# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=921 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 922 --- ## [Is moving kibana indices to hot node ok?](https://discuss.elastic.co/t/is-moving-kibana-indices-to-hot-node-ok/275305)
**Author:** [@roh](https://discuss.elastic.co/u/roh)\ **Replies:** 1\ **Last updated:** [June 9, 2021, 12:31am UTC](https://discuss.elastic.co/t/is-moving-kibana-indices-to-hot-node-ok/275305 "2021-06-09T00:31:09Z")
Hi all My team is using hot to cold tier architecture for recent projects. There was an interesting opinion about kibana internal system indices. One of my teammates thought that if kibana indices are moved to cold tie… --- ## [Error in Vega visual Kibana](https://discuss.elastic.co/t/error-in-vega-visual-kibana/274592)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 10:43pm UTC](https://discuss.elastic.co/t/error-in-vega-visual-kibana/274592 "2021-06-08T22:43:28Z")
Does anybody has any idea of "EsError" in Vega custom visualization in Kibana? What kind of elasticsearch error is this. I'm stuck with this error. Please help me resolving this issue! --- ## [Dashboard deployment process](https://discuss.elastic.co/t/dashboard-deployment-process/274926)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 10:41pm UTC](https://discuss.elastic.co/t/dashboard-deployment-process/274926 "2021-06-08T22:41:47Z")
Hello!!! please how i can define kibana dashboard deployment process? thank for suggestion in advance. --- ## [Cannot login to Kibana since few days](https://discuss.elastic.co/t/cannot-login-to-kibana-since-few-days/274753)
**Author:** [@Valentin\_Magnan](https://discuss.elastic.co/u/Valentin_Magnan)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 10:18pm UTC](https://discuss.elastic.co/t/cannot-login-to-kibana-since-few-days/274753 "2021-06-08T22:18:48Z")
Dear community, Since few days I cannot login to kibana anymore (through any users including elastic). Here are the Kibana's logs when I try to login: shwr - kibana | { "type": "log", "@timestamp": "2021-06-02… --- ## [Copy/Rename multiple field in the same field + adding multiples field to one field](https://discuss.elastic.co/t/copy-rename-multiple-field-in-the-same-field-adding-multiples-field-to-one-field/275264)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 4\ **Last updated:** [June 8, 2021, 10:07pm UTC](https://discuss.elastic.co/t/copy-rename-multiple-field-in-the-same-field-adding-multiples-field-to-one-field/275264 "2021-06-08T22:07:43Z")
Hello every body, I have two question about the mutate filter: The first one is about adding a0,a1 and a2 fiels that contain the process args to a same field \[process\]\[args\] (process.args=a0,a1,a2) how i can do it ? … --- ## [Search documents by unmapped fields for debugging](https://discuss.elastic.co/t/search-documents-by-unmapped-fields-for-debugging/275055)
**Author:** [@Metheny](https://discuss.elastic.co/u/Metheny)\ **Replies:** 3\ **Last updated:** [June 8, 2021, 10:07pm UTC](https://discuss.elastic.co/t/search-documents-by-unmapped-fields-for-debugging/275055 "2021-06-08T22:07:29Z")
We are using fixed (non dynamic) mapping in our indices in order to improve performance. The mapping contains a subset of our document fields, and the rest of the fields are unmapped. However, for debugging purposes we… --- ## [Using \_metadata from .net app in discover](https://discuss.elastic.co/t/using-metadata-from-net-app-in-discover/275131)
**Author:** [@madlopt](https://discuss.elastic.co/u/madlopt)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 9:21pm UTC](https://discuss.elastic.co/t/using-metadata-from-net-app-in-discover/275131 "2021-06-08T21:21:44Z")
Hi. I have .net apps with serilog. Serilog is configured from this doc. I am using FileBeat to send log to elasticsearch. I see \_metada.trace\_id and others \_metatda.\* fields in Kibana -\> Logs and can filter by them in L… --- ## [Change column headings for saved search or replicate in data table](https://discuss.elastic.co/t/change-column-headings-for-saved-search-or-replicate-in-data-table/274817)
