# \#none

**URL:** https://discuss.elastic.co/tag/none.md?page=1568

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1569

---

## [Logstash halted with error: Connection reset by peer](https://discuss.elastic.co/t/logstash-halted-with-error-connection-reset-by-peer/223713)

<div class="topic-metadata">

**Author:** [@norup](https://discuss.elastic.co/u/norup)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 9:09am UTC](https://discuss.elastic.co/t/logstash-halted-with-error-connection-reset-by-peer/223713 "2020-03-17T09:09:52Z")

</div>

My logstash stopped over the weekend for some reason. I currently only have 1 beat. winlogbeat, shipping its logs to it, but if it breaks every time some1 restarts their PC or something, then thats obviously going to be …

---

## [Audit Logging in kibana](https://discuss.elastic.co/t/audit-logging-in-kibana/223354)

<div class="topic-metadata">

**Author:** [@owais](https://discuss.elastic.co/u/owais)\
**Replies:** 5\
**Last updated:** [March 17, 2020, 9:00am UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354 "2020-03-17T09:00:22Z")

</div>

Hi everyone, We want to monitor the users logging by the Audit logging feature. Can someone tell how to do that Audit logging in kibana?

---

## [Add elasticsearch node multiple machine](https://discuss.elastic.co/t/add-elasticsearch-node-multiple-machine/223443)

<div class="topic-metadata">

**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\
**Replies:** 16\
**Last updated:** [March 17, 2020, 8:40am UTC](https://discuss.elastic.co/t/add-elasticsearch-node-multiple-machine/223443 "2020-03-17T08:40:39Z")

</div>

Hi, im currently doing some poc about add node to elasticsearch cluster with multiple machine. The master node should be x.x.x.246 and the data node that i want to add is x.x.x.99. Running the latest elasticsearch 7.6. I…

---

## [How to parse a csv file which has some field containing seprator (comma) as-values](https://discuss.elastic.co/t/how-to-parse-a-csv-file-which-has-some-field-containing-seprator-comma-as-values/223708)

<div class="topic-metadata">

**Author:** [@Shahid\_Mustafa](https://discuss.elastic.co/u/Shahid_Mustafa)\
**Replies:** 4\
**Last updated:** [March 17, 2020, 8:26am UTC](https://discuss.elastic.co/t/how-to-parse-a-csv-file-which-has-some-field-containing-seprator-comma-as-values/223708 "2020-03-17T08:26:20Z")

</div>

sample message - 111,222,333,444,555,val1in6th,val2in6th,777 The sixth column contains a value consisting of commas (val1in6th,val2in6th is a sample value of 6th column). When I use a simple csv filter this message is …

---

## [Filter out buckets in a date\_histogram aggregated query](https://discuss.elastic.co/t/filter-out-buckets-in-a-date-histogram-aggregated-query/223869)

<div class="topic-metadata">

**Author:** [@ajacob](https://discuss.elastic.co/u/ajacob)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 8:02am UTC](https://discuss.elastic.co/t/filter-out-buckets-in-a-date-histogram-aggregated-query/223869 "2020-03-17T08:02:35Z")

</div>

Hello ! I have documents with a field that can store multiple dates like this: { "documentId": 481012, "creationDate": "2016-06-02T17:30:34.232Z", "activationDates": \[ "2016-06-02T17:30:34.232Z", "2016-06-03T17:…

---

## [Filters not disppearing when removed](https://discuss.elastic.co/t/filters-not-disppearing-when-removed/223517)

<div class="topic-metadata">

**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\
**Replies:** 6\
**Last updated:** [March 17, 2020, 7:57am UTC](https://discuss.elastic.co/t/filters-not-disppearing-when-removed/223517 "2020-03-17T07:57:24Z")

</div>

I have set my Kibana to pin all filters by default. But now I can't seem to get rid of them again. I have multiple linked dashboards, and the following screenshots show my way through them and how the filters suddenly r…

