# Top **URL:** https://discuss.elastic.co/top.md?page=659&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 660 --- ## [Change Colors of Kibana (Sidebar & Pink Kibana Header)](https://discuss.elastic.co/t/change-colors-of-kibana-sidebar-pink-kibana-header/94256)
**Author:** [@adonahoe](https://discuss.elastic.co/u/adonahoe)\ **Replies:** 2\ **Last updated:** [July 24, 2017, 5:31pm UTC](https://discuss.elastic.co/t/change-colors-of-kibana-sidebar-pink-kibana-header/94256 "2017-07-24T17:31:46Z")
Hello All, I am looking to change the sidebar color kibana and the pink background of kibana. I was attempting to follow this post: Theming Kibana with a Plugin but was unable to get it to work. I changed all of the c… --- ## [Where does dashboards gets saved?](https://discuss.elastic.co/t/where-does-dashboards-gets-saved/26202)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 2\ **Last updated:** [July 24, 2015, 7:53am UTC](https://discuss.elastic.co/t/where-does-dashboards-gets-saved/26202 "2015-07-24T07:53:02Z")
Suppose i made a dashboard , now i want to use that dashboard where does it get saved in my machine? i want to change its CSS because i dont want a particular color in my bar graph. --- ## [Filebeat.yml - Environnement variable on UBUNTU](https://discuss.elastic.co/t/filebeat-yml-environnement-variable-on-ubuntu/253733)
**Author:** [@ASRLO](https://discuss.elastic.co/u/ASRLO)\ **Replies:** 3\ **Last updated:** [October 30, 2020, 2:13pm UTC](https://discuss.elastic.co/t/filebeat-yml-environnement-variable-on-ubuntu/253733 "2020-10-30T14:13:16Z")
Hello everybody , I want to use an environment variable on my path but it doesn't work. When I run the filebeat service it works but fails when sending logs to logstash I have set my environment variable in /etc/bash.b… --- ## [Disable 'Host' output field from filebeat](https://discuss.elastic.co/t/disable-host-output-field-from-filebeat/151635)
**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\ **Replies:** 3\ **Last updated:** [October 12, 2018, 10:36pm UTC](https://discuss.elastic.co/t/disable-host-output-field-from-filebeat/151635 "2018-10-12T22:36:45Z")
Hi First we were using filebeat version 6.2.4 in which filebeat automatically exported 'host' field as string but when we updated filebeat to 6.4.2, newer version started exporting 'host' field as an object and this led… --- ## [Edit filebeat mappings](https://discuss.elastic.co/t/edit-filebeat-mappings/39742)
**Author:** [@JSmith2412](https://discuss.elastic.co/u/JSmith2412)\ **Replies:** 6\ **Last updated:** [January 27, 2016, 10:53am UTC](https://discuss.elastic.co/t/edit-filebeat-mappings/39742 "2016-01-27T10:53:29Z")
I'm streaming data into SolR and I need to produce a JSON field in the FileBeat payload called event\_timestamp. Is there some way I can replicate the @timestamp field, or do I need to edit the FileBeat template? If so ho… --- ## [How to run Metricbeat as a service on SUSE enterprise 11](https://discuss.elastic.co/t/how-to-run-metricbeat-as-a-service-on-suse-enterprise-11/201144)
**Author:** [@arun1](https://discuss.elastic.co/u/arun1)\ **Replies:** 7\ **Last updated:** [September 30, 2019, 7:13am UTC](https://discuss.elastic.co/t/how-to-run-metricbeat-as-a-service-on-suse-enterprise-11/201144 "2019-09-30T07:13:30Z")
Hi, I have installed Meticbeat on SUSE Linux Enterprise 11 using the .rpm package. I am also able to start metricbeat from the command line using the command 'sudo ./metricbeat -e'. However when I try to start it as a … --- ## [Elasticsearch.service has failed (code=exited, status=143)](https://discuss.elastic.co/t/elasticsearch-service-has-failed-code-exited-status-143/283072)
