# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=928 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 929 --- ## [Kibana textbox instead of dropdown](https://discuss.elastic.co/t/kibana-textbox-instead-of-dropdown/274751)
**Author:** [@Adrian3](https://discuss.elastic.co/u/Adrian3)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 12:44pm UTC](https://discuss.elastic.co/t/kibana-textbox-instead-of-dropdown/274751 "2021-06-02T12:44:31Z")
To create a new Kibana visualization I select "Controls" from the "New Visualization" section: Viewing the "Controls" section: An option does not appear to exist to add a "text field" , all field types are dropdo… --- ## [Http\_pollar input is not working with the certificate](https://discuss.elastic.co/t/http-pollar-input-is-not-working-with-the-certificate/274748)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 12:26pm UTC](https://discuss.elastic.co/t/http-pollar-input-is-not-working-with-the-certificate/274748 "2021-06-02T12:26:43Z")
Hi We are using http\_poller to query elastic in logstash input with the selfsigned certificate. but not receieving any result and not prompting any error in the logstash. tls is enabled at elastic. when i run the same qu… --- ## [Merge data on field bases](https://discuss.elastic.co/t/merge-data-on-field-bases/274745)
**Author:** [@Abdoul\_Kande](https://discuss.elastic.co/u/Abdoul_Kande)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 12:12pm UTC](https://discuss.elastic.co/t/merge-data-on-field-bases/274745 "2021-06-02T12:12:25Z")
Hello, I would like to do the join of two indexes based on an id column. can i have an example ? --- ## [\_template vs \_index\_template](https://discuss.elastic.co/t/template-vs-index-template/274730)
**Author:** [@Jordi\_Cabre1](https://discuss.elastic.co/u/Jordi_Cabre1)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 12:10pm UTC](https://discuss.elastic.co/t/template-vs-index-template/274730 "2021-06-02T12:10:09Z")
I've just realized that ES has a \_/\_template and a \_/\_index\_template. What are they for? I was using code: PutIndexTemplateRequest ngramTemplate = new PutIndexTemplateRequest("ngram-template") .patterns(Arrays.asList… --- ## [Query for email address within a text field](https://discuss.elastic.co/t/query-for-email-address-within-a-text-field/274742)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 11:39am UTC](https://discuss.elastic.co/t/query-for-email-address-within-a-text-field/274742 "2021-06-02T11:39:39Z")
Hello, I'm trying to query my index that contains text field with an email address. As of now, if query for a specific domain (eg gmail), like below and it gives me the results: GET index\*/\_search { "query": { "… --- ## [Detection rule: Failed login attempts](https://discuss.elastic.co/t/detection-rule-failed-login-attempts/274590)
**Author:** [@bnk](https://discuss.elastic.co/u/bnk)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 10:51am UTC](https://discuss.elastic.co/t/detection-rule-failed-login-attempts/274590 "2021-06-02T10:51:35Z")
Hi, I've created my own detection rule for employees failed login attempts. It does work but when signal comes to Security -\> Detection dashboard, it do not show user.name or host.name. This is screen shot of my rule: … --- ## [Supports Canvas Linechart the feature seriesAgg and Group this by Terms](https://discuss.elastic.co/t/supports-canvas-linechart-the-feature-seriesagg-and-group-this-by-terms/274650)
**Author:** [@miri](https://discuss.elastic.co/u/miri)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 9:28am UTC](https://discuss.elastic.co/t/supports-canvas-linechart-the-feature-seriesagg-and-group-this-by-terms/274650 "2021-06-02T09:28:29Z")
Is it possible to use in Canvas Linechart the Aggregation seriesAgg and Group this by Terms like available in normal TSVB Visualisation? Example: There are some servers sending status information to elasticsearch: … --- ## [Best way to backup Kibana Dashboards](https://discuss.elastic.co/t/best-way-to-backup-kibana-dashboards/274718)
