# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1520 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1521 --- ## [Prevent saved search to filter the dashboard](https://discuss.elastic.co/t/prevent-saved-search-to-filter-the-dashboard/226236)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 9:33pm UTC](https://discuss.elastic.co/t/prevent-saved-search-to-filter-the-dashboard/226236 "2020-04-10T21:33:17Z")
hello, Is it possible to add a saved search to a dashboard, without these buttons, or not to allow them to filter the whole page? thanks --- ## [SIEM doesn't show any Winlogbeat events, despite ES receiving them](https://discuss.elastic.co/t/siem-doesnt-show-any-winlogbeat-events-despite-es-receiving-them/224008)
**Author:** [@Aura](https://discuss.elastic.co/u/Aura)\ **Replies:** 11\ **Last updated:** [April 10, 2020, 8:38pm UTC](https://discuss.elastic.co/t/siem-doesnt-show-any-winlogbeat-events-despite-es-receiving-them/224008 "2020-04-10T20:38:13Z")
Hi, New ELK stack user here. I just installed v7.6.1 on a Ubuntu Server 18.04 that I have running on an old Lenovo I had lying around. Took me a couple of hours to install, set up, and get working. One issue I can't see… --- ## [Internal Server Error After Update](https://discuss.elastic.co/t/internal-server-error-after-update/226430)
**Author:** [@wingdom](https://discuss.elastic.co/u/wingdom)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 7:43pm UTC](https://discuss.elastic.co/t/internal-server-error-after-update/226430 "2020-04-10T19:43:26Z")
Hello, I updated to 7.6.2 today, and am now greeted with the following error: Version: 7.6.2 Build: 29199 Error: Internal Server Error at fetchResponse$ (http://fluent.dev.brandcoders.com/bundles/commons… --- ## [TSVB Table does not remember Sort Column unless you click on it](https://discuss.elastic.co/t/tsvb-table-does-not-remember-sort-column-unless-you-click-on-it/227546)
**Author:** [@qualispec](https://discuss.elastic.co/u/qualispec)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 7:40pm UTC](https://discuss.elastic.co/t/tsvb-table-does-not-remember-sort-column-unless-you-click-on-it/227546 "2020-04-10T19:40:15Z")
I'm using Kibana 7.5.0. I'm working on a TSVB Table, where my Group by field is a date field (with mapping "type" : "date"). That date field is displaying in the TSVB Table with format like "Apr 9, 2020 @ 00:00:00.000". … --- ## [Logstash pipeline port is not visible outside Openshift/Kubernetes](https://discuss.elastic.co/t/logstash-pipeline-port-is-not-visible-outside-openshift-kubernetes/227372)
**Author:** [@nila](https://discuss.elastic.co/u/nila)\ **Replies:** 5\ **Last updated:** [April 10, 2020, 7:37pm UTC](https://discuss.elastic.co/t/logstash-pipeline-port-is-not-visible-outside-openshift-kubernetes/227372 "2020-04-10T19:37:48Z")
Hello all - I have setup ELK cluster on Openshift/Kubernetes with TLS. All components work fine. But when I configure filebeat to my logstash with pipeline port(created service with a nodeport), it is unable to find t… --- ## [Exporting a saved search to JSON file](https://discuss.elastic.co/t/exporting-a-saved-search-to-json-file/227543)
**Author:** [@soffonisol](https://discuss.elastic.co/u/soffonisol)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 7:33pm UTC](https://discuss.elastic.co/t/exporting-a-saved-search-to-json-file/227543 "2020-04-10T19:33:48Z")
I have seen many articles that instructs us to go to management -\> Saved Object -\> export from there. However, when I examine the exported JSON, it's completely different than my saved search results. Do you know why tha… --- ## [\[Filebeat\] Timestamp with nanosecond precision](https://discuss.elastic.co/t/filebeat-timestamp-with-nanosecond-precision/227554)
**Author:** [@bmalecki4](https://discuss.elastic.co/u/bmalecki4)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 7:31pm UTC](https://discuss.elastic.co/t/filebeat-timestamp-with-nanosecond-precision/227554 "2020-04-10T19:31:42Z")
My configuration: filebeat + logstash + elasticsearch + kibana (with logtrail) - all in version 7.6.1 I have a mule.log file which contains information without the timestamp field that I could extract to enforce pro… --- ## [File uploaded using FS Crawler - only the name of file is stored in content filed](https://discuss.elastic.co/t/file-uploaded-using-fs-crawler-only-the-name-of-file-is-stored-in-content-filed/227523)