**Author:** [@jteare](https://discuss.elastic.co/u/jteare)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 9:09pm UTC](https://discuss.elastic.co/t/change-column-headings-for-saved-search-or-replicate-in-data-table/274817 "2021-06-08T21:09:16Z")
Hi, I know this question has been asked before and I have read and attempted to reproduce the accepted answers but can't get any to work. I am using Kibana v 7.11.2. I would simply like to add a saved search (with some … --- ## [Help with Split Filter](https://discuss.elastic.co/t/help-with-split-filter/275339)
**Author:** [@pvxchain](https://discuss.elastic.co/u/pvxchain)\ **Replies:** 3\ **Last updated:** [June 8, 2021, 8:59pm UTC](https://discuss.elastic.co/t/help-with-split-filter/275339 "2021-06-08T20:59:08Z")
Hello I'm trying to create two events out of one so that the subsequent pipeline takes place in both. The event itself, before the split happens here: filter { if \[type\] == "pre-split" { mutate { replac… --- ## [How to hot change EUI distributed CSS file?](https://discuss.elastic.co/t/how-to-hot-change-eui-distributed-css-file/275000)
**Author:** [@danburi](https://discuss.elastic.co/u/danburi)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 8:40pm UTC](https://discuss.elastic.co/t/how-to-hot-change-eui-distributed-css-file/275000 "2021-06-08T20:40:52Z")
I have Kibana v7.10.2 on linux system. Kibana loads CSS resource http://localhost:5601/36136/bundles/kbn-ui-shared-deps/kbn-ui-shared-deps.v7.light.css the only relevant file can be found at: ./node\_modules/@kbn/ui-s… --- ## [Https://community.bitnami.com/t/problem-to-login-to-elk-stack-at-aws/49257/13](https://discuss.elastic.co/t/https-community-bitnami-com-t-problem-to-login-to-elk-stack-at-aws-49257-13/274782)
**Author:** [@rhino007US](https://discuss.elastic.co/u/rhino007US)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 8:39pm UTC](https://discuss.elastic.co/t/https-community-bitnami-com-t-problem-to-login-to-elk-stack-at-aws-49257-13/274782 "2021-06-08T20:39:28Z")
Hi, I have been trying to get 1 Elasticsearch Cluster Master, built on the Bitnami ELK Stack, and 2 data nodes, built on Bitnami's Elasticsearch AMI (AWS machine image) to join as a cluster for weeks. I posted link ab… --- ## [Non destructive way of clearing all indices](https://discuss.elastic.co/t/non-destructive-way-of-clearing-all-indices/275256)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 8:10pm UTC](https://discuss.elastic.co/t/non-destructive-way-of-clearing-all-indices/275256 "2021-06-08T20:10:52Z")
I have been using: curl -X DELETE "https://localhost:9200/\_all to delete all indices. I am doing this in a kubernetes ECK environment. It seems to break things though and kibana pod gets into trouble. Am I right in say… --- ## [Cannot link my title to permalink after adding result view](https://discuss.elastic.co/t/cannot-link-my-title-to-permalink-after-adding-result-view/275346)
**Author:** [@Sanjida](https://discuss.elastic.co/u/Sanjida)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 8:09pm UTC](https://discuss.elastic.co/t/cannot-link-my-title-to-permalink-after-adding-result-view/275346 "2021-06-08T20:09:50Z")
I am new at react.js and elastic search. I am trying to custom the UI of reference UI. But after adding the resultview in Results according to the video games tutorial the hyperlink added to the title disappears. I want … --- ## [Failed to run logstash with NotImplementedError](https://discuss.elastic.co/t/failed-to-run-logstash-with-notimplementederror/275238)
**Author:** [@tod-yangyd](https://discuss.elastic.co/u/tod-yangyd)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 8:08pm UTC](https://discuss.elastic.co/t/failed-to-run-logstash-with-notimplementederror/275238 "2021-06-08T20:08:41Z")
Errors when running logstash (solaris10 SPARCS version) java\_version : oracle jdk 1.8 I noticed that there was a reference to ubuntu's add "libc6-dev" on the Internet, but this does not apply to solaris. warning: thre… --- ## [Kibana Visualization](https://discuss.elastic.co/t/kibana-visualization/275244)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 8:05pm UTC](https://discuss.elastic.co/t/kibana-visualization/275244 "2021-06-08T20:05:08Z")
