# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1241 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1242 --- ## [Upgrade ECE from 2.4.3 to 2.6.1](https://discuss.elastic.co/t/upgrade-ece-from-2-4-3-to-2-6-1/248017)
**Author:** [@ece\_master](https://discuss.elastic.co/u/ece_master)\ **Replies:** 6\ **Last updated:** [September 11, 2020, 6:11am UTC](https://discuss.elastic.co/t/upgrade-ece-from-2-4-3-to-2-6-1/248017 "2020-09-11T06:11:34Z")
Hi , i have some trouble with the ECE upgrade. Some facts: 6 VM´s Fresh cluster install with version 2.4.1 Start of some deployments from version 6.8.0 to 7.9.1 Start upgrade Upgrade logs Running Upgrade Initial c… --- ## [What is elasticsearch xpack? it is available for all elasticsearch versions ? example 4](https://discuss.elastic.co/t/what-is-elasticsearch-xpack-it-is-available-for-all-elasticsearch-versions-example-4/248262)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 5:26am UTC](https://discuss.elastic.co/t/what-is-elasticsearch-xpack-it-is-available-for-all-elasticsearch-versions-example-4/248262 "2020-09-11T05:26:17Z")
what is elasticsearch xpack? it is available for all elasticsearch versions ? example version 4.2 Kibana 4.2 --- ## [Documents with duplicate \_id in an index split by time?](https://discuss.elastic.co/t/documents-with-duplicate-id-in-an-index-split-by-time/248260)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 1\ **Last updated:** [September 11, 2020, 5:05am UTC](https://discuss.elastic.co/t/documents-with-duplicate-id-in-an-index-split-by-time/248260 "2020-09-11T05:05:10Z")
Might just be me misunderstanding how ids and indexing work here. I've got a stream of records and I write them to an index - my\_data Now, to keep it manigable, because there are lots of records, I'm telling logstash t… --- ## [Logstash unable to decode Cisco protobuf](https://discuss.elastic.co/t/logstash-unable-to-decode-cisco-protobuf/247955)
**Author:** [@Scottsdash](https://discuss.elastic.co/u/Scottsdash)\ **Replies:** 3\ **Last updated:** [September 11, 2020, 5:01am UTC](https://discuss.elastic.co/t/logstash-unable-to-decode-cisco-protobuf/247955 "2020-09-11T05:01:11Z")
Hoping someone has configured logstash to receive Cisco telemetry before, I'm able to receive the events but can't decode the telemetry. I'm getting the folowing error from logstash: \[WARN \] 2020-09-09 05:18:01.074 \[ni… --- ## [Unable to find image 'docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:2.6.1' locally](https://discuss.elastic.co/t/unable-to-find-image-docker-elastic-co-cloud-enterprise-elastic-cloud-enterprise-2-6-1-locally/248066)
**Author:** [@dkangel37](https://discuss.elastic.co/u/dkangel37)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 4:04am UTC](https://discuss.elastic.co/t/unable-to-find-image-docker-elastic-co-cloud-enterprise-elastic-cloud-enterprise-2-6-1-locally/248066 "2020-09-11T04:04:58Z")
I am trying to install ECE until AWS EC2 instances. I have run into the below error both while using the github ECE role and via the manual install method using this cmd " bash \<(curl -fsSL https://download.elastic.co/cl… --- ## [Kibana 7.7: Get associated saved search for visualization plugin](https://discuss.elastic.co/t/kibana-7-7-get-associated-saved-search-for-visualization-plugin/247932)
**Author:** [@jdd1](https://discuss.elastic.co/u/jdd1)\ **Replies:** 4\ **Last updated:** [September 10, 2020, 11:30pm UTC](https://discuss.elastic.co/t/kibana-7-7-get-associated-saved-search-for-visualization-plugin/247932 "2020-09-10T23:30:27Z")
I have built a custom ReactJS visualization plugin, in which I use a custom request handler. Since I have requiresSearch set to true, I am able to choose an index pattern or saved search as the data source, and I am abl… --- ## [Kibana visualization issue](https://discuss.elastic.co/t/kibana-visualization-issue/247645)
**Author:** [@torten](https://discuss.elastic.co/u/torten)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 11:12pm UTC](https://discuss.elastic.co/t/kibana-visualization-issue/247645 "2020-09-10T23:12:09Z")
Hi everyone, I have an issue with kibana visualization, when using stack graph with range over byte field. Range values does not convert into human readable format (Kb, Mb, Gb) and numbers stay the same in the graph. … --- ## [Kibana Embed Dashboard with time filter then drilldown and time filter is lost](https://discuss.elastic.co/t/kibana-embed-dashboard-with-time-filter-then-drilldown-and-time-filter-is-lost/247214)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 10:59pm UTC](https://discuss.elastic.co/t/kibana-embed-dashboard-with-time-filter-then-drilldown-and-time-filter-is-lost/247214 "2020-09-10T22:59:02Z")
