# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1007 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1008 --- ## [Need help in delete index after x days](https://discuss.elastic.co/t/need-help-in-delete-index-after-x-days/300192)
**Author:** [@Saranya\_V](https://discuss.elastic.co/u/Saranya_V)\ **Replies:** 5\ **Last updated:** [March 21, 2022, 12:52pm UTC](https://discuss.elastic.co/t/need-help-in-delete-index-after-x-days/300192 "2022-03-21T12:52:06Z")
I'm using Elasticsearch 1.x. is there any way we can delete index after x days without using delete query. --- ## [How to convert null value and empty value to "-"](https://discuss.elastic.co/t/how-to-convert-null-value-and-empty-value-to/300157)
**Author:** [@vuhai\_fo4](https://discuss.elastic.co/u/vuhai_fo4)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 12:46pm UTC](https://discuss.elastic.co/t/how-to-convert-null-value-and-empty-value-to/300157 "2022-03-21T12:46:08Z")
In my dashboard, I have many data empty value and null value. I want to change them to "-". Please recommend to me some solution for this case --- ## [Kibana Dashboard PDF and PNG reporting options missing](https://discuss.elastic.co/t/kibana-dashboard-pdf-and-png-reporting-options-missing/300167)
**Author:** [@Petteri](https://discuss.elastic.co/u/Petteri)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 12:45pm UTC](https://discuss.elastic.co/t/kibana-dashboard-pdf-and-png-reporting-options-missing/300167 "2022-03-21T12:45:59Z")
FYI. The original problem Kibana Dashboard PDF and PNG reporting options missing is due to an bug in elastic code: \[Reporting\] Application Privileges for PNG/PDF exports incorrectly require platinum license · Issue #127… --- ## [Migration from scripted to runtime field](https://discuss.elastic.co/t/migration-from-scripted-to-runtime-field/299484)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 12:37pm UTC](https://discuss.elastic.co/t/migration-from-scripted-to-runtime-field/299484 "2022-03-21T12:37:36Z")
We have a scripted field, for example winlogbeat.user\_data.mysf (my snowflake). I guess we are forced to move this to a runtime field, they were deprecated in 7.13, but I'm not sure when they really quit working. My w… --- ## [New visualization plugin with inputs](https://discuss.elastic.co/t/new-visualization-plugin-with-inputs/299616)
**Author:** [@H1gH](https://discuss.elastic.co/u/H1gH)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 12:29pm UTC](https://discuss.elastic.co/t/new-visualization-plugin-with-inputs/299616 "2022-03-21T12:29:08Z")
Hello, I want to create a new plugin which will make a POST request to an API and will show the response in the view. I created my input using Eui forms \ \ **Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-problem-when-update-mapping/300197 "2022-03-21T11:42:21Z") I want add mapping to synonym analyzer by perform this operation PUT /my\_index/\_mapping/items { "items": { "properties": { "judul": { "type": "text", "analyzer": "synonym"… --- ## [Unable to retrieve version information from Elasticsearch nodes. Kibana v8 MacOS local machine setup](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-kibana-v8-macos-local-machine-setup/300199)
**Author:** [@Gowrishankar\_G](https://discuss.elastic.co/u/Gowrishankar_G)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 11:30am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-kibana-v8-macos-local-machine-setup/300199 "2022-03-21T11:30:55Z")
\[ERROR\]\[Elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 192.168.1.6:9200 \[ERROR\]\[plugins.ruleRegistry\] Error: Timeout: it took more than 1200000ms \[ERROR\]\[pl… --- ## [Master not discovered or elected yet error](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-error/300194)
**Author:** [@pabloochoa](https://discuss.elastic.co/u/pabloochoa)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 11:08am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-error/300194 "2022-03-21T11:08:15Z")
I am trying to deploy an Elasticsearch 8.0.0 4 node cluster with 2 masters and 3 datas (1 host will have both a master and a data). I am deploying it in portainer 2.9.0 and docker 20.10.11, so my docker compose is the fo… --- ## [Requirements for the deployment of ELK](https://discuss.elastic.co/t/requirements-for-the-deployment-of-elk/300159)