Hi, I create a pie chart visualization in kibana. And create a range slider to select range on a numeric field value. Field value range from 1 to 500 in index. But range slider on same field showing only from 14 to 84. … --- ## [Error to set custom date pattern and change value of @timestamp](https://discuss.elastic.co/t/error-to-set-custom-date-pattern-and-change-value-of-timestamp/275170)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 3\ **Last updated:** [June 8, 2021, 7:52pm UTC](https://discuss.elastic.co/t/error-to-set-custom-date-pattern-and-change-value-of-timestamp/275170 "2021-06-08T19:52:11Z")
Hello! I've tried to use the following code to change the value of @timestamp but I couldn't do it.. input { pipeline { address =\> crontab } } filter { grok { match =\> { "message" =\> "(?\%{MONTH} %{MO… --- ## [Why are the Kibana REST APIs marked as experimental?](https://discuss.elastic.co/t/why-are-the-kibana-rest-apis-marked-as-experimental/275254)
**Author:** [@boskjoett](https://discuss.elastic.co/u/boskjoett)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 7:48pm UTC](https://discuss.elastic.co/t/why-are-the-kibana-rest-apis-marked-as-experimental/275254 "2021-06-08T19:48:36Z")
When I look at the Kibana 7.13.1 REST API documentation, for example then all the API endpoints are marked \[Experimental\]. Why is the Kibana REST API experimental? Do you not recommend customers to use them? Also on … --- ## [Can Kibana create a pie chart and table where one of the variables is from the past](https://discuss.elastic.co/t/can-kibana-create-a-pie-chart-and-table-where-one-of-the-variables-is-from-the-past/275209)
**Author:** [@kelvins](https://discuss.elastic.co/u/kelvins)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 7:26pm UTC](https://discuss.elastic.co/t/can-kibana-create-a-pie-chart-and-table-where-one-of-the-variables-is-from-the-past/275209 "2021-06-08T19:26:04Z")
Hello. Not sure how to best describe it in the title. Basically, I will be reading a log file. That log file contains log entries when people uplift a file from the server. I am needing to produce both a gauge, and a… --- ## [Kibana table combining aggregations](https://discuss.elastic.co/t/kibana-table-combining-aggregations/274993)
**Author:** [@sfenman](https://discuss.elastic.co/u/sfenman)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 6:48pm UTC](https://discuss.elastic.co/t/kibana-table-combining-aggregations/274993 "2021-06-08T18:48:45Z")
Hello, Using Kibana, I have created a table visualization like this: Url | Name | Count | Duration Now, based on the name field, I want to aggregate some other metrics from different documents and add them to this tab… --- ## [Logstash не удаляет вложенные поля из json](https://discuss.elastic.co/t/logstash-json/275113)
**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\ **Replies:** 9\ **Last updated:** [June 8, 2021, 6:40pm UTC](https://discuss.elastic.co/t/logstash-json/275113 "2021-06-08T18:40:46Z")
Привет. Возникла вопрос по работе logstash. Хочу сохранить в ES ответ nginx. Ответ представляет из себя json. Натравливаю на него json плагин и получаю структуру полей в ES. json { source =\> "response\_body" … --- ## [Filtering logs in logstash](https://discuss.elastic.co/t/filtering-logs-in-logstash/275245)
**Author:** [@Zubaer\_Ahmad](https://discuss.elastic.co/u/Zubaer_Ahmad)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 5:02pm UTC](https://discuss.elastic.co/t/filtering-logs-in-logstash/275245 "2021-06-08T17:02:38Z")
I am trying to filter the following log in logstash but couldn't make it work. Can anyone help me on this. thanks debug | 2021-06-08 12:02:50 | +3ms | SCHEDULER | REQUEST\_ID: ff23e465-7d36-42ea-9a2b-2ba734dde41b | IP\_AD… --- ## [Logstash clone filter use event field as clones parameter](https://discuss.elastic.co/t/logstash-clone-filter-use-event-field-as-clones-parameter/275250)
**Author:** [@ebourlon](https://discuss.elastic.co/u/ebourlon)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 5:02pm UTC](https://discuss.elastic.co/t/logstash-clone-filter-use-event-field-as-clones-parameter/275250 "2021-06-08T17:02:01Z")
Hello, I made some tests with the clone filter in logstash. In my opinion there is no way to make the "clones" parameter dynamic. Does someone know how this can be done? Looking at the filter code I think it might be c… --- ## [Query configuration returns to many hits](https://discuss.elastic.co/t/query-configuration-returns-to-many-hits/275325)
