# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=764 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 765 --- ## [KIbana SQL query parametrization](https://discuss.elastic.co/t/kibana-sql-query-parametrization/289787)
**Author:** [@marekpowwm](https://discuss.elastic.co/u/marekpowwm)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:33pm UTC](https://discuss.elastic.co/t/kibana-sql-query-parametrization/289787 "2021-12-02T20:33:12Z")
Is it possible to add a parameter to select index using ES SQL? I created a variable named indexName and I tried to add it to the query this way: SELECT \* FROM "{indexName}" But I get the error: So my question is: … --- ## [Kibana NetworkError while trying to access /api/core/capabiities](https://discuss.elastic.co/t/kibana-networkerror-while-trying-to-access-api-core-capabiities/289408)
**Author:** [@kallistisoft](https://discuss.elastic.co/u/kallistisoft)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 8:28pm UTC](https://discuss.elastic.co/t/kibana-networkerror-while-trying-to-access-api-core-capabiities/289408 "2021-12-02T20:28:49Z")
I'm trying to setup an ELK stack on Arch Linux and am unable to access the Kibana dashboard. When trying to access Kibana it hangs on the 'loading elastic' loading screen and eventually fails by timing out on the reques… --- ## [Free Text Input Control](https://discuss.elastic.co/t/free-text-input-control/290757)
**Author:** [@kshepitzki1](https://discuss.elastic.co/u/kshepitzki1)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 8:26pm UTC](https://discuss.elastic.co/t/free-text-input-control/290757 "2021-12-02T20:26:44Z")
Input Controls are amazing. Would be nice to complement the Drop Down and Range controls with Free Text controls that are bound to specific fields like the other controls. Is it possible? --- ## [Custom Analyser for IPv4 Mapped IPv6](https://discuss.elastic.co/t/custom-analyser-for-ipv4-mapped-ipv6/290822)
**Author:** [@Sai\_Satwik\_Kuppili](https://discuss.elastic.co/u/Sai_Satwik_Kuppili)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 7:55pm UTC](https://discuss.elastic.co/t/custom-analyser-for-ipv4-mapped-ipv6/290822 "2021-12-02T19:55:07Z")
Seems Elasticsearch doesn't allow IPv4 mapped IPv6 with CIDR to index. When I was trying to index IPv4-mapped-IPv6 ::ffff:127.12.0.1/108 I am getting the following error. PUT test PUT test/\_mapping/ { "dynamic\_t… --- ## [Systemctl start logstash does nothing](https://discuss.elastic.co/t/systemctl-start-logstash-does-nothing/290814)
**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\ **Replies:** 6\ **Last updated:** [December 2, 2021, 7:36pm UTC](https://discuss.elastic.co/t/systemctl-start-logstash-does-nothing/290814 "2021-12-02T19:36:57Z")
I am working on pulling changes onto a few logstash boxes. The issue is when I run the command systemctl start logstash I get nothing back. Expected: logstash starts with a verbose output. Actual: Any help with t… --- ## [Generation of logs for kibana has stopped after SIGHUP](https://discuss.elastic.co/t/generation-of-logs-for-kibana-has-stopped-after-sighup/289439)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 7:48pm UTC](https://discuss.elastic.co/t/generation-of-logs-for-kibana-has-stopped-after-sighup/289439 "2021-12-02T19:48:28Z")
I observed that after SIGHUP signal sent to kibana, logs generation have stopped. Please tell how and why sighup signal is sent to kibana service. --- ## [ElasticSearch 6.0 + Grafana 7.x data viz is not working as expected](https://discuss.elastic.co/t/elasticsearch-6-0-grafana-7-x-data-viz-is-not-working-as-expected/288669)
**Author:** [@111343](https://discuss.elastic.co/u/111343)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 7:15pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-grafana-7-x-data-viz-is-not-working-as-expected/288669 "2021-12-02T19:15:42Z")
Reporting the issue here What Grafana version and what operating system are you using? - 7.5.4 What are you trying to achieve? I’m trying to vizualize specific excerpts of the logs. I need to display performance of th… --- ## [Specific Graph](https://discuss.elastic.co/t/specific-graph/288909)
