# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=689

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 690

---

## [Elastic Agent 8.0.0 on macOS 12.x](https://discuss.elastic.co/t/elastic-agent-8-0-0-on-macos-12-x/297945)

<div class="topic-metadata">

**Author:** [@teamomni](https://discuss.elastic.co/u/teamomni)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 6:58pm UTC](https://discuss.elastic.co/t/elastic-agent-8-0-0-on-macos-12-x/297945 "2022-03-03T18:58:03Z")

</div>

We recently have been testing the Elastic Agent on various employees’ MacBook Pros (macOS 12.x with Intel processors) and are having permission issues. During installation we followed the guidelines provided on Enable F…

---

## [Moving Indices from Data Folder](https://discuss.elastic.co/t/moving-indices-from-data-folder/298768)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 5:57pm UTC](https://discuss.elastic.co/t/moving-indices-from-data-folder/298768 "2022-03-03T17:57:53Z")

</div>

If I wanted to quickly move indices from one node to another, would I break anything if I just cut/pasted the indices files under %ES\_HOME%\\data from one node to another? ...as opposed to using the \_cluster/reroute API, …

---

## [Jdbc\_static logstash plugin, multiple loaders, Parameter field not found in event](https://discuss.elastic.co/t/jdbc-static-logstash-plugin-multiple-loaders-parameter-field-not-found-in-event/298764)

<div class="topic-metadata">

**Author:** [@Q11](https://discuss.elastic.co/u/Q11)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 5:28pm UTC](https://discuss.elastic.co/t/jdbc-static-logstash-plugin-multiple-loaders-parameter-field-not-found-in-event/298764 "2022-03-03T17:28:27Z")

</div>

I am using the jdbc\_static logstash plugin, and I want to enrich events with different types of data. I have multiple loaders set, but not all events have the parameter field for each loader. This shuts down the entire…

---

## [Kibana keeps logging users out "An unexpected authentication error..."](https://discuss.elastic.co/t/kibana-keeps-logging-users-out-an-unexpected-authentication-error/296635)

<div class="topic-metadata">

**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\
**Replies:** 4\
**Last updated:** [March 3, 2022, 5:02pm UTC](https://discuss.elastic.co/t/kibana-keeps-logging-users-out-an-unexpected-authentication-error/296635 "2022-03-03T17:02:00Z")

</div>

Our two Kibana instances have started to unexpectedly log users out very frequently, sometimes just after few seconds after logging in. Other times it seems to be stable and keeps user logged in then bam! logged out agai…

---

## [Sending log data from rsyslog to logstash](https://discuss.elastic.co/t/sending-log-data-from-rsyslog-to-logstash/298765)

<div class="topic-metadata">

**Author:** [@Khammassi\_HoussemEdd](https://discuss.elastic.co/u/Khammassi_HoussemEdd)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 4:39pm UTC](https://discuss.elastic.co/t/sending-log-data-from-rsyslog-to-logstash/298765 "2022-03-03T16:39:44Z")

</div>

i wanted to know whether it's a best practice to send log data DIRECTLY with rsyslog into logstash ?? or is it better to send data from rsyslog to another rsyslog server and and then make logstash operate on this data r…

---

## [Control Visualization Option List sorting issue](https://discuss.elastic.co/t/control-visualization-option-list-sorting-issue/298560)

<div class="topic-metadata">

**Author:** [@Moni](https://discuss.elastic.co/u/Moni)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 3:38pm UTC](https://discuss.elastic.co/t/control-visualization-option-list-sorting-issue/298560 "2022-03-03T15:38:56Z")

</div>

I am trying to list all values of a number field in Control Visualization Option list. The numbers are not showing in a sorted order. I'm using v7.16. Can someone please suggest if there are any workarounds ? Thanks for …

---

## [What is the \`index.number\_of\_routing\_shards\` setting? How can I calculate it based on the number of shards?](https://discuss.elastic.co/t/what-is-the-index-number-of-routing-shards-setting-how-can-i-calculate-it-based-on-the-number-of-shards/297540)

<div class="topic-metadata">

**Author:** [@Shane\_Gannon](https://discuss.elastic.co/u/Shane_Gannon)\
**Replies:** 7\
**Last updated:** [March 3, 2022, 3:27pm UTC](https://discuss.elastic.co/t/what-is-the-index-number-of-routing-shards-setting-how-can-i-calculate-it-based-on-the-number-of-shards/297540 "2022-03-03T15:27:41Z")

</div>

I'm aware of a similar question to this topic. Namely What are "number\_of\_routing\_shards"? - #2 by steffens. But it does not answer my question or help me understand the index.number\_of\_routing\_shards setting. I'm hopin…