**Author:** [@kibanaquery](https://discuss.elastic.co/u/kibanaquery)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 9:27am UTC](https://discuss.elastic.co/t/best-way-to-backup-kibana-dashboards/274718 "2021-06-02T09:27:44Z")
Hi, Just wondered what the current suggestion is to back up Dashboards, the indices seem straightforward but they dont include Dashboards? I'm looking for an automated way to get them backed up rather than anything too… --- ## [Unable to bind Syslog port](https://discuss.elastic.co/t/unable-to-bind-syslog-port/274728)
**Author:** [@Sputnick](https://discuss.elastic.co/u/Sputnick)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 9:23am UTC](https://discuss.elastic.co/t/unable-to-bind-syslog-port/274728 "2021-06-02T09:23:23Z")
Hello, I am on Ubuntu 20.04 running Logstash as a collector for syslog messages from the rest of my network. I have configured java with elevated privileges but Logstash is unable to bind UDP port 514. This is a simila… --- ## [Error in Kibana 7.12](https://discuss.elastic.co/t/error-in-kibana-7-12/274605)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 12\ **Last updated:** [June 2, 2021, 9:18am UTC](https://discuss.elastic.co/t/error-in-kibana-7-12/274605 "2021-06-02T09:18:22Z")
Hi all! I've a problem on kibana that is running on my local machine.I would like to create a simple dashboard with data but in order to obtian the single data value in time I use Altair and jupyter combination in order … --- ## [Kibana Saved objects](https://discuss.elastic.co/t/kibana-saved-objects/274717)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 8:53am UTC](https://discuss.elastic.co/t/kibana-saved-objects/274717 "2021-06-02T08:53:24Z")
Hi Currently Im using below to export dashbaords curl -X POST "localhost:5601/api/saved\_objects/\_export" -H 'kbn-xsrf: true' -H 'Content-Type: application/json' -d' { "type": "dashboard" }' \> /tmp/dashboard.ndjson 2\>… --- ## [Kibana visualise](https://discuss.elastic.co/t/kibana-visualise/274529)
**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\ **Replies:** 3\ **Last updated:** [June 2, 2021, 8:43am UTC](https://discuss.elastic.co/t/kibana-visualise/274529 "2021-06-02T08:43:34Z")
Hello, I am trying to create a visualization to represent the evolution of a field x in time so X axes timestamp and Y axes the field , but can't find how to represent it, for y axes there is only aggregations that ca… --- ## [Kibana Speedometer](https://discuss.elastic.co/t/kibana-speedometer/274317)
**Author:** [@Rachitha](https://discuss.elastic.co/u/Rachitha)\ **Replies:** 5\ **Last updated:** [June 2, 2021, 8:29am UTC](https://discuss.elastic.co/t/kibana-speedometer/274317 "2021-06-02T08:29:27Z")
Can we have a needle inside the Gauge pointing to the value? Is there any way to add the needle in the gauge. I am using the latest version now (i.e, Kibana 7.12.1) --- ## [Autodiscovery setting in Metricbeat](https://discuss.elastic.co/t/autodiscovery-setting-in-metricbeat/273732)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 5\ **Last updated:** [June 2, 2021, 7:54am UTC](https://discuss.elastic.co/t/autodiscovery-setting-in-metricbeat/273732 "2021-06-02T07:54:27Z")
I was going through this nice and comprehensive presentation by @pebrc At the point in time where the link points to, the presenter makes a configuration change to the Elasticsearch resource definition so that the label… --- ## [Kibana & Cloudfront conversion tracking](https://discuss.elastic.co/t/kibana-cloudfront-conversion-tracking/274492)
**Author:** [@GCuccureddu](https://discuss.elastic.co/u/GCuccureddu)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 7:47am UTC](https://discuss.elastic.co/t/kibana-cloudfront-conversion-tracking/274492 "2021-06-02T07:47:01Z")
Hi community, I am new to Kibana and my perspective is from business/marketing expertise. We are using AWS Cloudfront website data and I would like to understand if Kibana can bring insight to typical funnels (how peop… --- ## [Heatmap sorting working in Visualisation Editor but not in Dashboard](https://discuss.elastic.co/t/heatmap-sorting-working-in-visualisation-editor-but-not-in-dashboard/273814)