**Author:** [@Alexandre\_Solane](https://discuss.elastic.co/u/Alexandre_Solane)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 6:37pm UTC](https://discuss.elastic.co/t/specific-graph/288909 "2021-12-02T18:37:31Z")
Hello everyone, I have a specific question. In my Elastic Index, i've got record which contain many timestamp and one value input\_y (for each record). I want to create graph group by record that mark point input\_y for e… --- ## [Error saying request body or source is required](https://discuss.elastic.co/t/error-saying-request-body-or-source-is-required/147523)
**Author:** [@chitresh\_jain](https://discuss.elastic.co/u/chitresh_jain)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 5:27pm UTC](https://discuss.elastic.co/t/error-saying-request-body-or-source-is-required/147523 "2021-12-02T17:27:20Z")
So I am testing my analyzer after I created it successfully using - { "settings" : { "analysis": { "filter": { "autocomplete\_filter" : { "type" : "edge\_ngram", "min\_gram" : 1, "max\_gram" : 20 } }, "analyzer":… --- ## [Alerts on kubernetes.node.status. fields](https://discuss.elastic.co/t/alerts-on-kubernetes-node-status-fields/290780)
**Author:** [@Hakim](https://discuss.elastic.co/u/Hakim)\ **Replies:** 2\ **Last updated:** [December 2, 2021, 4:49pm UTC](https://discuss.elastic.co/t/alerts-on-kubernetes-node-status-fields/290780 "2021-12-02T16:49:33Z")
Hi Elastic team, I'm looking to add alerts on boolean fields of kubernetes nodes starting with kubernetes.node.status. but when I try to create alerte rule for these fields there is no condition in Metric threshold for t… --- ## [Help with Winlogbeat and filtering computer accounts](https://discuss.elastic.co/t/help-with-winlogbeat-and-filtering-computer-accounts/290792)
**Author:** [@joachim\_johannesen](https://discuss.elastic.co/u/joachim_johannesen)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 3:57pm UTC](https://discuss.elastic.co/t/help-with-winlogbeat-and-filtering-computer-accounts/290792 "2021-12-02T15:57:48Z")
I have a few ELK stacks up and running but I'm getting a lot of false 'Admin User Sessions' which are the computer accounts eg computer$. I'm using Windows Event forwarding to send all security related events over to my … --- ## [Given Apache logs in ES, how do I get Visitor Stay Length for each URL](https://discuss.elastic.co/t/given-apache-logs-in-es-how-do-i-get-visitor-stay-length-for-each-url/290762)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 3:57pm UTC](https://discuss.elastic.co/t/given-apache-logs-in-es-how-do-i-get-visitor-stay-length-for-each-url/290762 "2021-12-02T15:57:45Z")
Given Apache logs in ES, how do I get Visitor Stay Length for each URL Apache logs: 222.105.82.235 - - \[16/Nov/2021:10:04:37 +0530\] "GET /admin/ HTTP/1.1" 301 529 "http://facebook.com/admin/" "Mozilla/5.0 (Windows NT 1… --- ## [Dec 2nd, 2021: \[en\] Generating document thumbnails - now Open Source on the JVM](https://discuss.elastic.co/t/dec-2nd-2021-en-generating-document-thumbnails-now-open-source-on-the-jvm/288270)
**Author:** [@Sean\_Story](https://discuss.elastic.co/u/Sean_Story)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 3:49pm UTC](https://discuss.elastic.co/t/dec-2nd-2021-en-generating-document-thumbnails-now-open-source-on-the-jvm/288270 "2021-12-02T15:49:43Z")
Generating document thumbnails - now open source on the JVM It's something that I'd always taken for granted. You work with any sort of file system/file browser/search engine and you just expect to see thumbnail images. … --- ## [Reuse Dashboards accross different indexes in Kibana](https://discuss.elastic.co/t/reuse-dashboards-accross-different-indexes-in-kibana/289513)
**Author:** [@f4d0](https://discuss.elastic.co/u/f4d0)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 2:33pm UTC](https://discuss.elastic.co/t/reuse-dashboards-accross-different-indexes-in-kibana/289513 "2021-12-02T14:33:21Z")
Hi Everyone, I work in Cybersecurity and every week I have different sets of data to ingest that require separated indexes. The data sets are ingested using the exactly same mappings, and everytime I have to draw new d… --- ## [Manage Auditbeat with Elastic-Agent](https://discuss.elastic.co/t/manage-auditbeat-with-elastic-agent/290770)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 1:25pm UTC](https://discuss.elastic.co/t/manage-auditbeat-with-elastic-agent/290770 "2021-12-02T13:25:13Z")