---

## [Ingest node 登録データと複数項目の突合せについて](https://discuss.elastic.co/t/ingest-node/223859)

<div class="topic-metadata">

**Author:** [@harue](https://discuss.elastic.co/u/harue)\
**Replies:** 0\
**Last updated:** [March 17, 2020, 7:21am UTC](https://discuss.elastic.co/t/ingest-node/223859 "2020-03-17T07:21:48Z")

</div>

お世話になります。 下記質問の投稿が説明不足であったため、再度投稿させて頂きます。 ▼実現したいこと ingest nodeにて、インプットデータとindexA(下記参照)のデータを突き合わせて、突合せ結果をindexBに登録 indexAの例 ID,IP 100,10.169.1.1 インプットデータとindexAとの突合せ条件 ・IDが"100"かつIPが"10.169.1.1"の場合、indexBに"true"を…

---

## [How to install and configure ELK stack on Docker](https://discuss.elastic.co/t/how-to-install-and-configure-elk-stack-on-docker/223851)

<div class="topic-metadata">

**Author:** [@Pathshala\_Gopi](https://discuss.elastic.co/u/Pathshala_Gopi)\
**Replies:** 7\
**Last updated:** [March 17, 2020, 7:16am UTC](https://discuss.elastic.co/t/how-to-install-and-configure-elk-stack-on-docker/223851 "2020-03-17T07:16:56Z")

</div>

Hello everyone, I tried a lot to install ELK on docker container but i am not able to do this can,can anyone guide me on this?? I followed lot of blogs and tutorials but no use can anyone help me on this topic.

---

## [Need to search log based on timestamp and uri using query](https://discuss.elastic.co/t/need-to-search-log-based-on-timestamp-and-uri-using-query/223765)

<div class="topic-metadata">

**Author:** [@VigneshVengatesan](https://discuss.elastic.co/u/VigneshVengatesan)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 6:57am UTC](https://discuss.elastic.co/t/need-to-search-log-based-on-timestamp-and-uri-using-query/223765 "2020-03-17T06:57:38Z")

</div>

I have tried so manu ways but i didn't get response. Please help with the below query. timestamp: "March 16th 2020, 02:04:16.265" AND uri: "/register" @timestamp: "March 16th 2020, 02:04:16.265" AND uri: "/register" @…

---

## [Make a plugin for option as "Export as CSV" in the menu option for the widgets made using discover tab when displayed in dashboard](https://discuss.elastic.co/t/make-a-plugin-for-option-as-export-as-csv-in-the-menu-option-for-the-widgets-made-using-discover-tab-when-displayed-in-dashboard/221675)

<div class="topic-metadata">

**Author:** [@Nishant\_Prajapati](https://discuss.elastic.co/u/Nishant_Prajapati)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 6:49am UTC](https://discuss.elastic.co/t/make-a-plugin-for-option-as-export-as-csv-in-the-menu-option-for-the-widgets-made-using-discover-tab-when-displayed-in-dashboard/221675 "2020-03-17T06:49:12Z")

</div>

Hello All, As you know that x-pack give different option like reporting where we can export the data as per the documents in ES. can I develop a plugin which will provide me a same functionality ??? Very much needed fu…

---

## [Kibana custom plugin with saved object](https://discuss.elastic.co/t/kibana-custom-plugin-with-saved-object/219727)

<div class="topic-metadata">

**Author:** [@nrt.krishna](https://discuss.elastic.co/u/nrt.krishna)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 6:21am UTC](https://discuss.elastic.co/t/kibana-custom-plugin-with-saved-object/219727 "2020-03-17T06:21:20Z")

</div>

Hi, I am a newbie and trying to develop kibana custom plugin. My requirements is to put a button in navbar. When user clicks on it a poup with a form opens and user enters data. I need to restrict the form fields based …