Hello, 7.9 gives us the ability to create iframe links to embed in external sites that include the time filter control (or other filters). This feature is great! In the eternally embedded dashboard, when we drill f… --- ## [Logstash config not found](https://discuss.elastic.co/t/logstash-config-not-found/248246)
**Author:** [@Sfec](https://discuss.elastic.co/u/Sfec)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 10:28pm UTC](https://discuss.elastic.co/t/logstash-config-not-found/248246 "2020-09-10T22:28:21Z")
I created a logstash config file with the following code input { jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver://localhost/serverName;database=dbName;integratedSecurity=true" jdbc\_… --- ## [Line visualize show only top 10](https://discuss.elastic.co/t/line-visualize-show-only-top-10/247847)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 10:30pm UTC](https://discuss.elastic.co/t/line-visualize-show-only-top-10/247847 "2020-09-10T22:30:37Z")
i want to show top 10 count of my data per day, but in line visualize i get its top 10 for each date, can we show top 10 for total data? --- ## [Best practices for validating elasticsearch snapshots](https://discuss.elastic.co/t/best-practices-for-validating-elasticsearch-snapshots/248240)
**Author:** [@proton](https://discuss.elastic.co/u/proton)\ **Replies:** 0\ **Last updated:** [September 10, 2020, 9:54pm UTC](https://discuss.elastic.co/t/best-practices-for-validating-elasticsearch-snapshots/248240 "2020-09-10T21:54:12Z")
We used verify the snapshots on daily bases to make sure they are in good state i.e has no corrupted data. We do this by spinning up a new cluster and restoring it to validate the we have at least one good snapshot. How… --- ## [How does split filtered events processed?](https://discuss.elastic.co/t/how-does-split-filtered-events-processed/248135)
**Author:** [@sharma\_yash](https://discuss.elastic.co/u/sharma_yash)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 9:30pm UTC](https://discuss.elastic.co/t/how-does-split-filtered-events-processed/248135 "2020-09-10T21:30:02Z")
Hi, I am new to this community and come to know about splitting the events into multiple events. Got to know split filter plugin is the answer. I didn't understand the flow of pipeline when using this plugin. For ex:- … --- ## [Logstash not creating multiple index](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234)
**Author:** [@shubham\_gour](https://discuss.elastic.co/u/shubham_gour)\ **Replies:** 4\ **Last updated:** [September 10, 2020, 9:24pm UTC](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234 "2020-09-10T21:24:10Z")
i have this code use in conf file of logstash input { beats{ port =\> 5044 } } filter { grok{ match =\> { "message" =\> "%{INT:Event\_Date} %{MONTH:Event\_Month} %{YEAR:Event\_Year} | %{TIME:SFS\_Event\_Time},%{INT:LOG\_N… --- ## [Confusion matrix](https://discuss.elastic.co/t/confusion-matrix/248171)
**Author:** [@Eugene\_Dobrovolskyi](https://discuss.elastic.co/u/Eugene_Dobrovolskyi)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 9:16pm UTC](https://discuss.elastic.co/t/confusion-matrix/248171 "2020-09-10T21:16:36Z")
Hi all! I am looking for a way to build a confusion matrix for image detection results (machine learning domain). I already uploaded my data to ElasticSearch and built index patterns for it. I tried different existing v… --- ## [KQL query not part of the query](https://discuss.elastic.co/t/kql-query-not-part-of-the-query/247052)
**Author:** [@Tobias\_Eriksson](https://discuss.elastic.co/u/Tobias_Eriksson)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 8:47pm UTC](https://discuss.elastic.co/t/kql-query-not-part-of-the-query/247052 "2020-09-10T20:47:56Z")
For some reason the query is not included in the query sent to Elastic However "+ Add Filter" part of the query IS included in the query I had a look at the "Inspect" and it is clearly so that what ever I type in is no… --- ## [Unable to import saved objects file](https://discuss.elastic.co/t/unable-to-import-saved-objects-file/248080)