---

## [Pods failing because of an environment variable](https://discuss.elastic.co/t/pods-failing-because-of-an-environment-variable/298640)

<div class="topic-metadata">

**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 2:25pm UTC](https://discuss.elastic.co/t/pods-failing-because-of-an-environment-variable/298640 "2022-03-03T14:25:51Z")

</div>

I am spinning up an ECK-based cluster. I haven't set any secureSettings but I had forgotten and set an environment variable named gcs.client.default.credentials\_file The pod fails to start with this error "Caused by: j…

---

## [Is it possible to display a value for a threshold line on a vertical bar graph?](https://discuss.elastic.co/t/is-it-possible-to-display-a-value-for-a-threshold-line-on-a-vertical-bar-graph/298559)

<div class="topic-metadata">

**Author:** [@vector\_prime](https://discuss.elastic.co/u/vector_prime)\
**Replies:** 9\
**Last updated:** [March 3, 2022, 2:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-display-a-value-for-a-threshold-line-on-a-vertical-bar-graph/298559 "2022-03-03T14:22:49Z")

</div>

Hi Elastic Community, The question is pretty much what the title says. I am looking to be able to display the value of a threshold line in a vertical bar chart on the chart in some way. I have the line configured and …

---

## [Plot when count is zero](https://discuss.elastic.co/t/plot-when-count-is-zero/298692)

<div class="topic-metadata">

**Author:** [@elastic21](https://discuss.elastic.co/u/elastic21)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 2:22pm UTC](https://discuss.elastic.co/t/plot-when-count-is-zero/298692 "2022-03-03T14:22:16Z")

</div>

Is there a way to plot time series graph so that there are bars when records count is 0 and no bars when records count is \> 0 ? Given a time interval is selected for plotting (say 30min) for the data in last 24hrs ? So,…

---

## [For prefix query, the max prefix length is 1000, is there any document show that?](https://discuss.elastic.co/t/for-prefix-query-the-max-prefix-length-is-1000-is-there-any-document-show-that/298749)

<div class="topic-metadata">

**Author:** [@major](https://discuss.elastic.co/u/major)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 1:49pm UTC](https://discuss.elastic.co/t/for-prefix-query-the-max-prefix-length-is-1000-is-there-any-document-show-that/298749 "2022-03-03T13:49:41Z")

</div>

for the prefix, I tried by my self, when the prefix length larger than 1000, the lucene will throw exception？I would like to know it there any configuration can change the max length? or any document support it?

---

## [Unified highlighter performance regression between 6.8 and 7.17](https://discuss.elastic.co/t/unified-highlighter-performance-regression-between-6-8-and-7-17/298747)

<div class="topic-metadata">

**Author:** [@julbra](https://discuss.elastic.co/u/julbra)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 1:44pm UTC](https://discuss.elastic.co/t/unified-highlighter-performance-regression-between-6-8-and-7-17/298747 "2022-03-03T13:44:11Z")

</div>

After upgrading from Elasticsearch 6.8 to 7.17 we noticed that highlighting queries started taking several seconds instead of milliseconds. We have many hundreds of fields in our mapping and the data is sparsely populat…

---

## [Facing some errors in kibana](https://discuss.elastic.co/t/facing-some-errors-in-kibana/298694)

<div class="topic-metadata">

**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 1:12pm UTC](https://discuss.elastic.co/t/facing-some-errors-in-kibana/298694 "2022-03-03T13:12:57Z")

</div>

log \[10:01:31.426\] \[warning\]\[collector-set\]\[plugins\]\[usageCollection\] Unable to fetch data from reporting collector log \[10:01:32.237\] \[error\]\[index\]\[plugins\]\[security\]\[session\] Failed to retrieve session value: Req…

---

## [How to use different kibana indexes in kibana 8](https://discuss.elastic.co/t/how-to-use-different-kibana-indexes-in-kibana-8/298366)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 12:44pm UTC](https://discuss.elastic.co/t/how-to-use-different-kibana-indexes-in-kibana-8/298366 "2022-03-03T12:44:09Z")

</div>

In our lab environment, we are using two kibana instances with the Elasticsearch cluster. The problem is that kibana.index configuration option is deprecated now and it will be removed in kibana 8. In our lab environment…

---

## [Help to create new field from message](https://discuss.elastic.co/t/help-to-create-new-field-from-message/298626)

<div class="topic-metadata">

**Author:** [@Panplumousse](https://discuss.elastic.co/u/Panplumousse)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 12:36pm UTC](https://discuss.elastic.co/t/help-to-create-new-field-from-message/298626 "2022-03-03T12:36:46Z")