**Author:** [@mkostros](https://discuss.elastic.co/u/mkostros)\ **Replies:** 11\ **Last updated:** [June 2, 2021, 7:37am UTC](https://discuss.elastic.co/t/heatmap-sorting-working-in-visualisation-editor-but-not-in-dashboard/273814 "2021-06-02T07:37:25Z")
Hello We want to create event dashboard, which would shown, how many log events came in Day of Week and Hour of day. We have created dynamic fields for DayOfWeek and HourOfDay (number format). Which are then used in he… --- ## [TSVB - visualizing the difference of two datasets](https://discuss.elastic.co/t/tsvb-visualizing-the-difference-of-two-datasets/273922)
**Author:** [@LL\_FED](https://discuss.elastic.co/u/LL_FED)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 7:21am UTC](https://discuss.elastic.co/t/tsvb-visualizing-the-difference-of-two-datasets/273922 "2021-06-02T07:21:02Z")
Hello Elastic-Community, I get data like this: Document 1: Data.name: Total pieces, Data.value: 60, timestamp: 12:00 Document 2: Data.name: Good pieces, Data.value: 58, timestamp: 12:00 Now I want to visualize … --- ## [Unable to complete saved object migrations for the \[.kibana\] index. RequestAbortedError: The content length (823769731) is bigger than the maximum allowed string](https://discuss.elastic.co/t/unable-to-complete-saved-object-migrations-for-the-kibana-index-requestabortederror-the-content-length-823769731-is-bigger-than-the-maximum-allowed-string/274408)
**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\ **Replies:** 3\ **Last updated:** [June 2, 2021, 6:47am UTC](https://discuss.elastic.co/t/unable-to-complete-saved-object-migrations-for-the-kibana-index-requestabortederror-the-content-length-823769731-is-bigger-than-the-maximum-allowed-string/274408 "2021-06-02T06:47:34Z")
kibana | {"type":"log","@timestamp":"2021-05-29T18:16:24+00:00","tags":\["info","savedobjects-service"\],"pid":6,"message":"\[.kibana\_task\_manager\] Migration completed after 9330ms"} kibana | {"type":"lo… --- ## [How to edit the type of an existing fiend in an index](https://discuss.elastic.co/t/how-to-edit-the-type-of-an-existing-fiend-in-an-index/274694)
**Author:** [@sunoj\_vijayan](https://discuss.elastic.co/u/sunoj_vijayan)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 4:06am UTC](https://discuss.elastic.co/t/how-to-edit-the-type-of-an-existing-fiend-in-an-index/274694 "2021-06-02T04:06:04Z")
Is there any way to edit an existing type. I have a field "calculated\_weight" which is currently a string. I want it to be long so that i can calculate the sum. I tried this PUT /mm-logs-\* { "mappings": { "proper… --- ## [Logstash not showing generated output](https://discuss.elastic.co/t/logstash-not-showing-generated-output/274677)
**Author:** [@Ashwani\_Shukla](https://discuss.elastic.co/u/Ashwani_Shukla)\ **Replies:** 2\ **Last updated:** [June 2, 2021, 3:50am UTC](https://discuss.elastic.co/t/logstash-not-showing-generated-output/274677 "2021-06-02T03:50:50Z")
The pipeline file name is newstash.conf input{ file{ path =\> \[ "/etc/logstash/sample.txt" \] } } output { stdout{ } } The sample.txt file has some string only. The output is l… --- ## [How to join two index](https://discuss.elastic.co/t/how-to-join-two-index/274572)
**Author:** [@jium](https://discuss.elastic.co/u/jium)\ **Replies:** 3\ **Last updated:** [June 2, 2021, 2:21am UTC](https://discuss.elastic.co/t/how-to-join-two-index/274572 "2021-06-02T02:21:34Z")
Hi, I want to join two indexes or merge them into one index. One index is being collected from the apache log and the other from mysql. I have to join the data through common key in two indexes and visualize it thro… --- ## [Logstashのs3-sns-sqs input pluguinを使用した場合のlogstashで保持するキュー情報](https://discuss.elastic.co/t/logstash-s3-sns-sqs-input-pluguin-logstash/274284)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 2:04am UTC](https://discuss.elastic.co/t/logstash-s3-sns-sqs-input-pluguin-logstash/274284 "2021-06-02T02:04:02Z")
logstashのinput pluguinとして、S3-SNS-SQS pluginを使用しているのですが、その場合logstashのキュー情報として保持する内容としては何になりますでしょうか。(S3内にあるファイル内容をメモリに持つイメージなのか、SQSから取得したキュー情報をメモリにもつイメージなのか) --- ## [「Cloudwatch input plugin」によるログの読込み状況保持/引継ぎについて](https://discuss.elastic.co/t/cloudwatch-input-plugin/272670)
**Author:** [@Nishisaka](https://discuss.elastic.co/u/Nishisaka)\ **Replies:** 1\ **Last updated:** [June 2, 2021, 1:52am UTC](https://discuss.elastic.co/t/cloudwatch-input-plugin/272670 "2021-06-02T01:52:20Z")
AWSのCloudWatchメトリクスを収集するため、 EC2インスタンス(Linux)にLogstash(7.11)をインストールし、 「Cloudwatch input plugin」を利用してメトリクスの収集を行おうとしております。 現状、Logstashサーバ2台を現用/待機構成(コールドスタンバイ)としており、 障害時に待機系に切替わった際は、待機系にはフェールオーバ以降に発生したメトリクスから収集することになります。 … --- ## [Broad Permissions on Operator in Restricted mode](https://discuss.elastic.co/t/broad-permissions-on-operator-in-restricted-mode/274690)
