# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=848 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 849 --- ## [Extract file name and add as a field](https://discuss.elastic.co/t/extract-file-name-and-add-as-a-field/282105)
**Author:** [@Sherabu](https://discuss.elastic.co/u/Sherabu)\ **Replies:** 2\ **Last updated:** [August 21, 2021, 5:30pm UTC](https://discuss.elastic.co/t/extract-file-name-and-add-as-a-field/282105 "2021-08-21T17:30:50Z")
Hi bro and sis I will be sending file from filebeat to logstash. Is there a way I can extract file name on logstash filter? I want to add as a new field My file name Path/sample.log Path/sample.20210821 Your small a… --- ## [Kibana - Failed to query events data](https://discuss.elastic.co/t/kibana-failed-to-query-events-data/281699)
**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\ **Replies:** 7\ **Last updated:** [August 21, 2021, 12:22pm UTC](https://discuss.elastic.co/t/kibana-failed-to-query-events-data/281699 "2021-08-21T12:22:01Z")
Here are the full errors: That is the error i see in KIbana when i try to visualize auditbeat data from auditbeat index. i cannot visualize anything in Kibana now from that index. The error states: type": "illeg… --- ## [Populate new field in elastic index using key of the index](https://discuss.elastic.co/t/populate-new-field-in-elastic-index-using-key-of-the-index/279477)
**Author:** [@bipin\_kumar2](https://discuss.elastic.co/u/bipin_kumar2)\ **Replies:** 3\ **Last updated:** [August 21, 2021, 12:09pm UTC](https://discuss.elastic.co/t/populate-new-field-in-elastic-index-using-key-of-the-index/279477 "2021-08-21T12:09:46Z")
Hi , I have index which of very large size and in populate incremental data into this index by using upsert into hive external table using id of index pointing to elastic index , now i have to add a new field into this… --- ## [The unit elasticsearch.service has entered the 'failed' state with result 'exit-code'](https://discuss.elastic.co/t/the-unit-elasticsearch-service-has-entered-the-failed-state-with-result-exit-code/282129)
**Author:** [@Atif\_Hussain](https://discuss.elastic.co/u/Atif_Hussain)\ **Replies:** 2\ **Last updated:** [August 21, 2021, 7:06am UTC](https://discuss.elastic.co/t/the-unit-elasticsearch-service-has-entered-the-failed-state-with-result-exit-code/282129 "2021-08-21T07:06:59Z")
After new installation of 7.14, I am getting this error when I try to start the service. Tried different solutions on from this forum without any luck. I am new to Elasticsearch so need help. Following are the logs fr… --- ## [\_grokparsefailure is occurring even after the grok pattern is success in grokdebugger](https://discuss.elastic.co/t/grokparsefailure-is-occurring-even-after-the-grok-pattern-is-success-in-grokdebugger/280784)
**Author:** [@vaseemQA](https://discuss.elastic.co/u/vaseemQA)\ **Replies:** 19\ **Last updated:** [August 21, 2021, 6:56am UTC](https://discuss.elastic.co/t/grokparsefailure-is-occurring-even-after-the-grok-pattern-is-success-in-grokdebugger/280784 "2021-08-21T06:56:58Z")
Hi Team, I'm using logstash 6.8.3, and I'm trying to parse ES slow logs and my sample field is a ES source\_query which looks like "source\_query":{"from":0,"size":0,"post\_filter":{"bool":{"must":\[{"term":{" \*\*someId\*\* "… --- ## [Elasticsearch performance](https://discuss.elastic.co/t/elasticsearch-performance/282119)
**Author:** [@dgastudio](https://discuss.elastic.co/u/dgastudio)\ **Replies:** 1\ **Last updated:** [August 21, 2021, 6:47am UTC](https://discuss.elastic.co/t/elasticsearch-performance/282119 "2021-08-21T06:47:51Z")
Hello my instance (single node) m6g.large 2cpu 8ram elastic version : 7.14.0 elastic is hiden by nginx proxy when trying to do a batch index operation (about 2000 items in one batch), and, in the same time, i'm doing… --- ## [Master and slave using same index](https://discuss.elastic.co/t/master-and-slave-using-same-index/282084)
**Author:** [@selin](https://discuss.elastic.co/u/selin)\ **Replies:** 6\ **Last updated:** [August 21, 2021, 1:38am UTC](https://discuss.elastic.co/t/master-and-slave-using-same-index/282084 "2021-08-21T01:38:31Z")
I will use filebeat -\> logstash -\> Elasticsearch cluster I have 2 server filebeat installed. Can i use same index name for the 2 server? --- ## [Alerts dont match time on server](https://discuss.elastic.co/t/alerts-dont-match-time-on-server/281604)
