# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=680 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 681 --- ## [Kibana pluginsまたは、REST APIよりKibana Discover、Dashboardの作成について](https://discuss.elastic.co/t/kibana-plugins-rest-api-kibana-discover-dashboard/299698)
**Author:** [@takadev](https://discuss.elastic.co/u/takadev)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 10:53am UTC](https://discuss.elastic.co/t/kibana-plugins-rest-api-kibana-discover-dashboard/299698 "2022-03-15T10:53:56Z")
現在、kibana管理画面より、Discoverの作成、作成したDiscoverをPanelに配置したDashboardの作成を行っております。 作成を管理画面ではなく、REST APIやKibana pluginsを利用したアプリから作成できないか調査しているのですが、Kibana Guideからはわかりませんでした。 Kibanaが公開しているREST APIやKibana pluginsなどからDiscover、Dashboa… --- ## [Beatsでoutput.fileを指定する方法](https://discuss.elastic.co/t/beats-output-file/297842)
**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 9:37am UTC](https://discuss.elastic.co/t/beats-output-file/297842 "2022-03-15T09:37:50Z")
winlogbeat,filebeatにて、収集対象のログファイルを指定したディレクトリ配下に配置したいのですが、出力ができません。 output.file: path: "/tmp/winlogbeat" filename: winlogbeat #rotate\_every\_kb: 10000 #number\_of\_files: 7 #permissions: 0600 #rotate\_on\_startup:… --- ## [Facing issue while configuring TLS](https://discuss.elastic.co/t/facing-issue-while-configuring-tls/299691)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 9:29am UTC](https://discuss.elastic.co/t/facing-issue-while-configuring-tls/299691 "2022-03-15T09:29:40Z")
Hi, I'm, configuring Elasticsearch with TLS but facing error when I restart the Elasticsearch server This is my Elasticsearch.yml configuration for security xpack.security.enabled: true xpack.security.transport.ssl.en… --- ## [Migration from ELK to Azure Sentinel](https://discuss.elastic.co/t/migration-from-elk-to-azure-sentinel/299703)
**Author:** [@tipper1510](https://discuss.elastic.co/u/tipper1510)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 8:57am UTC](https://discuss.elastic.co/t/migration-from-elk-to-azure-sentinel/299703 "2022-03-15T08:57:57Z")
Hi, Wondering if there is any documents/process for ingesting events from elk to Azure Sentinel as part of a migration process. So the first step is to ensure any event raised in elk is sent to Azure so it can still be … --- ## [How to get params date into fitler Kibana by scripted field?](https://discuss.elastic.co/t/how-to-get-params-date-into-fitler-kibana-by-scripted-field/299607)
**Author:** [@vuhai\_fo4](https://discuss.elastic.co/u/vuhai_fo4)\ **Replies:** 5\ **Last updated:** [March 15, 2022, 8:48am UTC](https://discuss.elastic.co/t/how-to-get-params-date-into-fitler-kibana-by-scripted-field/299607 "2022-03-15T08:48:06Z")
I have a filter date in dashboard Kibana and I need get param end date in this filter by scripted field. Please support me if you can! --- ## [Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299338)
**Author:** [@RomanKau](https://discuss.elastic.co/u/RomanKau)\ **Replies:** 12\ **Last updated:** [March 15, 2022, 8:21am UTC](https://discuss.elastic.co/t/logstash-stopped-processing-because-of-an-error-systemexit-exit/299338 "2022-03-15T08:21:20Z")
Running Windows 10, Logstash 8.1.0, elasticsearch, kibana and filebeat 8.0.0 all on the same machine. I also tried running version 8.0.0 of Logstash but I get the same error. Getting the data from filebeat to kibana wor… --- ## [How to re-insert json data retrieved in Elasticsearch](https://discuss.elastic.co/t/how-to-re-insert-json-data-retrieved-in-elasticsearch/299695)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 7:37am UTC](https://discuss.elastic.co/t/how-to-re-insert-json-data-retrieved-in-elasticsearch/299695 "2022-03-15T07:37:54Z")
I want to put the searched Json Data as below in Elasticsearch of another cluster. Will it be possible? Json file "\_type" : "\_doc", "\_id" : "1", "\_score" : 1.0, "\_source" : { "helpMe" : "hi hi hi … --- ## [Logstash Writing to Two Log Files](https://discuss.elastic.co/t/logstash-writing-to-two-log-files/299628)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 4\ **Last updated:** [March 15, 2022, 8:19am UTC](https://discuss.elastic.co/t/logstash-writing-to-two-log-files/299628 "2022-03-15T08:19:32Z")
