# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1771 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1772 --- ## [Y-Axis Using Decimal Numbers When Data Is Always Whole Numbers](https://discuss.elastic.co/t/y-axis-using-decimal-numbers-when-data-is-always-whole-numbers/206859)
**Author:** [@Belai\_Lencho](https://discuss.elastic.co/u/Belai_Lencho)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 9:06pm UTC](https://discuss.elastic.co/t/y-axis-using-decimal-numbers-when-data-is-always-whole-numbers/206859 "2019-11-19T21:06:41Z")
Hello, I have seen some previous discussion regarding this issue, but for our use case, we are using one Kibana graph, and then applying a filter programmatically to further limit the data set. The Y Axis is just a count… --- ## [How to import Nginx Dashboards](https://discuss.elastic.co/t/how-to-import-nginx-dashboards/208389)
**Author:** [@fjareta](https://discuss.elastic.co/u/fjareta)\ **Replies:** 4\ **Last updated:** [November 19, 2019, 8:34pm UTC](https://discuss.elastic.co/t/how-to-import-nginx-dashboards/208389 "2019-11-19T20:34:03Z")
Hi guys! My ELK is running on container and I had to redo the containers because of problems. Today i solved this however Kibana shows no more the Dashboards Nginx from Kibana. Someone knows how to import this dashboa… --- ## [Unable to connect to azure sql database](https://discuss.elastic.co/t/unable-to-connect-to-azure-sql-database/208565)
**Author:** [@WalterLeff](https://discuss.elastic.co/u/WalterLeff)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 8:19pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-azure-sql-database/208565 "2019-11-19T20:19:41Z")
Hi i'm new to logstash and trying to import data from azure sql db. However i'm getting an error when trying to connect with the database: ELK stack : 7.4.2 Conf file: input { jdbc { jdbc\_connection\_string =\> "jdb… --- ## [Custom analyzer don't match with ASCII folding filter values](https://discuss.elastic.co/t/custom-analyzer-dont-match-with-ascii-folding-filter-values/208576)
**Author:** [@faruk](https://discuss.elastic.co/u/faruk)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 8:15pm UTC](https://discuss.elastic.co/t/custom-analyzer-dont-match-with-ascii-folding-filter-values/208576 "2019-11-19T20:15:21Z")
I'm using a custom rebuilt turkish analyzer like this: "analysis": { "filter":{ "turkish\_lowercase": { "type": "lowercase", "language": "turkish" }, "turkish\_sto… --- ## [Error for too many documents, API says we are still below the limit](https://discuss.elastic.co/t/error-for-too-many-documents-api-says-we-are-still-below-the-limit/208575)
**Author:** [@holgr](https://discuss.elastic.co/u/holgr)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 8:08pm UTC](https://discuss.elastic.co/t/error-for-too-many-documents-api-says-we-are-still-below-the-limit/208575 "2019-11-19T20:08:05Z")
While indexing new documents we've recently started getting errors for having too many (java.lang.IllegalArgumentException: number of documents in the index cannot exceed 2147483519). We are aware of this limit, but loo… --- ## [Obtaining \`now\` on a kibana visualization](https://discuss.elastic.co/t/obtaining-now-on-a-kibana-visualization/208511)
**Author:** [@jmartori](https://discuss.elastic.co/u/jmartori)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 7:04pm UTC](https://discuss.elastic.co/t/obtaining-now-on-a-kibana-visualization/208511 "2019-11-19T19:04:54Z")
We have our messages with a field timestamp, and I'd like to have a plot to view the difference from now to the max(timestamp). This way we can know if we are ingesting properly and how long has it been seen we did. We … --- ## [Unable to configure Index Lifecycle Management (ILM) with Logstash Elasticsearch output](https://discuss.elastic.co/t/unable-to-configure-index-lifecycle-management-ilm-with-logstash-elasticsearch-output/208564)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 7:01pm UTC](https://discuss.elastic.co/t/unable-to-configure-index-lifecycle-management-ilm-with-logstash-elasticsearch-output/208564 "2019-11-19T19:01:37Z")
I'm simply trying to get ILM to work at the moment with Logstash, Elasticsearch, and Filebeat. Or any other beat. This is my elasticsearch output block: output { elasticsearch { hosts =\> \["localhost:9200"\] … --- ## [Logstash monitoring: pipeline identification](https://discuss.elastic.co/t/logstash-monitoring-pipeline-identification/207300)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [November 19, 2019, 6:59pm UTC](https://discuss.elastic.co/t/logstash-monitoring-pipeline-identification/207300 "2019-11-19T18:59:34Z")