**Author:** [@smankon](https://discuss.elastic.co/u/smankon)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 6:42pm UTC](https://discuss.elastic.co/t/file-uploaded-using-fs-crawler-only-the-name-of-file-is-stored-in-content-filed/227523 "2020-04-10T18:42:36Z")
HI, I was able to upload various kinds of files using FS Crawler to ES. However when I upload a bam files (which is a huge files generated in WGS pipelines), only the name of the file is getting stored in the content fi… --- ## [Bucket\_script aggregation on filters aggegation over nested documents](https://discuss.elastic.co/t/bucket-script-aggregation-on-filters-aggegation-over-nested-documents/227541)
**Author:** [@Anton\_Pirker](https://discuss.elastic.co/u/Anton_Pirker)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 5:49pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-on-filters-aggegation-over-nested-documents/227541 "2020-04-10T17:49:23Z")
Hello! I have my documents, and they contain nested "events" (like clicks on a website) documents. Now I want to calculate the ration between nested events with name=x and nested events with name=y This is my query: … --- ## [Detections will not setup](https://discuss.elastic.co/t/detections-will-not-setup/227297)
**Author:** [@xennn](https://discuss.elastic.co/u/xennn)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 5:41pm UTC](https://discuss.elastic.co/t/detections-will-not-setup/227297 "2020-04-10T17:41:11Z")
Hello, i have a problem with setup detections in SIEM. I always get a message with Let's set up your detection engine. I have logged in as a superuser i cannot see the .siem-signals index. I have check the role i hav… --- ## [Bucket\_script aggregation on filters aggregation not showing results](https://discuss.elastic.co/t/bucket-script-aggregation-on-filters-aggregation-not-showing-results/227539)
**Author:** [@Anton\_Pirker](https://discuss.elastic.co/u/Anton_Pirker)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 5:38pm UTC](https://discuss.elastic.co/t/bucket-script-aggregation-on-filters-aggregation-not-showing-results/227539 "2020-04-10T17:38:27Z")
Hello! I have "event" (like clicks on websites) documents in a index. Now I want to to calculate the ratio between events with name=x and events with name=y. I use a bucket\_script aggregation for that, but the result of… --- ## [Best approach to index a book content](https://discuss.elastic.co/t/best-approach-to-index-a-book-content/227186)
**Author:** [@Clony](https://discuss.elastic.co/u/Clony)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 4:34pm UTC](https://discuss.elastic.co/t/best-approach-to-index-a-book-content/227186 "2020-04-10T16:34:26Z")
There are more requirements but most important ones are the following ones: I should make a search query that should look on ALL pages of a single book and give me score of the whole book(all pages). I should know whic… --- ## [Longest Hierarchy Search](https://discuss.elastic.co/t/longest-hierarchy-search/227532)
**Author:** [@Sahil\_Kalra](https://discuss.elastic.co/u/Sahil_Kalra)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 4:19pm UTC](https://discuss.elastic.co/t/longest-hierarchy-search/227532 "2020-04-10T16:19:26Z")
Hi Team, So, I am using ESv.6.4. and my requirement is, I want to search the longest matched hierarchy in search results and break the path from the nearest separator. my data is India/Up/Noida India/Delhi/Gurugram I… --- ## [Indexing Sharepoint files(mounted to network driver) using fsCrawler](https://discuss.elastic.co/t/indexing-sharepoint-files-mounted-to-network-driver-using-fscrawler/227434)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 12\ **Last updated:** [April 10, 2020, 4:16pm UTC](https://discuss.elastic.co/t/indexing-sharepoint-files-mounted-to-network-driver-using-fscrawler/227434 "2020-04-10T16:16:26Z")
Hi, I have mapped share point site as a network driver to my windows server 2019. The path is W:\\fsSharepointFiles Now I installed Java, fsCrawler and started indexing these files. Below are the steps I followed. i… --- ## [Date Filter on Unix Epoch Failing](https://discuss.elastic.co/t/date-filter-on-unix-epoch-failing/227422)
**Author:** [@ben-10](https://discuss.elastic.co/u/ben-10)\ **Replies:** 8\ **Last updated:** [April 10, 2020, 4:09pm UTC](https://discuss.elastic.co/t/date-filter-on-unix-epoch-failing/227422 "2020-04-10T16:09:43Z")
The date filter fails when attempting to match a unix epoch integer field and I can't figure out why. The data ingested is from xml using the following logstash config: input { file { path =\> \[ "/home/ben/d… --- ## [Is Kibana right tool to create multi-facet search user interface](https://discuss.elastic.co/t/is-kibana-right-tool-to-create-multi-facet-search-user-interface/227406)