**Author:** [@larzu](https://discuss.elastic.co/u/larzu)\ **Replies:** 1\ **Last updated:** [September 1, 2021, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-service-has-failed-code-exited-status-143/283072 "2021-09-01T22:17:09Z")
I'm a "bit" lost with this Elasticsearch installation (for Magento). I was following the installation for Centos Install Elasticsearch with RPM | Elasticsearch Guide \[7.14\] | Elastic Unfortunately Elasticsearch is not s… --- ## [How set default values with fields in Aggregation results' empty buckets?](https://discuss.elastic.co/t/how-set-default-values-with-fields-in-aggregation-results-empty-buckets/164597)
**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\ **Replies:** 2\ **Last updated:** [January 18, 2019, 4:32am UTC](https://discuss.elastic.co/t/how-set-default-values-with-fields-in-aggregation-results-empty-buckets/164597 "2019-01-18T04:32:46Z")
Hi. Im using Elasticseach 6.4 following is my request. "aggs": { "times": { "date\_histogram": { "field": "ccr.key", "interval": "… --- ## [Filebeat to read Log files from sFTP?](https://discuss.elastic.co/t/filebeat-to-read-log-files-from-sftp/150219)
**Author:** [@ratman](https://discuss.elastic.co/u/ratman)\ **Replies:** 2\ **Last updated:** [September 28, 2018, 9:30pm UTC](https://discuss.elastic.co/t/filebeat-to-read-log-files-from-sftp/150219 "2018-09-28T21:30:21Z")
Hello! I have some \*.log files located at a server I can access via sFTP. So far, I am bringing them to my Elastic machine manually but I'd like to automatise the process. Is there a way to set Filebeat to rretrieve al… --- ## [Not able to get back the space allocated by indices after deleting](https://discuss.elastic.co/t/not-able-to-get-back-the-space-allocated-by-indices-after-deleting/117934)
**Author:** [@happy0088](https://discuss.elastic.co/u/happy0088)\ **Replies:** 4\ **Last updated:** [February 1, 2018, 12:16pm UTC](https://discuss.elastic.co/t/not-able-to-get-back-the-space-allocated-by-indices-after-deleting/117934 "2018-02-01T12:16:40Z")
Hi , I am using ES 5.5.1 which is running in CentOS on virtual box , where i deleted several indices with huge data but even after deletion am not able to get back the space allocated by them . I got to know that delet… --- ## [Is there a way to bypass permission prompt when installing elasticsearch plugin?](https://discuss.elastic.co/t/is-there-a-way-to-bypass-permission-prompt-when-installing-elasticsearch-plugin/61189)
**Author:** [@lin-zhao](https://discuss.elastic.co/u/lin-zhao)\ **Replies:** 1\ **Last updated:** [September 22, 2016, 10:31am UTC](https://discuss.elastic.co/t/is-there-a-way-to-bypass-permission-prompt-when-installing-elasticsearch-plugin/61189 "2016-09-22T10:31:50Z")
I'm automating deployment of elasticsearch and a plugin we developed in house. The plugin requires additional permissions and elasticsearch-plugin command would prompt for confirmation. This makes automatic deployment di… --- ## [Error with bulk index operation when displaying in kibana](https://discuss.elastic.co/t/error-with-bulk-index-operation-when-displaying-in-kibana/283325)
**Author:** [@yrtqz](https://discuss.elastic.co/u/yrtqz)\ **Replies:** 8\ **Last updated:** [September 8, 2021, 10:35pm UTC](https://discuss.elastic.co/t/error-with-bulk-index-operation-when-displaying-in-kibana/283325 "2021-09-08T22:35:03Z")
I have elasticsearch 7.10.2 and kibana 7.10.2 (technically opensearch) running. I import data into an existing index with a bulk index command. The response is a 201 back from elasticsearch. When i go to kibana, the dash… --- ## [Create scripted field error](https://discuss.elastic.co/t/create-scripted-field-error/236471)
