# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=544 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 545 --- ## [Input Controls in dark mode in v.8.4.1](https://discuss.elastic.co/t/input-controls-in-dark-mode-in-v-8-4-1/313760)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [September 7, 2022, 1:14am UTC](https://discuss.elastic.co/t/input-controls-in-dark-mode-in-v-8-4-1/313760 "2022-09-07T01:14:28Z")
I upgraded ElastcCloud v.7.17.6 to v.8.4.1. Input controls seem to be not a better look and became unreadable in the suggestion list. The same data is in the suggestion list in v.7.17.6. --- ## [Upgrade steps 8.3 - 8.4](https://discuss.elastic.co/t/upgrade-steps-8-3-8-4/313716)
**Author:** [@ymoriarty](https://discuss.elastic.co/u/ymoriarty)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 11:35pm UTC](https://discuss.elastic.co/t/upgrade-steps-8-3-8-4/313716 "2022-09-06T23:35:57Z")
Where are the instructions to upgrade Elasticsearch, Kibana and Enterprise Search from 8.3 to 8.4.x? I am running this on prem on a single host with the basic license. I have search all over your site and do not find a… --- ## [Does search perform faster if we use a lower number for setResultsPerPage() in Search-UI?](https://discuss.elastic.co/t/does-search-perform-faster-if-we-use-a-lower-number-for-setresultsperpage-in-search-ui/313615)
**Author:** [@Beratna](https://discuss.elastic.co/u/Beratna)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 11:25pm UTC](https://discuss.elastic.co/t/does-search-perform-faster-if-we-use-a-lower-number-for-setresultsperpage-in-search-ui/313615 "2022-09-06T23:25:54Z")
Hello there, Currently using App Search with search-ui react library and was wondering if using a small number for the setResultsPerPage function reduces search time. Thanks! --- ## [Change local ip address to "any text" in elasticsearch logs](https://discuss.elastic.co/t/change-local-ip-address-to-any-text-in-elasticsearch-logs/313771)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 6\ **Last updated:** [September 6, 2022, 10:36pm UTC](https://discuss.elastic.co/t/change-local-ip-address-to-any-text-in-elasticsearch-logs/313771 "2022-09-06T22:36:54Z")
hi all! we collect nginx access logs in elasticsearch. here is an example of incoming nginx access logs: kibana-linux.elk.com 10.211.45.45 - \[05/Sep/2022:15:26:54 +0300\] UNIX-TIME-1662380814.467 "GET /internal/security… --- ## [Kibana - Metricbeat Calculate time in application](https://discuss.elastic.co/t/kibana-metricbeat-calculate-time-in-application/313832)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 10:00pm UTC](https://discuss.elastic.co/t/kibana-metricbeat-calculate-time-in-application/313832 "2022-09-06T22:00:44Z")
I am trying to get a total time a user has spent in an application through metricbeat process.name field. I am able to show the following, but cannot work out a way to calculate a total time in the application. Any idea… --- ## [Asciifolding analyzer doesn't seem to be working](https://discuss.elastic.co/t/asciifolding-analyzer-doesnt-seem-to-be-working/313830)
**Author:** [@Chris\_Grim](https://discuss.elastic.co/u/Chris_Grim)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:17pm UTC](https://discuss.elastic.co/t/asciifolding-analyzer-doesnt-seem-to-be-working/313830 "2022-09-06T21:17:56Z")
Hi All, I am trying to setup asciifolding so a word like séance will appear when someone types in seance. In my mapping I have $mapping-\>search\_as\_you\_type('name', \['analyzer' =\> 'standard\_asciifolding'\]); … --- ## [How to sum across all intermediate aggregate buckets?](https://discuss.elastic.co/t/how-to-sum-across-all-intermediate-aggregate-buckets/313829)
**Author:** [@davidgAID](https://discuss.elastic.co/u/davidgAID)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:07pm UTC](https://discuss.elastic.co/t/how-to-sum-across-all-intermediate-aggregate-buckets/313829 "2022-09-06T21:07:21Z")
I have an index like this (simplified): { "entity\_id": {"type": "keyword"}, "attr1": { "properties": { "attr1\_id": {"type": "keyword"}, "attr1\_type": {"type": "keyword"}, … --- ## [Packetbeat DNS response time nanoseconds instead of microseconds](https://discuss.elastic.co/t/packetbeat-dns-response-time-nanoseconds-instead-of-microseconds/313710)
