# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=787 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 788 --- ## [Why are my users complaining about the Kibana "Logs" application?](https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 3\ **Last updated:** [November 2, 2021, 8:51pm UTC](https://discuss.elastic.co/t/why-are-my-users-complaining-about-the-kibana-logs-application/288160 "2021-11-02T20:51:55Z")
Hello, I've implemented filebeat a while ago and started to send log events to Logstash to be inserted into Elasticsearch for viewing in Kibana. Ever since , people (Users of Kibana Logs) have been complaining about it'… --- ## [Renaming fields dinamically](https://discuss.elastic.co/t/renaming-fields-dinamically/288237)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 4\ **Last updated:** [November 2, 2021, 5:57pm UTC](https://discuss.elastic.co/t/renaming-fields-dinamically/288237 "2021-11-02T17:57:12Z")
Hi, I got multiple fields with composed names likes the ones below records.properties.multiVmGroupId records.properties.rpoInSeconds I want to get rid of the records.properties part, and left only the last word. is th… --- ## [Elasticsearch inaccurate shard state when timed\_out is true](https://discuss.elastic.co/t/elasticsearch-inaccurate-shard-state-when-timed-out-is-true/285513)
**Author:** [@niketpatel2525](https://discuss.elastic.co/u/niketpatel2525)\ **Replies:** 14\ **Last updated:** [November 2, 2021, 5:28pm UTC](https://discuss.elastic.co/t/elasticsearch-inaccurate-shard-state-when-timed-out-is-true/285513 "2021-11-02T17:28:09Z")
Hey there, I have an index with 40 shards and I use the timeout feature with my search query. As per the documentation, if request timeout before it completes search on all shards, it will return whatever the results ot… --- ## [Pdf reports has disapeared in the share menu](https://discuss.elastic.co/t/pdf-reports-has-disapeared-in-the-share-menu/287315)
**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 4:36pm UTC](https://discuss.elastic.co/t/pdf-reports-has-disapeared-in-the-share-menu/287315 "2021-11-02T16:36:10Z")
Hi, something strange today, in dashboard, the "Pdf reports" choice has disappeared from share menu !? :face\_with\_monocle: Is this normal ? thanks --- ## [Using Logstash HTTP\_poller for NTLM authentication](https://discuss.elastic.co/t/using-logstash-http-poller-for-ntlm-authentication/288249)
**Author:** [@jondayko](https://discuss.elastic.co/u/jondayko)\ **Replies:** 0\ **Last updated:** [November 2, 2021, 4:32pm UTC](https://discuss.elastic.co/t/using-logstash-http-poller-for-ntlm-authentication/288249 "2021-11-02T16:32:55Z")
So, currently I am trying to use the http\_poller input plugin to send OData (JSON) to Kibana using Logstash. However, I keep running into problems trying to authenticate using NTLM. I was able to figure out that you can … --- ## [Nested aggregation](https://discuss.elastic.co/t/nested-aggregation/288061)
**Author:** [@mofaris](https://discuss.elastic.co/u/mofaris)\ **Replies:** 3\ **Last updated:** [November 2, 2021, 4:13pm UTC](https://discuss.elastic.co/t/nested-aggregation/288061 "2021-11-02T16:13:43Z")
Hello guys, I am trying to aggregate some data from my db by Logstash and send them to Elasticsearch. My data looks like this: The table consists of 4 columns. each question\_id may have one or more answer\_id and eac… --- ## [Expand Elasticsearch cluster v6 help](https://discuss.elastic.co/t/expand-elasticsearch-cluster-v6-help/288220)
**Author:** [@Ain\_Ryushika](https://discuss.elastic.co/u/Ain_Ryushika)\ **Replies:** 3\ **Last updated:** [November 2, 2021, 4:11pm UTC](https://discuss.elastic.co/t/expand-elasticsearch-cluster-v6-help/288220 "2021-11-02T16:11:37Z")
Elasticsearch version 6.8.17, all nodes are data and master nodes. Hello, I have a need to expand current Elasticsearch cluster from 3 to 6 nodes. I have a question regarding parameter "discovery.zen.minimum\_master\_no… --- ## [Split and group documents by two conditions in Kibana visualizations or Elasticsearch queries](https://discuss.elastic.co/t/split-and-group-documents-by-two-conditions-in-kibana-visualizations-or-elasticsearch-queries/288227)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 3\ **Last updated:** [November 2, 2021, 3:55pm UTC](https://discuss.elastic.co/t/split-and-group-documents-by-two-conditions-in-kibana-visualizations-or-elasticsearch-queries/288227 "2021-11-02T15:55:49Z")