**Author:** [@TheRealDwright](https://discuss.elastic.co/u/TheRealDwright)\ **Replies:** 0\ **Last updated:** [June 2, 2021, 12:37am UTC](https://discuss.elastic.co/t/broad-permissions-on-operator-in-restricted-mode/274690 "2021-06-02T00:37:53Z")
I've recently set up ECK using the restricted installation and I wanted to ask if anyone has validated the very broad permissions provided to the operator in the operator namespace are necessary before filing a GitHub is… --- ## [Correct way to use the mutate rename filter](https://discuss.elastic.co/t/correct-way-to-use-the-mutate-rename-filter/274683)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 4\ **Last updated:** [June 2, 2021, 12:23am UTC](https://discuss.elastic.co/t/correct-way-to-use-the-mutate-rename-filter/274683 "2021-06-02T00:23:25Z")
Hello, this is weird, For the last couple of years I've been using the mutate rename filter in the following way, with one rename option for every field inside the same mutate block. mutate { rename =\> { "field1" =\>… --- ## [Using Kibana to detect DDOS attacks for Analysis - Home Lab](https://discuss.elastic.co/t/using-kibana-to-detect-ddos-attacks-for-analysis-home-lab/274363)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 3\ **Last updated:** [June 1, 2021, 10:17pm UTC](https://discuss.elastic.co/t/using-kibana-to-detect-ddos-attacks-for-analysis-home-lab/274363 "2021-06-01T22:17:24Z")
Hello everyone, i'm new to Infosec and very new to ELK stack. I am running a home lab inside a VM. I've downloaded a sample DDos dataset from kaggle.com and ingested that data into elk stack, but not really sure what to… --- ## [Is it ok to have a more then one tie breaker node for less then couple of hours](https://discuss.elastic.co/t/is-it-ok-to-have-a-more-then-one-tie-breaker-node-for-less-then-couple-of-hours/274685)
**Author:** [@Sanjay1](https://discuss.elastic.co/u/Sanjay1)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 9:10pm UTC](https://discuss.elastic.co/t/is-it-ok-to-have-a-more-then-one-tie-breaker-node-for-less-then-couple-of-hours/274685 "2021-06-01T21:10:09Z")
We like to add 2nd tie breaker node along with our existing tiebreaker node. Once the new tie breaker node start working then like to decommission the existing tiebreaker node. For some time less the couple of hours it… --- ## [X of Y shards failed in 7.12](https://discuss.elastic.co/t/x-of-y-shards-failed-in-7-12/271052)
**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\ **Replies:** 4\ **Last updated:** [June 1, 2021, 8:27pm UTC](https://discuss.elastic.co/t/x-of-y-shards-failed-in-7-12/271052 "2021-06-01T20:27:42Z")
Hello there, after upgrade Elastic Stack from 7.10 to 7.12 a lot of dasboards, visualization and searches in discover shows the error message X of Y shards failed. In most cases, reason is that the specific field is not… --- ## [Metricbeat to logstash problem](https://discuss.elastic.co/t/metricbeat-to-logstash-problem/274672)
**Author:** [@farciarz121](https://discuss.elastic.co/u/farciarz121)\ **Replies:** 4\ **Last updated:** [June 1, 2021, 7:58pm UTC](https://discuss.elastic.co/t/metricbeat-to-logstash-problem/274672 "2021-06-01T19:58:59Z")
Instruction provided on the elastic website show how to configure meatricbeats to monitor stack. My setup however is slightly different. I have metricbeats insalled on VM, it passes logs to logstash and logstash talks t… --- ## [Sort by array values](https://discuss.elastic.co/t/sort-by-array-values/274681)
**Author:** [@romina](https://discuss.elastic.co/u/romina)\ **Replies:** 0\ **Last updated:** [June 1, 2021, 7:29pm UTC](https://discuss.elastic.co/t/sort-by-array-values/274681 "2021-06-01T19:29:36Z")
Hi! I need help with this use case Documents { "values": \["value1", "value3"\], "price": 3 } { "values": \["value1", "value2", "value3"\], "price": 1 } { "values": \["value3"\], … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=927) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=929)