**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 8:33pm UTC](https://discuss.elastic.co/t/packetbeat-dns-response-time-nanoseconds-instead-of-microseconds/313710 "2022-09-06T20:33:44Z")
Dear All, I am running ELK stack 8.4.1 on latest Debian. Kibana/Packetbeat shows nice data in the DNS overview. When I move the mouse at DNS Min/Max/Avg Response Time Histogram over the graph I see for example max resp… --- ## [Logstash plugin install error](https://discuss.elastic.co/t/logstash-plugin-install-error/313611)
**Author:** [@zapatannico](https://discuss.elastic.co/u/zapatannico)\ **Replies:** 1\ **Last updated:** [September 3, 2022, 10:20pm UTC](https://discuss.elastic.co/t/logstash-plugin-install-error/313611 "2022-09-03T22:20:36Z")
Hello im new with logstash, im trying to install syslog plugin but i always get this error, someone could help me? \\logstash\\bin\>logstash-plugin install "Using bundled JDK: C:\\logstash\\jdk\\bin\\java.exe" jruby: warning:… --- ## [Reindex to data streams](https://discuss.elastic.co/t/reindex-to-data-streams/313818)
**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 6:51pm UTC](https://discuss.elastic.co/t/reindex-to-data-streams/313818 "2022-09-06T18:51:41Z")
I'm using the following to reindex to a data stream, although it completes right way... The source index has 262394 documents. POST \_reindex { "source": { "index": "syslog-prod-2021.09.07" }, "dest": { "in… --- ## [Ruby filter to check fields dynamically](https://discuss.elastic.co/t/ruby-filter-to-check-fields-dynamically/313709)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 9\ **Last updated:** [September 6, 2022, 6:42pm UTC](https://discuss.elastic.co/t/ruby-filter-to-check-fields-dynamically/313709 "2022-09-06T18:42:30Z")
Hie All, From the following logs I want to check on condition HasErrorState = true and drop the entire event. Data field will be single entry and in that we have multiple entries for Scales. "Data": \[ { … --- ## [Logstash not starting](https://discuss.elastic.co/t/logstash-not-starting/313807)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 6\ **Last updated:** [September 6, 2022, 4:41pm UTC](https://discuss.elastic.co/t/logstash-not-starting/313807 "2022-09-06T16:41:58Z")
I just installed logstash 8.4.1 on an Ubuntu VM. When i start the service It doesn't start and keep throwing this error. Log4j configuration path used is: /etc/logstash/log4j2.properties \[2022-09-06T14:56:04,394\]\[INFO \]… --- ## [Visualize Library - Tools - Controls have wrong fields in filter section](https://discuss.elastic.co/t/visualize-library-tools-controls-have-wrong-fields-in-filter-section/312382)
**Author:** [@Wojciech\_Kwiecien](https://discuss.elastic.co/u/Wojciech_Kwiecien)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/visualize-library-tools-controls-have-wrong-fields-in-filter-section/312382 "2022-09-06T16:24:22Z")
Hello everyone. I tried to add some filterthe s into visualization section and like you the see on screen I selecthe ted in controls panel on the right side Index patter apm-\*-transaction and I tried to add in filter ur… --- ## [My exec input plugin does not compatible with ecs](https://discuss.elastic.co/t/my-exec-input-plugin-does-not-compatible-with-ecs/313718)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 4:03pm UTC](https://discuss.elastic.co/t/my-exec-input-plugin-does-not-compatible-with-ecs/313718 "2022-09-06T16:03:15Z")
Hi, I am trying to learn ow to use ecs schema within logstash. I use logstash 7.10.0 and input plugin I want to use in my logstash config file is "exec input". I am trying to just follow the documentation guideline htt… --- ## [Hot\_threads per interpretation](https://discuss.elastic.co/t/hot-threads-per-interpretation/313809)