Let's say I have the following data in Elasticsearch: id : id of the document date : date of inserting the document changed : refers that the field 'working' has changed its status from last document inserted. work… --- ## [Enterprise Search Pods Fail to Create - Readiness Probe Fails](https://discuss.elastic.co/t/enterprise-search-pods-fail-to-create-readiness-probe-fails/288176)
**Author:** [@thomasrice](https://discuss.elastic.co/u/thomasrice)\ **Replies:** 4\ **Last updated:** [November 2, 2021, 3:49pm UTC](https://discuss.elastic.co/t/enterprise-search-pods-fail-to-create-readiness-probe-fails/288176 "2021-11-02T15:49:48Z")
Hello, I am having some issues deploying Enterprise Search into my K8's cluster. I already have Elasticsearch & Kibana working via the crd & operator files: https://download.elastic.co/downloads/eck/1.8.0/crds.yaml h… --- ## [How to get the total of memory and cpu usage of my cluster](https://discuss.elastic.co/t/how-to-get-the-total-of-memory-and-cpu-usage-of-my-cluster/288170)
**Author:** [@Sergio\_Ferreyra](https://discuss.elastic.co/u/Sergio_Ferreyra)\ **Replies:** 10\ **Last updated:** [November 2, 2021, 2:35pm UTC](https://discuss.elastic.co/t/how-to-get-the-total-of-memory-and-cpu-usage-of-my-cluster/288170 "2021-11-02T14:35:12Z")
Hi team, I am working on Kibana Dashboard trying to get a particular metric. for example, I have 3 kubernetes nodes and I am trying to create a dashboard with the Total of memory and CPU consumption, I am trying with len… --- ## [Import bash output in Kibana, it's possible?](https://discuss.elastic.co/t/import-bash-output-in-kibana-its-possible/288225)
**Author:** [@pi314](https://discuss.elastic.co/u/pi314)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 12:58pm UTC](https://discuss.elastic.co/t/import-bash-output-in-kibana-its-possible/288225 "2021-11-02T12:58:23Z")
Hello everyone, can I import the output of a bash script into a kibana dashboard? I have created the following script to search email sending in postfix but I want to put together something visually more attractive. He… --- ## [In kibana(KQL), In the message field need to combine two conditions](https://discuss.elastic.co/t/in-kibana-kql-in-the-message-field-need-to-combine-two-conditions/288185)
**Author:** [@souji](https://discuss.elastic.co/u/souji)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 12:15pm UTC](https://discuss.elastic.co/t/in-kibana-kql-in-the-message-field-need-to-combine-two-conditions/288185 "2021-11-02T12:15:21Z")
Have text message like below in my index "POST /app/v1/fetch/abcdefgh HTTP/1.1" 404 NR route\_not\_found - "-" 0 0 0 - “10.0.0.0” “example.xxx.xxx.com" "-" - - 10.10.10.1:80 "POST /app/v1/fetch/abcdefgh HTTP/1.1" 200 rou… --- ## [Include empty nested fields in aggregation](https://discuss.elastic.co/t/include-empty-nested-fields-in-aggregation/288003)
**Author:** [@Calin\_Blaga](https://discuss.elastic.co/u/Calin_Blaga)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 11:37am UTC](https://discuss.elastic.co/t/include-empty-nested-fields-in-aggregation/288003 "2021-11-02T11:37:40Z")
I would like to do an aggregation on a nested field, and I would like to include empty occurrences too. What I tried: GET index/\_search { "size": 0, "aggs": { "language\_skills": { "nested": { "pat… --- ## [Add nodes to the cluster on the fly](https://discuss.elastic.co/t/add-nodes-to-the-cluster-on-the-fly/287666)
**Author:** [@Ain\_Ryushika](https://discuss.elastic.co/u/Ain_Ryushika)\ **Replies:** 5\ **Last updated:** [November 2, 2021, 11:13am UTC](https://discuss.elastic.co/t/add-nodes-to-the-cluster-on-the-fly/287666 "2021-11-02T11:13:50Z")
Hello, I have a task to add 2 more nodes in a cluster. Currently we have 5 nodes in a cluster which are all data nodes. Elastic version 7.11.2. Current discovery parameters set for cluster: "discovery.zen.ping.unicast.… --- ## [Kibana.yml configure error](https://discuss.elastic.co/t/kibana-yml-configure-error/288172)
**Author:** [@Tingda\_Du](https://discuss.elastic.co/u/Tingda_Du)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 11:00am UTC](https://discuss.elastic.co/t/kibana-yml-configure-error/288172 "2021-11-02T11:00:52Z")
in kibana.yml I have that logging.root.level: error But I got the error of Configuring logger failed: { ValidationError: child "logging" fails because \["root" is not allowed\] at Object.exports.process (/usr/share/… --- ## [Hello, now there is a scene. I need to get TOP10 data from ES and draw a histogram. The top10 data also needs to be processed and drawn into a tabular chart. How can I get the contents of the histogram for tabular chart?](https://discuss.elastic.co/t/hello-now-there-is-a-scene-i-need-to-get-top10-data-from-es-and-draw-a-histogram-the-top10-data-also-needs-to-be-processed-and-drawn-into-a-tabular-chart-how-can-i-get-the-contents-of-the-histogram-for-tabular-chart/288200)