**Author:** [@thujitha\_p](https://discuss.elastic.co/u/thujitha_p)\ **Replies:** 2\ **Last updated:** [March 21, 2022, 10:17am UTC](https://discuss.elastic.co/t/requirements-for-the-deployment-of-elk/300159 "2022-03-21T10:17:02Z")
Hi all, Currently in our system has 2 Elasticsearch nodes. And we are facing an issue and it says, shards count reach 2000 limits. When I search I saw , it is not good to increase no of shards. But we can increase the s… --- ## [Microsoft Filebeat Module](https://discuss.elastic.co/t/microsoft-filebeat-module/300115)
**Author:** [@John\_Doe4](https://discuss.elastic.co/u/John_Doe4)\ **Replies:** 4\ **Last updated:** [March 21, 2022, 10:16am UTC](https://discuss.elastic.co/t/microsoft-filebeat-module/300115 "2022-03-21T10:16:30Z")
Hi, I am using the Filebeat O365 module across a bunch of Azure AD tenants with great success. I am looking to onboard Microsoft Defender for Business and as such I'd like to ingest the Windows Defender events and I ca… --- ## [Sincedb\_path file type](https://discuss.elastic.co/t/sincedb-path-file-type/300182)
**Author:** [@Greninja\_San](https://discuss.elastic.co/u/Greninja_San)\ **Replies:** 3\ **Last updated:** [March 21, 2022, 10:05am UTC](https://discuss.elastic.co/t/sincedb-path-file-type/300182 "2022-03-21T10:05:50Z")
Hello! I have to set a sincedb\_path file for logstash. However, I have to create one and I cannot find the file type required. What should it be? (CSV, TXT, JSON...) Thank you :slight\_smile: --- ## [Exiting: resource 'metricbeat-7.8.1' exists, but it is not an alias](https://discuss.elastic.co/t/exiting-resource-metricbeat-7-8-1-exists-but-it-is-not-an-alias/300181)
**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 9:57am UTC](https://discuss.elastic.co/t/exiting-resource-metricbeat-7-8-1-exists-but-it-is-not-an-alias/300181 "2022-03-21T09:57:16Z")
Hello, Our ES cloud instance was having some storage issues, in order to clear some space we removed the metricbeat data. Now some of our metricbeat agents are not able to log data into metricbeat-\* index, I tried to r… --- ## [Kibana error : "Failed to poll for work: Error: work has timed out"](https://discuss.elastic.co/t/kibana-error-failed-to-poll-for-work-error-work-has-timed-out/300172)
**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 8:59am UTC](https://discuss.elastic.co/t/kibana-error-failed-to-poll-for-work-error-work-has-timed-out/300172 "2022-03-21T08:59:31Z")
Hello! I'm repeatedly getting this kind of errors in kibana which I think are hurting the performance. {"type":"log","@timestamp":"2022-03-17T09:14:21+01:00","tags":\["error","plugins","taskManager"\],"pid":96071,"messag… --- ## [Transform BulkRequest from HLRC to Elastic 8.1.0](https://discuss.elastic.co/t/transform-bulkrequest-from-hlrc-to-elastic-8-1-0/300162)
**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 8:13am UTC](https://discuss.elastic.co/t/transform-bulkrequest-from-hlrc-to-elastic-8-1-0/300162 "2022-03-21T08:13:03Z")
Hi, I need to transform below code to elastic 8.1.0 private BulkRequest createBulkRequest(List\ elasticSearchMessages, String indexName) { BulkRequest bulkRequest = new BulkRequest(indexName… --- ## [Beautify email sent from watcher](https://discuss.elastic.co/t/beautify-email-sent-from-watcher/300080)
**Author:** [@jhanvi](https://discuss.elastic.co/u/jhanvi)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 8:06am UTC](https://discuss.elastic.co/t/beautify-email-sent-from-watcher/300080 "2022-03-21T08:06:03Z")
Hi, I have a watcher that generates pdf and emails. I want to use formatting for the email body, can someone help on how that can be done? Formatting like making the text bold, italic, and email in the signature clicka… --- ## [Two distinct elasticsearch outputs in logstash (https,http)](https://discuss.elastic.co/t/two-distinct-elasticsearch-outputs-in-logstash-https-http/300138)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [March 20, 2022, 10:58pm UTC](https://discuss.elastic.co/t/two-distinct-elasticsearch-outputs-in-logstash-https-http/300138 "2022-03-20T22:58:58Z")
