column 1 = Time, Row 1 = Device](https://discuss.elastic.co/t/csv-ingest-column-1-time-row-1-device/256180)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 4\
**Last updated:** [November 23, 2020, 3:06pm UTC](https://discuss.elastic.co/t/csv-ingest-column-1-time-row-1-device/256180 "2020-11-23T15:06:51Z")

</div>

I have a CSV to import that has been formatted for use in Excel. As a result, and necessary for it to open in Excel, it has not only been chopped into several files (which I can handle) but it has also been formatted su…

---

## [Can't change the X-axis Label while using filters aggregation on Kibana \[possible duplication\]](https://discuss.elastic.co/t/cant-change-the-x-axis-label-while-using-filters-aggregation-on-kibana-possible-duplication/256252)

<div class="topic-metadata">

**Author:** [@Mohammadreza\_Niknam](https://discuss.elastic.co/u/Mohammadreza_Niknam)\
**Replies:** 1\
**Last updated:** [November 23, 2020, 2:42pm UTC](https://discuss.elastic.co/t/cant-change-the-x-axis-label-while-using-filters-aggregation-on-kibana-possible-duplication/256252 "2020-11-23T14:42:39Z")

</div>

Hello all, I'm currently working with Kibana 7.6.2 and in visualization, while I'm using filters aggregation, there is no custom Label field. After a quick search, I realized there's a bug and it was reported here: …

---

## [Logstash \[ERROR\]\[logstash.agent \] Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create\<main\>, action\_result: false", :backtrace=\>nil}](https://discuss.elastic.co/t/logstash-error-logstash-agent-failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/256348)

<div class="topic-metadata">

**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\
**Replies:** 1\
**Last updated:** [November 23, 2020, 2:39pm UTC](https://discuss.elastic.co/t/logstash-error-logstash-agent-failed-to-execute-action-id-main-action-type-logstash-failedaction-message-could-not-execute-action-pipelineaction-create-main-action-result-false-backtrace-nil/256348 "2020-11-23T14:39:31Z")

</div>

Hi all, i am trying file configuration logstash like this input { http\_poller { urls =\> { users =\> { method =\> get user =\> "user" password =\> "pass…

---

## [Logstash not listening on port](https://discuss.elastic.co/t/logstash-not-listening-on-port/255356)

<div class="topic-metadata">

**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\
**Replies:** 10\
**Last updated:** [November 23, 2020, 2:31pm UTC](https://discuss.elastic.co/t/logstash-not-listening-on-port/255356 "2020-11-23T14:31:01Z")

</div>

I noticed that nothing is listening on port 5044 on my ELK server. Logstash is running. Is there some configuration I missed somewhere to have it running/listening on that port? Here are the last few lines from my log …

---

## [Can't move ES indexes to another disk](https://discuss.elastic.co/t/cant-move-es-indexes-to-another-disk/256165)

<div class="topic-metadata">

**Author:** [@sourcedump](https://discuss.elastic.co/u/sourcedump)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 2:19pm UTC](https://discuss.elastic.co/t/cant-move-es-indexes-to-another-disk/256165 "2020-11-23T14:19:19Z")

</div>

Hello everyone! I have an ES 6.1.3 installation that works perfectly, but now the disk where the indexes are stored (we can call it 'Disk A' with path '/data-ephemeral') is full and we can't make it larger. So I've dec…

---

## [Add filter in a dashboard proposes a wrong list of fields](https://discuss.elastic.co/t/add-filter-in-a-dashboard-proposes-a-wrong-list-of-fields/256327)

<div class="topic-metadata">

**Author:** [@pchanas](https://discuss.elastic.co/u/pchanas)\
**Replies:** 4\
**Last updated:** [November 23, 2020, 2:12pm UTC](https://discuss.elastic.co/t/add-filter-in-a-dashboard-proposes-a-wrong-list-of-fields/256327 "2020-11-23T14:12:40Z")

</div>

When I try to add manually a filter in a dashboard (using add filter on top of the page), the list of available fields belongs to the default index and not on indexes used in the visualisations of the DB... (no viz is po…

---

## [Adding indices to New Spaces - not able to](https://discuss.elastic.co/t/adding-indices-to-new-spaces-not-able-to/256014)

<div class="topic-metadata">

**Author:** [@lnxjenn](https://discuss.elastic.co/u/lnxjenn)\
**Replies:** 4\
**Last updated:** [November 23, 2020, 1:28pm UTC](https://discuss.elastic.co/t/adding-indices-to-new-spaces-not-able-to/256014 "2020-11-23T13:28:16Z")

</div>

I am creating new spaces for grouping our users together with their appropriate feeds. But I cannot see the feeds within the new space, when i try to add them into the Index Patterns. Now, as a user in the default space…

---

## [How to specify the salesforce Host for Salesforce input plugin](https://discuss.elastic.co/t/how-to-specify-the-salesforce-host-for-salesforce-input-plugin/255119)

<div class="topic-metadata">

**Author:** [@brendanlynch](https://discuss.elastic.co/u/brendanlynch)\
**Replies:** 2\
**Last updated:** [November 23, 2020, 1:14pm UTC](https://discuss.elastic.co/t/how-to-specify-the-salesforce-host-for-salesforce-input-plugin/255119 "2020-11-23T13:14:55Z")

</div>

How do you control the Salesforce HOST/URL that you want to connect to? All I see in the input fields is a boolean switch that says it will use 'test.salesforce.com'.

---

## [Too many dynamic script compilations with stored script](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-with-stored-script/256354)

<div class="topic-metadata">

**Author:** [@cwinkler](https://discuss.elastic.co/u/cwinkler)\
**Replies:** 0\
**Last updated:** [November 23, 2020, 12:46pm UTC](https://discuss.elastic.co/t/too-many-dynamic-script-compilations-with-stored-script/256354 "2020-11-23T12:46:50Z")

</div>

With Elasticsearch 7.10 we are getting the following error when using a stored script. ElasticsearchException\[Elasticsearch exception \[type=general\_script\_exception, reason=Failed to compile stored script \[updateMessage…

---

## [What does max\_docs do in context of \_delete\_by\_query](https://discuss.elastic.co/t/what-does-max-docs-do-in-context-of-delete-by-query/256317)

<div class="topic-metadata">

**Author:** [@vangogh94](https://discuss.elastic.co/u/vangogh94)\
**Replies:** 3\
**Last updated:** [November 23, 2020, 10:53am UTC](https://discuss.elastic.co/t/what-does-max-docs-do-in-context-of-delete-by-query/256317 "2020-11-23T10:53:41Z")

</div>

Hi, Looking at the documentation for \_delete\_by\_query API, there is a parameter called "max\_docs". From what i see it was added to documentation in 7.3. This same parameter is shown on \_reindex API documentation and ha…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1140)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1142)