**Author:** [@li\_li](https://discuss.elastic.co/u/li_li)\ **Replies:** 1\ **Last updated:** [November 2, 2021, 9:15am UTC](https://discuss.elastic.co/t/hello-now-there-is-a-scene-i-need-to-get-top10-data-from-es-and-draw-a-histogram-the-top10-data-also-needs-to-be-processed-and-drawn-into-a-tabular-chart-how-can-i-get-the-contents-of-the-histogram-for-tabular-chart/288200 "2021-11-02T09:15:40Z")
Hello, now there is a scene. I need to get TOP10 data from ES and draw a histogram. The top10 data also needs to be processed and drawn into a tabular chart. How can I get the contents of the histogram for tabular chart? … --- ## [Can elasticsearch be accessed by http and htpps simultaneously?](https://discuss.elastic.co/t/can-elasticsearch-be-accessed-by-http-and-htpps-simultaneously/287885)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 8:00am UTC](https://discuss.elastic.co/t/can-elasticsearch-be-accessed-by-http-and-htpps-simultaneously/287885 "2021-11-02T08:00:14Z")
Hello! I am working with a supposedly secure cluster that you access through https://localhost: 9200 but when I went to see the metricbeat.yml configuration file I saw a parameter that surprised me: ssl.verification\_m… --- ## [LogStash not working on Windows](https://discuss.elastic.co/t/logstash-not-working-on-windows/288202)
**Author:** [@Rainbow\_Lee](https://discuss.elastic.co/u/Rainbow_Lee)\ **Replies:** 0\ **Last updated:** [November 2, 2021, 7:21am UTC](https://discuss.elastic.co/t/logstash-not-working-on-windows/288202 "2021-11-02T07:21:15Z")
I just download logstash-7.15.1 and unzip it. I run ./bin/logstash -f logstash-simple.conf but got errors like this \[FATAL\] 2021-11-02 14:21:27.366 \[main\] Logstash - Logstash stopped processing because of an error: (… --- ## [How to create email connector in Kibana to alert a log?](https://discuss.elastic.co/t/how-to-create-email-connector-in-kibana-to-alert-a-log/288104)
**Author:** [@nhattanmai](https://discuss.elastic.co/u/nhattanmai)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 7:11am UTC](https://discuss.elastic.co/t/how-to-create-email-connector-in-kibana-to-alert-a-log/288104 "2021-11-02T07:11:02Z")
Dear all, I need create email connector to send email when a log has message match with keyword. Alert worked well, but I don't know how to setting email connector when following the guide: Preconfigured connector typ… --- ## [Loading SQL Server data using Logstash](https://discuss.elastic.co/t/loading-sql-server-data-using-logstash/288097)
**Author:** [@sunilmpatil](https://discuss.elastic.co/u/sunilmpatil)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 5:49am UTC](https://discuss.elastic.co/t/loading-sql-server-data-using-logstash/288097 "2021-11-02T05:49:37Z")
Hi All, I am planning to load data from SQL Server database to Elastic. While trying to load this data using Logstash JDBC plugin, I am facing issue. I am pasting details as below, please suggest what is missing here. (… --- ## [Json in alert result (message)](https://discuss.elastic.co/t/json-in-alert-result-message/288145)
**Author:** [@Alexey\_Shalin](https://discuss.elastic.co/u/Alexey_Shalin)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 2:01pm UTC](https://discuss.elastic.co/t/json-in-alert-result-message/288145 "2021-11-01T14:01:55Z")
Good Day I have alerts in SIEM based on built-in rules. In Action Tab for Rule I setuped : Send Alert to Email and using this : {{#context.alerts}} Username: {{user.name}} Host: {{host.name}} {{/context.alerts}} Ev… --- ## [Help with note.roles](https://discuss.elastic.co/t/help-with-note-roles/288149)
**Author:** [@b0r1s](https://discuss.elastic.co/u/b0r1s)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 10:57pm UTC](https://discuss.elastic.co/t/help-with-note-roles/288149 "2021-11-01T22:57:09Z")
Hey everyone o/ I was working with 3 nodes in my cluster. Now I added a 4th node, to be the cold node. Some indices that should be on it (according to ILM) are still not going. I'm trying to configure node.roles on the… --- ## [Support needed (Install Issues)](https://discuss.elastic.co/t/support-needed-install-issues/288151)
