# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1192 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1193 --- ## [Round off a aggregated numeric value to few decimal places](https://discuss.elastic.co/t/round-off-a-aggregated-numeric-value-to-few-decimal-places/287316)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 5:49pm UTC](https://discuss.elastic.co/t/round-off-a-aggregated-numeric-value-to-few-decimal-places/287316 "2021-10-21T17:49:31Z")
Hi Team, I am aggregating a numeric field which contains the response time data. When i try to find the avg value it is giving me a very long number(\>10 digitis after the decimal point). Could you please help in roundin… --- ## [Jdbc\_streaming and mutate](https://discuss.elastic.co/t/jdbc-streaming-and-mutate/287319)
**Author:** [@Roberto\_B](https://discuss.elastic.co/u/Roberto_B)\ **Replies:** 4\ **Last updated:** [October 21, 2021, 4:21pm UTC](https://discuss.elastic.co/t/jdbc-streaming-and-mutate/287319 "2021-10-21T16:21:24Z")
Hi Friends, I use a jdbc\_streaming filter in order to enrich data. This filter produces an array with only 1 document inside. How can I pop out this document in another field? I tried without success with ruby code. J… --- ## [SHA256 or MD5 in Logstash cipher filter plugin algorithm](https://discuss.elastic.co/t/sha256-or-md5-in-logstash-cipher-filter-plugin-algorithm/287328)
**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 4:13pm UTC](https://discuss.elastic.co/t/sha256-or-md5-in-logstash-cipher-filter-plugin-algorithm/287328 "2021-10-21T16:13:27Z")
Hi! I'm using cipher filter plugin in my Logstash configuration and the only example I saw until now for the algorithm is aes-256-cbc and I'd like to use md5 or sha256. How is it possible? Here is my configuration belo… --- ## [FSCrawler get a path error while running as a service](https://discuss.elastic.co/t/fscrawler-get-a-path-error-while-running-as-a-service/287320)
**Author:** [@Denn](https://discuss.elastic.co/u/Denn)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 2:26pm UTC](https://discuss.elastic.co/t/fscrawler-get-a-path-error-while-running-as-a-service/287320 "2021-10-21T14:26:53Z")
I have a working implementation of fscrawler. However, it is running on command prompt. I have tried to implement it as a service but i keep getting an error. my url looks like this url: "\\\\\\\\data-backup\\\\2020" The er… --- ## [RSS feed into ELK. Can we do it with Filebeat?](https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 2:12pm UTC](https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310 "2021-10-21T14:12:02Z")
Hey there! Can we ingest RSS feeds into Filebeat? I found a module for Logstash but given my environment would be better doing it with Filebeat. Any experience? Much appreciated! --- ## [Elastalert change timezone](https://discuss.elastic.co/t/elastalert-change-timezone/287317)
**Author:** [@josh12](https://discuss.elastic.co/u/josh12)\ **Replies:** 5\ **Last updated:** [October 21, 2021, 2:07pm UTC](https://discuss.elastic.co/t/elastalert-change-timezone/287317 "2021-10-21T14:07:17Z")
Hi i running my el;asticsearch and elastalert in docker. Data pass from beat to Elasticsearch. In Elasticsearch the time is stored local time but in elastalert is in UTC time. so when i test rule, i am hitting 0 hit sicn… --- ## [Elasticsearch is not starting](https://discuss.elastic.co/t/elasticsearch-is-not-starting/287276)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 5\ **Last updated:** [October 21, 2021, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-is-not-starting/287276 "2021-10-21T13:42:32Z")
I want to start Elasticsearch on linux system and give command like below at bin path ./elasticsearch OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed… --- ## [Return number of hits in field](https://discuss.elastic.co/t/return-number-of-hits-in-field/286101)
**Author:** [@LaySoft](https://discuss.elastic.co/u/LaySoft)\ **Replies:** 3\ **Last updated:** [October 21, 2021, 1:40pm UTC](https://discuss.elastic.co/t/return-number-of-hits-in-field/286101 "2021-10-21T13:40:28Z")
Hi! My mapping is: PUT /test { "mappings": { "properties": { "lufi": { "properties": { "duma": { "type": "keyword" … --- ## [Kibana dashboard feature](https://discuss.elastic.co/t/kibana-dashboard-feature/287128)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 1:27pm UTC](https://discuss.elastic.co/t/kibana-dashboard-feature/287128 "2021-10-21T13:27:06Z")