Hi, I am running multiple logstash instances in kubernetes. In elastic's monitoring I see same pipeline once per node: My idea is to see in the overview panel all identical pipelines of all nodes to be aggregated. … --- ## [Unable to ingest logs on remote Elasticsearch server](https://discuss.elastic.co/t/unable-to-ingest-logs-on-remote-elasticsearch-server/208554)
**Author:** [@twelsh37](https://discuss.elastic.co/u/twelsh37)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 5:45pm UTC](https://discuss.elastic.co/t/unable-to-ingest-logs-on-remote-elasticsearch-server/208554 "2019-11-19T17:45:27Z")
Hi All, First time post so please be gentle. I am pretty new to ELK but not to Linux. I am running: Server A - Remote Server filebeat v 6.8.4 OS Ubuntu 18.04 Server B - ELK Server Elastic Search 6.8.4 OS Ubuntu… --- ## [Max file descriptors \[4096\] for elasticsearch process is too low - Running as a service](https://discuss.elastic.co/t/max-file-descriptors-4096-for-elasticsearch-process-is-too-low-running-as-a-service/208238)
**Author:** [@mauriciothomsen](https://discuss.elastic.co/u/mauriciothomsen)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 6:30pm UTC](https://discuss.elastic.co/t/max-file-descriptors-4096-for-elasticsearch-process-is-too-low-running-as-a-service/208238 "2019-11-19T18:30:49Z")
Hello All, Instead of run elasticsearch as a command everytime I start the machine, I decided to switch as a service. An old issue related to the max file descriptors came back but this time I could not make work when t… --- ## [Index Lifecycle Error- Check rollover ready](https://discuss.elastic.co/t/index-lifecycle-error-check-rollover-ready/208556)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 6:04pm UTC](https://discuss.elastic.co/t/index-lifecycle-error-check-rollover-ready/208556 "2019-11-19T18:04:44Z")
After I ran these queries, my filebeat index isn't collecting data on discover and gives me following error- PUT filebeat-7.4.0-2019.11.08-000001/\_settings { "index": { "blocks": { "read\_only\_allow\_dele… --- ## [Load JSON Schema to Elastic Search](https://discuss.elastic.co/t/load-json-schema-to-elastic-search/208382)
**Author:** [@Rao\_Waqas\_Akram](https://discuss.elastic.co/u/Rao_Waqas_Akram)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 5:32pm UTC](https://discuss.elastic.co/t/load-json-schema-to-elastic-search/208382 "2019-11-19T17:32:41Z")
I am working with Elastic Search v 5.6.16 . I want to provide the JSON schema to the ES and than load the data as per this schema to ES and get back result as List. Please help out how to proceed with this --- ## [Change The Maps theme color in dark theme](https://discuss.elastic.co/t/change-the-maps-theme-color-in-dark-theme/208538)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 4:55pm UTC](https://discuss.elastic.co/t/change-the-maps-theme-color-in-dark-theme/208538 "2019-11-19T16:55:45Z")
hello guys , lately i switched to dark theme in kibana , so the map color has become dark , is there a way to change it back to normal without changing the theme back ?? thanks Kibana Version 7.4.0 --- ## [Canvas - risk factor time series](https://discuss.elastic.co/t/canvas-risk-factor-time-series/208528)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 4:52pm UTC](https://discuss.elastic.co/t/canvas-risk-factor-time-series/208528 "2019-11-19T16:52:30Z")
HI there, Am trying to create a new timeseries canvas visualization with timelion filters | timelion query=".es(index=nessus-\*, timefield='@timestamp', metric='count:risk\_factor.keyword', split='risk\_factor.keyword:1… --- ## [What is this added "field" thing?](https://discuss.elastic.co/t/what-is-this-added-field-thing/208349)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 7\ **Last updated:** [November 19, 2019, 4:32pm UTC](https://discuss.elastic.co/t/what-is-this-added-field-thing/208349 "2019-11-19T16:32:37Z")