---

## [Plugin to get selected columns from Saved search Dashboard panel](https://discuss.elastic.co/t/plugin-to-get-selected-columns-from-saved-search-dashboard-panel/221566)

<div class="topic-metadata">

**Author:** [@ranitg](https://discuss.elastic.co/u/ranitg)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 6:14am UTC](https://discuss.elastic.co/t/plugin-to-get-selected-columns-from-saved-search-dashboard-panel/221566 "2020-03-17T06:14:34Z")

</div>

Hello, I wanted to know if there is a way to get the selected columns from a Saved search Dashboard panel. How is this done using a plugin? Can someone share an example code? Using Kibana 7.5. Thanks

---

## [Kibana Data sorting alphabeticallyy](https://discuss.elastic.co/t/kibana-data-sorting-alphabeticallyy/223849)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 6:11am UTC](https://discuss.elastic.co/t/kibana-data-sorting-alphabeticallyy/223849 "2020-03-17T06:11:43Z")

</div>

Data not sorted in kibana in ascending way like if i have category in which 10 category is showing it would be sorted alphabetically wise please check the attached screenshot what i want is that it start with Bank custo…

---

## [Delete dashboard and all of its contents through kibana API](https://discuss.elastic.co/t/delete-dashboard-and-all-of-its-contents-through-kibana-api/221815)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 5:45am UTC](https://discuss.elastic.co/t/delete-dashboard-and-all-of-its-contents-through-kibana-api/221815 "2020-03-17T05:45:26Z")

</div>

Hi, Is there any way to delete a dashboard and all of its contents (index, visualizations etc) through kibana API? Also is there any way to delete all saved objects through kibana (or Elasticsearch) API? Thank you in …

---

## [Kibana Dashboard - Admin Access](https://discuss.elastic.co/t/kibana-dashboard-admin-access/221748)

<div class="topic-metadata">

**Author:** [@Karthick\_Subramaniam](https://discuss.elastic.co/u/Karthick_Subramaniam)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 5:41am UTC](https://discuss.elastic.co/t/kibana-dashboard-admin-access/221748 "2020-03-17T05:41:04Z")

</div>

Hi, We have an Elastic Search / Kibana instance newly deployed. User "admin" has the role "all\_access" ---\> which corresponds to Backend Role : "admin". So ideally when we login with admin account we should have all p…

---

## [Why kibana is making two indices](https://discuss.elastic.co/t/why-kibana-is-making-two-indices/221812)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 4:50am UTC](https://discuss.elastic.co/t/why-kibana-is-making-two-indices/221812 "2020-03-17T04:50:30Z")

</div>

Before running kibana instance i deleted all the indices. What is see is kibana is making 2 indices, earlier it was used to create only one .kibana

---

## [How to see what changed in a file](https://discuss.elastic.co/t/how-to-see-what-changed-in-a-file/221789)

<div class="topic-metadata">

**Author:** [@sroseman](https://discuss.elastic.co/u/sroseman)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 4:36am UTC](https://discuss.elastic.co/t/how-to-see-what-changed-in-a-file/221789 "2020-03-17T04:36:11Z")

</div>

I want to see what changed in /var/www/html. How would I do that? I have auditbeat running and have the file\_integrity module on and have /var/www/html in the paths. Thanks

---

## [Help need with geo\_poligon query](https://discuss.elastic.co/t/help-need-with-geo-poligon-query/223440)

<div class="topic-metadata">

**Author:** [@vadim-shadrin](https://discuss.elastic.co/u/vadim-shadrin)\
**Replies:** 5\
**Last updated:** [March 17, 2020, 4:30am UTC](https://discuss.elastic.co/t/help-need-with-geo-poligon-query/223440 "2020-03-17T04:30:09Z")

</div>

My index mapping is { "events" : { "mappings" : { "properties" : { "accepted" : { "type" : "nested" }, "address" : { "type" : "text" }, "available\_for" : { "properties" : { "key" : { "type" : "long" }, "v…