**Author:** [@nwenner76](https://discuss.elastic.co/u/nwenner76)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 9:49pm UTC](https://discuss.elastic.co/t/alerts-dont-match-time-on-server/281604 "2021-08-20T21:49:03Z")
Running Wazuh 7.10.02. Host, Wazuh, and Kibana show the right time, but when I get the alerts in my email, the body of the email shows the wrong time. Setup is all on the same server. All systems are in the same office… --- ## [Remaking legacy visualizations on Kibana, problems with colors and filters](https://discuss.elastic.co/t/remaking-legacy-visualizations-on-kibana-problems-with-colors-and-filters/282118)
**Author:** [@Mrizzi](https://discuss.elastic.co/u/Mrizzi)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 8:48pm UTC](https://discuss.elastic.co/t/remaking-legacy-visualizations-on-kibana-problems-with-colors-and-filters/282118 "2021-08-20T20:48:40Z")
Hey everyone, hope you're doing okay. I've been migrating legacy visualizations into lens visualizations (mostly for the better tooltips) and i've been banging my head about seemingly basic features from the legacy ones… --- ## [Getting issue while installing kibana](https://discuss.elastic.co/t/getting-issue-while-installing-kibana/281093)
**Author:** [@sujalray](https://discuss.elastic.co/u/sujalray)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 5:25pm UTC](https://discuss.elastic.co/t/getting-issue-while-installing-kibana/281093 "2021-08-20T17:25:02Z")
HI Team, -I am getting issue while installing kibana on dev mode. Kibana Version - 7.14.0 Node Version - 14.17.3 -I am using the following URL for installation process. -I am cloning the code using the below URL -… --- ## [Filter Order in Dashboard](https://discuss.elastic.co/t/filter-order-in-dashboard/281037)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 5:21pm UTC](https://discuss.elastic.co/t/filter-order-in-dashboard/281037 "2021-08-20T17:21:28Z")
Can you change the order of filters in a Dashboard? If I want to add a new one at the left hand side or in the middle do I need to recreate them each time? --- ## [Copy object from one space to other created different ID](https://discuss.elastic.co/t/copy-object-from-one-space-to-other-created-different-id/282010)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 5:06pm UTC](https://discuss.elastic.co/t/copy-object-from-one-space-to-other-created-different-id/282010 "2021-08-20T17:06:43Z")
I think something change from versiion 7.14.0 in past when i was copying anything from one space to other it was keeping same ID. now it just creates new different ID. is this by design? or am I doing something wrong --- ## [Kibana custom plugin 7.13.3 installation fails](https://discuss.elastic.co/t/kibana-custom-plugin-7-13-3-installation-fails/279412)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 15\ **Last updated:** [August 20, 2021, 5:04pm UTC](https://discuss.elastic.co/t/kibana-custom-plugin-7-13-3-installation-fails/279412 "2021-08-20T17:04:11Z")
Hello, I am upgrading my elasticstack from version 7.9.2 to 7.13.3. I checked my plugin with the development environment I created for kibana 7.13.3. it works fine. now I need to add that plugin to my windows elasticsta… --- ## [Prefer IPv6 elasticsearch.hosts](https://discuss.elastic.co/t/prefer-ipv6-elasticsearch-hosts/281733)
**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 4:25pm UTC](https://discuss.elastic.co/t/prefer-ipv6-elasticsearch-hosts/281733 "2021-08-20T16:25:11Z")
The hosts in my elasticsearch.hosts resolve to IPv6 and IPv4 addresses. When tcpdumping, I see Kibana trying to connect using IPv4. How do I tell Kibana to connect using IPv6? --- ## [How can I sort metrics by lambda function name in Kibana?](https://discuss.elastic.co/t/how-can-i-sort-metrics-by-lambda-function-name-in-kibana/281897)
**Author:** [@zhaoyi0113](https://discuss.elastic.co/u/zhaoyi0113)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 3:56pm UTC](https://discuss.elastic.co/t/how-can-i-sort-metrics-by-lambda-function-name-in-kibana/281897 "2021-08-20T15:56:50Z")
I am using Kibana to view AWS metrics. In below diagram, it shows Throttles and ConcurrentExecution metrics from all lambdas in current region. There are 700 lambdas deployed and how can I order them by aws.dimensions.Fu… --- ## [Only show histogram when % is greater than a value](https://discuss.elastic.co/t/only-show-histogram-when-is-greater-than-a-value/281039)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 3:49pm UTC](https://discuss.elastic.co/t/only-show-histogram-when-is-greater-than-a-value/281039 "2021-08-20T15:49:39Z")
