# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1361

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1362

---

## [Kibana API Reference](https://discuss.elastic.co/t/kibana-api-reference/276153)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [June 17, 2021, 1:34pm UTC](https://discuss.elastic.co/t/kibana-api-reference/276153 "2021-06-17T13:34:28Z")

</div>

Hi, Can someone point me to the reference that documents all of the api settings mentioned on this page please? Thx D

---

## [Implementing DocViewer](https://discuss.elastic.co/t/implementing-docviewer/273486)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 4\
**Last updated:** [June 17, 2021, 12:53pm UTC](https://discuss.elastic.co/t/implementing-docviewer/273486 "2021-06-17T12:53:32Z")

</div>

Hi team, is it posible to implement DocViewer component from Discover app to my custom plugin? Kibana 7.10.0

---

## [Index Date Math with seconds](https://discuss.elastic.co/t/index-date-math-with-seconds/276161)

<div class="topic-metadata">

**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\
**Replies:** 4\
**Last updated:** [June 17, 2021, 12:48pm UTC](https://discuss.elastic.co/t/index-date-math-with-seconds/276161 "2021-06-17T12:48:59Z")

</div>

Hi All, When I try to create an index using date math expression PUT /%3Cdata-index-%7Bnow%2Fm%7Byyyy-MM-dd-HH-mm-ss%7D%7D%3E which produces an index as data-index-2021-06-16-12-41-00 Why seconds are always 00 (if yo…

---

## [IIS Dashboard for metricbeat](https://discuss.elastic.co/t/iis-dashboard-for-metricbeat/276247)

<div class="topic-metadata">

**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\
**Replies:** 6\
**Last updated:** [June 17, 2021, 12:33pm UTC](https://discuss.elastic.co/t/iis-dashboard-for-metricbeat/276247 "2021-06-17T12:33:12Z")

</div>

Dear all, I have a problem with data visualization dashboard exactly with metricbeat IIS dashboard. The problem is that I have filter "locked" on metricbeat-\* index pattern there is a way to show data that are stor…

---

## [New data source mysql](https://discuss.elastic.co/t/new-data-source-mysql/276261)

<div class="topic-metadata">

**Author:** [@alexkr](https://discuss.elastic.co/u/alexkr)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 12:29pm UTC](https://discuss.elastic.co/t/new-data-source-mysql/276261 "2021-06-17T12:29:41Z")

</div>

Hey I need your help please I try to connect new data source mysql The DB is also local in the same server How I can do it?

---

## [Field search using Logstash configuration](https://discuss.elastic.co/t/field-search-using-logstash-configuration/276259)

<div class="topic-metadata">

**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\
**Replies:** 0\
**Last updated:** [June 17, 2021, 11:41am UTC](https://discuss.elastic.co/t/field-search-using-logstash-configuration/276259 "2021-06-17T11:41:10Z")

</div>

Hi , Below is my requirement. I have two indexes Index : Client\_one \[fields : employee\_no1,salary, exp\] Index: client\_two. \[fields " employee\_no2, total\_exp\] Both index have one common field employee\_no. I want to …

---

## [How to Query the data between 2 different timestamp](https://discuss.elastic.co/t/how-to-query-the-data-between-2-different-timestamp/276150)

<div class="topic-metadata">

**Author:** [@Kannan\_V](https://discuss.elastic.co/u/Kannan_V)\
**Replies:** 2\
**Last updated:** [June 17, 2021, 11:40am UTC](https://discuss.elastic.co/t/how-to-query-the-data-between-2-different-timestamp/276150 "2021-06-17T11:40:49Z")

</div>

Hi, How to query the data between 2 different timestamps? We have a data. I am able to query through Kibana Discover tab. But i am not able to query through devTools or Curl command. Following is my devtool command G…

---

## [Two or more policies have the same schedule](https://discuss.elastic.co/t/two-or-more-policies-have-the-same-schedule/275980)

<div class="topic-metadata">

**Author:** [@Rinku\_Gulia](https://discuss.elastic.co/u/Rinku_Gulia)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 11:16am UTC](https://discuss.elastic.co/t/two-or-more-policies-have-the-same-schedule/275980 "2021-06-17T11:16:02Z")