Greetings. This is probably a simple question. I'm creating records that look like this: { "\_index": "metrics\_daily\_summary", "\_type": "\_doc", "\_id": "E36Bbm4B8gCymL1PmIcS", "\_version": 1, "\_score": 0, "\_s… --- ## [Logstash Syntax :: Add a new field... which is the product of other fields?](https://discuss.elastic.co/t/logstash-syntax-add-a-new-field-which-is-the-product-of-other-fields/208369)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 4:42pm UTC](https://discuss.elastic.co/t/logstash-syntax-add-a-new-field-which-is-the-product-of-other-fields/208369 "2019-11-19T16:42:04Z")
Hello Lords of Logstash, In my data, I need to add a new field that multiplies the integer values of two other fields and a constant. In other words, if I have this: FieldA FieldB ================ 1 5 2… --- ## [onDestroy() doesn't work for kibana canvas](https://discuss.elastic.co/t/ondestroy-doesnt-work-for-kibana-canvas/208449)
**Author:** [@Nordask1](https://discuss.elastic.co/u/Nordask1)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 4:29pm UTC](https://discuss.elastic.co/t/ondestroy-doesnt-work-for-kibana-canvas/208449 "2019-11-19T16:29:07Z")
Hello. I've created simple plugin for canvas. Kibana version 7.3. Something like this: const browserFunctions = \[ () =\> ({ name: 'myPlugin', fn(data, args) { return { type: 'render', as: 'myPlugin', value: {data… --- ## [APM Server -\> AWS Elasticsearch Service: "cannot retrieve the elasticsearch license: unauthorized access, could not connect to the xpack endpoint, verify your credentials"](https://discuss.elastic.co/t/apm-server-aws-elasticsearch-service-cannot-retrieve-the-elasticsearch-license-unauthorized-access-could-not-connect-to-the-xpack-endpoint-verify-your-credentials/207759)
**Author:** [@hickeroar](https://discuss.elastic.co/u/hickeroar)\ **Replies:** 6\ **Last updated:** [November 19, 2019, 4:22pm UTC](https://discuss.elastic.co/t/apm-server-aws-elasticsearch-service-cannot-retrieve-the-elasticsearch-license-unauthorized-access-could-not-connect-to-the-xpack-endpoint-verify-your-credentials/207759 "2019-11-19T16:22:52Z")
Kibana version: 7.1.1 Elasticsearch version: 7.1.1 APM Server version: 7.1.1 Original install method (e.g. download page, yum, deb, from source, etc.) and version: DEB: curl -L -O https://artifacts.elastic.co/downlo… --- ## [GROK pattern to collect whole exception stacktrace](https://discuss.elastic.co/t/grok-pattern-to-collect-whole-exception-stacktrace/208295)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 3:45pm UTC](https://discuss.elastic.co/t/grok-pattern-to-collect-whole-exception-stacktrace/208295 "2019-11-19T15:45:11Z")
Hi All, Below config file not capturing complete stacktrace, it is only collecting single line. Any suggestion how can collect whole stacktrace. filter { #If log line contains tab character followed by 'at' then… --- ## [Kibana - TSBV - Auto scale Y-Axis](https://discuss.elastic.co/t/kibana-tsbv-auto-scale-y-axis/208514)
**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 3:29pm UTC](https://discuss.elastic.co/t/kibana-tsbv-auto-scale-y-axis/208514 "2019-11-19T15:29:34Z")
Hi there, Thanks in advance for your time I've been told Timelion is being phased-out by TSBV so I'm starting to use it in order to reproduce what I was used to do with Timelion. I'm already quite surprised as it seem… --- ## [Kibana Image in Markdown text](https://discuss.elastic.co/t/kibana-image-in-markdown-text/208332)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 3:27pm UTC](https://discuss.elastic.co/t/kibana-image-in-markdown-text/208332 "2019-11-19T15:27:45Z")
Hi guys , lately i've been working on a dahsboard where i need to insert an image(from locale PC) inside a markdown text , i've tried this !\[image Info\](file:///C:/Elastic/logo.PNG "Image Description") but it doesn't wor… --- ## [How do I get the Infrastructure map working for Kubernetes Pods?](https://discuss.elastic.co/t/how-do-i-get-the-infrastructure-map-working-for-kubernetes-pods/207731)
**Author:** [@Richard\_Neely](https://discuss.elastic.co/u/Richard_Neely)\ **Replies:** 4\ **Last updated:** [November 19, 2019, 3:09pm UTC](https://discuss.elastic.co/t/how-do-i-get-the-infrastructure-map-working-for-kubernetes-pods/207731 "2019-11-19T15:09:38Z")
All of my pods show up but metrics report as zero. Kube state metrics is running metrics are getting indexed into the metricbeat index. You can also see them on the Discover tab but nothing here. Running 6.8.3 across the… --- ## [Query\_string search with ignoring some characters](https://discuss.elastic.co/t/query-string-search-with-ignoring-some-characters/206165)