**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 3:57pm UTC](https://discuss.elastic.co/t/hot-threads-per-interpretation/313809 "2022-09-06T15:57:36Z")
Hello, I would like to know how to read the hot threads information for a particular node and track the operations that cause high CPU usage. Below is a sample: {field1}{field2}{field3}{IP1}{IP2:port}{di}{rack\_ud=1, ra… --- ## [Probleme de limite temporelle / Kibana](https://discuss.elastic.co/t/probleme-de-limite-temporelle-kibana/313560)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 13\ **Last updated:** [September 6, 2022, 3:47pm UTC](https://discuss.elastic.co/t/probleme-de-limite-temporelle-kibana/313560 "2022-09-06T15:47:12Z")
Bonjour, Je me tourne vers vous car j'ai un pb avec l'affichage de données. J'ai un corpus de données injectées correctement qui vont de 1997 à 2022 (le doc count indique 289000). Lorsque je souhaite faire un graphique … --- ## [L2 & L3 SW Integration](https://discuss.elastic.co/t/l2-l3-sw-integration/313472)
**Author:** [@zaheernew](https://discuss.elastic.co/u/zaheernew)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 3:44pm UTC](https://discuss.elastic.co/t/l2-l3-sw-integration/313472 "2022-09-06T15:44:05Z")
Dear All, I'm new to the community and I have a small question also. how do integrate L2 and L3 switches to elasticsearch to monitor via kibana? Looking for your answers. Thanks --- ## [Custom Logo for Kibana 8.3.3 - Guide](https://discuss.elastic.co/t/custom-logo-for-kibana-8-3-3-guide/312894)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 9:38am UTC](https://discuss.elastic.co/t/custom-logo-for-kibana-8-3-3-guide/312894 "2022-08-25T09:38:34Z")
I would like to change the header logo in Kibana 8.3.3. :innocent: Change Header Logo and Text Change loading Text and Logo Change login page logo and text Change Page Title I have achieved it by editing f… --- ## [Histogram in kibana](https://discuss.elastic.co/t/histogram-in-kibana/313436)
**Author:** [@Matanueces](https://discuss.elastic.co/u/Matanueces)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 2:55pm UTC](https://discuss.elastic.co/t/histogram-in-kibana/313436 "2022-09-06T14:55:05Z")
Hello, I'm trying to create a visualization of a histogram in kibana from the following data: Discover: The field that contains the data for the histogram is "current\_hist" If I do a query with the devtools, they … --- ## [Issues with new search query](https://discuss.elastic.co/t/issues-with-new-search-query/313804)
**Author:** [@rzaal](https://discuss.elastic.co/u/rzaal)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 2:21pm UTC](https://discuss.elastic.co/t/issues-with-new-search-query/313804 "2022-09-06T14:21:38Z")
Hi i have recently been busy reworking our old and outdated ES now um running 8.4 and im trying to create a similar query to what i had in the old one. But i have a hard time finding examples or the right documentation T… --- ## [Error with paging large result set using SQL Server](https://discuss.elastic.co/t/error-with-paging-large-result-set-using-sql-server/313483)
**Author:** [@manuel.urbano](https://discuss.elastic.co/u/manuel.urbano)\ **Replies:** 7\ **Last updated:** [September 6, 2022, 1:27pm UTC](https://discuss.elastic.co/t/error-with-paging-large-result-set-using-sql-server/313483 "2022-09-06T13:27:59Z")
Hello everyone! I'm trying to import a data set with more than 4 million rows from my database in SQL Server. I followed the advice here Jdbc input plugin | Logstash Reference \[8.4\] | Elastic and set jdbc\_fetch\_size wi… --- ## [Kibana not loading through Iframe on Raspberry PI, but runs in separate tab](https://discuss.elastic.co/t/kibana-not-loading-through-iframe-on-raspberry-pi-but-runs-in-separate-tab/312871)
**Author:** [@Mathias\_Christian\_Cl](https://discuss.elastic.co/u/Mathias_Christian_Cl)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 1:09pm UTC](https://discuss.elastic.co/t/kibana-not-loading-through-iframe-on-raspberry-pi-but-runs-in-separate-tab/312871 "2022-09-06T13:09:04Z")
Hi, We are running Kibana through reverse proxy to provide password-less access through our web gui. However we have experienced on some of our Raspberry PIs that Kibana is loading forever, and when it is supposed to sh… --- ## [Kibana alert type Metric threshold add fields index to body Email](https://discuss.elastic.co/t/kibana-alert-type-metric-threshold-add-fields-index-to-body-email/311777)