Hi, I have a histogram that show average total cpu usage over a number of hosts. This is broken down into 0-25%, 25-50%, 50-75%, 75-100% Is there a way to only show those hosts which have hit the 75-100% mark in the ti… --- ## [Tens of GB indexes deleted, no OS space reclaimed](https://discuss.elastic.co/t/tens-of-gb-indexes-deleted-no-os-space-reclaimed/281964)
**Author:** [@sz7443](https://discuss.elastic.co/u/sz7443)\ **Replies:** 4\ **Last updated:** [August 20, 2021, 3:48pm UTC](https://discuss.elastic.co/t/tens-of-gb-indexes-deleted-no-os-space-reclaimed/281964 "2021-08-20T15:48:00Z")
Hi, I have scouted locals forum for almost half a day but no relevant reply found. I am trying to introduce curator to our ES and I have deleted several 25GB indexes successfully. However, no OS space reclaimed after del… --- ## [Api downloading Excel file,need to process it using logstash and send data to Elasticsearch](https://discuss.elastic.co/t/api-downloading-excel-file-need-to-process-it-using-logstash-and-send-data-to-elasticsearch/282090)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 3:32pm UTC](https://discuss.elastic.co/t/api-downloading-excel-file-need-to-process-it-using-logstash-and-send-data-to-elasticsearch/282090 "2021-08-20T15:32:37Z")
Hi, I am using esign genie API which can download all folder reports as an Excel file. I need to fetch data in an excel file to elasticsearch. I checked the option for using logstash but excel needs to export to CSV. I… --- ## [Elasticsearch Engineer Training - Lab 4.1 - Missing Data](https://discuss.elastic.co/t/elasticsearch-engineer-training-lab-4-1-missing-data/282051)
**Author:** [@wild1145](https://discuss.elastic.co/u/wild1145)\ **Replies:** 3\ **Last updated:** [August 20, 2021, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-training-lab-4-1-missing-data/282051 "2021-08-20T15:30:56Z")
Hey folks, Hoping someone might be able to point me in the right direction, I'm working through the labs from the Engineer training and have noticed that the load\_webtraffic.sh file doesn't seem to actually be loading a… --- ## [Is it possible to create an application with kibana and using kibana for backend stuff like authentication and admin panel?](https://discuss.elastic.co/t/is-it-possible-to-create-an-application-with-kibana-and-using-kibana-for-backend-stuff-like-authentication-and-admin-panel/282089)
**Author:** [@houshmand1996](https://discuss.elastic.co/u/houshmand1996)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 3:26pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-an-application-with-kibana-and-using-kibana-for-backend-stuff-like-authentication-and-admin-panel/282089 "2021-08-20T15:26:19Z")
I want to use kibana as a backend framework for my application and use of it's features for admin panel is there a way to load up the application pages in first place and use of kibana as a admin panel and for management… --- ## [My multiline message shows only one line in Kibana Discover](https://discuss.elastic.co/t/my-multiline-message-shows-only-one-line-in-kibana-discover/281174)
**Author:** [@moonfair](https://discuss.elastic.co/u/moonfair)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 3:19pm UTC](https://discuss.elastic.co/t/my-multiline-message-shows-only-one-line-in-kibana-discover/281174 "2021-08-20T15:19:14Z")
I use filebeats multiline input to push a java exception log to elasticsearch. But when I look up them in my Kibana Discover view, they are just shown in a single line, which means it erased all LFs in my text. Can anyon… --- ## [ROC curve represented in Kibana](https://discuss.elastic.co/t/roc-curve-represented-in-kibana/281199)
**Author:** [@bponce](https://discuss.elastic.co/u/bponce)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 3:15pm UTC](https://discuss.elastic.co/t/roc-curve-represented-in-kibana/281199 "2021-08-20T15:15:25Z")
It's possible to represent a ROC curve in Kibana?. Points to be represented have the following structure: "ROC": { "x": \[ 0.0, 0.00002855674224684448, 0.00002855674224684448, . . 0.9908618424810097, 0.990861842… --- ## [Read Elastic snapshot data in azure blob storage](https://discuss.elastic.co/t/read-elastic-snapshot-data-in-azure-blob-storage/282082)
