# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1183 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1184 --- ## [Usage of Lens in Dashboard](https://discuss.elastic.co/t/usage-of-lens-in-dashboard/287868)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 11:01am UTC](https://discuss.elastic.co/t/usage-of-lens-in-dashboard/287868 "2021-10-28T11:01:42Z")
Hi Im trying to use Lens visualization. I have two views as metric and bar chart as below When I add this to dashboard, Im able to see only one of the two So how to use other graph (bar chart). I dont see a way… --- ## [\_data\_stream\_timestamp conflicts?](https://discuss.elastic.co/t/data-stream-timestamp-conflicts/287814)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 10:58am UTC](https://discuss.elastic.co/t/data-stream-timestamp-conflicts/287814 "2021-10-28T10:58:56Z")
Does anyone know what this means please? I get this on every attempt Logstash makes to index an event. "status"=\>400, "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Mapper for \[\_data\_stream\_timestamp\] confli… --- ## [Search with multiple filters involved all the time](https://discuss.elastic.co/t/search-with-multiple-filters-involved-all-the-time/287702)
**Author:** [@itokai](https://discuss.elastic.co/u/itokai)\ **Replies:** 3\ **Last updated:** [October 28, 2021, 10:27am UTC](https://discuss.elastic.co/t/search-with-multiple-filters-involved-all-the-time/287702 "2021-10-28T10:27:11Z")
Hello, Specific use-case is to optimize querying that includes many (approximately 50) constant search filters. These filters might change 1-2x per year. How to involve those filters optimally, is it just by appending… --- ## [How to generate a logstash event within a custom java filter plugin after timeout?](https://discuss.elastic.co/t/how-to-generate-a-logstash-event-within-a-custom-java-filter-plugin-after-timeout/287901)
**Author:** [@Olli](https://discuss.elastic.co/u/Olli)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 10:26am UTC](https://discuss.elastic.co/t/how-to-generate-a-logstash-event-within-a-custom-java-filter-plugin-after-timeout/287901 "2021-10-28T10:26:32Z")
I want to correlate messages sending to logstash within a filter and send them to the next filter of logstash inside the pipeline. However I have successfully setup a custom logstash filter plugin according to elastic d… --- ## [JSON filter Invalid FieldReference for \[ \]](https://discuss.elastic.co/t/json-filter-invalid-fieldreference-for/287897)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 9:55am UTC](https://discuss.elastic.co/t/json-filter-invalid-fieldreference-for/287897 "2021-10-28T09:55:16Z")
Hello, I'm using JSON filter to parse JSON files, the field title contains characters \[ and \] I got this error: exception=\>#\ **Author:** [@keepcalm](https://discuss.elastic.co/u/keepcalm)\ **Replies:** 4\ **Last updated:** [October 28, 2021, 9:27am UTC](https://discuss.elastic.co/t/multiple-standalone-nodes/287837 "2021-10-28T09:27:48Z") hi, on version 6.6.1 we already have a single server deployed and i want to bring a new server online as a completely separate instance. How can i do this without the new server trying to form a cluster with the original… --- ## [Is update by query async operation or sync operation?](https://discuss.elastic.co/t/is-update-by-query-async-operation-or-sync-operation/287890)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 8:36am UTC](https://discuss.elastic.co/t/is-update-by-query-async-operation-or-sync-operation/287890 "2021-10-28T08:36:34Z")
And if so , how to know when update is done ? --- ## [How to configure basic security on elastic stack?](https://discuss.elastic.co/t/how-to-configure-basic-security-on-elastic-stack/286479)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 8\ **Last updated:** [October 28, 2021, 8:03am UTC](https://discuss.elastic.co/t/how-to-configure-basic-security-on-elastic-stack/286479 "2021-10-28T08:03:03Z")
I have elastic stack. I need to configure basic security. When I add xpack.security.enabled: true in elasticsearch.yml it fails to start with message bootstrap check failure \[1\] of \[1\]: Transport SSL must be enabled i… --- ## [Follow\_redirects not implemented in http output plugin for Logstash](https://discuss.elastic.co/t/follow-redirects-not-implemented-in-http-output-plugin-for-logstash/48824)