**Author:** [@jorge\_Flores\_Machuca](https://discuss.elastic.co/u/jorge_Flores_Machuca)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 12:48pm UTC](https://discuss.elastic.co/t/kibana-alert-type-metric-threshold-add-fields-index-to-body-email/311777 "2022-09-06T12:48:59Z")
Hello everyone, how can I take fields from the metricbeat index and add them to the body of my email, as shown in the example on the green line? this my rule and this my definition email if you could guide me tha… --- ## [Parsing advise](https://discuss.elastic.co/t/parsing-advise/313712)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 12:21pm UTC](https://discuss.elastic.co/t/parsing-advise/313712 "2022-09-06T12:21:38Z")
Hello All, How can I parse the below message? The below events are sent over syslog, and the output is sent to Sentinel. I tried to use the KV filter but its failing, as part of parsing, I should also extract the usern… --- ## [Is there a time limit for Filebeat or Logstash to attempt to retransmit?](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 5\ **Last updated:** [September 6, 2022, 12:19pm UTC](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721 "2022-09-06T12:19:30Z")
I am using Filebeat, Logstash, and Elasticsearch to collect logs. I have received a query that some logs are not being captured by Elasticsearch. Is it possible to lose logs in this ELK server configuration? For examp… --- ## [Is there a way to create scheduled slack text reports from Kibana?](https://discuss.elastic.co/t/is-there-a-way-to-create-scheduled-slack-text-reports-from-kibana/313788)
**Author:** [@KappaRossa](https://discuss.elastic.co/u/KappaRossa)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 11:46am UTC](https://discuss.elastic.co/t/is-there-a-way-to-create-scheduled-slack-text-reports-from-kibana/313788 "2022-09-06T11:46:41Z")
I would like to create a daily Kibana table report in a dedicated Slack channel. E.g. Every day, at 10:00 AM I would like a text report on basic information from Kibana visualizations to trigger and say something between… --- ## [Popular Fields](https://discuss.elastic.co/t/popular-fields/312827)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 10:05am UTC](https://discuss.elastic.co/t/popular-fields/312827 "2022-09-06T10:05:36Z")
Hello Community, there are Popular fields collected out from the Available Fields on the left-hand side of Discover in Kibana. The customer wants them to be adjusted to each user as well as to each data view. Therefore… --- ## [What is the Watcher's logs location?](https://discuss.elastic.co/t/what-is-the-watchers-logs-location/313776)
**Author:** [@Dr.Antarctica](https://discuss.elastic.co/u/Dr.Antarctica)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 10:02am UTC](https://discuss.elastic.co/t/what-is-the-watchers-logs-location/313776 "2022-09-06T10:02:24Z")
Hi, I'm using Watchers on Kibana to alert me via e-mail. I tried to add the logging action, but can't find where the messages are logged. Do I need to do anything else to access them? I can find the Watcher's audit log… --- ## [Filter JSON message in kibana](https://discuss.elastic.co/t/filter-json-message-in-kibana/312535)
**Author:** [@imkinnu](https://discuss.elastic.co/u/imkinnu)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 9:41am UTC](https://discuss.elastic.co/t/filter-json-message-in-kibana/312535 "2022-09-06T09:41:16Z")
Hi, My JSON file looks like this. I want a filter on Kibana for the JSON object I am passing through logstash. For example { "\_index": "mule-logs", "\_type": "\_doc", "\_id": "S\_gavoIBvzaqpVvKmITM", "\_score": 1, … --- ## [Transferring documents from different ES servers](https://discuss.elastic.co/t/transferring-documents-from-different-es-servers/313773)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:38am UTC](https://discuss.elastic.co/t/transferring-documents-from-different-es-servers/313773 "2022-09-06T09:38:42Z")
I'm trying to transfer some documents from a source server to a destination server. Both have the same settings, and indices associated to those documents. The documents have an object data field, that inherits from an … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=543) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=545)