# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1354 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1355 --- ## [Time difference](https://discuss.elastic.co/t/time-difference/276300)
**Author:** [@Cgr\_EQ](https://discuss.elastic.co/u/Cgr_EQ)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 4:10am UTC](https://discuss.elastic.co/t/time-difference/276300 "2021-06-23T04:10:07Z")
I have 2 documents and each document fields are as follow: Timestamp / ID / Field 2021-06-15 12:00:00 / 1 / Start (doc1) 2021-06-15 12… --- ## [How to find all String Type Methods of Painless](https://discuss.elastic.co/t/how-to-find-all-string-type-methods-of-painless/276623)
**Author:** [@john.zhang](https://discuss.elastic.co/u/john.zhang)\ **Replies:** 3\ **Last updated:** [June 23, 2021, 3:53am UTC](https://discuss.elastic.co/t/how-to-find-all-string-type-methods-of-painless/276623 "2021-06-23T03:53:11Z")
Hi All, I am a newer. I am curious , why not find any document for string type method of painless language. Please help tell me where to find? Thank you --- ## [I want to ask about elasticsearch and Ubuntu](https://discuss.elastic.co/t/i-want-to-ask-about-elasticsearch-and-ubuntu/276716)
**Author:** [@an\_dinh](https://discuss.elastic.co/u/an_dinh)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 3:46am UTC](https://discuss.elastic.co/t/i-want-to-ask-about-elasticsearch-and-ubuntu/276716 "2021-06-23T03:46:24Z")
When I setup Elasticsearch on Ubuntu, I made a mistake when putting 7.11.2 to: echo "deb https://artifacts.elastic.co/packages/7.11.2/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-7.11.2.list so now, wh… --- ## [Is it okay to make 7 nodes of cluster in one machine(server)?](https://discuss.elastic.co/t/is-it-okay-to-make-7-nodes-of-cluster-in-one-machine-server/276614)
**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\ **Replies:** 10\ **Last updated:** [June 23, 2021, 3:23am UTC](https://discuss.elastic.co/t/is-it-okay-to-make-7-nodes-of-cluster-in-one-machine-server/276614 "2021-06-23T03:23:58Z")
Hello. I am running ELK and this has only one node of cluster on server.(ELK version is 6.8) The indices size per a day is about below 100GB but it's gonna increase. So I need to divide nodes to master node and data no… --- ## [Check pattern in scripted field](https://discuss.elastic.co/t/check-pattern-in-scripted-field/276158)
**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\ **Replies:** 3\ **Last updated:** [June 23, 2021, 2:12am UTC](https://discuss.elastic.co/t/check-pattern-in-scripted-field/276158 "2021-06-23T02:12:57Z")
I have a field "a" that sometimes gets values that satisfy the following pattern: "AAA\_BBB\_CCC\_DDD". The relevant feature of this pattern is the occurrence of the four underscores "\_". The lenght of the A's, B's, C's an… --- ## [The elasticsearch system user](https://discuss.elastic.co/t/the-elasticsearch-system-user/276629)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 2\ **Last updated:** [June 23, 2021, 1:53am UTC](https://discuss.elastic.co/t/the-elasticsearch-system-user/276629 "2021-06-23T01:53:44Z")
hello everyone. is the elasticsearch's user has a password? if not is there any documentation about this? --- ## [Kibana dashboards to monitoring used size in GB](https://discuss.elastic.co/t/kibana-dashboards-to-monitoring-used-size-in-gb/276626)
**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\ **Replies:** 1\ **Last updated:** [June 23, 2021, 12:04am UTC](https://discuss.elastic.co/t/kibana-dashboards-to-monitoring-used-size-in-gb/276626 "2021-06-23T00:04:40Z")
Hello guys, After a long research i couldnt find what is a requirement for my project. So, i'm using Elastic Siem, essentially with ELK + Filebeat, AuditBeat, WinLogBeat, MetricBeat, Heartbeat etc... And i have a requ… --- ## [Drop field based on pattern](https://discuss.elastic.co/t/drop-field-based-on-pattern/276443)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 9:49pm UTC](https://discuss.elastic.co/t/drop-field-based-on-pattern/276443 "2021-06-22T21:49:51Z")