Hi Experts, During one of the training session with one customer. User came up with the query that - can we put security on the dashboard so it is not deleted. Scenario- Because we will have multiple dashboards for Wi… --- ## [Issue with Cisco Integration](https://discuss.elastic.co/t/issue-with-cisco-integration/287102)
**Author:** [@vdselastic](https://discuss.elastic.co/u/vdselastic)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 12:55pm UTC](https://discuss.elastic.co/t/issue-with-cisco-integration/287102 "2021-10-21T12:55:02Z")
hi, I'm trying to make the cisco integration v0.11.5 works, but I have error with the ingest pipeline cisco.ios. Here's the error that I got when I put manually a document in the pipeline: { "root\_cause": \[ { … --- ## [Azure configuration for metricbeat](https://discuss.elastic.co/t/azure-configuration-for-metricbeat/287275)
**Author:** [@Nishant\_Saxena](https://discuss.elastic.co/u/Nishant_Saxena)\ **Replies:** 0\ **Last updated:** [October 21, 2021, 8:37am UTC](https://discuss.elastic.co/t/azure-configuration-for-metricbeat/287275 "2021-10-21T08:37:02Z")
I followed the instructions given on Azure Metricbeat But nowhere it is given that which Roles needs to be assigned in Azure to get the data. I'm facing this issue Not sure which permission needs to be given in azu… --- ## [Filebeat AWS module not fetching multi region logs](https://discuss.elastic.co/t/filebeat-aws-module-not-fetching-multi-region-logs/286711)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 12:14pm UTC](https://discuss.elastic.co/t/filebeat-aws-module-not-fetching-multi-region-logs/286711 "2021-10-21T12:14:41Z")
I have configured multiple accounts of AWS with Filebeat AWS module(With help of this thread) to fetch Cloudtrail logs. However, I wonder I am getting only specific region logs. For example, I have configured an S3 noti… --- ## [Use converted timestamp from csv like index sufix](https://discuss.elastic.co/t/use-converted-timestamp-from-csv-like-index-sufix/287308)
**Author:** [@Alexey\_Nikolaev](https://discuss.elastic.co/u/Alexey_Nikolaev)\ **Replies:** 4\ **Last updated:** [October 21, 2021, 12:13pm UTC](https://discuss.elastic.co/t/use-converted-timestamp-from-csv-like-index-sufix/287308 "2021-10-21T12:13:14Z")
Hello! I have a lot of CISCO CDR files, about 500k. Its logs from clustef of CISCO CUCM, and I want to put it to indexes with name CUCM-CDR-{mm-yyyy}. Date I want to get from field named "dateTimeDisconnect". Can you he… --- ## [Matching documents with empty symbol in the end using regexp](https://discuss.elastic.co/t/matching-documents-with-empty-symbol-in-the-end-using-regexp/287023)
**Author:** [@111343](https://discuss.elastic.co/u/111343)\ **Replies:** 3\ **Last updated:** [October 21, 2021, 12:11pm UTC](https://discuss.elastic.co/t/matching-documents-with-empty-symbol-in-the-end-using-regexp/287023 "2021-10-21T12:11:47Z")
Hi I have an Elasticsearch document that can have various forms of the string "creative=". Logs that have good format look like "creative=xxx", and logs that have bad format look like "creative=". Example of bad log: h… --- ## [Capturing maximum unique count per second for each day](https://discuss.elastic.co/t/capturing-maximum-unique-count-per-second-for-each-day/287314)
**Author:** [@jevans78](https://discuss.elastic.co/u/jevans78)\ **Replies:** 0\ **Last updated:** [October 21, 2021, 12:07pm UTC](https://discuss.elastic.co/t/capturing-maximum-unique-count-per-second-for-each-day/287314 "2021-10-21T12:07:21Z")
Hi, I'm trying to get a representation of the number of unique events per second over a 3 month period. Default configuration auto-scales this to No. of events per 12 hours. Is there an easy way that I can display the … --- ## [Why only one of these queries returns a record?](https://discuss.elastic.co/t/why-only-one-of-these-queries-returns-a-record/287311)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 12:02pm UTC](https://discuss.elastic.co/t/why-only-one-of-these-queries-returns-a-record/287311 "2021-10-21T12:02:56Z")