**Author:** [@inchirah](https://discuss.elastic.co/u/inchirah)\ **Replies:** 8\ **Last updated:** [June 10, 2020, 1:35pm UTC](https://discuss.elastic.co/t/create-scripted-field-error/236471 "2020-06-10T13:35:10Z")
Hello, I created a script field "attempt complaint" which takes the values \>= -78 from another field "Contrainte" Can anyone tell how I can fixe that? --- ## [Error create index template in ES 6.7](https://discuss.elastic.co/t/error-create-index-template-in-es-6-7/185370)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 3\ **Last updated:** [June 13, 2019, 7:12am UTC](https://discuss.elastic.co/t/error-create-index-template-in-es-6-7/185370 "2019-06-13T07:12:54Z")
I created index template in ES 6.7 and got error . { "mappings" : { "date\_detection": false, "dynamic\_templates": \[ { "labels": { "mapping": { "type": "keyword" },… --- ## [How to change @timestamp field in kibana with timestamp of my logs time](https://discuss.elastic.co/t/how-to-change-timestamp-field-in-kibana-with-timestamp-of-my-logs-time/61476)
**Author:** [@arunmca18](https://discuss.elastic.co/u/arunmca18)\ **Replies:** 1\ **Last updated:** [September 26, 2016, 5:53am UTC](https://discuss.elastic.co/t/how-to-change-timestamp-field-in-kibana-with-timestamp-of-my-logs-time/61476 "2016-09-26T05:53:27Z")
My Log sample is : 2016-09-26 09:27:18,091 \[\[ACTIVE\] ExecuteThread: '19' for queue: 'weblogic.kernel.Default (self-tuning)'\] AUDIT com.rockon.intranet.IRTD.resource.IRTDdoplanAPI - (Request\_Timestamp,2016-09-26 09:27… --- ## [HTTP output failure](https://discuss.elastic.co/t/http-output-failure/255858)
**Author:** [@chitreshg](https://discuss.elastic.co/u/chitreshg)\ **Replies:** 0\ **Last updated:** [November 18, 2020, 2:53pm UTC](https://discuss.elastic.co/t/http-output-failure/255858 "2020-11-18T14:53:18Z")
Hi all, I'm using logstash 7.10.0, I made the config file as input { stdin{} } output{ http { url =\> "{URL\_SET\_CLOG}" format =\> "json" http\_method =\> "post" headers =\> \["Authorization", "Bearer {CLOG\_TOKEN}… --- ## [Nested aggregation charts](https://discuss.elastic.co/t/nested-aggregation-charts/41523)
**Author:** [@Tibor\_Schmidt](https://discuss.elastic.co/u/Tibor_Schmidt)\ **Replies:** 5\ **Last updated:** [March 8, 2016, 8:19am UTC](https://discuss.elastic.co/t/nested-aggregation-charts/41523 "2016-03-08T08:19:17Z")
Having this example mapping { "mappings": { "scanner": { "properties": { "profiler": { "include\_in\_parent": true, "properties": { "module": { "analyzer": "not\_analyzed\_lower1024", "type": "string" }, "cputime": { "type"… --- ## [Aggregate filter plugin - nested aggregation](https://discuss.elastic.co/t/aggregate-filter-plugin-nested-aggregation/142192)
**Author:** [@NickRbk](https://discuss.elastic.co/u/NickRbk)\ **Replies:** 6\ **Last updated:** [July 30, 2018, 6:35pm UTC](https://discuss.elastic.co/t/aggregate-filter-plugin-nested-aggregation/142192 "2018-07-30T18:35:46Z")
Hello! I am trying to aggregate some data from DB by Logstash. My data in db looks like this: +----+----------------+---------------------+----------------------+----------------------+ | # | product\_id | product\_na… --- ## [Get unique of date in data](https://discuss.elastic.co/t/get-unique-of-date-in-data/113494)