Hi, I have deployed ElasticAgent to my hosts, and now, I would like to use Auditbeat. Is it possible to deploy and manage Auditbeat with ElasticAgent? I have searched for Auditbeat integration and doesn't exist. Than… --- ## [\[Grafana\]\[Elastic Search\] :: Plot IPs hitting website with their Distinct Count](https://discuss.elastic.co/t/grafana-elastic-search-plot-ips-hitting-website-with-their-distinct-count/290675)
**Author:** [@thejusjose-mindcurv](https://discuss.elastic.co/u/thejusjose-mindcurv)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 2:07pm UTC](https://discuss.elastic.co/t/grafana-elastic-search-plot-ips-hitting-website-with-their-distinct-count/290675 "2021-12-02T14:07:35Z")
Hi all, Requirement Get the Top hitting IPs and their count and visualize in Grafana We had this implemented already in Kibana visualization where we have metrics and buckets to filter out the required fields. We a… --- ## [Getting issue during running a api command](https://discuss.elastic.co/t/getting-issue-during-running-a-api-command/290142)
**Author:** [@Linuxuser](https://discuss.elastic.co/u/Linuxuser)\ **Replies:** 10\ **Last updated:** [December 2, 2021, 1:44pm UTC](https://discuss.elastic.co/t/getting-issue-during-running-a-api-command/290142 "2021-12-02T13:44:10Z")
http://192.168.1.211:9000/api/sources?range=36000&size=5000 By running this command getting issue. "ElasticsearchException{message=Unable to perform search query\\n\\n\[parent\] Data too large, data for \[\… --- ## [Using logstash for transferring data to Azure Eventhub](https://discuss.elastic.co/t/using-logstash-for-transferring-data-to-azure-eventhub/290769)
**Author:** [@aeoker](https://discuss.elastic.co/u/aeoker)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 1:08pm UTC](https://discuss.elastic.co/t/using-logstash-for-transferring-data-to-azure-eventhub/290769 "2021-12-02T13:08:13Z")
Hello Everyone, I need to use logstash for sending data to Azure Event Hub.As much as I found, there is only an input plugin for reading data from Azure Hub. Is there a logstash output plugin for sending data to Az… --- ## [How to setup client node and Loadbalancer in ECK setup?](https://discuss.elastic.co/t/how-to-setup-client-node-and-loadbalancer-in-eck-setup/290732)
**Author:** [@manu\_john](https://discuss.elastic.co/u/manu_john)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 12:10pm UTC](https://discuss.elastic.co/t/how-to-setup-client-node-and-loadbalancer-in-eck-setup/290732 "2021-12-02T12:10:54Z")
I have ECK setup with master and data nodes, how to add client node and a loadbalancer to the existing setup? Any sample code will be appreciated --- ## [Scripted field error al crear](https://discuss.elastic.co/t/scripted-field-error-al-crear/290667)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 5\ **Last updated:** [December 2, 2021, 11:14am UTC](https://discuss.elastic.co/t/scripted-field-error-al-crear/290667 "2021-12-02T11:14:31Z")
Buenos días, soy nuevo en el manejo y estoy intentado crear un scripted field y me da error. Alguien me puede ayudar, Gracias. Nombre scripted\_field: PRUEBA if(doc\['CAMPO'\].value.toString().substring(0,5)==("valor")){… --- ## [Forwarding logs from 4.7 to external logstash via filebeat](https://discuss.elastic.co/t/forwarding-logs-from-4-7-to-external-logstash-via-filebeat/290751)
**Author:** [@sabarivijay88](https://discuss.elastic.co/u/sabarivijay88)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 10:36am UTC](https://discuss.elastic.co/t/forwarding-logs-from-4-7-to-external-logstash-via-filebeat/290751 "2021-12-02T10:36:17Z")
Hi Team, We have deployed filebeat v7.15 daemon sets on Openshift v4.7 We are able to connect external logstash by using default path: /var/log/containers/\*.log We need to setup only one particular Openshift project a… --- ## [Elasticsearch fuzziness with multi\_match and bool\_prefix type](https://discuss.elastic.co/t/elasticsearch-fuzziness-with-multi-match-and-bool-prefix-type/290735)
**Author:** [@konman1989](https://discuss.elastic.co/u/konman1989)\ **Replies:** 0\ **Last updated:** [December 2, 2021, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch-fuzziness-with-multi-match-and-bool-prefix-type/290735 "2021-12-02T07:35:39Z")
I have a set of search\_as\_you\_type\_fields I need to search against. Here is my mapping "mappings" : { "properties" : { "description" : { "type" : "search\_as\_you\_type", "doc\_values" : fa… --- ## [How to update Index patterns?](https://discuss.elastic.co/t/how-to-update-index-patterns/290636)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 2:22am UTC](https://discuss.elastic.co/t/how-to-update-index-patterns/290636 "2021-12-02T02:22:49Z")