Hi, Our logstash 7.16.2 instances are writing log files to /var/log/logstash/logstash-plain.log and /var/log/logstash-stdout.log. How do we prevent the creation of the second log under /var/log? Log config looks like t… --- ## [Secret Management](https://discuss.elastic.co/t/secret-management/296171)
**Author:** [@Vishnu\_Kadavarath\_Vi](https://discuss.elastic.co/u/Vishnu_Kadavarath_Vi)\ **Replies:** 4\ **Last updated:** [March 15, 2022, 8:06am UTC](https://discuss.elastic.co/t/secret-management/296171 "2022-03-15T08:06:13Z")
HI guys, I wanted to know if there is any way of adding custom annotations to APM/Elasticsearch secrets in ECK. I.E adding reflector annotations to APM/Elasticsearch certs and APM/Elasticsearch user-token. So that it c… --- ## [Combine data from different index in kibana](https://discuss.elastic.co/t/combine-data-from-different-index-in-kibana/299647)
**Author:** [@Lumiere](https://discuss.elastic.co/u/Lumiere)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 7:44am UTC](https://discuss.elastic.co/t/combine-data-from-different-index-in-kibana/299647 "2022-03-15T07:44:53Z")
Hello, i'm new user and i use kibana (v 7.14.2). I am trying to combine data from differents index in the another index or view. Please, it is possible? For exemple, First index : { "\_index":" index-1", "\_source":… --- ## [Error multiple index templates may not match during index creation](https://discuss.elastic.co/t/error-multiple-index-templates-may-not-match-during-index-creation/299666)
**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 7:28am UTC](https://discuss.elastic.co/t/error-multiple-index-templates-may-not-match-during-index-creation/299666 "2022-03-15T07:28:23Z")
Hi, I got the following error message in kibana.log {"type":"log","@timestamp":"2022-03-14T21:31:34+01:00","tags":\["error","plugins","security","session","index"\],"pid":14270,"message":"Failed to create session index t… --- ## [APM Data Access](https://discuss.elastic.co/t/apm-data-access/299696)
**Author:** [@marx](https://discuss.elastic.co/u/marx)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 7:26am UTC](https://discuss.elastic.co/t/apm-data-access/299696 "2022-03-15T07:26:39Z")
I am using dotnet, and angular for my application integrated with elastic apm. In the APM there are many kinds data that is graphically represented. These data are stored in data streams format how can i access it? Is it… --- ## [Elasticsearch Error "Authentication using apikey failed"](https://discuss.elastic.co/t/elasticsearch-error-authentication-using-apikey-failed/299684)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 0\ **Last updated:** [March 15, 2022, 6:09am UTC](https://discuss.elastic.co/t/elasticsearch-error-authentication-using-apikey-failed/299684 "2022-03-15T06:09:00Z")
Hello, i'm running Elasticsearch 8.1.0 and have many error entries like this on in the elastic logs: \[2022-03-15T07:02:15,222\]\[WARN \]\[o.e.x.s.a.ApiKeyAuthenticator\] \[NODENAMEE\] Authentication using apikey failed - unab… --- ## [Effect of increasing index.mapping.nested\_objects.limit](https://discuss.elastic.co/t/effect-of-increasing-index-mapping-nested-objects-limit/299608)
**Author:** [@csdev](https://discuss.elastic.co/u/csdev)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 5:37am UTC](https://discuss.elastic.co/t/effect-of-increasing-index-mapping-nested-objects-limit/299608 "2022-03-15T05:37:01Z")
Hi Everyone, As per Elasticsearch documentation available at link Mapping limit settings | Elasticsearch Guide \[8.1\] | Elastic, the limit of 10k on index.mapping.nested\_objects.limit is kept to prevent out of memory err… --- ## [Logstash not working as a service](https://discuss.elastic.co/t/logstash-not-working-as-a-service/299600)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 3:19am UTC](https://discuss.elastic.co/t/logstash-not-working-as-a-service/299600 "2022-03-15T03:19:26Z")
Hello, I am new to ELK and am trying to set up monitoring on few of our application jobs using ELK stack. I could run the below query successfully and the data is reflecting on Kibana: logstash -f /etc/logstash/conf.d/… --- ## [Dropped Netflow Data](https://discuss.elastic.co/t/dropped-netflow-data/299609)