Could someone explain why these queries are not returning the same response? This first query using script returns no records GET /ind1/\_search { "query": { "bool": { "must": \[ { "script":… --- ## [Is Logstash beats input with multiline codec allowed or not?](https://discuss.elastic.co/t/is-logstash-beats-input-with-multiline-codec-allowed-or-not/287230)
**Author:** [@Rodrigo\_Jimenez](https://discuss.elastic.co/u/Rodrigo_Jimenez)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 11:55am UTC](https://discuss.elastic.co/t/is-logstash-beats-input-with-multiline-codec-allowed-or-not/287230 "2021-10-21T11:55:33Z")
I know some of this might have been asked here before but Documentation and logs express differently. I want to fetch logs from AWS Cloudwatch. For that, i'm using filebeat's input. This input is not doing any kind of m… --- ## [Painless iterate over Nested Array](https://discuss.elastic.co/t/painless-iterate-over-nested-array/287312)
**Author:** [@Mandark1990](https://discuss.elastic.co/u/Mandark1990)\ **Replies:** 0\ **Last updated:** [October 21, 2021, 11:54am UTC](https://discuss.elastic.co/t/painless-iterate-over-nested-array/287312 "2021-10-21T11:54:51Z")
Hello Everyone, Am trying to write an ingest pipeline which will help me normalize a nested array into individual fields for better visualization in Kibana. As my current event structure doesn't allow me to build the vi… --- ## [Issue with number of values being displayed for vertical and horizontal bars in kibana](https://discuss.elastic.co/t/issue-with-number-of-values-being-displayed-for-vertical-and-horizontal-bars-in-kibana/286222)
**Author:** [@revati-chawla](https://discuss.elastic.co/u/revati-chawla)\ **Replies:** 7\ **Last updated:** [October 21, 2021, 11:51am UTC](https://discuss.elastic.co/t/issue-with-number-of-values-being-displayed-for-vertical-and-horizontal-bars-in-kibana/286222 "2021-10-21T11:51:57Z")
Hello, We are facing issues while visualising using vertical bars where the number of values being displayed on the x-axis are exceeding the limit defined in the size parameter. Version: 7.14.2 PFB a screenshot for yo… --- ## [Logstash doesn't open files](https://discuss.elastic.co/t/logstash-doesnt-open-files/287100)
**Author:** [@mrdiogon](https://discuss.elastic.co/u/mrdiogon)\ **Replies:** 8\ **Last updated:** [October 21, 2021, 11:32am UTC](https://discuss.elastic.co/t/logstash-doesnt-open-files/287100 "2021-10-21T11:32:04Z")
Hi everyone, I tried to install filebeat on a windows server which send logs to a logstash server on docker. But no indexes are created and it seems logstash doesn't get any input from logstash. Here's my configuration … --- ## [Logstash Handling Filter Errors](https://discuss.elastic.co/t/logstash-handling-filter-errors/287309)
**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 11:31am UTC](https://discuss.elastic.co/t/logstash-handling-filter-errors/287309 "2021-10-21T11:31:20Z")
I want to handle errors in my Logstash Filter. How do I do that? And more importantly, where is the documentation? I can see there is Documentation here for Elastic Pipeline Error Handling: Is there something similar… --- ## [Reindex API changed \_version of docs](https://discuss.elastic.co/t/reindex-api-changed-version-of-docs/287305)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 11:19am UTC](https://discuss.elastic.co/t/reindex-api-changed-version-of-docs/287305 "2021-10-21T11:19:17Z")
Dears, Why reindex API does not copy original doc \_version to new index? Is there any trick to force it? query: GET test/\_search?version=true { "query": { "match\_all": {} } } result: { "took" : 1, "timed\_ou… --- ## [Yet another issue using Kibana API to import Dashboard](https://discuss.elastic.co/t/yet-another-issue-using-kibana-api-to-import-dashboard/287088)
**Author:** [@skiefer](https://discuss.elastic.co/u/skiefer)\ **Replies:** 6\ **Last updated:** [October 21, 2021, 11:10am UTC](https://discuss.elastic.co/t/yet-another-issue-using-kibana-api-to-import-dashboard/287088 "2021-10-21T11:10:04Z")
I've read thru all the previous posts on the subject, and every google result I can find, but still can't get this running. I was provided a json file of Dashboard configuration to load into my environment. Kibana vers… --- ## [Logstash-output-elasticsearch load balancing not working when one of the nodes is down](https://discuss.elastic.co/t/logstash-output-elasticsearch-load-balancing-not-working-when-one-of-the-nodes-is-down/287300)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 0\ **Last updated:** [October 21, 2021, 10:09am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-load-balancing-not-working-when-one-of-the-nodes-is-down/287300 "2021-10-21T10:09:22Z")