**Author:** [@kevinzou](https://discuss.elastic.co/u/kevinzou)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 4:04pm UTC](https://discuss.elastic.co/t/is-kibana-right-tool-to-create-multi-facet-search-user-interface/227406 "2020-04-10T16:04:16Z")
Sorry for the dumb question but I am completely new in the elastic world. I would like to develop a quick proof of concept to demo elastic functionalities. and the typical multifacet interface would be perfect for me. … --- ## [How to make a hypertext link in datatable without custom formatter](https://discuss.elastic.co/t/how-to-make-a-hypertext-link-in-datatable-without-custom-formatter/227404)
**Author:** [@Goishin](https://discuss.elastic.co/u/Goishin)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 4:02pm UTC](https://discuss.elastic.co/t/how-to-make-a-hypertext-link-in-datatable-without-custom-formatter/227404 "2020-04-10T16:02:57Z")
I currently have a field in my index that uses a custom formatter. I use this to go to the dashboard associated with that field. You start in one dashboard, there's a list of instances, you click on one of the instances,… --- ## [How to Create Different index for different Logpaths](https://discuss.elastic.co/t/how-to-create-different-index-for-different-logpaths/227438)
**Author:** [@Pacha\_Gopi](https://discuss.elastic.co/u/Pacha_Gopi)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 3:58pm UTC](https://discuss.elastic.co/t/how-to-create-different-index-for-different-logpaths/227438 "2020-04-10T15:58:44Z")
Hi I am getting logs from filebeat to my ELK server.One filebeat is sending two diiferent log files.My file beat is sending Nginx logs and Laraverl logs,my requirement is that i have to create Different index for differ… --- ## [How change the format of duration between two dates in dateTime?](https://discuss.elastic.co/t/how-change-the-format-of-duration-between-two-dates-in-datetime/227488)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 3:50pm UTC](https://discuss.elastic.co/t/how-change-the-format-of-duration-between-two-dates-in-datetime/227488 "2020-04-10T15:50:18Z")
I calculate the difference between two dates with this code. ruby{ code =\> "event.set('Duration', (event.get('Release\_date') - event.get('Date\_of\_entry')))" } the output that i have : field duration with type number … --- ## [File owner not determined warning are coming for network drive - fsCrawler indexing sharepoint files](https://discuss.elastic.co/t/file-owner-not-determined-warning-are-coming-for-network-drive-fscrawler-indexing-sharepoint-files/227528)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 3:48pm UTC](https://discuss.elastic.co/t/file-owner-not-determined-warning-are-coming-for-network-drive-fscrawler-indexing-sharepoint-files/227528 "2020-04-10T15:48:46Z")
Hi David, I have mounted my sharepoint vm to a network drive and ran fscrawler. It is displaying below warnings. here are the debug logs. C:\\Program Files\\fscrawler-es7-2.7-SNAPSHOT\>.\\bin\\fscrawler index\_sharepoin… --- ## [Openvpn log collection](https://discuss.elastic.co/t/openvpn-log-collection/227529)
**Author:** [@netsnipe360](https://discuss.elastic.co/u/netsnipe360)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 3:46pm UTC](https://discuss.elastic.co/t/openvpn-log-collection/227529 "2020-04-10T15:46:32Z")
Hi All, First time here. I'd like to collect openvpn logs using my ELK stack but I can't seem to find a clear how to guide anywhere. If someone have something to share would be great. Thanks --- ## [Kibana free authentication](https://discuss.elastic.co/t/kibana-free-authentication/227497)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 9\ **Last updated:** [April 10, 2020, 2:47pm UTC](https://discuss.elastic.co/t/kibana-free-authentication/227497 "2020-04-10T14:47:17Z")
Dears, Is there any option to configure Kibana (ELK 7.6.2) free authentication without x-pack? Best Regads, d --- ## [NO Angular 7 data shown in APM monitoring](https://discuss.elastic.co/t/no-angular-7-data-shown-in-apm-monitoring/227519)
