# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=644 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 645 --- ## [Is it possible to hide the scroller of legends and display all the legends](https://discuss.elastic.co/t/is-it-possible-to-hide-the-scroller-of-legends-and-display-all-the-legends/303234)
**Author:** [@sukhwinder\_kumar](https://discuss.elastic.co/u/sukhwinder_kumar)\ **Replies:** 1\ **Last updated:** [April 29, 2022, 7:02am UTC](https://discuss.elastic.co/t/is-it-possible-to-hide-the-scroller-of-legends-and-display-all-the-legends/303234 "2022-04-29T07:02:00Z")
Is it possible to hide the scroller of legends and display all the legends? I dont need scroller, I want to show all the legends. --- ## [로그 watcher를 통한 알림 설정 관련 문의](https://discuss.elastic.co/t/watcher/303568)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 5\ **Last updated:** [April 29, 2022, 6:46am UTC](https://discuss.elastic.co/t/watcher/303568 "2022-04-29T06:46:25Z")
안녕하세요~! 늘 많은 도움을 받고 있습니다. watcher를 통해, 특정 조건 부합시 slack으로 알림을 보내도록 하고 싶은데, 혹시 참고할만한 레퍼런스가 있을까요? --- ## [Alerts and Actions 설정 관련 문의](https://discuss.elastic.co/t/alerts-and-actions/303574)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 6:38am UTC](https://discuss.elastic.co/t/alerts-and-actions/303574 "2022-04-29T06:38:31Z")
보시는 바와 같이 Alert 설정을 하려고 하는데요, 제가 Logstash의 filter의 mutate에서 설정한 필드명이 보이지 않습니다. iso.로 시작하는 필드도 안보이고, 변경한 forti\_로 시작하는 필드도 안보이네요. 혹시 이 필드명을 Alert 설정에서 선택할 수 있게 하려면 어떻게 해야할까요?? mutate { rename =\> { "i… --- ## [Kibana: getting 503 "service unavailable"](https://discuss.elastic.co/t/kibana-getting-503-service-unavailable/303471)
**Author:** [@Poojan](https://discuss.elastic.co/u/Poojan)\ **Replies:** 5\ **Last updated:** [April 29, 2022, 5:42am UTC](https://discuss.elastic.co/t/kibana-getting-503-service-unavailable/303471 "2022-04-29T05:42:56Z")
Hello guys, I am working on kibana 8.1.2 version. while creating/updating charts and loading dashboard I am getting 503 "service unavailable" message. Can anyone please help me to understand this issue? Thanks Pooja… --- ## [Dynamic kibana vizualization with filter dropdown](https://discuss.elastic.co/t/dynamic-kibana-vizualization-with-filter-dropdown/303212)
**Author:** [@Avarjana](https://discuss.elastic.co/u/Avarjana)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 6:09am UTC](https://discuss.elastic.co/t/dynamic-kibana-vizualization-with-filter-dropdown/303212 "2022-04-29T06:09:15Z")
I want to render a Metric Visualization dynamically based on a dropdown filter control value. Metric value generation logic should change depending on the dropdown value. Example scenario: Filter dropdown field can hav… --- ## [Logstash filter only particular fields and index those fields](https://discuss.elastic.co/t/logstash-filter-only-particular-fields-and-index-those-fields/303470)
**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\ **Replies:** 7\ **Last updated:** [April 29, 2022, 5:08am UTC](https://discuss.elastic.co/t/logstash-filter-only-particular-fields-and-index-those-fields/303470 "2022-04-29T05:08:15Z")
Hi, I have heartbeat which pushed the data to 5044 through which logstash consumes. I want to index only if monitor.status is down. I am using tag heartbeat for differentiating the various beat input. My data: { "\_i… --- ## [Restricting users to only see data that has been captured about themselves](https://discuss.elastic.co/t/restricting-users-to-only-see-data-that-has-been-captured-about-themselves/302985)
**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 3:25am UTC](https://discuss.elastic.co/t/restricting-users-to-only-see-data-that-has-been-captured-about-themselves/302985 "2022-04-29T03:25:31Z")
I would like to create a role that restricts users to only seeing data associated with them. for example, I only want Jenny to see data associated with a field that is user.name = Jenny Is this possible, as I would ide… --- ## [The soft link of the ElasticSearch data directory is faulty](https://discuss.elastic.co/t/the-soft-link-of-the-elasticsearch-data-directory-is-faulty/303099)
**Author:** [@Yisay](https://discuss.elastic.co/u/Yisay)\ **Replies:** 4\ **Last updated:** [April 29, 2022, 1:44am UTC](https://discuss.elastic.co/t/the-soft-link-of-the-elasticsearch-data-directory-is-faulty/303099 "2022-04-29T01:44:03Z")
I want to move the Elasticsearch data file to another directory, Here is my command to operate cp -ar aa/node/0/indices/indices\_name bb/indices\_name rm -rm aa/node/0/indices/indices\_name ln -s bb/indices\_name aa/node… --- ## [How to export Watcher from one cluster to another cluster](https://discuss.elastic.co/t/how-to-export-watcher-from-one-cluster-to-another-cluster/303390)
