# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=903 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 904 --- ## [Elastic-agent unhealthy](https://discuss.elastic.co/t/elastic-agent-unhealthy/276976)
**Author:** [@Xtrem](https://discuss.elastic.co/u/Xtrem)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 8:02pm UTC](https://discuss.elastic.co/t/elastic-agent-unhealthy/276976 "2021-06-24T20:02:21Z")
Hi, I am currently testing version 7.12 of Elasticsearch and Kibana and have installed the Elastic-agent on two linux server and one Windows server. All the servers are "Unhealthy" but no datareaches elasticsearch. Whe… --- ## [More than one database in a single Elastic](https://discuss.elastic.co/t/more-than-one-database-in-a-single-elastic/276963)
**Author:** [@Glau\_Martins](https://discuss.elastic.co/u/Glau_Martins)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 7:47pm UTC](https://discuss.elastic.co/t/more-than-one-database-in-a-single-elastic/276963 "2021-06-24T19:47:27Z")
Hi Guys! I need to know if I can have more than one database in a single Elastic. Can someone help me please? tks --- ## [Can I create an iframe of a Kibana dashboard without the configuration bar on the left?](https://discuss.elastic.co/t/can-i-create-an-iframe-of-a-kibana-dashboard-without-the-configuration-bar-on-the-left/276711)
**Author:** [@raylight](https://discuss.elastic.co/u/raylight)\ **Replies:** 4\ **Last updated:** [June 24, 2021, 7:35pm UTC](https://discuss.elastic.co/t/can-i-create-an-iframe-of-a-kibana-dashboard-without-the-configuration-bar-on-the-left/276711 "2021-06-24T19:35:57Z")
I know I can embed Kibana on my webpage following the procedure described on the documentation here. However, I've realized some differences when I create an iframe for visualizations and when I create an iframe for a da… --- ## [Elastic security](https://discuss.elastic.co/t/elastic-security/276968)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 5:33pm UTC](https://discuss.elastic.co/t/elastic-security/276968 "2021-06-24T17:33:18Z")
I have Elastic and Kibana installed on server. I tried to set up the whole stuff properly so I am going according the documentation. I cant believe it is SOOOOOOO complicated to run elastic. I have a lot of services run… --- ## [Alerting with Kibana & Elasticsearch on the same machine](https://discuss.elastic.co/t/alerting-with-kibana-elasticsearch-on-the-same-machine/276966)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 5:14pm UTC](https://discuss.elastic.co/t/alerting-with-kibana-elasticsearch-on-the-same-machine/276966 "2021-06-24T17:14:21Z")
I have a quick question for the community. I am wanting to enable Alerting on our on-prem Elastic Stack. I have set the value of xpack.encryptedSavedObjects.encryptionKey in the Kibana.yml file and now I am being prompt… --- ## [Typical Disk threshold](https://discuss.elastic.co/t/typical-disk-threshold/276960)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 4:27pm UTC](https://discuss.elastic.co/t/typical-disk-threshold/276960 "2021-06-24T16:27:34Z")
We are planning deploy ES as single node cluster. We are planning to use only flood\_stage configuration aslow and high watermark will have no impact. I know the default flood stage is set to 95% but would like to know … --- ## [Grok parser on amount of characters](https://discuss.elastic.co/t/grok-parser-on-amount-of-characters/276924)
**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 2:40pm UTC](https://discuss.elastic.co/t/grok-parser-on-amount-of-characters/276924 "2021-06-24T14:40:33Z")
Hi, I want to grok match on a sting where the first part contains 3 letters. For example: BUR-TEST-TEST-TEST I want to check that the first part contains 3 charachters (in this case BUR). is that possible with grok m… --- ## [Elasticsearch vs logstash ingest](https://discuss.elastic.co/t/elasticsearch-vs-logstash-ingest/276947)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 2:32pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-logstash-ingest/276947 "2021-06-24T14:32:40Z")