</div>

Cannot we schedule 2 policies of the same schedule in 2 different repositories?. Kibana adds them and executing them as well on that schedule. What problems can be faced if we schedule 2 policies at the same interval?…

---

## [Unable to find the cluster in the selected time range](https://discuss.elastic.co/t/unable-to-find-the-cluster-in-the-selected-time-range/275874)

<div class="topic-metadata">

**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 11:11am UTC](https://discuss.elastic.co/t/unable-to-find-the-cluster-in-the-selected-time-range/275874 "2021-06-17T11:11:35Z")

</div>

I have EBK setup, but when I try to setup monitoring in /app/monitoring with Set up monitoring with Metricbeat I get Monitoring Request Failed Unable to find the cluster in the selected time range. UUID: iKsZ1PfnTfWth…

---

## [Adding a new node to a cluster with passwords already set](https://discuss.elastic.co/t/adding-a-new-node-to-a-cluster-with-passwords-already-set/276237)

<div class="topic-metadata">

**Author:** [@Timm\_Lehmberg](https://discuss.elastic.co/u/Timm_Lehmberg)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 10:55am UTC](https://discuss.elastic.co/t/adding-a-new-node-to-a-cluster-with-passwords-already-set/276237 "2021-06-17T10:55:56Z")

</div>

Apologies if my approach in the described in the following is stupid. set up elasticsearch 7.13 on node-1 as a single node cluster, enabled TLS and ran bin/elasticsearch-setup-passwords interactive set up elasticsear…

---

## [Transform API](https://discuss.elastic.co/t/transform-api/276256)

<div class="topic-metadata">

**Author:** [@Iliya\_Zukerman](https://discuss.elastic.co/u/Iliya_Zukerman)\
**Replies:** 0\
**Last updated:** [June 17, 2021, 10:54am UTC](https://discuss.elastic.co/t/transform-api/276256 "2021-06-17T10:54:01Z")

</div>

hI I am able to create Transform but after it has been created and started there is no corresponding IndexPattern so I can't see it in Kiban when I create the same transform from UI the indexpattern is created automatic…

---

## [Network in bout traffic rollup](https://discuss.elastic.co/t/network-in-bout-traffic-rollup/276244)

<div class="topic-metadata">

**Author:** [@ghaithTK](https://discuss.elastic.co/u/ghaithTK)\
**Replies:** 0\
**Last updated:** [June 17, 2021, 9:36am UTC](https://discuss.elastic.co/t/network-in-bout-traffic-rollup/276244 "2021-06-17T09:36:56Z")

</div>

Hi I am trying to rollup (daily) network inbound traffic using field system.network.in.bytes. but when i use inbound visualization with rollup index i got this(image) what the problem and is there another way to ro…

---

## [Fetch list in dropdown from newest in index](https://discuss.elastic.co/t/fetch-list-in-dropdown-from-newest-in-index/276009)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 2\
**Last updated:** [June 17, 2021, 10:38am UTC](https://discuss.elastic.co/t/fetch-list-in-dropdown-from-newest-in-index/276009 "2021-06-17T10:38:58Z")

</div>

I made a drop down for the filter with the Controls type in kibana visualizations. however it seem like this is starting the fetch from the beginning of the index, and if a keyword/value is indexed for the first time ye…

---

## [Refreshing Indices](https://discuss.elastic.co/t/refreshing-indices/274252)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 3\
**Last updated:** [June 17, 2021, 10:29am UTC](https://discuss.elastic.co/t/refreshing-indices/274252 "2021-06-17T10:29:28Z")

</div>

Hi All, Is there a way I could refresh indices (field list) by not relying on doing it manually through Kibana? Can a curl command be used instead? I have ELK 7.6.2 stack. Thanks

---

## [How to use cutom geoip database in cloud elastic?](https://discuss.elastic.co/t/how-to-use-cutom-geoip-database-in-cloud-elastic/276249)

<div class="topic-metadata">

**Author:** [@tonik](https://discuss.elastic.co/u/tonik)\
**Replies:** 0\
**Last updated:** [June 17, 2021, 10:13am UTC](https://discuss.elastic.co/t/how-to-use-cutom-geoip-database-in-cloud-elastic/276249 "2021-06-17T10:13:34Z")