**Author:** [@ankur\_singla](https://discuss.elastic.co/u/ankur_singla)\ **Replies:** 6\ **Last updated:** [December 30, 2017, 2:01pm UTC](https://discuss.elastic.co/t/get-unique-of-date-in-data/113494 "2017-12-30T14:01:52Z")
I am having data with date field value in "dd-mm-yyyy" format in my index. I try to find the unique of date with cardinality aggregation but i am getting wrong result. POST /index/\_search?size=-0 { "aggs" : { … --- ## [Logstash docker with kafka input not consuming data](https://discuss.elastic.co/t/logstash-docker-with-kafka-input-not-consuming-data/58908)
**Author:** [@cesarpball](https://discuss.elastic.co/u/cesarpball)\ **Replies:** 4\ **Last updated:** [August 25, 2016, 2:40pm UTC](https://discuss.elastic.co/t/logstash-docker-with-kafka-input-not-consuming-data/58908 "2016-08-25T14:40:22Z")
Hello, I am having problems to make the Logstash docker working as consumer with a kafka input. I can see the tcp socket in the zookeeper node but I can't get any data in the consumer. When I look the consumer (offse… --- ## [KB7 Custom Logo](https://discuss.elastic.co/t/kb7-custom-logo/176753)
**Author:** [@bbek](https://discuss.elastic.co/u/bbek)\ **Replies:** 3\ **Last updated:** [April 17, 2019, 6:40am UTC](https://discuss.elastic.co/t/kb7-custom-logo/176753 "2019-04-17T06:40:30Z")
We have multiple kibana instances between internal departments, and have branded each instance specific to each audience for easy recognition. (Red menu and logo for red team, blue for blue team, etc) On 6.x KB version… --- ## [2 events in 1 visualize data table](https://discuss.elastic.co/t/2-events-in-1-visualize-data-table/93013)
**Author:** [@oded17](https://discuss.elastic.co/u/oded17)\ **Replies:** 3\ **Last updated:** [July 17, 2017, 2:36pm UTC](https://discuss.elastic.co/t/2-events-in-1-visualize-data-table/93013 "2017-07-17T14:36:05Z")
Hן I gather events from application performance management ( dynatrace ) to elasticsearch. I wanted to know if there is a possibility to combine 2 events, each with the same variable, and display them together under da… --- ## [The right way to specify environment?](https://discuss.elastic.co/t/the-right-way-to-specify-environment/77204)
**Author:** [@ybizeul](https://discuss.elastic.co/u/ybizeul)\ **Replies:** 3\ **Last updated:** [March 2, 2017, 8:07pm UTC](https://discuss.elastic.co/t/the-right-way-to-specify-environment/77204 "2017-03-02T20:07:29Z")
I'm trying to figure out how I am supposed to setup a consistent environment for logstash to startup correctly. # /usr/share/logstash/bin/system-install Successfully created system startup script for Logstash Looks … --- ## [Copy complete event to a field of a new event](https://discuss.elastic.co/t/copy-complete-event-to-a-field-of-a-new-event/295583)
**Author:** [@HansPeterSloot](https://discuss.elastic.co/u/HansPeterSloot)\ **Replies:** 7\ **Last updated:** [January 31, 2022, 9:26am UTC](https://discuss.elastic.co/t/copy-complete-event-to-a-field-of-a-new-event/295583 "2022-01-31T09:26:52Z")
Hi, I want to copy all fields of an event to a field of a new event in a logstash filter This { " agent ": " Mozilla / 5.0(compatible; MSIE 9.0)", " ip ": " 192.168.24.44 ", " request ": " / in… --- ## [Logstash datetime filter if else](https://discuss.elastic.co/t/logstash-datetime-filter-if-else/254430)
**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\ **Replies:** 7\ **Last updated:** [November 23, 2020, 3:22pm UTC](https://discuss.elastic.co/t/logstash-datetime-filter-if-else/254430 "2020-11-23T15:22:18Z")
Hi Team, This is regarding the Logstash Input filter. Sometimes the application from which I receive the data(Via logstash http) sends the value in one dateformat(ISO) and at times in another(UNIX). Is there anyway I … --- ## [Hot to get all results in the Dev Tools](https://discuss.elastic.co/t/hot-to-get-all-results-in-the-dev-tools/296178)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 2\ **Last updated:** [February 3, 2022, 11:14am UTC](https://discuss.elastic.co/t/hot-to-get-all-results-in-the-dev-tools/296178 "2022-02-03T11:14:55Z")