</div>

Hello every body, I m looking for a way (maybe with grok, probably with grok :smiley: ), to create new field by extracting some specifique pattern but with keeping the field message without modification after operation …

---

## [How does kibana generates the visualizations?](https://discuss.elastic.co/t/how-does-kibana-generates-the-visualizations/298721)

<div class="topic-metadata">

**Author:** [@frank3nst3in](https://discuss.elastic.co/u/frank3nst3in)\
**Replies:** 4\
**Last updated:** [March 3, 2022, 12:28pm UTC](https://discuss.elastic.co/t/how-does-kibana-generates-the-visualizations/298721 "2022-03-03T12:28:28Z")

</div>

How does the kibana generates the bar charts shown in dashboard ? Does kibana uses SSR (server side rendering) or it uses any third party library like Chart.js or something else ?

---

## [Sync Data between MongoDB to ElasticSearch](https://discuss.elastic.co/t/sync-data-between-mongodb-to-elasticsearch/298743)

<div class="topic-metadata">

**Author:** [@mzia87](https://discuss.elastic.co/u/mzia87)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 12:22pm UTC](https://discuss.elastic.co/t/sync-data-between-mongodb-to-elasticsearch/298743 "2022-03-03T12:22:07Z")

</div>

Hi Folks, Need to understand something: scenario: if we have 50 million records in our mongodb, then what is the best implementation to sync all the data inside Elasticsearch, like we have to store all the data inside …

---

## [How to get the aggregation value into a field in CSV in logstash configuration file?](https://discuss.elastic.co/t/how-to-get-the-aggregation-value-into-a-field-in-csv-in-logstash-configuration-file/298741)

<div class="topic-metadata">

**Author:** [@Ajay4998](https://discuss.elastic.co/u/Ajay4998)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 12:06pm UTC](https://discuss.elastic.co/t/how-to-get-the-aggregation-value-into-a-field-in-csv-in-logstash-configuration-file/298741 "2022-03-03T12:06:11Z")

</div>

Hi All, How to get terms aggregation key into field and value into field value in logstash for a CSV file, i have used Elasticsearch filter and also give the json file for query. can some please help on this Elasticsea…

---

## [\_dateparsefailure Logstash 7.17](https://discuss.elastic.co/t/dateparsefailure-logstash-7-17/298729)

<div class="topic-metadata">

**Author:** [@Daniel\_Lopez](https://discuss.elastic.co/u/Daniel_Lopez)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 11:50am UTC](https://discuss.elastic.co/t/dateparsefailure-logstash-7-17/298729 "2022-03-03T11:50:35Z")

</div>

Hi to all! The field I index to Elasticsearch is 03/03/2020 11:11:11 AM. I tried with different filters date { match =\> \["time","dd/MM/YYYY hh:mm:ss a"\] target =\> "time" } date { match =\> \["time","dd/MM/YYYY hh:m…

---

## [ELK as a service without beats in Kubernetes](https://discuss.elastic.co/t/elk-as-a-service-without-beats-in-kubernetes/298732)

<div class="topic-metadata">

**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 11:34am UTC](https://discuss.elastic.co/t/elk-as-a-service-without-beats-in-kubernetes/298732 "2022-03-03T11:34:42Z")

</div>

I want to build ELK as a service in kubernetes. How to configure logstash to handle external syslog data into the ELK stack in kubernetes? Can I do it without using beats? Anyone can help?

---

## [Grouping delta](https://discuss.elastic.co/t/grouping-delta/298659)

<div class="topic-metadata">

**Author:** [@danilomendes](https://discuss.elastic.co/u/danilomendes)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 10:30am UTC](https://discuss.elastic.co/t/grouping-delta/298659 "2022-03-03T10:30:23Z")

</div>

I have some documents like those: { timestamp: t, player: playerA, team: teamA, totalPoints: 10 }, { timestamp: t, player: playerB, team: teamA, totalPoints: 5 }, { timestamp: t, player: playerc, team: teamA, totalPoint…

---

## [Nested objects? Or not possible in Kibana?](https://discuss.elastic.co/t/nested-objects-or-not-possible-in-kibana/298725)

<div class="topic-metadata">

**Author:** [@glushkov](https://discuss.elastic.co/u/glushkov)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 10:22am UTC](https://discuss.elastic.co/t/nested-objects-or-not-possible-in-kibana/298725 "2022-03-03T10:22:11Z")

</div>

Hi, I have an Oracle table with state-change events for each job (these are computing jobs that we are running) in the format: id | timestamp | job\_nr | status | attempt\_nr | 0 |27-NOV-21 01.10.56.678706000 AM|1 | star…

---

## [Visualization (timeseries) series selection](https://discuss.elastic.co/t/visualization-timeseries-series-selection/298631)