**Author:** [@sc\_1010](https://discuss.elastic.co/u/sc_1010)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 8:31pm UTC](https://discuss.elastic.co/t/unable-to-import-saved-objects-file/248080 "2020-09-10T20:31:14Z")
Hi all, I was doing a full restore of all of the saved objects when migrating my elastic datasource. Versions: Elastic 7.7.1 Kibana 7.7.1 I got a full export from /api/saved\_objects/\_export to an ndjson file. When … --- ## [A way to expand the Available Fields list?](https://discuss.elastic.co/t/a-way-to-expand-the-available-fields-list/248232)
**Author:** [@DThompson55](https://discuss.elastic.co/u/DThompson55)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:15pm UTC](https://discuss.elastic.co/t/a-way-to-expand-the-available-fields-list/248232 "2020-09-10T20:15:35Z")
In the Discover window, is there a way to widen or expand the pane that shows the list of available fields? Our field names are very long so it's hard to pick the right one. Hovering works, but is slow. --- ## [How to get a "Tracking Line" in my charts. As seen in the stack monitoring graphs](https://discuss.elastic.co/t/how-to-get-a-tracking-line-in-my-charts-as-seen-in-the-stack-monitoring-graphs/247872)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:10pm UTC](https://discuss.elastic.co/t/how-to-get-a-tracking-line-in-my-charts-as-seen-in-the-stack-monitoring-graphs/247872 "2020-09-10T20:10:35Z")
Hi, is it possible to activate those indicator lines in kibana graphs? They would be really helpful. You can see their behavior unter StackMonitoring-\>Nodes-\>Node1. All those stats have this line when I hover over them. … --- ## [Best practices to auto-update html table from elasticsearch server](https://discuss.elastic.co/t/best-practices-to-auto-update-html-table-from-elasticsearch-server/247980)
**Author:** [@pastoreerrante](https://discuss.elastic.co/u/pastoreerrante)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:09pm UTC](https://discuss.elastic.co/t/best-practices-to-auto-update-html-table-from-elasticsearch-server/247980 "2020-09-10T20:09:24Z")
Hi there, I'm trying to build a simple event visualization web-dashboard based on elasticsearch. Diagram: browser --- web framework (node.js api layer) --- elasticsearch Basically, I'll have a lot of network-applianc… --- ## [Red cluster status master not discovered exception](https://discuss.elastic.co/t/red-cluster-status-master-not-discovered-exception/248142)
**Author:** [@mohitchavda](https://discuss.elastic.co/u/mohitchavda)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:08pm UTC](https://discuss.elastic.co/t/red-cluster-status-master-not-discovered-exception/248142 "2020-09-10T20:08:20Z")
we have facing issues of red cluster status and out of 3, only 1 node is visible. before that, we have t2.small instance and to resolve the red cluster status, we have upgrade instance type t2.medium still, clusters ar… --- ## [Is there a way to query elasticsearch index using timeuuid functionality?](https://discuss.elastic.co/t/is-there-a-way-to-query-elasticsearch-index-using-timeuuid-functionality/248033)
**Author:** [@Kyle\_Neal](https://discuss.elastic.co/u/Kyle_Neal)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 8:06pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-query-elasticsearch-index-using-timeuuid-functionality/248033 "2020-09-10T20:06:34Z")
I have an elasticsearch index that is holding a timeuuid field that originally comes from cassandra. The type is keyword and it's named event\_ts. Is it even possible to search elasticsearch index using timeuuid functiona… --- ## [Searching and indexing priority](https://discuss.elastic.co/t/searching-and-indexing-priority/248166)
**Author:** [@ssiws](https://discuss.elastic.co/u/ssiws)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:56pm UTC](https://discuss.elastic.co/t/searching-and-indexing-priority/248166 "2020-09-10T19:56:11Z")
Hello, generally speaking, how does Elasticsearch handles searching "priority" while indexing ? I noticed that when someone performs a query with a timerange of multiple weeks, indexing almost halts while the query is … --- ## [Grok optional pattern parsing](https://discuss.elastic.co/t/grok-optional-pattern-parsing/248220)
**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 7:46pm UTC](https://discuss.elastic.co/t/grok-optional-pattern-parsing/248220 "2020-09-10T19:46:22Z")
I have path field that can have values as /root/cncnz05msp1da15-n01\_logs/a.txt OR /root/cncnz05msp1ts05\_logs/a.txt OR /root/cncnz05mspmon\_logs/a.txt; I have below logstash config which is working fine for cncnz05msp1t… --- ## ["Password authentication failed for elastic"](https://discuss.elastic.co/t/password-authentication-failed-for-elastic/244099)