**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\ **Replies:** 0\ **Last updated:** [April 27, 2022, 10:32am UTC](https://discuss.elastic.co/t/how-to-export-watcher-from-one-cluster-to-another-cluster/303390 "2022-04-27T10:32:14Z")
All existing watchers and alarms need to be migrated to a new elastic cluster. --- ## [Mapping conflict -\> Reindex/mapping for only one field](https://discuss.elastic.co/t/mapping-conflict-reindex-mapping-for-only-one-field/303466)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [April 29, 2022, 1:00am UTC](https://discuss.elastic.co/t/mapping-conflict-reindex-mapping-for-only-one-field/303466 "2022-04-29T01:00:28Z")
Hi after some changes I need to reindex(or mapping) mass of close indexes of high capacity. I've tried already global reindex but it consumed a lot of time. How I can reindex/remapping all of my historical indexes throu… --- ## [Extract field from kibana](https://discuss.elastic.co/t/extract-field-from-kibana/303495)
**Author:** [@Roberto\_Mejri](https://discuss.elastic.co/u/Roberto_Mejri)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 12:50am UTC](https://discuss.elastic.co/t/extract-field-from-kibana/303495 "2022-04-29T00:50:23Z")
Hi, I need to exctract all the field: "cf" from kibana to a txt file or visualize... the field: "cf" are inside the "message", Does somebody know How may I accomplish the duty? They are also kept in an other field… --- ## [Discover에 보여지는 필드 관련 문의](https://discuss.elastic.co/t/discover/303114)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 2\ **Last updated:** [April 29, 2022, 12:28am UTC](https://discuss.elastic.co/t/discover/303114 "2022-04-29T00:28:38Z")
안녕하세요~! 위와 같이 logstash에서 snmp를 수집하여, 값을 가져오긴하는데 필드 값이 저런 형태로 보여지는데요 혹시 저 필드의 이름을 커스터마이징할 수 있을까요? --- ## [Elasticsearch OOM, IndexWrter consumed significant memory, seems memory leak](https://discuss.elastic.co/t/elasticsearch-oom-indexwrter-consumed-significant-memory-seems-memory-leak/301283)
**Author:** [@medcl.net](https://discuss.elastic.co/u/medcl.net)\ **Replies:** 0\ **Last updated:** [April 1, 2022, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-oom-indexwrter-consumed-significant-memory-seems-memory-leak/301283 "2022-04-01T07:04:48Z")
Hi Team, We recently upgraded our Elasticsearch cluster from 7.6.2 to 7.17.1, and after a few days, it seems working very well, but when we doing some heavy indexing job, the cluster start to crash in an randomly way. T… --- ## [Click errors Missing required parameter: query](https://discuss.elastic.co/t/click-errors-missing-required-parameter-query/245056)
**Author:** [@Sam\_S](https://discuss.elastic.co/u/Sam_S)\ **Replies:** 1\ **Last updated:** [April 28, 2022, 10:02pm UTC](https://discuss.elastic.co/t/click-errors-missing-required-parameter-query/245056 "2022-04-28T22:02:56Z")
When trying to register an empty search I get the following result: {"errors":\["Missing required parameter: query"\]} This is the payload executed at engines/local-test/click.json: {"query":"","document\_id":"4c1e9616-6… --- ## [ElasticSearch High Search response times on new Machine](https://discuss.elastic.co/t/elasticsearch-high-search-response-times-on-new-machine/303293)
**Author:** [@dnsh](https://discuss.elastic.co/u/dnsh)\ **Replies:** 4\ **Last updated:** [April 28, 2022, 7:37pm UTC](https://discuss.elastic.co/t/elasticsearch-high-search-response-times-on-new-machine/303293 "2022-04-28T19:37:42Z")
I have 4 EC2 machines in Elasticsearch Cluster. Configuration: c5d.large, Memory: 3.5G, Data Disk: 50GB NVME instance storage. Elasticsearch Version: 6.8.21 I added the 5th machine with the same configuration c5d.larg… --- ## [After update to 8.1.3 Logstash in cluster no longer functioning](https://discuss.elastic.co/t/after-update-to-8-1-3-logstash-in-cluster-no-longer-functioning/303439)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 7:35pm UTC](https://discuss.elastic.co/t/after-update-to-8-1-3-logstash-in-cluster-no-longer-functioning/303439 "2022-04-28T19:35:48Z")