I have been using logstash for a number of years now with a pretty big pipeline. The majority of the systems we monitor are via winlogbeats. We are using elastic cloud and hosting logstash ourselves. With the introduc… --- ## [Help for mapping a field based on a log file path location](https://discuss.elastic.co/t/help-for-mapping-a-field-based-on-a-log-file-path-location/276777)
**Author:** [@sakrayaami](https://discuss.elastic.co/u/sakrayaami)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 2:24pm UTC](https://discuss.elastic.co/t/help-for-mapping-a-field-based-on-a-log-file-path-location/276777 "2021-06-24T14:24:47Z")
Hello, I'm trying to do something very simple I think but I fail to understand how it can be done. So I ask for your help, my setup is the following: Filebeat sends IIS logs through Logstash towards Elastic. Having al… --- ## [Can I upload csv IPs to elastic, and then use it in Grafana](https://discuss.elastic.co/t/can-i-upload-csv-ips-to-elastic-and-then-use-it-in-grafana/276362)
**Author:** [@unico](https://discuss.elastic.co/u/unico)\ **Replies:** 5\ **Last updated:** [June 24, 2021, 12:54pm UTC](https://discuss.elastic.co/t/can-i-upload-csv-ips-to-elastic-and-then-use-it-in-grafana/276362 "2021-06-24T12:54:58Z")
Hello! I have CSV file with some datasets like that: PAIS; IP/PUERTO; CONEXIONES AT,Austria; 52.97.172.13:143; 6 AT,Austria; 52.97.174.21:143; 1 AT,Austria; 52.97.182.189:143; 7004 BR,Brazil; 179.151.1.251:143; 1 BR,Br… --- ## [Component Templates and Nested Components](https://discuss.elastic.co/t/component-templates-and-nested-components/274381)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 1:57pm UTC](https://discuss.elastic.co/t/component-templates-and-nested-components/274381 "2021-06-24T13:57:55Z")
I have been playing around with Component Templates, and I absolutely love it! Much easier to centrally manage components of an index template, rather than manually update all templates using the same components. Questi… --- ## [16 Indices that I have not created](https://discuss.elastic.co/t/16-indices-that-i-have-not-created/276905)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 1:39pm UTC](https://discuss.elastic.co/t/16-indices-that-i-have-not-created/276905 "2021-06-24T13:39:52Z")
I have enabled monitoring and I see 16 indices, but I have not created any of them. Do I need them? How do I get rid of them? Below are the indices, .apm-agent-configuration .apm-custom-link .fleet-policies-7 .ki… --- ## [High number of simultaneous searches make the requests response time bigger](https://discuss.elastic.co/t/high-number-of-simultaneous-searches-make-the-requests-response-time-bigger/276927)
**Author:** [@ZoosterCo](https://discuss.elastic.co/u/ZoosterCo)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 1:16pm UTC](https://discuss.elastic.co/t/high-number-of-simultaneous-searches-make-the-requests-response-time-bigger/276927 "2021-06-24T13:16:54Z")
Hello! We have 3 warm zones with 27 indices, each with 2 shards. Each zone has up to 2.2vCPU and 8 GB RAM. Those contain billions of documents and each index has approximately 50 GB of data. We use default AWS on the ES… --- ## [Kibana server is not ready yet ubuntu](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-ubuntu/276866)
**Author:** [@Nur\_Amin\_Sifat](https://discuss.elastic.co/u/Nur_Amin_Sifat)\ **Replies:** 3\ **Last updated:** [June 24, 2021, 1:33pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-ubuntu/276866 "2021-06-24T13:33:28Z")
Browser show this kibana server is not ready yet ubuntu --- ## [Fetch data from multiple indices in near realtime](https://discuss.elastic.co/t/fetch-data-from-multiple-indices-in-near-realtime/276903)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 1:33pm UTC](https://discuss.elastic.co/t/fetch-data-from-multiple-indices-in-near-realtime/276903 "2021-06-24T13:33:24Z")
Hi, I have multiple indices for an application. eg. infra logs in infra-\*, apache logs in filebeat-\*, uptime in heartbeat-\* , applicaion in apm-\* etc. So want to create a dashboard that will have boxes for each applic… --- ## [Unokowns characters](https://discuss.elastic.co/t/unokowns-characters/276932)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 1:29pm UTC](https://discuss.elastic.co/t/unokowns-characters/276932 "2021-06-24T13:29:54Z")