**Author:** [@Sergej-Popov](https://discuss.elastic.co/u/Sergej-Popov)\ **Replies:** 5\ **Last updated:** [October 28, 2021, 7:04am UTC](https://discuss.elastic.co/t/follow-redirects-not-implemented-in-http-output-plugin-for-logstash/48824 "2021-10-28T07:04:17Z")
I am having difficult time making logstash http output plugin to forward events to http endpoint which returns 307. (no control over that). Redirect needs to be followed to get to the right URL. Docs specify follow\_red… --- ## [Http Output 307 not being redirected](https://discuss.elastic.co/t/http-output-307-not-being-redirected/98493)
**Author:** [@insanityisnice](https://discuss.elastic.co/u/insanityisnice)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 7:03am UTC](https://discuss.elastic.co/t/http-output-307-not-being-redirected/98493 "2021-10-28T07:03:16Z")
I’m using an http output plugin to push events to EventStore. I am unable to get a successful POST and get an failure do to a 307 http status code. I’ve found several postings indicating that the http output plugin s… --- ## [Delete index automatically after particular days](https://discuss.elastic.co/t/delete-index-automatically-after-particular-days/287875)
**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\ **Replies:** 6\ **Last updated:** [October 28, 2021, 6:47am UTC](https://discuss.elastic.co/t/delete-index-automatically-after-particular-days/287875 "2021-10-28T06:47:39Z")
Hi, I am using Logstash to ingest log data to Elasticsearch, Indices are created daily, that every day's index has a unique name like index\_name-YYYY-MM-DD . So, after 30 days, there will be 30 indices. On day 31st, I w… --- ## [Does regex work on timestamp?](https://discuss.elastic.co/t/does-regex-work-on-timestamp/287794)
**Author:** [@MasonNorris](https://discuss.elastic.co/u/MasonNorris)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 6:36am UTC](https://discuss.elastic.co/t/does-regex-work-on-timestamp/287794 "2021-10-28T06:36:11Z")
I have created a regex to search for certain time periods in the data(ie search for all data out side of working hours). This regex should only return values from 00:00:00-07:59:59 or 16:00:00-23:59:59. It doesn't return… --- ## [Unique query id for slow log](https://discuss.elastic.co/t/unique-query-id-for-slow-log/287883)
**Author:** [@shawndu](https://discuss.elastic.co/u/shawndu)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 6:36am UTC](https://discuss.elastic.co/t/unique-query-id-for-slow-log/287883 "2021-10-28T06:36:01Z")
As I know, query log is per shard. If a index has 5 shards and slow query log is enabled. when issue a query, There will be 5 query logs. I am collecting these logs for analysis. I want to aggregate these 5 logs into a … --- ## [Curl\_rc 7 error when using nfs trident](https://discuss.elastic.co/t/curl-rc-7-error-when-using-nfs-trident/287882)
**Author:** [@zahar](https://discuss.elastic.co/u/zahar)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 6:34am UTC](https://discuss.elastic.co/t/curl-rc-7-error-when-using-nfs-trident/287882 "2021-10-28T06:34:41Z")
hello, i installed Elasticsearch 7.15.0 on openshift 4.6, our openshift is running on vmware vms. we have 2 storage classes: the vmware datastore that provides storage for pods with iscsi. the trident that connects to… --- ## [Accessing images into elasticsearch](https://discuss.elastic.co/t/accessing-images-into-elasticsearch/287844)
**Author:** [@Salman\_Ali](https://discuss.elastic.co/u/Salman_Ali)\ **Replies:** 6\ **Last updated:** [October 28, 2021, 6:21am UTC](https://discuss.elastic.co/t/accessing-images-into-elasticsearch/287844 "2021-10-28T06:21:01Z")
Hey I have screenshots of different sites stored on my local machine. I want to store it in Elasticsearch. So I can view each screenshot against the relevant domain in kibana. But I don't have any clue how to do this. … --- ## [Kibana - ERR\_OSSL\_PEM\_NO\_START\_LINE](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873)