Hi All, I'm using 7.16.2, When I run query in the dev tools I get only 10 first results... How can I get all the query results? Thanks, Shay --- ## [Kibana filter for thousands of IPs](https://discuss.elastic.co/t/kibana-filter-for-thousands-of-ips/285379)
**Author:** [@MasonNorris](https://discuss.elastic.co/u/MasonNorris)\ **Replies:** 8\ **Last updated:** [September 29, 2021, 2:26pm UTC](https://discuss.elastic.co/t/kibana-filter-for-thousands-of-ips/285379 "2021-09-29T14:26:07Z")
Kibana Version: 7.12.1 Is there a way to filter for thousands of IPs in one visualization. Currently I have enabled state:storeinseesion and am using a DSL filter but am limited to 1024 clauses within the DSL filter. I … --- ## [Fleet agent tls settings](https://discuss.elastic.co/t/fleet-agent-tls-settings/261191)
**Author:** [@gregorys](https://discuss.elastic.co/u/gregorys)\ **Replies:** 8\ **Last updated:** [January 20, 2021, 12:09pm UTC](https://discuss.elastic.co/t/fleet-agent-tls-settings/261191 "2021-01-20T12:09:10Z")
Hi, I installed a fleet agent, its state in Kibana is online and its receiving logs over the UDP port configured in an integration. However I don't see a data stream, looks like it's not sending these logs to elasticse… --- ## [Fail to connect Java api and elasticsearch](https://discuss.elastic.co/t/fail-to-connect-java-api-and-elasticsearch/141300)
**Author:** [@vivekranjan](https://discuss.elastic.co/u/vivekranjan)\ **Replies:** 8\ **Last updated:** [July 24, 2018, 8:26am UTC](https://discuss.elastic.co/t/fail-to-connect-java-api-and-elasticsearch/141300 "2018-07-24T08:26:26Z")
Hi I have wrote a java program to perform CRUD operation and now when I tried running my code First I got this on the console window :- "Started Application in 8.539 seconds (JVM running for 9.069)" and later just after … --- ## [How do I change the elastic logo from Kibana 7.13.0 to the company logo?](https://discuss.elastic.co/t/how-do-i-change-the-elastic-logo-from-kibana-7-13-0-to-the-company-logo/275045)
**Author:** [@111480](https://discuss.elastic.co/u/111480)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 4:33am UTC](https://discuss.elastic.co/t/how-do-i-change-the-elastic-logo-from-kibana-7-13-0-to-the-company-logo/275045 "2021-06-07T04:33:51Z")
How do I change the elastic logo from Kibana 7.13.0 to the company logo? How do I change the elastic logo from Kibana 7.13.0 to the company logo? my elk version : 7.13.0 Changes made in kibana 7.13.0 Change logo and… --- ## [\[HELP\]How to run multiple logstash instances](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195)
**Author:** [@fsaas](https://discuss.elastic.co/u/fsaas)\ **Replies:** 5\ **Last updated:** [September 4, 2017, 5:25am UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195 "2017-09-04T05:25:37Z")
Hi all. I’m a beginner to logstash and I need to run multiple logstash instances. My logstash version is 5.5 and I followed this link. here and here And the result is grep -v ^# logstash.yml | grep \[a-z\] \[image\] t… --- ## [Renaming example Kibana dashboards](https://discuss.elastic.co/t/renaming-example-kibana-dashboards/123444)