<div class="topic-metadata">

**Author:** [@nickgregz](https://discuss.elastic.co/u/nickgregz)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 10:00am UTC](https://discuss.elastic.co/t/visualization-timeseries-series-selection/298631 "2022-03-03T10:00:01Z")

</div>

Hello, is there a way to inverse the series selection on visualizations. Right now when you click on the legend of one series it gets removed from the chart. Is there a way to enable the opposite meaning that only the…

---

## [FVH does not highlight matched search terms on snippets boundary](https://discuss.elastic.co/t/fvh-does-not-highlight-matched-search-terms-on-snippets-boundary/298720)

<div class="topic-metadata">

**Author:** [@Anatoly\_Petkevich](https://discuss.elastic.co/u/Anatoly_Petkevich)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 9:57am UTC](https://discuss.elastic.co/t/fvh-does-not-highlight-matched-search-terms-on-snippets-boundary/298720 "2022-03-03T09:57:23Z")

</div>

Looks like there is an issue with highlighting of matched terms on snippets boundary. Steps to reproduce: Create index and field mappings PUT /test { "settings": { "number\_of\_shards": 1 }, "mappings": { …

---

## [Duplicated message in document, grok pattern problem](https://discuss.elastic.co/t/duplicated-message-in-document-grok-pattern-problem/298704)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 2\
**Last updated:** [March 3, 2022, 9:40am UTC](https://discuss.elastic.co/t/duplicated-message-in-document-grok-pattern-problem/298704 "2022-03-03T09:40:13Z")

</div>

Dears, Please help me with parsing such multiline log, example one event: 2022-03-03 07:34:45.971 TRACE 865 --- \[nio-5010-exec-7\] rest-server : Request { correlationId = a835e742-635a-4…

---

## [Path.Data partition is going Read-Only periodically](https://discuss.elastic.co/t/path-data-partition-is-going-read-only-periodically/298710)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 4\
**Last updated:** [March 3, 2022, 9:36am UTC](https://discuss.elastic.co/t/path-data-partition-is-going-read-only-periodically/298710 "2022-03-03T09:36:16Z")

</div>

Hello, I have a deployed cluster V7.16.1 on Linux platform (ubuntu lts), but what is happening is that every time one of the partitions mapped to path.data is becoming Read-Only until I run file-system check (fsck) on t…

---

## [No results match your search criteria](https://discuss.elastic.co/t/no-results-match-your-search-criteria/298672)

<div class="topic-metadata">

**Author:** [@Sebastian\_Randoll\_Le](https://discuss.elastic.co/u/Sebastian_Randoll_Le)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 9:07am UTC](https://discuss.elastic.co/t/no-results-match-your-search-criteria/298672 "2022-03-03T09:07:35Z")

</div>

Hello I have a problem with kibana version 7.17.0 when displaying the content of an index: My index in Elasticsearch is: It is displayed that it contains docs. My pattern index in kibana is: But when I went…

---

## [Embed Kibana Dashboard in Asp.Net Core Web Application](https://discuss.elastic.co/t/embed-kibana-dashboard-in-asp-net-core-web-application/297488)

<div class="topic-metadata">

**Author:** [@Thirumavalavan](https://discuss.elastic.co/u/Thirumavalavan)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 8:54am UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-in-asp-net-core-web-application/297488 "2022-03-03T08:54:07Z")

</div>

Team, Can you please help me to give an idea/sample code on embedding the kibana dashboard into my web application? what are the steps I have to follow? Fyi, I have enabled Elasticsearch cluster setup and configured it…

---

## [Color codes on graph](https://discuss.elastic.co/t/color-codes-on-graph/298702)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 8:35am UTC](https://discuss.elastic.co/t/color-codes-on-graph/298702 "2022-03-03T08:35:40Z")

</div>

Version: Kibana 8.0 I would like to have my graphs in a specific color. There is an option to select color form the color palette drop down under panel setting. Even though I change the color it seems to not update all …

---

## [Logstash parse multiple lat lon values](https://discuss.elastic.co/t/logstash-parse-multiple-lat-lon-values/298711)

<div class="topic-metadata">

**Author:** [@sylar11](https://discuss.elastic.co/u/sylar11)\
**Replies:** 0\
**Last updated:** [March 3, 2022, 8:11am UTC](https://discuss.elastic.co/t/logstash-parse-multiple-lat-lon-values/298711 "2022-03-03T08:11:01Z")

</div>

Hi all, I have the following json file: { "station": "A001", "X": 503744.7, "Y": 4726339.0, "Z": 458.84, "LON": -2.954286956913572, "LAT": 42.68952475979137, "dates": \[ "2015-01-01",…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=688)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=690)