Hi everyone. The file I'm reading with filebeat has special character that create problem with logstash Here an example (I know that the image are annoying but is the only way to show you the problem) There is a wa… --- ## [Filebeat + docker swarm ошибка парсинга](https://discuss.elastic.co/t/filebeat-docker-swarm/274056)
**Author:** [@Alexandr\_Tarnogradsc](https://discuss.elastic.co/u/Alexandr_Tarnogradsc)\ **Replies:** 8\ **Last updated:** [June 24, 2021, 1:18pm UTC](https://discuss.elastic.co/t/filebeat-docker-swarm/274056 "2021-06-24T13:18:53Z")
Добрый день. Во время парсина логов контейнерв docker swarm возникает ошибка: ERROR \[reader\_json\] readjson/json.go:65 Error decoding JSON: invalid character '\\x06' looking for beginning of value настройки file… --- ## [Can't filter by date range when in updated stack](https://discuss.elastic.co/t/cant-filter-by-date-range-when-in-updated-stack/276301)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 12:52pm UTC](https://discuss.elastic.co/t/cant-filter-by-date-range-when-in-updated-stack/276301 "2021-06-24T12:52:06Z")
Hi everyone, I'm new to elastic and I'm trying to migrate the ELK 5.8 to 7.11, but I'm having trouble on making the queries (also migrated) to work. I've made some changes in the Indices (doping \_type when mapping for … --- ## [Strange High CPU usage related to licensing](https://discuss.elastic.co/t/strange-high-cpu-usage-related-to-licensing/276676)
**Author:** [@elnapo](https://discuss.elastic.co/u/elnapo)\ **Replies:** 6\ **Last updated:** [June 24, 2021, 12:44pm UTC](https://discuss.elastic.co/t/strange-high-cpu-usage-related-to-licensing/276676 "2021-06-24T12:44:04Z")
Encountered a strange Cluster behavior on a central logging cluster where about 50 filebeats are ingesting data. It seems that most of the CPU is used for security operations. Here is what GET \_nodes/hot\_threads is say… --- ## [Disptached index, is it possible to filter across indexes by another index value?](https://discuss.elastic.co/t/disptached-index-is-it-possible-to-filter-across-indexes-by-another-index-value/276920)
**Author:** [@Hugo\_Martin](https://discuss.elastic.co/u/Hugo_Martin)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 11:24am UTC](https://discuss.elastic.co/t/disptached-index-is-it-possible-to-filter-across-indexes-by-another-index-value/276920 "2021-06-24T11:24:46Z")
Hi everyone, I'm pretty new to ELK and I have few questions about indexes relations. Some context: we use MongoDB as database to interract with microservices, and use monstache to sync Mongo and ES, it works perfectly.… --- ## [Nesting some other path in a subaggregation inside another nested path](https://discuss.elastic.co/t/nesting-some-other-path-in-a-subaggregation-inside-another-nested-path/276883)
**Author:** [@broy](https://discuss.elastic.co/u/broy)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 6:54am UTC](https://discuss.elastic.co/t/nesting-some-other-path-in-a-subaggregation-inside-another-nested-path/276883 "2021-06-24T06:54:14Z")
Minimal schema { "mappings": { "\_doc": { "dynamic": "false", "\_source": { "includes": \[ \] }, "properties": { "\_\_collection": { "type": "keyword"… --- ## [Unique count number of deviations from average score in Kibana Maps](https://discuss.elastic.co/t/unique-count-number-of-deviations-from-average-score-in-kibana-maps/276906)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 11:13am UTC](https://discuss.elastic.co/t/unique-count-number-of-deviations-from-average-score-in-kibana-maps/276906 "2021-06-24T11:13:23Z")
Hey, I'm trying to build a map (using the 'Maps' feature) which will represent the number of unique device type that are deviating in a certain measurement from the average of this measurement in a certain area. If the… --- ## [Is it possible to different time filters for different bucket in a TSVB visualization](https://discuss.elastic.co/t/is-it-possible-to-different-time-filters-for-different-bucket-in-a-tsvb-visualization/276913)
**Author:** [@Alesora](https://discuss.elastic.co/u/Alesora)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 10:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-different-time-filters-for-different-bucket-in-a-tsvb-visualization/276913 "2021-06-24T10:29:02Z")
Hi, I would like to have a gauge in kibana with the turnover increasing over the month, and the middle of the gauge has to be the average turnover. Here is what I've done, it only shows the ratio, not the real values b… --- ## [Graph logs values and not syntetic metrics about logs](https://discuss.elastic.co/t/graph-logs-values-and-not-syntetic-metrics-about-logs/276910)