---

## [Software Security Process](https://discuss.elastic.co/t/software-security-process/223837)

<div class="topic-metadata">

**Author:** [@mhapner](https://discuss.elastic.co/u/mhapner)\
**Replies:** 2\
**Last updated:** [March 17, 2020, 3:27am UTC](https://discuss.elastic.co/t/software-security-process/223837 "2020-03-17T03:27:11Z")

</div>

Does Elasticsearch have a document/link that describes the steps an Elasticsearch release goes through (source scanning, penetration testing, etc) to detect software vulnerabilities in its code and the code of its depend…

---

## [How to share a dashboard publicly?](https://discuss.elastic.co/t/how-to-share-a-dashboard-publicly/223669)

<div class="topic-metadata">

**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 2:43am UTC](https://discuss.elastic.co/t/how-to-share-a-dashboard-publicly/223669 "2020-03-17T02:43:10Z")

</div>

I'm using latest kibana 7.6 and elasticsearch with basic license of xpack. I wonder how could I publicly share a dashboard for read only access with no credentials prompt. Thanks

---

## [How to upload Cisco log file, output from Rsyslog too Kibana](https://discuss.elastic.co/t/how-to-upload-cisco-log-file-output-from-rsyslog-too-kibana/223637)

<div class="topic-metadata">

**Author:** [@Elastic6](https://discuss.elastic.co/u/Elastic6)\
**Replies:** 0\
**Last updated:** [March 14, 2020, 9:34pm UTC](https://discuss.elastic.co/t/how-to-upload-cisco-log-file-output-from-rsyslog-too-kibana/223637 "2020-03-14T21:34:28Z")

</div>

Hello, I am using a Ubuntu VM to host the entire ELK stack, I am using Rsyslog to listen for Cisco IOS logs and have successfully managed to output these logs to a file. I am trying to upload the file too Kibana but it …

---

## [Field value does not come up when creating a filter with exists clause](https://discuss.elastic.co/t/field-value-does-not-come-up-when-creating-a-filter-with-exists-clause/223685)

<div class="topic-metadata">

**Author:** [@stantanev](https://discuss.elastic.co/u/stantanev)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 2:36am UTC](https://discuss.elastic.co/t/field-value-does-not-come-up-when-creating-a-filter-with-exists-clause/223685 "2020-03-17T02:36:28Z")

</div>

Hi Everyone, I am new to Kibana and i have encountered a problem that i do not know how to resolve. I have a text field (named fault\_payload) that is generated by Greedydata in a logstash pipeline. This field produces…

---

## [Index template overwritten with default setup.template.overwrite false](https://discuss.elastic.co/t/index-template-overwritten-with-default-setup-template-overwrite-false/223684)

<div class="topic-metadata">

**Author:** [@MagicNotElastic](https://discuss.elastic.co/u/MagicNotElastic)\
**Replies:** 0\
**Last updated:** [March 16, 2020, 4:34am UTC](https://discuss.elastic.co/t/index-template-overwritten-with-default-setup-template-overwrite-false/223684 "2020-03-16T04:34:08Z")

</div>

in escloud I've got some index templates with optimized configuration, yet everytime they are being overwritten, logs confirms it: \[instance-0000000011\] adding template \[winlogbeat-7.5.2-blabla\] for index patterns \[win…

---

## [Unable to install wazhu app on kibana on Ubuntu 18 LTS](https://discuss.elastic.co/t/unable-to-install-wazhu-app-on-kibana-on-ubuntu-18-lts/221522)

<div class="topic-metadata">

**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 1:36am UTC](https://discuss.elastic.co/t/unable-to-install-wazhu-app-on-kibana-on-ubuntu-18-lts/221522 "2020-03-17T01:36:29Z")

</div>

After setting up everything, i tried to install the kibana plugin for wazuh Wazuh Version: 3.11.4 Kibana Version: 7.6.0 So i tried the following command sudo -u kibana /usr/share/kibana/bin/kibana-plugin install http…