**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 1:36pm UTC](https://discuss.elastic.co/t/read-elastic-snapshot-data-in-azure-blob-storage/282082 "2021-08-20T13:36:21Z")
Hello Dear Elks, Hope you are doing good!! I have set a ILM policy to store logs to azure blob storage older than 30 days. Now how can I enable searching/reading logs in blob storage? I see the data in blob is not in r… --- ## [Problem witch search bar](https://discuss.elastic.co/t/problem-witch-search-bar/281405)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 3:08pm UTC](https://discuss.elastic.co/t/problem-witch-search-bar/281405 "2021-08-20T15:08:45Z")
I have problem with new role/user who have access to Dashboard's and Discover's, however is not able to search for this Dashboards/Discovers with top center serach bar in Kibana "Search Elastic". It works from admin user… --- ## [Sign kibana csr certificate](https://discuss.elastic.co/t/sign-kibana-csr-certificate/281537)
**Author:** [@naaviin](https://discuss.elastic.co/u/naaviin)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 2:51pm UTC](https://discuss.elastic.co/t/sign-kibana-csr-certificate/281537 "2021-08-20T14:51:35Z")
Hi friends , i have generated .key nd .csr file in kibana ./bin/elasticsearch-certutil csr -name kibana-server Please share me how to sign .csr file. I have my ca file with me. Please help --- ## [Second Y-axes](https://discuss.elastic.co/t/second-y-axes/281572)
**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 2:22pm UTC](https://discuss.elastic.co/t/second-y-axes/281572 "2021-08-20T14:22:28Z")
Hi everyone, I am looking to add metrics to my second y axis. I've already added a second y axis under the metrics and axes tab. How do I add the metrics I've added in my data tab the second y-axis created? Thank you! --- ## [Upgrading Kibana from 7.11 to 7.14](https://discuss.elastic.co/t/upgrading-kibana-from-7-11-to-7-14/281740)
**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 2:21pm UTC](https://discuss.elastic.co/t/upgrading-kibana-from-7-11-to-7-14/281740 "2021-08-20T14:21:16Z")
I'm trying to upgrade kibana from 7.11 to 7.14. It's on kubernetes. I have kibana deployed with 3 replicas. So after deploying, I can see that 1 pod is up & running whereas the other 2 shows below error. After deleting … --- ## [Kibana failing after upgrade from 6.8.6 to 7.9.2 Failed to transform document \[object Object\]](https://discuss.elastic.co/t/kibana-failing-after-upgrade-from-6-8-6-to-7-9-2-failed-to-transform-document-object-object/281592)
**Author:** [@tylers](https://discuss.elastic.co/u/tylers)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 2:20pm UTC](https://discuss.elastic.co/t/kibana-failing-after-upgrade-from-6-8-6-to-7-9-2-failed-to-transform-document-object-object/281592 "2021-08-20T14:20:11Z")
Hello, I'm having an issue when upgrading from elasticsearch 6.8.6 to 7.9.2. We have a very large number of Saved Objects and when going through the upgrade we're not able to proceed with the transformation of the sav… --- ## [Highlighting issue when combine multiword phrase search with Intervals](https://discuss.elastic.co/t/highlighting-issue-when-combine-multiword-phrase-search-with-intervals/282085)
**Author:** [@Yury-Stanevitch](https://discuss.elastic.co/u/Yury-Stanevitch)\ **Replies:** 0\ **Last updated:** [August 20, 2021, 1:53pm UTC](https://discuss.elastic.co/t/highlighting-issue-when-combine-multiword-phrase-search-with-intervals/282085 "2021-08-20T13:53:42Z")
Hello. I have query which works good from highlighting standpoint: POST index/\_search { "highlight": { "fields": { "attrText\*": { "number\_of\_fragments": 0, "type": "unified" } }, … --- ## [High Level indicator based on various metrics](https://discuss.elastic.co/t/high-level-indicator-based-on-various-metrics/281826)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 1:27pm UTC](https://discuss.elastic.co/t/high-level-indicator-based-on-various-metrics/281826 "2021-08-20T13:27:28Z")
I have a chart showing cpu usage for various hosts, file attached. I am looking to get a more high lever indicator, e.g. if, in the time period given, all hosts are in the 0-25% range then that would show as Green. … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=847) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=849)