**Author:** [@PatrikM](https://discuss.elastic.co/u/PatrikM)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 10:22am UTC](https://discuss.elastic.co/t/graph-logs-values-and-not-syntetic-metrics-about-logs/276910 "2021-06-24T10:22:00Z")
I have a database that has some metrics I would like to chart in elasticsearch. I managed to send those metrics to elasticsearch and I'm able to view them in the kibana discover as logs. I'm looking on how I could be … --- ## [Rollback Pipeline changes in kibana](https://discuss.elastic.co/t/rollback-pipeline-changes-in-kibana/276897)
**Author:** [@Changra](https://discuss.elastic.co/u/Changra)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 9:04am UTC](https://discuss.elastic.co/t/rollback-pipeline-changes-in-kibana/276897 "2021-06-24T09:04:56Z")
Hi Team, I need a small help can anyone help me if I made any changes in a pipeline in kibana and saved it but now if i want to revert those changes back is there any way out. Regards, Neha Changra --- ## [Logstash-plugin-s3 Error: Net::OpenTimeout](https://discuss.elastic.co/t/logstash-plugin-s3-error-net-opentimeout/276890)
**Author:** [@xiaoloutingfengyu](https://discuss.elastic.co/u/xiaoloutingfengyu)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 8:27am UTC](https://discuss.elastic.co/t/logstash-plugin-s3-error-net-opentimeout/276890 "2021-06-24T08:27:23Z")
\[2021-05-26T10:19:43,686\]\[ERROR\]\[logstash.javapipeline \]\[main\]\[9a2225c4d3e20a639cd009e56ba032fdbc47fc0df0134b087544ef4ed11a3aea\] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:main Plugin… --- ## [Logstash problem with images](https://discuss.elastic.co/t/logstash-problem-with-images/276011)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 11\ **Last updated:** [June 24, 2021, 7:29am UTC](https://discuss.elastic.co/t/logstash-problem-with-images/276011 "2021-06-24T07:29:30Z")
Hi evrey one, I'am new with elasticsearch and logstash. The problem: I want to use logstash to obtain all image of a file system structure, (I don't need the immage i only need the informetion (Like: path, name)) but w… --- ## [Elasticsearch mapping with nested objects](https://discuss.elastic.co/t/elasticsearch-mapping-with-nested-objects/276888)
**Author:** [@mskocabay](https://discuss.elastic.co/u/mskocabay)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 7:30am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-with-nested-objects/276888 "2021-06-24T07:30:18Z")
It is my mapping. product\_base is nested object also manufacturer is child of product\_base and nested object. When i create my doc, if product\_base count more than 1 , seems product\_base.0, product\_base.1 . However i co… --- ## [Logstash file: how to read first line only](https://discuss.elastic.co/t/logstash-file-how-to-read-first-line-only/276122)
**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\ **Replies:** 5\ **Last updated:** [June 24, 2021, 7:25am UTC](https://discuss.elastic.co/t/logstash-file-how-to-read-first-line-only/276122 "2021-06-24T07:25:53Z")
Hi evreyone. I wanted to know if it's possible to read only the first line of a file and exit (after send information to elastisearch) Thanks in advance --- ## [Histogram There are too many series defined (n). The configured maximum is 50](https://discuss.elastic.co/t/histogram-there-are-too-many-series-defined-n-the-configured-maximum-is-50/276853)
**Author:** [@Dgoodwin](https://discuss.elastic.co/u/Dgoodwin)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 7:15am UTC](https://discuss.elastic.co/t/histogram-there-are-too-many-series-defined-n-the-configured-maximum-is-50/276853 "2021-06-24T07:15:06Z")
Is there a way to show 50 or change the configured maximum to include more than 50? Can we show the top 50? Currently, nothing shows when there are more the 50 series. [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=902) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=904)