Running an 8.1.3 cluster with all components updated. Filebeat agent is also latest. This particular host has multiple log files that I was shipping, then creating a different index on each logfile based on the "type" … --- ## [Kibana Discover not working](https://discuss.elastic.co/t/kibana-discover-not-working/303169)
**Author:** [@nandatibco](https://discuss.elastic.co/u/nandatibco)\ **Replies:** 3\ **Last updated:** [April 28, 2022, 7:34pm UTC](https://discuss.elastic.co/t/kibana-discover-not-working/303169 "2022-04-28T19:34:49Z")
Hello all, When I try to open the Discover in Kibana version 8.1.0, facing an issue as below, could anyone suggest why is it happening and how to address this? --- ## [Aggregation Response Bucket Order](https://discuss.elastic.co/t/aggregation-response-bucket-order/303544)
**Author:** [@EricPSU](https://discuss.elastic.co/u/EricPSU)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 5:12pm UTC](https://discuss.elastic.co/t/aggregation-response-bucket-order/303544 "2022-04-28T17:12:57Z")
I'm looking to understand the order of the buckets returned when using aggs in my query. I do not want to sort the bucket values, rather I want to sort the buckets themselves. Regardless of the order of the aggs in the… --- ## [Logstash-forwarder-java gives SSL handshake error with Logstash v7.16.1 and higher](https://discuss.elastic.co/t/logstash-forwarder-java-gives-ssl-handshake-error-with-logstash-v7-16-1-and-higher/303510)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 2\ **Last updated:** [April 28, 2022, 5:11pm UTC](https://discuss.elastic.co/t/logstash-forwarder-java-gives-ssl-handshake-error-with-logstash-v7-16-1-and-higher/303510 "2022-04-28T17:11:53Z")
Hi folks, We are in the process of upgrading ELK stack from v7.11.2 to v7.17.2 to fix the log4j2 vulnerability due to JNDI lookup. Most of the our servers are on AIX so we use logstash-forwarder-java utility. We observ… --- ## [Parsing multiple json in a file](https://discuss.elastic.co/t/parsing-multiple-json-in-a-file/303446)
**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\ **Replies:** 3\ **Last updated:** [April 28, 2022, 4:35pm UTC](https://discuss.elastic.co/t/parsing-multiple-json-in-a-file/303446 "2022-04-28T16:35:06Z")
Hello! I'm trying to parse a file that contains multiple json. Each json is not delimited by a new line or comma separated. e.g. {"version":"0",....}{"version":"0",...}{"version":"0",...} parsing with the following cod… --- ## [User messages\* Database is empty in Lab](https://discuss.elastic.co/t/user-messages-database-is-empty-in-lab/303436)
**Author:** [@Silverquick](https://discuss.elastic.co/u/Silverquick)\ **Replies:** 3\ **Last updated:** [April 28, 2022, 4:17pm UTC](https://discuss.elastic.co/t/user-messages-database-is-empty-in-lab/303436 "2022-04-28T16:17:20Z")
After creating the Index Pattern of user messages\* it reads as a blank database. I successfully created the users\* Index pattern, but when creating the "user messages\*" index pattern even though it finds a database, it … --- ## [Import a saved dashboard into Elasticsearch using Java](https://discuss.elastic.co/t/import-a-saved-dashboard-into-elasticsearch-using-java/303536)
**Author:** [@bob4](https://discuss.elastic.co/u/bob4)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 3:25pm UTC](https://discuss.elastic.co/t/import-a-saved-dashboard-into-elasticsearch-using-java/303536 "2022-04-28T15:25:56Z")
I am trying to import a saved dashboard into Elasticsearch using HttpURLConnection. I can successfully execute the following taken from the saved objects api example in Elasticsearch documentation. $ curl -X POST api/s… --- ## [Error when I wanted to try to create a CBOR object from the content of a PDF file and insert it into an ingest-attachment](https://discuss.elastic.co/t/error-when-i-wanted-to-try-to-create-a-cbor-object-from-the-content-of-a-pdf-file-and-insert-it-into-an-ingest-attachment/303535)
**Author:** [@Asmaa\_Oufkir](https://discuss.elastic.co/u/Asmaa_Oufkir)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 3:25pm UTC](https://discuss.elastic.co/t/error-when-i-wanted-to-try-to-create-a-cbor-object-from-the-content-of-a-pdf-file-and-insert-it-into-an-ingest-attachment/303535 "2022-04-28T15:25:56Z")
File IN\_FILE = ResourceUtils.getFile("classpath:test.pdf"); int length = (int) IN\_FILE.length(); RandomAccessFile aFile = new RandomAccessFile(IN\_FILE, "r"); System.out.println("aFile :"+aFile); FileCh… --- ## [Helm logstash elasticSearch plugin does not work with custom user except if supersuer](https://discuss.elastic.co/t/helm-logstash-elasticsearch-plugin-does-not-work-with-custom-user-except-if-supersuer/303520)