**Author:** [@Trinity\_Rolling](https://discuss.elastic.co/u/Trinity_Rolling)\ **Replies:** 1\ **Last updated:** [October 28, 2021, 6:05am UTC](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873 "2021-10-28T06:05:48Z")
Elasticsearch SSL is working. Moving onto Kibana SSL. I've followed the documents to generate new csr requests for Kibana-server.cer and kibana-server.key files. I've placed them in the kibana config directory. I've… --- ## [How to distinguish ”true“ from true（they are all Booleans）](https://discuss.elastic.co/t/how-to-distinguish-true-from-true-they-are-all-booleans/287676)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 5\ **Last updated:** [October 28, 2021, 5:16am UTC](https://discuss.elastic.co/t/how-to-distinguish-true-from-true-they-are-all-booleans/287676 "2021-10-28T05:16:33Z")
v: 7.10.2 There are some docs in index such as {"tag":"true"} {"tag":true}，the tag is boolean type ...... i want to find out docs with tag==”true“，i tried script query use instanceof but it didn't work --- ## [Need to improve my ruby code to convert the data in right format](https://discuss.elastic.co/t/need-to-improve-my-ruby-code-to-convert-the-data-in-right-format/287801)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 2\ **Last updated:** [October 28, 2021, 4:08am UTC](https://discuss.elastic.co/t/need-to-improve-my-ruby-code-to-convert-the-data-in-right-format/287801 "2021-10-28T04:08:19Z")
Hi, I am using XPATH in XML filter to extract some values. I am getting three arrays. Something on these lines: ArrayOfId = \["SamplingRate","Humidity","DateOfCalibration","ProductFamily"\] ArrayOfType = \["Number","Numb… --- ## [Elasticsearch reduce latency with allow\_partial\_search\_results](https://discuss.elastic.co/t/elasticsearch-reduce-latency-with-allow-partial-search-results/287865)
**Author:** [@niketpatel2525](https://discuss.elastic.co/u/niketpatel2525)\ **Replies:** 0\ **Last updated:** [October 28, 2021, 2:33am UTC](https://discuss.elastic.co/t/elasticsearch-reduce-latency-with-allow-partial-search-results/287865 "2021-10-28T02:33:37Z")
I have an index with 60 shards. I am trying to get total counts which match my Elasticsearch query. I am using the "allow\_partial\_search\_results" query param to get total results. Without this query param, some of the s… --- ## [Looking for ElasticSearch Cluster Server Specifications Documentation](https://discuss.elastic.co/t/looking-for-elasticsearch-cluster-server-specifications-documentation/287857)
**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 9:34pm UTC](https://discuss.elastic.co/t/looking-for-elasticsearch-cluster-server-specifications-documentation/287857 "2021-10-27T21:34:04Z")
Looking for Elasticsearch Cluster Server Specifications Documentation Could someone point me to any documentations or whitepapers on the topics of the Elasticsearch Cluster Servers Specifications? I could not find what … --- ## [What are the ways to make a field of an index , not indexed but stored?](https://discuss.elastic.co/t/what-are-the-ways-to-make-a-field-of-an-index-not-indexed-but-stored/287808)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 9:26pm UTC](https://discuss.elastic.co/t/what-are-the-ways-to-make-a-field-of-an-index-not-indexed-but-stored/287808 "2021-10-27T21:26:02Z")
what are the ways to make a field of an index , not indexed but stored?. \*Is it by not defining the filed and type explicitly and then defining dynamic : runtime ? \*Are there any other methods? Is it possible to to … --- ## [Some application logs are not getting indexed](https://discuss.elastic.co/t/some-application-logs-are-not-getting-indexed/287740)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 5\ **Last updated:** [October 27, 2021, 9:20pm UTC](https://discuss.elastic.co/t/some-application-logs-are-not-getting-indexed/287740 "2021-10-27T21:20:44Z")
Hi All, Some of the application logs are not getting indexed. below are the error log about then in logstash logs. below logs has error like, ....:response=\>{"index"=\>{"\_index"=\>"filebeat-7.14.0-2021.10", "\_type"=\>"\_d… --- ## [How to connect cluster with configured TLS?](https://discuss.elastic.co/t/how-to-connect-cluster-with-configured-tls/287773)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 6\ **Last updated:** [October 27, 2021, 8:50pm UTC](https://discuss.elastic.co/t/how-to-connect-cluster-with-configured-tls/287773 "2021-10-27T20:50:37Z")