Hi, I have some field names that begin with the string "sub" that I want Logstash to drop. Can I do something like: if \[sub\*\] { drop {} } --- ## ['m having trouble with PROBLEM CHILD GITHUB CODE](https://discuss.elastic.co/t/m-having-trouble-with-problem-child-github-code/276649)
**Author:** [@legend](https://discuss.elastic.co/u/legend)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 9:48pm UTC](https://discuss.elastic.co/t/m-having-trouble-with-problem-child-github-code/276649 "2021-06-22T21:48:33Z")
\ POST scripts/painless/execute { "script": { "lang": "painless", "source": """ String nGramAtPosition(String field, int fieldcount, int n) { if (fieldcount+n\>field.length()) { return '' } else { return fie… --- ## [Logstash error : no implicit conversion of nil into Integer](https://discuss.elastic.co/t/logstash-error-no-implicit-conversion-of-nil-into-integer/276688)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 8:40pm UTC](https://discuss.elastic.co/t/logstash-error-no-implicit-conversion-of-nil-into-integer/276688 "2021-06-22T20:40:14Z")
Hello, elastic people, I have been making a filter in logstash of a conditional to analyze the status of a team according to the metrics, I tried it, but I get the following error, I need help with this please: \[ERROR\] … --- ## [How to customize navbar logo in 7.12.1](https://discuss.elastic.co/t/how-to-customize-navbar-logo-in-7-12-1/276170)
**Author:** [@Kanishk\_Madan](https://discuss.elastic.co/u/Kanishk_Madan)\ **Replies:** 7\ **Last updated:** [June 22, 2021, 6:47pm UTC](https://discuss.elastic.co/t/how-to-customize-navbar-logo-in-7-12-1/276170 "2021-06-22T18:47:38Z")
hello community i want to change the navbar logo that is elastic how can I do it in 7.12.1. --- ## [Error Provisioning Index Pattern](https://discuss.elastic.co/t/error-provisioning-index-pattern/276172)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 6\ **Last updated:** [June 22, 2021, 6:42pm UTC](https://discuss.elastic.co/t/error-provisioning-index-pattern/276172 "2021-06-22T18:42:03Z")
Hi, I'm trying to create an index pattern from the following json file: { "index\_pattern": { "id": "\" "version": "0.1" "title": "test-\*", "timeFieldName": "@timestamp", "fieldFormats":… --- ## [Beep actiontype](https://discuss.elastic.co/t/beep-actiontype/273851)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 6:39pm UTC](https://discuss.elastic.co/t/beep-actiontype/273851 "2021-06-22T18:39:03Z")
I have added a new actionType to my kibana source. I register it in both server and client side my action id is : .beep at this moment i log a message in file. but i want to play a beep sound in my kibana. how can… --- ## [Unble to convert to date string field](https://discuss.elastic.co/t/unble-to-convert-to-date-string-field/276661)
**Author:** [@casquero](https://discuss.elastic.co/u/casquero)\ **Replies:** 10\ **Last updated:** [June 22, 2021, 6:30pm UTC](https://discuss.elastic.co/t/unble-to-convert-to-date-string-field/276661 "2021-06-22T18:30:09Z")
I've tried to create a new field as date but always appears as string in Kibana, I've done the following: mutate { add\_field =\> { "timestampTest" =\> "%{localisodate}" } } date { match =\> \["timest… --- ## [Generate Event in Kibana when clicking at the table row in Dashboard?](https://discuss.elastic.co/t/generate-event-in-kibana-when-clicking-at-the-table-row-in-dashboard/273929)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 6:18pm UTC](https://discuss.elastic.co/t/generate-event-in-kibana-when-clicking-at-the-table-row-in-dashboard/273929 "2021-06-22T18:18:26Z")
It is possible to generate event when clicking at the table row and That generated event send data to the other index in the kibana. Is it possible to generate event on table row in kibana. --- ## [Wrong Total on listed fields in an index pattern](https://discuss.elastic.co/t/wrong-total-on-listed-fields-in-an-index-pattern/276684)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 0\ **Last updated:** [June 22, 2021, 5:29pm UTC](https://discuss.elastic.co/t/wrong-total-on-listed-fields-in-an-index-pattern/276684 "2021-06-22T17:29:12Z")