**Author:** [@danielP1](https://discuss.elastic.co/u/danielP1)\ **Replies:** 8\ **Last updated:** [September 10, 2020, 7:42pm UTC](https://discuss.elastic.co/t/password-authentication-failed-for-elastic/244099 "2020-09-10T19:42:27Z")
Greetings, I'm trying to get a 'near' vanilla deployment of elasticsearch up and running on ECK which I've based off the quick start instructions here I initially tried a 3 member cluster and saw a lot of connection fa… --- ## [How to combine url string field in kibana bar chart visualization?](https://discuss.elastic.co/t/how-to-combine-url-string-field-in-kibana-bar-chart-visualization/247206)
**Author:** [@S\_Zaman](https://discuss.elastic.co/u/S_Zaman)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:41pm UTC](https://discuss.elastic.co/t/how-to-combine-url-string-field-in-kibana-bar-chart-visualization/247206 "2020-09-10T19:41:45Z")
using apm I have collected my application logs and there I found url data like abc.com/edit/1 abc.com/edit/2 abc.com/edit/3 abc.com/update/1 abc.com/update/3 abc.com/update/5 what I am trying to do is I want to pl… --- ## [Kibana error on Discover when accessing index pattern with Recently shrunk index](https://discuss.elastic.co/t/kibana-error-on-discover-when-accessing-index-pattern-with-recently-shrunk-index/248052)
**Author:** [@vvwood](https://discuss.elastic.co/u/vvwood)\ **Replies:** 2\ **Last updated:** [September 10, 2020, 7:37pm UTC](https://discuss.elastic.co/t/kibana-error-on-discover-when-accessing-index-pattern-with-recently-shrunk-index/248052 "2020-09-10T19:37:01Z")
As mentioned in the subject, I have an index pattern that references a recently shrunk index. After the shrink happened, I get the following error. Wrapper@https://Node1.domain.com:5601/31997/bundles/commons.bundle.js:3… --- ## [Line chart with date range calculating the total per day](https://discuss.elastic.co/t/line-chart-with-date-range-calculating-the-total-per-day/247850)
**Author:** [@importasapo](https://discuss.elastic.co/u/importasapo)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:31pm UTC](https://discuss.elastic.co/t/line-chart-with-date-range-calculating-the-total-per-day/247850 "2020-09-10T19:31:21Z")
Kibana Line Chart that i have events and instead of showing all events per day, I use the date range to show the total of events per day. After an elastic search updated I start seeing a extra line. This is a Stacked l… --- ## [How to call api url declared in server of plugin from component in plugin in kibana 7.8 OSS version?](https://discuss.elastic.co/t/how-to-call-api-url-declared-in-server-of-plugin-from-component-in-plugin-in-kibana-7-8-oss-version/247798)
**Author:** [@Jayanth\_Mogadampalli](https://discuss.elastic.co/u/Jayanth_Mogadampalli)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:18pm UTC](https://discuss.elastic.co/t/how-to-call-api-url-declared-in-server-of-plugin-from-component-in-plugin-in-kibana-7-8-oss-version/247798 "2020-09-10T19:18:22Z")
I am developing a plugin in 7.8 kibana oss version When I define route in routes in server folder of plugin then how to call from component in public in plugin? --- ## [KIBANA Dashboard information tab size](https://discuss.elastic.co/t/kibana-dashboard-information-tab-size/248188)
**Author:** [@RuBi](https://discuss.elastic.co/u/RuBi)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 7:03pm UTC](https://discuss.elastic.co/t/kibana-dashboard-information-tab-size/248188 "2020-09-10T19:03:50Z")
Hi, how to increase windows tab length, i don't see all the information now --- ## [Dashboard for Storage like storage available & utilization with server list](https://discuss.elastic.co/t/dashboard-for-storage-like-storage-available-utilization-with-server-list/248211)
**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\ **Replies:** 1\ **Last updated:** [September 10, 2020, 6:56pm UTC](https://discuss.elastic.co/t/dashboard-for-storage-like-storage-available-utilization-with-server-list/248211 "2020-09-10T18:56:24Z")
Hi Team, Can someone please help me to create dashboard for Storage basically I'm looking to to achieve servers list with like total storage, disk utilization and available space as list in the dashboard for all servers… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1240) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1242)