**Author:** [@Alif](https://discuss.elastic.co/u/Alif)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 11:23am UTC](https://discuss.elastic.co/t/dropped-netflow-data/299609 "2022-03-14T11:23:53Z")
Me and my team currently having an issue with netflow data ingestion using logstash / filebeat. The data seems to be massively dropped to around 1/7 (using logstash) and 1/100 (using filebeat) when we compare to the actu… --- ## [Relying on default value of \`pipeline.ecs\_compatibility\`,](https://discuss.elastic.co/t/relying-on-default-value-of-pipeline-ecs-compatibility/299672)
**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 1:36am UTC](https://discuss.elastic.co/t/relying-on-default-value-of-pipeline-ecs-compatibility/299672 "2022-03-15T01:36:54Z")
Continuing the discussion from Relying on default value of \`pipeline.ecs\_compatibility\`,: 上記のエラーですが、再起動をしても出現するようになってしましました・・。 どなたか知見がある方、エラー解消方法をご教示いただけると幸いです。 よろしくお願いいたします💦 --- ## [Options for analytics on ES](https://discuss.elastic.co/t/options-for-analytics-on-es/299657)
**Author:** [@yosiasz](https://discuss.elastic.co/u/yosiasz)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 1:37am UTC](https://discuss.elastic.co/t/options-for-analytics-on-es/299657 "2022-03-15T01:37:10Z")
Greetings, We have tons of data coming into our ES from devices across the whole US. We need to do a lot of analytical research on this data. We do not want to do this on the live data but would like to do it on copies … --- ## [Logstashにて特定の行のみ抽出する方法](https://discuss.elastic.co/t/logstash/298925)
**Author:** [@gou\_gemma](https://discuss.elastic.co/u/gou_gemma)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 10:42pm UTC](https://discuss.elastic.co/t/logstash/298925 "2022-03-14T22:42:45Z")
filebeat,winlogbeatで受信したファイルから特定の文字列が入った行のみ抽出する方法はありますでしょうか？ 例えば、errorの文字列が入っている行のみ抽出するって感じです。 filterで指定するとは思うのですが、方法がわかりません。 どなたかご存じでしたらご教示願います💦 よろしくお願いいたします。 --- ## [Hesitation between three Elasticsearch-based Architectures](https://discuss.elastic.co/t/hesitation-between-three-elasticsearch-based-architectures/299625)
**Author:** [@bechir-jamoussi](https://discuss.elastic.co/u/bechir-jamoussi)\ **Replies:** 2\ **Last updated:** [March 14, 2022, 9:51pm UTC](https://discuss.elastic.co/t/hesitation-between-three-elasticsearch-based-architectures/299625 "2022-03-14T21:51:16Z")
Hello everyone, Let me present to you my Use Case: I am trying to develop an algorithm that chooses the best communication channel(SMS, RCS, Messenger, Whatsapp, E-mail) and the best moment to communicate with the clie… --- ## [Unable to visualize Restored APM data from snapshot](https://discuss.elastic.co/t/unable-to-visualize-restored-apm-data-from-snapshot/299665)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 8:27pm UTC](https://discuss.elastic.co/t/unable-to-visualize-restored-apm-data-from-snapshot/299665 "2022-03-14T20:27:56Z")
Hi, I'm trying to restore a snapshsot that contains data from a fleet managed apm server, the indices I have are hidden and use the patterns : .ds-logs-apm\* is there any procedure to do in order to restore .ds-logs a… --- ## [Elasticsearch terms aggregation with partition does not retuning equal bucket](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-partition-does-not-retuning-equal-bucket/299346)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 5\ **Last updated:** [March 14, 2022, 8:03pm UTC](https://discuss.elastic.co/t/elasticsearch-terms-aggregation-with-partition-does-not-retuning-equal-bucket/299346 "2022-03-14T20:03:56Z")
I have an ES index and I fetch data using term aggregation and partition. I am using the cardinality aggregation to get the total number of buckets and calculating num\_partitions, using default size values 10. E.g. Ca… --- ## [Delay in a hourly logfiles](https://discuss.elastic.co/t/delay-in-a-hourly-logfiles/299659)
**Author:** [@oren](https://discuss.elastic.co/u/oren)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 7:26pm UTC](https://discuss.elastic.co/t/delay-in-a-hourly-logfiles/299659 "2022-03-14T19:26:47Z")
hi I have windows system with file beat 7.4.1 and I load hourly big log files to elastic throw Logstash I have delay with the data only in this system what should be beat configuration ? --- ## [Send sophos logs via filebeat to elasticsearch ( ubuntu 20.04 )](https://discuss.elastic.co/t/send-sophos-logs-via-filebeat-to-elasticsearch-ubuntu-20-04/299641)