---

## [Integrated screenshot in visu](https://discuss.elastic.co/t/integrated-screenshot-in-visu/221721)

<div class="topic-metadata">

**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\
**Replies:** 1\
**Last updated:** [March 17, 2020, 1:30am UTC](https://discuss.elastic.co/t/integrated-screenshot-in-visu/221721 "2020-03-17T01:30:37Z")

</div>

Hi, my question is about integrated screen shot in a visu kibana. in detail : is it possible to insert a screenshot in a visu without loading the jpeg file on server ? And naturally, how and in which visu type ? than…

---

## [FieldFormat plugin for Kibana 7.6](https://discuss.elastic.co/t/fieldformat-plugin-for-kibana-7-6/222177)

<div class="topic-metadata">

**Author:** [@jdd1](https://discuss.elastic.co/u/jdd1)\
**Replies:** 5\
**Last updated:** [March 16, 2020, 11:18pm UTC](https://discuss.elastic.co/t/fieldformat-plugin-for-kibana-7-6/222177 "2020-03-16T23:18:29Z")

</div>

According to the migration notes, it appears FieldFormats (ui/registry/field\_formats) has been migrated to data.fieldFormats. However, it does not look like the FieldFormatsRegistryProvider has been migrated. Is it poss…

---

## [Status= 78/config Transport SSL must be enabled](https://discuss.elastic.co/t/status-78-config-transport-ssl-must-be-enabled/222181)

<div class="topic-metadata">

**Author:** [@snehid](https://discuss.elastic.co/u/snehid)\
**Replies:** 5\
**Last updated:** [March 16, 2020, 9:58pm UTC](https://discuss.elastic.co/t/status-78-config-transport-ssl-must-be-enabled/222181 "2020-03-16T21:58:30Z")

</div>

Failed to start Elasticsearch daemon in CentOS8 Error exit-code Status 78/config pls help

---

## [License and nodes](https://discuss.elastic.co/t/license-and-nodes/223820)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [March 16, 2020, 9:08pm UTC](https://discuss.elastic.co/t/license-and-nodes/223820 "2020-03-16T21:08:44Z")

</div>

I was reading on reddit that you buy licenses for individual nodes, so that means that if I have a docker cluster of three master nodes, and I have platinium licenses for only 2 nodes, my cluster will still have his li…

---

## [Interested in Multi-Project Testing Suite for GSoC 2020](https://discuss.elastic.co/t/interested-in-multi-project-testing-suite-for-gsoc-2020/223816)

<div class="topic-metadata">

**Author:** [@PeterSenpai](https://discuss.elastic.co/u/PeterSenpai)\
**Replies:** 1\
**Last updated:** [March 16, 2020, 8:57pm UTC](https://discuss.elastic.co/t/interested-in-multi-project-testing-suite-for-gsoc-2020/223816 "2020-03-16T20:57:53Z")

</div>

Hi all, My name is Peter (SHIYI) Tao. I am interested in the Muti-Project Testing Suite project that listed on GSoC 2020. I already signed up and share my proposal draft through GSoC website. I have PR for up recently …

---

## [Have an Control-Option List filter out what is NOT the selected value](https://discuss.elastic.co/t/have-an-control-option-list-filter-out-what-is-not-the-selected-value/223817)

<div class="topic-metadata">

**Author:** [@jameson94](https://discuss.elastic.co/u/jameson94)\
**Replies:** 1\
**Last updated:** [March 16, 2020, 8:07pm UTC](https://discuss.elastic.co/t/have-an-control-option-list-filter-out-what-is-not-the-selected-value/223817 "2020-03-16T20:07:03Z")

</div>

Hi! I'm attempting to make life easier in a workstation compliance dashboard, we're looking to select an OS version and have the page display the percentage of all values that are NOT at that version. HI cannot find a w…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1567)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1569)