**Author:** [@Hondo](https://discuss.elastic.co/u/Hondo)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 10:55pm UTC](https://discuss.elastic.co/t/support-needed-install-issues/288151 "2021-11-01T22:55:00Z")
Hello, our webhoster have issius to install "Elasticsearch" on our ded. Rootserver with Almalinnux 8.4.0 He\`s write Blockquote Regarding the Elasticsearch application issue, it seems that you may need to further che… --- ## [TSVB table - Get start date](https://discuss.elastic.co/t/tsvb-table-get-start-date/288025)
**Author:** [@Saliinger](https://discuss.elastic.co/u/Saliinger)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 8:58pm UTC](https://discuss.elastic.co/t/tsvb-table-get-start-date/288025 "2021-11-01T20:58:38Z")
Hello. I have a TSVB table feeded with heartbeat. I'm using the field "summary.down" to watch when uptime goes down. The frequency is 1m and I'm accumulating the time when "summary.down" only shows 1. While that field… --- ## [Date time range picker](https://discuss.elastic.co/t/date-time-range-picker/288155)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 7:50pm UTC](https://discuss.elastic.co/t/date-time-range-picker/288155 "2021-11-01T19:50:32Z")
I am using Kibana 7.3.2 and plan to move to 7.15.1 maybe in the next few months after verifying a few things. The setup: The field I'm basing my visual upon is the @timeStamp in UTC The dashboard's date / time picker … --- ## [Saved Objects, Visualized items and Dashboards is missing](https://discuss.elastic.co/t/saved-objects-visualized-items-and-dashboards-is-missing/287946)
**Author:** [@Brisma](https://discuss.elastic.co/u/Brisma)\ **Replies:** 3\ **Last updated:** [November 1, 2021, 6:50pm UTC](https://discuss.elastic.co/t/saved-objects-visualized-items-and-dashboards-is-missing/287946 "2021-11-01T18:50:49Z")
Currently i develop dashboards and visualization in Kibana. In the next days, there are error when opening kibana with error message like this: {"statusCode":500,"error":"Internal Server Error","message":"{illegal\_argum… --- ## [How send Auditbeat dashboard to kibana (rancher)](https://discuss.elastic.co/t/how-send-auditbeat-dashboard-to-kibana-rancher/288165)
**Author:** [@sadux](https://discuss.elastic.co/u/sadux)\ **Replies:** 1\ **Last updated:** [November 1, 2021, 6:49pm UTC](https://discuss.elastic.co/t/how-send-auditbeat-dashboard-to-kibana-rancher/288165 "2021-11-01T18:49:41Z")
Hello! I'm new at ELK. Just update ELK stack to 7.15.1 and need download Auditbeat dashboards to kibana. Kibana running at rancher container. How I should download dashboards to Kibana? --- ## [Sorting by named query result](https://discuss.elastic.co/t/sorting-by-named-query-result/288168)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 0\ **Last updated:** [November 1, 2021, 6:36pm UTC](https://discuss.elastic.co/t/sorting-by-named-query-result/288168 "2021-11-01T18:36:33Z")
Is it possible to sort the results of the ES query by the value present in the named query? We have such code in Elasticsearch-dsl: def \_named\_family\_sample\_q(family\_samples\_q, family\_guid, quality\_filters\_by\_family): … --- ## [7.15.1 is extremely slow](https://discuss.elastic.co/t/7-15-1-is-extremely-slow/287617)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 10\ **Last updated:** [November 1, 2021, 5:25pm UTC](https://discuss.elastic.co/t/7-15-1-is-extremely-slow/287617 "2021-11-01T17:25:50Z")
whom ever it may concern something is wrong with 7.15.1 loading kibana dashboard is extremely slow same hardware works loading same data same dashboard in 7.12 only 14 second. 7.15.1 it takes 2 min. everything is same … --- ## [Web Crawler Failed HTTP request: Unable to request “\< domain \>” because it resolved to only private/invalid addresses v2](https://discuss.elastic.co/t/web-crawler-failed-http-request-unable-to-request-domain-because-it-resolved-to-only-private-invalid-addresses-v2/288102)
**Author:** [@neergttocsdivad](https://discuss.elastic.co/u/neergttocsdivad)\ **Replies:** 2\ **Last updated:** [November 1, 2021, 4:56pm UTC](https://discuss.elastic.co/t/web-crawler-failed-http-request-unable-to-request-domain-because-it-resolved-to-only-private-invalid-addresses-v2/288102 "2021-11-01T16:56:10Z")
An issue with the same subject was raised in April 2020.. orhantoyElastic Team Member advised "Yes, that's the current, default behavior and it will become configurable in the next minor release." Has this become confi… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=786) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=788)