**Author:** [@stoza](https://discuss.elastic.co/u/stoza)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 1:35pm UTC](https://discuss.elastic.co/t/helm-logstash-elasticsearch-plugin-does-not-work-with-custom-user-except-if-supersuer/303520 "2022-04-28T13:35:11Z")
Hi, I'm testing the to install logstash with helm from https://github.com/elastic/helm-charts. Everything works fine except that logstash is not able to query index and get a 403 forbidden when another user than elasti… --- ## [Aggregation with collapsed query](https://discuss.elastic.co/t/aggregation-with-collapsed-query/303380)
**Author:** [@Ibrahim\_Z\_HIDIR](https://discuss.elastic.co/u/Ibrahim_Z_HIDIR)\ **Replies:** 3\ **Last updated:** [April 28, 2022, 1:11pm UTC](https://discuss.elastic.co/t/aggregation-with-collapsed-query/303380 "2022-04-28T13:11:50Z")
Hi I just want to apply aggregation on a query result. My query is eleminating the double documents keeping last one according to a clumn. But the aggragation doesn't care the actual result. I've read that the collapse … --- ## [JSON log parse to separate fields](https://discuss.elastic.co/t/json-log-parse-to-separate-fields/303511)
**Author:** [@Dmitriy\_Esin](https://discuss.elastic.co/u/Dmitriy_Esin)\ **Replies:** 0\ **Last updated:** [April 28, 2022, 1:08pm UTC](https://discuss.elastic.co/t/json-log-parse-to-separate-fields/303511 "2022-04-28T13:08:18Z")
Hi all! I have a question about implementing JSON log parsing to separated fields in Kibana. I use fluend to get logs from my k8s cluster. See the config: containers.input.conf: |- \ @id fluentd-co… --- ## [Need to parse xml by logstash and create an event only if a field value is non zero](https://discuss.elastic.co/t/need-to-parse-xml-by-logstash-and-create-an-event-only-if-a-field-value-is-non-zero/303306)
**Author:** [@Rohit\_Goel1](https://discuss.elastic.co/u/Rohit_Goel1)\ **Replies:** 1\ **Last updated:** [April 28, 2022, 1:03pm UTC](https://discuss.elastic.co/t/need-to-parse-xml-by-logstash-and-create-an-event-only-if-a-field-value-is-non-zero/303306 "2022-04-28T13:03:58Z")
Hi Team , I have few Jenkins build xml files generated when jenkins jobs are triggered. I have to read few tags from the xml and create new fields from them by parsing it through logstash. The xml has one tag \… --- ## [I lost my 30 day free trail](https://discuss.elastic.co/t/i-lost-my-30-day-free-trail/303441)
**Author:** [@Rayhan\_Shaik](https://discuss.elastic.co/u/Rayhan_Shaik)\ **Replies:** 3\ **Last updated:** [April 28, 2022, 12:39pm UTC](https://discuss.elastic.co/t/i-lost-my-30-day-free-trail/303441 "2022-04-28T12:39:01Z")
Hi Team, I was playing around the kibana, and at some point I saw 30 day free trail option in stack management, and I clicked on that. but then I thought I don't need a 30 day trail right now, I thought to save this tr… --- ## [How to filter search query by repeated words?](https://discuss.elastic.co/t/how-to-filter-search-query-by-repeated-words/303157)
**Author:** [@div927](https://discuss.elastic.co/u/div927)\ **Replies:** 4\ **Last updated:** [April 28, 2022, 12:25pm UTC](https://discuss.elastic.co/t/how-to-filter-search-query-by-repeated-words/303157 "2022-04-28T12:25:49Z")
Hello, I am trying to write a search query which will search by taking input like keywords, example - apple, fruit, summer. After that it should return me the data from the Elasticsearch if all these 3 keywords are pre… --- ## [Elastic Search - 7.16.3 Dependency Boost C++ Libraries - boost Version](https://discuss.elastic.co/t/elastic-search-7-16-3-dependency-boost-c-libraries-boost-version/302894)
**Author:** [@Indranil](https://discuss.elastic.co/u/Indranil)\ **Replies:** 1\ **Last updated:** [April 28, 2022, 12:25pm UTC](https://discuss.elastic.co/t/elastic-search-7-16-3-dependency-boost-c-libraries-boost-version/302894 "2022-04-28T12:25:44Z")
Hi, Please help us to know which Boost C++ Libraries - boost Version is used in Elasticsearch - 7.16.3. We are using this version of Elasticsearch in our product. But binary scan is not able to identify the version of B… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=643) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=645)