**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 4:53pm UTC](https://discuss.elastic.co/t/query-configuration-returns-to-many-hits/275325 "2021-06-08T16:53:30Z")
Hi, i have 1000 index-documents with following structure: // #1 { "\_index": "my\_index\_2008", "\_type": "\_doc", "\_version": 1, "\_seq\_no": 1, "\_primary\_term": 1, "found": true, "\_source": { "meta": { ... }, … --- ## [Split JSON into several events](https://discuss.elastic.co/t/split-json-into-several-events/275212)
**Author:** [@rmartinez.rv](https://discuss.elastic.co/u/rmartinez.rv)\ **Replies:** 4\ **Last updated:** [June 8, 2021, 4:17pm UTC](https://discuss.elastic.co/t/split-json-into-several-events/275212 "2021-06-08T16:17:12Z")
Hi. I'm trying to split into several events a JSON input. I have something like this: { "Domains": \[ { "name": "location", "hash\_size": 4096, "AORs": \[ {… --- ## [Maintaining Multiple Logstash Servers](https://discuss.elastic.co/t/maintaining-multiple-logstash-servers/275315)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 2\ **Last updated:** [June 8, 2021, 3:54pm UTC](https://discuss.elastic.co/t/maintaining-multiple-logstash-servers/275315 "2021-06-08T15:54:07Z")
I would like to set up multiple logstash servers for load balancing as mentioned here. Is there a best practice for maintaining the multiple pipeline files (one for each instance of logstash) besides just configuring one… --- ## [How to transfer index from one elastic server to another using kibana ui](https://discuss.elastic.co/t/how-to-transfer-index-from-one-elastic-server-to-another-using-kibana-ui/275239)
**Author:** [@1ac727ff300829bca0fa](https://discuss.elastic.co/u/1ac727ff300829bca0fa)\ **Replies:** 1\ **Last updated:** [June 8, 2021, 3:16pm UTC](https://discuss.elastic.co/t/how-to-transfer-index-from-one-elastic-server-to-another-using-kibana-ui/275239 "2021-06-08T15:16:01Z")
How to transfer index from one elastic server to another using kibana ui --- ## [Force token filter to output just one token](https://discuss.elastic.co/t/force-token-filter-to-output-just-one-token/275304)
**Author:** [@grad1](https://discuss.elastic.co/u/grad1)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 1:17pm UTC](https://discuss.elastic.co/t/force-token-filter-to-output-just-one-token/275304 "2021-06-08T13:17:01Z")
Hi, I am working on the devlopment of the search solution based on Elasticsearch for Polish language. Initially, I used the recommended analysis-stempel plugin to stem Polish words but after some experiments I found it … --- ## [Extra fields created for event](https://discuss.elastic.co/t/extra-fields-created-for-event/275295)
**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 12:18pm UTC](https://discuss.elastic.co/t/extra-fields-created-for-event/275295 "2021-06-08T12:18:50Z")
Hello We have this strange situation where logs that have certain fields like source.ip,source.port etc(see attached) get extra fields created eg. event.module:iis OR nginx will show fields named suricata.eve.dest\_ip … --- ## [How to convert the output into json in watcher body](https://discuss.elastic.co/t/how-to-convert-the-output-into-json-in-watcher-body/275293)
**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\ **Replies:** 0\ **Last updated:** [June 8, 2021, 11:44am UTC](https://discuss.elastic.co/t/how-to-convert-the-output-into-json-in-watcher-body/275293 "2021-06-08T11:44:23Z")
Hi, I want to convert the output into JSON format in the watcher body. I tried {{#toJson}}. But I couldn't get success. Please guide me through how to resolve this issue? "body": """{{#toJson}}{{#ctx.payload.hits.hits}}… --- ## [FATAL Error: Port 5601 is already in use. Another instance of Kibana may be running!](https://discuss.elastic.co/t/fatal-error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/274981)
**Author:** [@guxupeta](https://discuss.elastic.co/u/guxupeta)\ **Replies:** 6\ **Last updated:** [June 8, 2021, 11:39am UTC](https://discuss.elastic.co/t/fatal-error-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/274981 "2021-06-08T11:39:16Z")
Hello guys I'm having problems running start kibana every time I try to start give does tap of errors FATAL Error: Port 5601 is already in use. Another instance of Kibana may be running! I'm sending an image [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=920) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=922)