**Author:** [@milk911](https://discuss.elastic.co/u/milk911)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 2:42pm UTC](https://discuss.elastic.co/t/query-string-search-with-ignoring-some-characters/206165 "2019-11-19T14:42:59Z")
Hi all! I have a record in index, that contains some spec characters " ", "/", "-": { "documentData" : { "refNo" : "8652 / 58996-3", "status" : "Rejected", } } How should I do query\_string search if I have only … --- ## [How to switch source of visualization? from index pattern to saved search?](https://discuss.elastic.co/t/how-to-switch-source-of-visualization-from-index-pattern-to-saved-search/208341)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 5\ **Last updated:** [November 19, 2019, 2:32pm UTC](https://discuss.elastic.co/t/how-to-switch-source-of-visualization-from-index-pattern-to-saved-search/208341 "2019-11-19T14:32:49Z")
Hi, I made a mistake on creating my visualizations. I've accidently choosen an index pattern instead of a saved search. My index changed and now the vis isn't getting any data. I think best way is to use a saved search… --- ## [Markdown SHORT URL links - Bad Gateway](https://discuss.elastic.co/t/markdown-short-url-links-bad-gateway/206574)
**Author:** [@anagfar](https://discuss.elastic.co/u/anagfar)\ **Replies:** 4\ **Last updated:** [November 19, 2019, 2:18pm UTC](https://discuss.elastic.co/t/markdown-short-url-links-bad-gateway/206574 "2019-11-19T14:18:23Z")
Hi everyone! We're experiencing the following problem: We have serveral dashboards in our Kibana being one of them the "main" dashboard from where we click on some pictures and leaves us right into the sub-dashboards. … --- ## [Use Own Systemd Unit File](https://discuss.elastic.co/t/use-own-systemd-unit-file/208518)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 1\ **Last updated:** [November 19, 2019, 2:17pm UTC](https://discuss.elastic.co/t/use-own-systemd-unit-file/208518 "2019-11-19T14:17:38Z")
I would like to use my own systemd unit file for logstash because I am starting a dedicated logstash process for each configfile via initscript. I noticed that the logstash unit file is generated via /usr/share/logstash… --- ## [GCP VPC Flows in SIEM](https://discuss.elastic.co/t/gcp-vpc-flows-in-siem/208259)
**Author:** [@numbersix](https://discuss.elastic.co/u/numbersix)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 2:16pm UTC](https://discuss.elastic.co/t/gcp-vpc-flows-in-siem/208259 "2019-11-19T14:16:08Z")
I have GCP VPC Flows in Elasticsearch but what is the easiest way to integrate them into the SIEM? I see net flow integrations available for other sources but not GCP. I'm using the Google Cloud Module for Filebeat cur… --- ## [Hardware Sizing Estimation](https://discuss.elastic.co/t/hardware-sizing-estimation/208522)
**Author:** [@Praveen\_Kamble](https://discuss.elastic.co/u/Praveen_Kamble)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 2:08pm UTC](https://discuss.elastic.co/t/hardware-sizing-estimation/208522 "2019-11-19T14:08:25Z")
Hello, We are planning to design a solution of Elastic Stack wherein the requirement is 10GB/Day volume of log data. And the log retention is as follows: 7 days of Hot 358 days of Warm and then 2 years on NAS Also,… --- ## [Getting Storage Size by Tenant from a shared index](https://discuss.elastic.co/t/getting-storage-size-by-tenant-from-a-shared-index/208521)
**Author:** [@Ravi\_Narayan](https://discuss.elastic.co/u/Ravi_Narayan)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 2:05pm UTC](https://discuss.elastic.co/t/getting-storage-size-by-tenant-from-a-shared-index/208521 "2019-11-19T14:05:57Z")
I have a MT environment where some of my indices are shared between tenants. I need a way to find out the total storage used by each tenant. We use Filtered Alias for tenants for searching , but I cannot figure out a way… --- ## [File watcher](https://discuss.elastic.co/t/file-watcher/208520)
**Author:** [@Krypton8](https://discuss.elastic.co/u/Krypton8)\ **Replies:** 0\ **Last updated:** [November 19, 2019, 2:04pm UTC](https://discuss.elastic.co/t/file-watcher/208520 "2019-11-19T14:04:56Z")
Hello all, I have a problem regarding file input to get data from several csv files. The goal is pretty simple but i'm struggling. I need to retrieve data from a csv file, easy, I works nicely. The data are stored in … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1770) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1772)