</div>

Hi. I'm trying to convert ipv4 into geo location and I want to change database, coz it's setting incorrect location now. I cannot understand how to use/upload custom geoip database in cloud elastic cluster. Because docu…

---

## [Json format returned in search how to parse into fields?](https://discuss.elastic.co/t/json-format-returned-in-search-how-to-parse-into-fields/276201)

<div class="topic-metadata">

**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 9:55am UTC](https://discuss.elastic.co/t/json-format-returned-in-search-how-to-parse-into-fields/276201 "2021-06-17T09:55:58Z")

</div>

excuse me if I don't havethe correct terms but, I have this format from a search I am doing in kibana: How do I turn the gateway, rssi,snr in metrics like the messageTime is in the same pic? Can this be done at thi…

---

## [Missing logs](https://discuss.elastic.co/t/missing-logs/276234)

<div class="topic-metadata">

**Author:** [@Shaked](https://discuss.elastic.co/u/Shaked)\
**Replies:** 6\
**Last updated:** [June 17, 2021, 9:50am UTC](https://discuss.elastic.co/t/missing-logs/276234 "2021-06-17T09:50:54Z")

</div>

Hi everyone, I would be happy to get your help with a critical issue we have. We run AWS ElasticSearch service (v7.10) with Logstash as a Docker container on ECS Fargate. All of our environments are running the servic…

---

## [Best practices for fine tuning performance when it comes to Elasticsearch, Logstash and Kibana?](https://discuss.elastic.co/t/best-practices-for-fine-tuning-performance-when-it-comes-to-elasticsearch-logstash-and-kibana/273913)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 21\
**Last updated:** [June 17, 2021, 8:22am UTC](https://discuss.elastic.co/t/best-practices-for-fine-tuning-performance-when-it-comes-to-elasticsearch-logstash-and-kibana/273913 "2021-06-17T08:22:01Z")

</div>

Hello We have a Elastic Stack setup. Our basic architecture is based on this: Beats/source/etc -\> Logstash -\> Elasticsearch. Meaning, all incoming data always passes thru Logstash first. We have created various Logst…

---

## [Configuration for master node in YAML](https://discuss.elastic.co/t/configuration-for-master-node-in-yaml/275975)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 5\
**Last updated:** [June 17, 2021, 8:15am UTC](https://discuss.elastic.co/t/configuration-for-master-node-in-yaml/275975 "2021-06-17T08:15:45Z")

</div>

Hi Team, I have configured big cluster in my production env. just wanted to confirm do we need to allocate half of memory in master node also. Suppose i have 16G node and do i need to allocate 8G in jvm options file wha…

---

## [.async\_search Index Problem](https://discuss.elastic.co/t/async-search-index-problem/275628)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 8:15am UTC](https://discuss.elastic.co/t/async-search-index-problem/275628 "2021-06-17T08:15:23Z")

</div>

Hi, Today we had a big crash in our Netapp cabinet and our elastic cluster went down After starting up all our indices appeared to be ok with the exception of this internal's elasticsearch index .async-search which is …

---

## [Last\_run\_metadata\_path not updated with sql\_last\_value](https://discuss.elastic.co/t/last-run-metadata-path-not-updated-with-sql-last-value/276143)

<div class="topic-metadata">

**Author:** [@Alesora](https://discuss.elastic.co/u/Alesora)\
**Replies:** 2\
**Last updated:** [June 17, 2021, 8:06am UTC](https://discuss.elastic.co/t/last-run-metadata-path-not-updated-with-sql-last-value/276143 "2021-06-17T08:06:14Z")

</div>

Hi, I m new to ELK and I'm having an issue with the jdbc sql\_last\_value. So I'm trying to update my Elastic database from a SQL database using the jdbc driver, I want to update records that are modified (dhm is the row t…

---

## [Filebeat](https://discuss.elastic.co/t/filebeat/276224)

<div class="topic-metadata">

**Author:** [@SLIM\_SLIM](https://discuss.elastic.co/u/SLIM_SLIM)\
**Replies:** 0\
**Last updated:** [June 17, 2021, 7:26am UTC](https://discuss.elastic.co/t/filebeat/276224 "2021-06-17T07:26:37Z")