Hi I'm wondering if I can setup multi-output for the two endpoint (one of this address is corresponding to http and the second one works through https) How I can use different Elasticsearch output for https and http? f… --- ## [Difference between aggs and aggregations](https://discuss.elastic.co/t/difference-between-aggs-and-aggregations/300155)
**Author:** [@Malika\_Srivastava](https://discuss.elastic.co/u/Malika_Srivastava)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 7:36am UTC](https://discuss.elastic.co/t/difference-between-aggs-and-aggregations/300155 "2022-03-21T07:36:00Z")
Hi All, New to learning ELK and I have been going through the playlist on Elastic YT page hosted by Lisa Jung. Lisa Jung's Elastic Repo I am confused as to difference between the keywords aggs and aggregations Dataset… --- ## [Elasticsearch won't start first use - 8.1.0](https://discuss.elastic.co/t/elasticsearch-wont-start-first-use-8-1-0/299741)
**Author:** [@itzikyis](https://discuss.elastic.co/u/itzikyis)\ **Replies:** 12\ **Last updated:** [March 21, 2022, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-first-use-8-1-0/299741 "2022-03-21T07:29:35Z")
After downloading Elasticsearch from zip to windows. run bin\\Elasticsearch.bat getting Error: skipping security auto configuration because the configuration file \[C:\\Program Files\\Elasticsearch-8.1.0\\bin\\Elasticsearch\\E… --- ## [NEST 7.17. Bulk-Update Partial Document changes JObject $type](https://discuss.elastic.co/t/nest-7-17-bulk-update-partial-document-changes-jobject-type/300164)
**Author:** [@neox2811](https://discuss.elastic.co/u/neox2811)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 7:25am UTC](https://discuss.elastic.co/t/nest-7-17-bulk-update-partial-document-changes-jobject-type/300164 "2022-03-21T07:25:10Z")
Hi, I want to update existing objects with the Code provided in this topic: Bulk Partial Update using Nest - #2 by Erkan\_Aslanel But atfer the update the $type of my entity has changes to the type of the partial update… --- ## [Creating interdependent filters without disabling them](https://discuss.elastic.co/t/creating-interdependent-filters-without-disabling-them/299710)
**Author:** [@sukhwinder\_kumar](https://discuss.elastic.co/u/sukhwinder_kumar)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 3:25pm UTC](https://discuss.elastic.co/t/creating-interdependent-filters-without-disabling-them/299710 "2022-03-15T15:25:39Z")
Can I create interdependent filters without disabling them as it says "Options are based on the value of parent control. Disabled if parent is not set." I dont want to disable any filters but filters should be filtered o… --- ## [Index wildcard Performance](https://discuss.elastic.co/t/index-wildcard-performance/300153)
**Author:** [@111505](https://discuss.elastic.co/u/111505)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 4:57am UTC](https://discuss.elastic.co/t/index-wildcard-performance/300153 "2022-03-21T04:57:31Z")
log-1 log-2 log-3 If there is an index, I use "log-" But suppose that the data I want is only in log-1. Is there a difference in actual operation and performance between using it as log- and using it as log-1? Search… --- ## [Embed Kibana Lens Visualizations in html page](https://discuss.elastic.co/t/embed-kibana-lens-visualizations-in-html-page/299707)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 2\ **Last updated:** [March 21, 2022, 4:25am UTC](https://discuss.elastic.co/t/embed-kibana-lens-visualizations-in-html-page/299707 "2022-03-21T04:25:34Z")
Hi, Is there any way to embed the visualizations created using Kibana Lens in the HTML page just like we can do in the case of other visualizations? In the case of Non-Lens visualizations, it gives the option to get the… --- ## [Index has no aliases](https://discuss.elastic.co/t/index-has-no-aliases/300149)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 4:04am UTC](https://discuss.elastic.co/t/index-has-no-aliases/300149 "2022-03-21T04:04:17Z")
Hi, i have define the index rollup alias on one index config, but if i add index to policy always show this error on kibana "Index has no aliases Policy test is configured for rollover, but index index-test does not ha… --- ## [Best practice for elastic server and elastic agent](https://discuss.elastic.co/t/best-practice-for-elastic-server-and-elastic-agent/300148)