**Author:** [@uzair\_afendi](https://discuss.elastic.co/u/uzair_afendi)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 2:39pm UTC](https://discuss.elastic.co/t/no-angular-7-data-shown-in-apm-monitoring/227519 "2020-04-10T14:39:31Z")
I want to monitor my angular application but i dont see any data APM I do configuration in app-routing.moduule.ts file --- ## [Clear any inflight events in memory before starting Logstash after restart](https://discuss.elastic.co/t/clear-any-inflight-events-in-memory-before-starting-logstash-after-restart/224135)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 1\ **Last updated:** [April 10, 2020, 2:28pm UTC](https://discuss.elastic.co/t/clear-any-inflight-events-in-memory-before-starting-logstash-after-restart/224135 "2020-04-10T14:28:53Z")
We're sending logs using filebeats to Logstash (Parsing with configs) --\> LumberJack --\> ES. In some situations while collecting newer data types, we want to re-index data, so we do the following - stop filebeats stop… --- ## [Does logstash queue data until crashed elasticsearch recovers?](https://discuss.elastic.co/t/does-logstash-queue-data-until-crashed-elasticsearch-recovers/227518)
**Author:** [@isharamadhawa](https://discuss.elastic.co/u/isharamadhawa)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 2:24pm UTC](https://discuss.elastic.co/t/does-logstash-queue-data-until-crashed-elasticsearch-recovers/227518 "2020-04-10T14:24:45Z")
I'm performing duplicate data removing process using fingerprint filter in logstash. I have an elastic cloud setup. Logstash reads data from my 3 node elastic cloud cluster and writes to the same cluster without any dupl… --- ## [Create new cluster with current existing nodes](https://discuss.elastic.co/t/create-new-cluster-with-current-existing-nodes/227349)
**Author:** [@jasonperrone](https://discuss.elastic.co/u/jasonperrone)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 1:58pm UTC](https://discuss.elastic.co/t/create-new-cluster-with-current-existing-nodes/227349 "2020-04-10T13:58:46Z")
This is a little twist on the "Add new node to existing cluster". Maybe Elastic automatically handles this, but I just want to make sure. I have two independent nodes, each a cluster of 1 (themselves). Node A has some i… --- ## [The shard cannot be allocated to the same node on which a copy of the shard already exist](https://discuss.elastic.co/t/the-shard-cannot-be-allocated-to-the-same-node-on-which-a-copy-of-the-shard-already-exist/227512)
**Author:** [@chauchse](https://discuss.elastic.co/u/chauchse)\ **Replies:** 0\ **Last updated:** [April 10, 2020, 1:48pm UTC](https://discuss.elastic.co/t/the-shard-cannot-be-allocated-to-the-same-node-on-which-a-copy-of-the-shard-already-exist/227512 "2020-04-10T13:48:34Z")
Dear, I have a strange probleme with elasticsearch (v6.8.8) on ubuntu-server I have several indexes on one unique node. \_cat/indices?v : health status index uuid pri rep docs.cou… --- ## [Logstash date filter timezone not working](https://discuss.elastic.co/t/logstash-date-filter-timezone-not-working/227451)
**Author:** [@srinika](https://discuss.elastic.co/u/srinika)\ **Replies:** 1\ **Last updated:** [April 10, 2020, 1:48pm UTC](https://discuss.elastic.co/t/logstash-date-filter-timezone-not-working/227451 "2020-04-10T13:48:14Z")
Hi I'm working on date filter and have used timezone. I get the output but the timezone is not working. Can someone please help me? Here's the config file input { stdin { } } filter { mutate { strip =\> "message" }… --- ## [ERROR: \[1\] bootstrap checks failed in Elastic Search](https://discuss.elastic.co/t/error-1-bootstrap-checks-failed-in-elastic-search/227509)
**Author:** [@subhamchatterjee](https://discuss.elastic.co/u/subhamchatterjee)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 1:47pm UTC](https://discuss.elastic.co/t/error-1-bootstrap-checks-failed-in-elastic-search/227509 "2020-04-10T13:47:50Z")
While running elastic search via sudo systemctl start elasticsearch.service getting error Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.serv… --- ## [ElesticSearch REST HTTP request through redirected URL](https://discuss.elastic.co/t/elesticsearch-rest-http-request-through-redirected-url/227478)
**Author:** [@pierremazieres](https://discuss.elastic.co/u/pierremazieres)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 1:09pm UTC](https://discuss.elastic.co/t/elesticsearch-rest-http-request-through-redirected-url/227478 "2020-04-10T13:09:16Z")
Hello, I am asking community help because I have some trouble requesting an ElasticSearch database with a special redirected URL. Can you please give an hand on this ? Thank you very much. First, let's start with a f… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1519) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1521)