Hi Team, Currently we are working on negative testing of Elasticsearch multi-node clustering. Out current setup is: node 1: Elasticsearch,logstash,kibana node 2: Elasticsearch node 3: Elasticsearch the logstash on n… --- ## [Issues related to embedding dashboards for public consumption](https://discuss.elastic.co/t/issues-related-to-embedding-dashboards-for-public-consumption/286695)
**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 9:55am UTC](https://discuss.elastic.co/t/issues-related-to-embedding-dashboards-for-public-consumption/286695 "2021-10-21T09:55:15Z")
Hi everyone, I'm trying to publicly display a 7.14 dashboard via iframe on the same domain. I have set up security, use an API key and everything works with anonymous access. However, there are several issues related t… --- ## [Elasticsearch Bucket script aggregation is not working with filter aggregation](https://discuss.elastic.co/t/elasticsearch-bucket-script-aggregation-is-not-working-with-filter-aggregation/287273)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 0\ **Last updated:** [October 21, 2021, 8:31am UTC](https://discuss.elastic.co/t/elasticsearch-bucket-script-aggregation-is-not-working-with-filter-aggregation/287273 "2021-10-21T08:31:17Z")
Hi All, I am trying to calculate the percentage in Elasticsearch using bucket script and below is the query I have tried it in kibana, { "size": 0, "aggs": { "Bits": { "filters": { "filters": { "ItemBi… --- ## [How to monitor funtions within an application runnign on pods](https://discuss.elastic.co/t/how-to-monitor-funtions-within-an-application-runnign-on-pods/287269)
**Author:** [@kaleelcsa](https://discuss.elastic.co/u/kaleelcsa)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 8:01am UTC](https://discuss.elastic.co/t/how-to-monitor-funtions-within-an-application-runnign-on-pods/287269 "2021-10-21T08:01:32Z")
how to monitor funtions within an application runnign on pods --- ## [Webhdfs output plugin: store\_interval\_in\_secs not used](https://discuss.elastic.co/t/webhdfs-output-plugin-store-interval-in-secs-not-used/285974)
**Author:** [@dkhwangbo](https://discuss.elastic.co/u/dkhwangbo)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 7:29am UTC](https://discuss.elastic.co/t/webhdfs-output-plugin-store-interval-in-secs-not-used/285974 "2021-10-21T07:29:23Z")
store\_interval\_in\_secs is introduced in this link. but cannot find this variable in any code base of logstash and webhdfs output plugin. is it correct? --- ## [Health check of \[/usr/share/elasticsearch/data/nodes/0\] took \[10146ms\] which is above the warn threshold of \[5s\]](https://discuss.elastic.co/t/health-check-of-usr-share-elasticsearch-data-nodes-0-took-10146ms-which-is-above-the-warn-threshold-of-5s/287255)
**Author:** [@Farzad\_Ebrahimi](https://discuss.elastic.co/u/Farzad_Ebrahimi)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 7:23am UTC](https://discuss.elastic.co/t/health-check-of-usr-share-elasticsearch-data-nodes-0-took-10146ms-which-is-above-the-warn-threshold-of-5s/287255 "2021-10-21T07:23:11Z")
Hi everyone, every day we faced to this log with level WARN: {"type": "server", "timestamp": "2021-10-20T03:13:18,747Z", "level": "WARN", "component": "o.e.m.f.FsHealthService", "cluster.name": "elasticsearch\_cluster",… --- ## [Add new button to visualizations' top navbar](https://discuss.elastic.co/t/add-new-button-to-visualizations-top-navbar/286931)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 7:08am UTC](https://discuss.elastic.co/t/add-new-button-to-visualizations-top-navbar/286931 "2021-10-21T07:08:07Z")
I am creating a Kibana plugin, and I want to add a new plugin, so I need to add a button on the top navbar of the visualization pages. I have two questions: 1- how do I add the button? 2- how can I access the data/requ… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1191) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1193)