**Author:** [@sevenout](https://discuss.elastic.co/u/sevenout)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 3:58am UTC](https://discuss.elastic.co/t/best-practice-for-elastic-server-and-elastic-agent/300148 "2022-03-21T03:58:24Z")
Hi guys, i just wanna ask about the best practice for elastic server and elastic agent. These are my conditions right now: I've installed Elasticsearch and kibana dashboard on a local server (only for Elasticsearch) I'… --- ## [How do I map fields with ECS if I am using my own grok filters](https://discuss.elastic.co/t/how-do-i-map-fields-with-ecs-if-i-am-using-my-own-grok-filters/300147)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 0\ **Last updated:** [March 21, 2022, 3:46am UTC](https://discuss.elastic.co/t/how-do-i-map-fields-with-ecs-if-i-am-using-my-own-grok-filters/300147 "2022-03-21T03:46:36Z")
Hi Team, Here is my grok parser match =\> { "message" =\> "(?\%{MONTHDAY}-%{MONTH}-%{YEAR} %{TIME}) rpz: info: client @%{WORD:data} %{IPV4:clientipaddr}#%{INT:sport} \\(%{NOTSPA CE:qdomain}\\): rpz QNAME Local-Da… --- ## [CIRCLE geo\_shape query not supported in ES 8.1](https://discuss.elastic.co/t/circle-geo-shape-query-not-supported-in-es-8-1/300024)
**Author:** [@Dat\_Le\_Tien](https://discuss.elastic.co/u/Dat_Le_Tien)\ **Replies:** 2\ **Last updated:** [March 21, 2022, 3:04am UTC](https://discuss.elastic.co/t/circle-geo-shape-query-not-supported-in-es-8-1/300024 "2022-03-21T03:04:22Z")
we currently want to move from ES7.17 to 8.1. so far everything went fine but one application seeding the data on geolocations fails with an error currently on our test system unsupported\_operation\_exception: CIRCLE geo… --- ## [Can any one help me with this exception](https://discuss.elastic.co/t/can-any-one-help-me-with-this-exception/300101)
**Author:** [@Kandlavath\_Dasaradhi](https://discuss.elastic.co/u/Kandlavath_Dasaradhi)\ **Replies:** 2\ **Last updated:** [March 21, 2022, 2:57am UTC](https://discuss.elastic.co/t/can-any-one-help-me-with-this-exception/300101 "2022-03-21T02:57:46Z")
C:\\Elasticsearch-7.3.2\\bin\>Elasticsearch Exception in thread "main" java.nio.file.NoSuchFileException: C:\\Elasticsearch-8.0.1\\config\\jvm.options at java.base/sun.nio.fs.WindowsException.translateToIOException(WindowsEx… --- ## [How to add metadata to an image such that it gets indexed by fscrawler?](https://discuss.elastic.co/t/how-to-add-metadata-to-an-image-such-that-it-gets-indexed-by-fscrawler/300141)
**Author:** [@thinking23487](https://discuss.elastic.co/u/thinking23487)\ **Replies:** 1\ **Last updated:** [March 21, 2022, 2:46am UTC](https://discuss.elastic.co/t/how-to-add-metadata-to-an-image-such-that-it-gets-indexed-by-fscrawler/300141 "2022-03-21T02:46:33Z")
Hi all, using exiftool I add a custom xmp field to a jpg via exiftool -config exif.hash.conf -xmp-xmp:Test="T1" data/images/13-Moss-Mushrooms-1.jpg where exif.hash.conf contains %Image::ExifTool::UserDefined = ( … --- ## [Upgrade assistant in Kibana not showing "Start" button](https://discuss.elastic.co/t/upgrade-assistant-in-kibana-not-showing-start-button/300142)
**Author:** [@dlalex83](https://discuss.elastic.co/u/dlalex83)\ **Replies:** 0\ **Last updated:** [March 20, 2022, 9:17pm UTC](https://discuss.elastic.co/t/upgrade-assistant-in-kibana-not-showing-start-button/300142 "2022-03-20T21:17:54Z")
Hi there, I'm on Elastic Stack 7.9.2 and when I navigate to the Upgrade Assistant page in Kibana I have no issues highlighted but no way to start the upgrade (see screenshot). Any ideas? Many thanks --- ## [Visibility of Data view in Space](https://discuss.elastic.co/t/visibility-of-data-view-in-space/300120)
**Author:** [@Petr\_Vancl\_Hochberge](https://discuss.elastic.co/u/Petr_Vancl_Hochberge)\ **Replies:** 2\ **Last updated:** [March 20, 2022, 3:08pm UTC](https://discuss.elastic.co/t/visibility-of-data-view-in-space/300120 "2022-03-20T15:08:01Z")
Hi. I am building “workflow” in Kibana for my users. I have around 50 spaces for each department of my organization. I have one Data view created which all should have access to, but I have no idea how to achieve it wit… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1006) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1008)