**Author:** [@sgiri](https://discuss.elastic.co/u/sgiri)\ **Replies:** 1\ **Last updated:** [March 16, 2018, 8:07pm UTC](https://discuss.elastic.co/t/renaming-example-kibana-dashboards/123444 "2018-03-16T20:07:59Z")
Is there a way to rename the example Kibana Dashboards that comes with filebeat? The Configuration Dashboard and Configuration Template do help in changing the elasticsearch index name and index name defined in the dashb… --- ## [Is it possible to change the score mode of SHOULD clause?](https://discuss.elastic.co/t/is-it-possible-to-change-the-score-mode-of-should-clause/23694)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 1\ **Last updated:** [May 28, 2015, 7:40am UTC](https://discuss.elastic.co/t/is-it-possible-to-change-the-score-mode-of-should-clause/23694 "2015-05-28T07:40:25Z")
For example I have following 2 documents: {"id":"1", "title":"elasticsearch", " description":"elasticsearch" } {"id":"1", "title":"elasticsearch", " description":"bing" } And following query: { "query" : { … --- ## [Agent bad\_certificate](https://discuss.elastic.co/t/agent-bad-certificate/310827)
**Author:** [@immauss](https://discuss.elastic.co/u/immauss)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 7:33am UTC](https://discuss.elastic.co/t/agent-bad-certificate/310827 "2022-08-04T07:33:06Z")
There are quite a few search results on this topic, but they are all with elastic 7.x. I'm seeing it with 8.3.2. I'm certain that I'm doing something wrong, but for the life of me can not figure out what. I'm using dock… --- ## [Certificate format for Kibana](https://discuss.elastic.co/t/certificate-format-for-kibana/246329)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 3\ **Last updated:** [August 26, 2020, 12:35pm UTC](https://discuss.elastic.co/t/certificate-format-for-kibana/246329 "2020-08-26T12:35:49Z")
Hi, Note: Running ELK 7.9 I am trying to configure TLS in Kibana to try out the Alerts beta feature. By following the official documentation, the bin/elasticsearch-certutil csr tool will generate a cert in PEM format, … --- ## [Can't install logstash plugins, trying to install them breaks the logstash installation](https://discuss.elastic.co/t/cant-install-logstash-plugins-trying-to-install-them-breaks-the-logstash-installation/103689)
**Author:** [@A.McBride](https://discuss.elastic.co/u/A.McBride)\ **Replies:** 4\ **Last updated:** [November 13, 2017, 7:29pm UTC](https://discuss.elastic.co/t/cant-install-logstash-plugins-trying-to-install-them-breaks-the-logstash-installation/103689 "2017-11-13T19:29:28Z")
I'm trying to install the email plugin for logstash by using "logstash-plugin install logstash-output-email", however when I do it I get the following error: Validating logstash-output-email Installing logstash-output-… --- ## [Elasticsearch on Spark - case class limit to 22 fields on Scala](https://discuss.elastic.co/t/elasticsearch-on-spark-case-class-limit-to-22-fields-on-scala/27392)
**Author:** [@eliasah](https://discuss.elastic.co/u/eliasah)\ **Replies:** 4\ **Last updated:** [August 18, 2015, 10:02am UTC](https://discuss.elastic.co/t/elasticsearch-on-spark-case-class-limit-to-22-fields-on-scala/27392 "2015-08-18T10:02:53Z")
I'm trying to work on the kdd99 Dataset for Fraud Detection. In the dataset, a record looks like this : 0,tcp,http,SF,215,45076,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,1,0.00,0.00,0.00,0.00,1.00,0.00,0.00,0,0,0.00,0.00,0.00,… --- ## [Enterprise\_search password](https://discuss.elastic.co/t/enterprise-search-password/234882)
**Author:** [@acmenow](https://discuss.elastic.co/u/acmenow)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 9:26am UTC](https://discuss.elastic.co/t/enterprise-search-password/234882 "2020-06-11T09:26:39Z")
Hi all, Please help to fix enterprise\_search password. In the log bellow I have all the password but it's not work when I access to: localhost:3002/login page. Also it's not a cache problem. I try with different browser… --- ## [Getting 403 forbidden error on User authentication with OpenID connect](https://discuss.elastic.co/t/getting-403-forbidden-error-on-user-authentication-with-openid-connect/218120)