**Author:** [@khouloud1](https://discuss.elastic.co/u/khouloud1)\ **Replies:** 1\ **Last updated:** [March 14, 2022, 5:17pm UTC](https://discuss.elastic.co/t/send-sophos-logs-via-filebeat-to-elasticsearch-ubuntu-20-04/299641 "2022-03-14T17:17:25Z")
Hello , I have ubuntu 20.04 and want to send sophos (antivirus) logs via filebeat to Elasticsearch . I know that the module of sophos is supported by default for firewall and utm . Could you help please --- ## [Kibana to Elastic node xpack.security.http.ssl.enabled](https://discuss.elastic.co/t/kibana-to-elastic-node-xpack-security-http-ssl-enabled/299645)
**Author:** [@mwoods269](https://discuss.elastic.co/u/mwoods269)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 4:26pm UTC](https://discuss.elastic.co/t/kibana-to-elastic-node-xpack-security-http-ssl-enabled/299645 "2022-03-14T16:26:01Z")
Looking for some insight on the following Current configuration Elasticnodes (using internal CA) configured with xpack.security.http.ssl.enabled:true so things like kibana and logstash outputs can connect via https. Al… --- ## [Dont disable merges?](https://discuss.elastic.co/t/dont-disable-merges/299646)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 0\ **Last updated:** [March 14, 2022, 4:30pm UTC](https://discuss.elastic.co/t/dont-disable-merges/299646 "2022-03-14T16:30:26Z")
So I found an interesting bit of info in a post and wanted to know more information "The best answer to those is don't disable merging as I mentioned. Otherwise yes merges use IO, if you disable them then they won't ha… --- ## [High CPU Usage across entire cluster](https://discuss.elastic.co/t/high-cpu-usage-across-entire-cluster/299508)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 8\ **Last updated:** [March 14, 2022, 4:14pm UTC](https://discuss.elastic.co/t/high-cpu-usage-across-entire-cluster/299508 "2022-03-14T16:14:33Z")
We have a version 5.6 100 plus node cluster which has been suffering from high cpu usage for a sometime now. The hot threads show several different threads which are usually taking 100% cpu. 3 masters 6i.xlarge 38 node… --- ## [Display count of tomcat down -metric visualization](https://discuss.elastic.co/t/display-count-of-tomcat-down-metric-visualization/299477)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 4\ **Last updated:** [March 14, 2022, 3:45pm UTC](https://discuss.elastic.co/t/display-count-of-tomcat-down-metric-visualization/299477 "2022-03-14T15:45:44Z")
Trying to create a visulization in kibana that should only display no of tomcat which are down. I guess I'm using wrong aggregation and not getting exactly wht can help out here. ''''''''''''''''' logs: Filelds: 1)t… --- ## [System health based on multiple metrics](https://discuss.elastic.co/t/system-health-based-on-multiple-metrics/299531)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 3\ **Last updated:** [March 14, 2022, 3:44pm UTC](https://discuss.elastic.co/t/system-health-based-on-multiple-metrics/299531 "2022-03-14T15:44:40Z")
I am looking to display the health of a system based on multiple metrics, e.g. cpu/memory/page load times via iis/uptime etc. So I have multiple beats and Elasticsearch ingesting multiple data points. Ideally I want to… --- ## [Deleting Kibana Index patterns and dependencies](https://discuss.elastic.co/t/deleting-kibana-index-patterns-and-dependencies/299111)
**Author:** [@nkuntla](https://discuss.elastic.co/u/nkuntla)\ **Replies:** 5\ **Last updated:** [March 14, 2022, 3:09pm UTC](https://discuss.elastic.co/t/deleting-kibana-index-patterns-and-dependencies/299111 "2022-03-14T15:09:52Z")
Trying to delete multiple index patterns in our kibana instance that are junk. Some questions related to this. Will deleting the index pattern delete dependent visualizations and dashboards? Will the delete fail if th… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=679) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=681)