I have two similar clusters with TLS configured on each. What I need to do to connect to each other as remote cluster? Need I add ca to keystore on each node or what? What to do with secured HTTPS traffic? cluster.na… --- ## [Kibana - Shorten URL API With Workspace URL's](https://discuss.elastic.co/t/kibana-shorten-url-api-with-workspace-urls/287687)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 8:42pm UTC](https://discuss.elastic.co/t/kibana-shorten-url-api-with-workspace-urls/287687 "2021-10-27T20:42:09Z")
Currently for my project I create a lot of dashboards with really long links because they apply filters such as time range etc. The Kibana shorten URL is great for this. I'm not moving my dashboards into different work… --- ## [Logstash is delayed by 20mins reading from an S3 bucket](https://discuss.elastic.co/t/logstash-is-delayed-by-20mins-reading-from-an-s3-bucket/287833)
**Author:** [@Michael\_Day1](https://discuss.elastic.co/u/Michael_Day1)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 4:54pm UTC](https://discuss.elastic.co/t/logstash-is-delayed-by-20mins-reading-from-an-s3-bucket/287833 "2021-10-27T16:54:01Z")
I've set up a couple of logstashen running in ECS on AWS. They pull the ALB logs from the S3 buckets they dump then in to and one pokes them in to ES and the other pokes them in to Loki. Both end up being around 20-30mi… --- ## [SSL error from logstash to elastic](https://discuss.elastic.co/t/ssl-error-from-logstash-to-elastic/287729)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 8:15pm UTC](https://discuss.elastic.co/t/ssl-error-from-logstash-to-elastic/287729 "2021-10-26T20:15:38Z")
Hi, am trying to enable TLS communication from Kibana/Logstash to Elasticsearch. It works from Kibana to Elasticsearch, but seeing this error when tried from Logstash: \[2021-10-26T14:26:37,751\]\[ERROR\]\[logstash.javapipel… --- ## [FsCrawler is throwing Algorithm negotiation fail](https://discuss.elastic.co/t/fscrawler-is-throwing-algorithm-negotiation-fail/287748)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 6:18pm UTC](https://discuss.elastic.co/t/fscrawler-is-throwing-algorithm-negotiation-fail/287748 "2021-10-27T18:18:54Z")
Hi, I have Elasticsearch and fs crawler running on same server. The crawler used to index remote files until today it started showing errors while creating the index. I was not able to index the files when i ran with --… --- ## [In vega how do I handle "other" cases with a scale](https://discuss.elastic.co/t/in-vega-how-do-i-handle-other-cases-with-a-scale/287363)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 6:14pm UTC](https://discuss.elastic.co/t/in-vega-how-do-i-handle-other-cases-with-a-scale/287363 "2021-10-27T18:14:36Z")
Hello All, I have an ordinal scale that contains items \[ A, B, C\] and data that has values of \[A,B,C,D,E,F\] how do I put D,E, and F under a catch all with the scale? Similar to how "other" functions in other kibana visu… --- ## [Alert - Query to get distinct count](https://discuss.elastic.co/t/alert-query-to-get-distinct-count/287583)
**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\ **Replies:** 3\ **Last updated:** [October 27, 2021, 6:13pm UTC](https://discuss.elastic.co/t/alert-query-to-get-distinct-count/287583 "2021-10-27T18:13:25Z")
log : 1 { "\_index": "some index", "fields": { "PARTITION": \[ 4 \], "APPLICATION\_NAME": \[ "order-app" \], } } ----- log : 2 { "\_index": "some index", "fields": { "PARTITION": \[ … --- ## [How do I constrain data in a vega visualization to the visible space?](https://discuss.elastic.co/t/how-do-i-constrain-data-in-a-vega-visualization-to-the-visible-space/287131)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 5:54pm UTC](https://discuss.elastic.co/t/how-do-i-constrain-data-in-a-vega-visualization-to-the-visible-space/287131 "2021-10-27T17:54:20Z")
Hello All, is there a way to constrain all the data in a visualization to the area with in the visualization? Here is an example: { "$schema": "https://vega.github.io/schema/vega/v5.json", "width": 700, "height"… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1182) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1184)