**Author:** [@piyush\_kashyap](https://discuss.elastic.co/u/piyush_kashyap)\ **Replies:** 2\ **Last updated:** [February 7, 2020, 6:33am UTC](https://discuss.elastic.co/t/getting-403-forbidden-error-on-user-authentication-with-openid-connect/218120 "2020-02-07T06:33:02Z")
I am trying to authenticate kibana users using OpenID connect and I am getting 403 forbidden error. Please find below the realm configuration :- xpack.security.authc.realms.oidc.cloud-oidc: order: 0 rp.client\_id: "" … --- ## [How to generate visualization for an item of an array in another array](https://discuss.elastic.co/t/how-to-generate-visualization-for-an-item-of-an-array-in-another-array/57472)
**Author:** [@Ayotunde\_Salako](https://discuss.elastic.co/u/Ayotunde_Salako)\ **Replies:** 1\ **Last updated:** [August 8, 2016, 4:55pm UTC](https://discuss.elastic.co/t/how-to-generate-visualization-for-an-item-of-an-array-in-another-array/57472 "2016-08-08T16:55:22Z")
Hello, I am new to Kibana and I have the data below in JSON format. I need to generate visualiztion for the fuel variable inside the attribute array. { "\_index": "positions", "\_type": "position", "\_id": "272745… --- ## [Can't get boolean logic in Kibana filters to work](https://discuss.elastic.co/t/cant-get-boolean-logic-in-kibana-filters-to-work/46783)
**Author:** [@daniel-burke](https://discuss.elastic.co/u/daniel-burke)\ **Replies:** 7\ **Last updated:** [April 11, 2016, 11:05am UTC](https://discuss.elastic.co/t/cant-get-boolean-logic-in-kibana-filters-to-work/46783 "2016-04-11T11:05:11Z")
I'm having trouble getting an OR clause to work in a filter. Given a document like this { "\_index": "logstash-2016.04.08", "\_type": "Snip", "\_id": "AVP1CQe9mfZFtYFl63KA", "\_score": null, "\_source": { "me… --- ## [Logstash2.0 can't write to ES2.0 with Shield](https://discuss.elastic.co/t/logstash2-0-cant-write-to-es2-0-with-shield/34856)
**Author:** [@robertranjan](https://discuss.elastic.co/u/robertranjan)\ **Replies:** 7\ **Last updated:** [December 7, 2015, 9:59pm UTC](https://discuss.elastic.co/t/logstash2-0-cant-write-to-es2-0-with-shield/34856 "2015-12-07T21:59:24Z")
I'm trying to send events from LS2.0 to ES2.0+Shield2.0 using basic http authentication but failing because of authentication issue. OS: centOS 6 ES, LS and Kibana 2.0 Tried solution at http://stackoverflow.com/ques… --- ## [Date range missing in discover section of kibana](https://discuss.elastic.co/t/date-range-missing-in-discover-section-of-kibana/336913)
**Author:** [@Tukaram](https://discuss.elastic.co/u/Tukaram)\ **Replies:** 5\ **Last updated:** [June 26, 2023, 5:33pm UTC](https://discuss.elastic.co/t/date-range-missing-in-discover-section-of-kibana/336913 "2023-06-26T17:33:04Z")
Hi, when I select my index, date range part(near refresh button) gets removed from the display and I only see KQL search field. stack version 7.17.3 --- ## [Fix log4j ：upgrade ES version OR replace log4j.jar to 2.17.2](https://discuss.elastic.co/t/fix-log4j-upgrade-es-version-or-replace-log4j-jar-to-2-17-2/302786)
**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\ **Replies:** 5\ **Last updated:** [April 21, 2022, 7:48am UTC](https://discuss.elastic.co/t/fix-log4j-upgrade-es-version-or-replace-log4j-jar-to-2-17-2/302786 "2022-04-21T07:48:05Z")
At present, we have more than 500 Elasticsearch clusters, with thousands of nodes. The Elasticsearch versions are 6.3.2, 7.2 and 7.4. In order to solve the log4j vulnerability, if you choose to upgrade the Elasticsearch … --- ## [Adding Host fields to configuration](https://discuss.elastic.co/t/adding-host-fields-to-configuration/235510)