I currently use Elastic stack 7.14. Recently, when I wanted to search for a certain field, I found that it couldn’t be searched. Kibana gave me a prompt "Unindexed fields can not be searched". I remember that index patte… --- ## [Clearing index pattern fields](https://discuss.elastic.co/t/clearing-index-pattern-fields/290716)
**Author:** [@hamzahda](https://discuss.elastic.co/u/hamzahda)\ **Replies:** 1\ **Last updated:** [December 2, 2021, 1:18am UTC](https://discuss.elastic.co/t/clearing-index-pattern-fields/290716 "2021-12-02T01:18:53Z")
I want to clear around 2000 unused fields in a kibana index pattern and I was wondering wich of the following two approaches should I take: deleting all of the fields and then only the used fields will be recreated by… --- ## [Custom event parsing](https://discuss.elastic.co/t/custom-event-parsing/290568)
**Author:** [@ohliuw](https://discuss.elastic.co/u/ohliuw)\ **Replies:** 7\ **Last updated:** [December 1, 2021, 9:52pm UTC](https://discuss.elastic.co/t/custom-event-parsing/290568 "2021-12-01T21:52:04Z")
I am relatively new to SO. I am trying to understand how to ingest and parse customs logs in ELS. I currently use the NXLog agent to send json formatted data (coming from the SYSMON windows eventlog) from a host to the … --- ## [Kibana watcher rule Elasticsearch query bug](https://discuss.elastic.co/t/kibana-watcher-rule-elasticsearch-query-bug/290664)
**Author:** [@can.ozdemir](https://discuss.elastic.co/u/can.ozdemir)\ **Replies:** 1\ **Last updated:** [December 1, 2021, 9:44pm UTC](https://discuss.elastic.co/t/kibana-watcher-rule-elasticsearch-query-bug/290664 "2021-12-01T21:44:45Z")
Hello there, On our cluster we are indexing logs from machine pairs i.e. machine01 and machine02 is a pair, thus I have created an Elasticsearch query Alert when my query which returns log amount containing hostname mac… --- ## [Logstash beats: 69/71 error](https://discuss.elastic.co/t/logstash-beats-69-71-error/290708)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 3\ **Last updated:** [December 1, 2021, 8:55pm UTC](https://discuss.elastic.co/t/logstash-beats-69-71-error/290708 "2021-12-01T20:55:04Z")
Logstash configuration: input { beats { port =\> 9443 host =\> "0.0.0.0" ssl =\> false } } filter { ... } output { ... } stdout{} } It looks like logstash is having an issue with the beats tag as I… --- ## [IAM role issue in s3 output plugin](https://discuss.elastic.co/t/iam-role-issue-in-s3-output-plugin/290702)
**Author:** [@John\_snow](https://discuss.elastic.co/u/John_snow)\ **Replies:** 0\ **Last updated:** [December 1, 2021, 5:56pm UTC](https://discuss.elastic.co/t/iam-role-issue-in-s3-output-plugin/290702 "2021-12-01T17:56:51Z")
Trying to use iam role for cross account S3 Bucket but getting following error Pipeline error {:pipeline\_id=\>"main", :exception=\>#\ … --- ## [Is it possible to embed Kibana Visualizations on Google Slides or Docs?](https://discuss.elastic.co/t/is-it-possible-to-embed-kibana-visualizations-on-google-slides-or-docs/290427)
**Author:** [@Urbano\_Freitas](https://discuss.elastic.co/u/Urbano_Freitas)\ **Replies:** 4\ **Last updated:** [December 1, 2021, 8:13pm UTC](https://discuss.elastic.co/t/is-it-possible-to-embed-kibana-visualizations-on-google-slides-or-docs/290427 "2021-12-01T20:13:51Z")
Hi everyone, I do Load Tests frequently and I generally in the end share a report with Load Test results and with observations. I generally do this by creating some visualizations with Kibana and then snap(1) the visua… --- ## [Make a loop to read values in logstash](https://discuss.elastic.co/t/make-a-loop-to-read-values-in-logstash/290692)
**Author:** [@elpazo](https://discuss.elastic.co/u/elpazo)\ **Replies:** 1\ **Last updated:** [December 1, 2021, 8:04pm UTC](https://discuss.elastic.co/t/make-a-loop-to-read-values-in-logstash/290692 "2021-12-01T20:04:28Z")
Hello, I have a result like this ' values \[ \[0\] { X = 1 Y = 2 Z = 3 V = 4 } \[1\] { X = 5 Y = 6 Z = 7 V= 8 } ' How can i read this result and put every value in variable (example Var\_X = Values\[0\]\[0\] = 1… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=763) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=765)