Hi all, I have an index pattern with list format data as below: linkedGPO's { "name": "Password and lockout policy", "enabled": true, "enforced": false }, { "name": "Screen Saver Lockout Policy", "enabled": t… --- ## [Elasticsearch cluster without replication](https://discuss.elastic.co/t/elasticsearch-cluster-without-replication/276682)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 5:17pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-without-replication/276682 "2021-06-22T17:17:51Z")
Can I create Elasticsearch cluster without replication? Which all settings needed to be taken care of, if I want to use it only for scaling and not for high availability. --- ## [Data table PDF Report generation using watcher](https://discuss.elastic.co/t/data-table-pdf-report-generation-using-watcher/276517)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 5:17pm UTC](https://discuss.elastic.co/t/data-table-pdf-report-generation-using-watcher/276517 "2021-06-22T17:17:46Z")
Hello Everyone, I am trying to generate a PDF report to send an email with data table visualization which contains more than 700 rows and 12 columns. To see all the lines in the PDF report I have updated the "Per Page" … --- ## [Logstash error and MetricBeat stopped](https://discuss.elastic.co/t/logstash-error-and-metricbeat-stopped/276398)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 4:49pm UTC](https://discuss.elastic.co/t/logstash-error-and-metricbeat-stopped/276398 "2021-06-22T16:49:15Z")
I noticed yesterday that my Metricbeat service had stopped running on the Windows test box I have. When I start Logstash I receive the below information. \[2021-06-18T10:28:12,009\]\[WARN \]\[logstash.outputs.elasticsearch\]… --- ## [Getting an error while installing logstash websocket plugin](https://discuss.elastic.co/t/getting-an-error-while-installing-logstash-websocket-plugin/276618)
**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 4:37pm UTC](https://discuss.elastic.co/t/getting-an-error-while-installing-logstash-websocket-plugin/276618 "2021-06-22T16:37:10Z")
i want to install logstash websocket pluginto make a real-time communication between Elasticsearch and Logstash, through a websocket.\`this is the error that i get while installing ERROR: Installation Aborted, message: B… --- ## [Elasticsearch Python not raising error when no hits and several shards have failed](https://discuss.elastic.co/t/elasticsearch-python-not-raising-error-when-no-hits-and-several-shards-have-failed/276679)
**Author:** [@mcdecoderdude](https://discuss.elastic.co/u/mcdecoderdude)\ **Replies:** 0\ **Last updated:** [June 22, 2021, 4:36pm UTC](https://discuss.elastic.co/t/elasticsearch-python-not-raising-error-when-no-hits-and-several-shards-have-failed/276679 "2021-06-22T16:36:31Z")
Elasticsearch python library is not raising error when no hits and several shards have failed. Since there are no hits being returned the error handing is not being called after the hits are yielded. This is in the scan … --- ## [How to create View only user in Kibana for dashboard and logs](https://discuss.elastic.co/t/how-to-create-view-only-user-in-kibana-for-dashboard-and-logs/276230)
**Author:** [@Bugsbee](https://discuss.elastic.co/u/Bugsbee)\ **Replies:** 5\ **Last updated:** [June 22, 2021, 4:01pm UTC](https://discuss.elastic.co/t/how-to-create-view-only-user-in-kibana-for-dashboard-and-logs/276230 "2021-06-22T16:01:30Z")
hi all, I'm using elk cloud,now I created user but i see that the kibana\_dashboard\_only\_user ,kibana\_user is deprecated I need to be able to create user that can only view the logs and dashboard. Only admin should be … --- ## [How to query n-gram completions that match phrase prefix?](https://discuss.elastic.co/t/how-to-query-n-gram-completions-that-match-phrase-prefix/276607)
**Author:** [@sabetai](https://discuss.elastic.co/u/sabetai)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 3:17pm UTC](https://discuss.elastic.co/t/how-to-query-n-gram-completions-that-match-phrase-prefix/276607 "2021-06-22T15:17:02Z")
How can I query my index to suggest phrases that complete the user's query? I'd like a query similar to match\_phrase\_prefix , except instead of retrieving the entire doc it returns n-grams from the doc fields that comple… --- ## [Searching by \_id returns different results when the search is repeated](https://discuss.elastic.co/t/searching-by-id-returns-different-results-when-the-search-is-repeated/276577)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 3:06pm UTC](https://discuss.elastic.co/t/searching-by-id-returns-different-results-when-the-search-is-repeated/276577 "2021-06-22T15:06:38Z")