**Author:** [@nick1](https://discuss.elastic.co/u/nick1)\ **Replies:** 5\ **Last updated:** [June 12, 2020, 3:17pm UTC](https://discuss.elastic.co/t/adding-host-fields-to-configuration/235510 "2020-06-12T15:17:41Z")
Hi, I'm trying to configure filebeat, winlogbeat and metricbeat to send details on their host type (OS type mainly) so I can use this field in Graylog to filter. Host doesn't seem to be a module and the fields document… --- ## [Logstash::ConfigurationError-message](https://discuss.elastic.co/t/logstash-configurationerror-message/183364)
**Author:** [@soufiane1](https://discuss.elastic.co/u/soufiane1)\ **Replies:** 8\ **Last updated:** [May 31, 2019, 3:51pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364 "2019-05-31T15:51:31Z")
Hello everyone, i am uploading a csv file with the following code : ############################################################################################################### input { file { path =\> "C:/Users/… --- ## [Mutate "message" don't understand example](https://discuss.elastic.co/t/mutate-message-dont-understand-example/77985)
**Author:** [@pgrzec2s](https://discuss.elastic.co/u/pgrzec2s)\ **Replies:** 3\ **Last updated:** [March 9, 2017, 1:29pm UTC](https://discuss.elastic.co/t/mutate-message-dont-understand-example/77985 "2017-03-09T13:29:35Z")
I read the Example about mutating a fiel in logstash but I don't understand the syntax correctly. After parsing I want to replace the whole "message" with the %{GREEDYDATA} part. so i tried: if \[type\] == "apache-err… --- ## [Beats 1.0 is here!](https://discuss.elastic.co/t/beats-1-0-is-here/35477)
**Author:** [@michelle](https://discuss.elastic.co/u/michelle)\ **Replies:** 2\ **Last updated:** [January 8, 2016, 7:38am UTC](https://discuss.elastic.co/t/beats-1-0-is-here/35477 "2016-01-08T07:38:43Z")
Beats 1.0 is here! Beats 1.0 leads today's releases — we also shipped Elasticsearch, Shield, Watcher, Marvel, Logstash 2.1 and Kibana 4.3. Read what's new on the blog, and download the latest. --- ## [SQL Server Sync with Elasticsearch through Logstash - retransfer does not happens](https://discuss.elastic.co/t/sql-server-sync-with-elasticsearch-through-logstash-retransfer-does-not-happens/148851)
**Author:** [@Ganesh\_Ram\_Ravi](https://discuss.elastic.co/u/Ganesh_Ram_Ravi)\ **Replies:** 1\ **Last updated:** [September 24, 2018, 2:18pm UTC](https://discuss.elastic.co/t/sql-server-sync-with-elasticsearch-through-logstash-retransfer-does-not-happens/148851 "2018-09-24T14:18:50Z")
Background: We are doing a POC of Sync SQL Server error log data to elasticsearch(ES) to bring a dashboard in kibana. I used Logstash with jdbc input plugin to move sql server table data to (ES), it was succeeded. In … --- ## [🎉 Elastic Stack 7.7.0 released](https://discuss.elastic.co/t/elastic-stack-7-7-0-released/232501)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [May 13, 2020, 7:18pm UTC](https://discuss.elastic.co/t/elastic-stack-7-7-0-released/232501 "2020-05-13T19:18:00Z")
:tada: Elastic Stack 7.7.0 released We are pleased to announce the general availability of version 7.7 of the Elastic Stack. There’s a lot to gush about in 7.7. Workplace Search is now generally available, bringing a … [Previous page](https://discuss.elastic.co/top.md?page=658&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=660&per_page=50&period=all)