I'm on ES 6.8, with a 3 node cluster, and the status is green. First of all, I'm aware that I can Get by ID, but for this scenario, I am searching by ID. My question is.... Is this a bug, or just a quirk of how distrib… --- ## [Error while installing offline Elasticsearch 7.12](https://discuss.elastic.co/t/error-while-installing-offline-elasticsearch-7-12/276659)
**Author:** [@BenjaminD](https://discuss.elastic.co/u/BenjaminD)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 2:14pm UTC](https://discuss.elastic.co/t/error-while-installing-offline-elasticsearch-7-12/276659 "2021-06-22T14:14:33Z")
Hi everyone. I'm trying to install Elasticsearch 7.12.1 on a server for a customer. The OS is Ubuntu Server 9.3.0-17 aka 20.04 (the LTS one). OpenJDK 16 included. This server is offline so I downloaded the deb packag… --- ## [Multi Metric Watcher won't trigger Action even though condition is met](https://discuss.elastic.co/t/multi-metric-watcher-wont-trigger-action-even-though-condition-is-met/276474)
**Author:** [@Rohan-boogeyman](https://discuss.elastic.co/u/Rohan-boogeyman)\ **Replies:** 8\ **Last updated:** [June 22, 2021, 2:14pm UTC](https://discuss.elastic.co/t/multi-metric-watcher-wont-trigger-action-even-though-condition-is-met/276474 "2021-06-22T14:14:06Z")
Hello guys, Hope you are all doing great - need some assistance on this issue i am experiencing where when i try to Simulate this watcher - it won't trigger the "action" it just leaves action blank as if conditions were… --- ## [Geojson map does not load to elastic index](https://discuss.elastic.co/t/geojson-map-does-not-load-to-elastic-index/276512)
**Author:** [@Roy\_Levy](https://discuss.elastic.co/u/Roy_Levy)\ **Replies:** 4\ **Last updated:** [June 22, 2021, 2:12pm UTC](https://discuss.elastic.co/t/geojson-map-does-not-load-to-elastic-index/276512 "2021-06-22T14:12:03Z")
Hey, I'm trying to load a geojson map to an index through the use of 'Maps' in Kibana, and it works for me in one cluster but does not work in the other. The loading of the file to the index does not come to an end and… --- ## [Log stoppage alert using Machine learning in ELK 7.12](https://discuss.elastic.co/t/log-stoppage-alert-using-machine-learning-in-elk-7-12/274105)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 5\ **Last updated:** [June 22, 2021, 2:02pm UTC](https://discuss.elastic.co/t/log-stoppage-alert-using-machine-learning-in-elk-7-12/274105 "2021-06-22T14:02:06Z")
Hi, Please help to create a log stoppage alert for critical devices using machine learning. For example: Index "A" contains 10 Active directory server logs. Need to generate an email alert if Elasticsearch stop receiv… --- ## [Math operation after aggregation in kibana while using scripted fields](https://discuss.elastic.co/t/math-operation-after-aggregation-in-kibana-while-using-scripted-fields/276602)
**Author:** [@shailendra](https://discuss.elastic.co/u/shailendra)\ **Replies:** 3\ **Last updated:** [June 22, 2021, 1:56pm UTC](https://discuss.elastic.co/t/math-operation-after-aggregation-in-kibana-while-using-scripted-fields/276602 "2021-06-22T13:56:16Z")
Hi Everyone, I have two scripted fields in my kibana index pattern, let's say "scripted field1" and "scripted field2". Now I wanted to display sum(scripted field1)/sum(scripted field2) in my visualisation. This kind o… --- ## [ML DataFrame Analytic Job on static/stream data Index](https://discuss.elastic.co/t/ml-dataframe-analytic-job-on-static-stream-data-index/275905)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 2\ **Last updated:** [June 22, 2021, 1:51pm UTC](https://discuss.elastic.co/t/ml-dataframe-analytic-job-on-static-stream-data-index/275905 "2021-06-22T13:51:26Z")
Is it possible to run a ML analytic job on an index that has static data or streaming data? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1353) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1355)