</div>

Hi, i want to regroup lines in log file (5 lines max), i want to regroup lines until (default task-XX) This is my filebeat config : fields\_under\_root: true multiline.type: pattern multiline.pattern: '\[0-9\]{4}-\[0-…

---

## [Optimizing shard placement for indexing](https://discuss.elastic.co/t/optimizing-shard-placement-for-indexing/276227)

<div class="topic-metadata">

**Author:** [@Timur\_Makarchuk](https://discuss.elastic.co/u/Timur_Makarchuk)\
**Replies:** 0\
**Last updated:** [June 17, 2021, 7:49am UTC](https://discuss.elastic.co/t/optimizing-shard-placement-for-indexing/276227 "2021-06-17T07:49:20Z")

</div>

Good day, everyone! I'm currently working on a tool that would spread indices in our cluster to spread indexing load more optimally, as inspired by this article (Optimal Shard Placement in a Petabyte Scale Elasticsearch…

---

## [Is field type "wildcard" supported in elasticsearch-spark?](https://discuss.elastic.co/t/is-field-type-wildcard-supported-in-elasticsearch-spark/275983)

<div class="topic-metadata">

**Author:** [@jrxs](https://discuss.elastic.co/u/jrxs)\
**Replies:** 1\
**Last updated:** [June 17, 2021, 7:41am UTC](https://discuss.elastic.co/t/is-field-type-wildcard-supported-in-elasticsearch-spark/275983 "2021-06-17T07:41:09Z")

</div>

Hi, I am currently doing some tests to see if I can use Apache Spark and the elasticsearch-spark (elasticsearch-hadoop) to analyse data that I have in elasticsearch. I am testing using the following versions in a docke…

---

## [No cached mapping for important monitoring fields](https://discuss.elastic.co/t/no-cached-mapping-for-important-monitoring-fields/276225)

<div class="topic-metadata">

**Author:** [@kodka](https://discuss.elastic.co/u/kodka)\
**Replies:** 0\
**Last updated:** [June 17, 2021, 7:28am UTC](https://discuss.elastic.co/t/no-cached-mapping-for-important-monitoring-fields/276225 "2021-06-17T07:28:33Z")

</div>

(I tried to refresh cached mapping in the index pattern page, it didn't help.) I have two clusters with very similar architecture, one of them have this problem, but the other one is fine, differences between them are t…

---

## [Logstash How to read only name of the file](https://discuss.elastic.co/t/logstash-how-to-read-only-name-of-the-file/276096)

<div class="topic-metadata">

**Author:** [@Betorov](https://discuss.elastic.co/u/Betorov)\
**Replies:** 2\
**Last updated:** [June 17, 2021, 6:27am UTC](https://discuss.elastic.co/t/logstash-how-to-read-only-name-of-the-file/276096 "2021-06-17T06:27:27Z")

</div>

Hi I'am new to elasticsearch. I wanted to know if there was a possible way to read only the names of the files and ignore the contents inside (I must ignore it to prevent error. I saw this posts but it didn't work for m…

---

## [Problem in connecting to Elasticsearch using Python script](https://discuss.elastic.co/t/problem-in-connecting-to-elasticsearch-using-python-script/276130)

<div class="topic-metadata">

**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\
**Replies:** 4\
**Last updated:** [June 17, 2021, 6:17am UTC](https://discuss.elastic.co/t/problem-in-connecting-to-elasticsearch-using-python-script/276130 "2021-06-17T06:17:42Z")

</div>

Hello All, I have a 3 node elastic cluster setup on EC2. I am trying to connect to my cluster and index some sample data using python script. Below is my python script: - from elasticsearch import Elasticsearch es=Ela…

---

## [Jolokia module - tomcat](https://discuss.elastic.co/t/jolokia-module-tomcat/276220)

<div class="topic-metadata">

**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\
**Replies:** 0\
**Last updated:** [June 17, 2021, 5:39am UTC](https://discuss.elastic.co/t/jolokia-module-tomcat/276220 "2021-06-17T05:39:37Z")

</div>

Hi, I have multiple tomcat running on same server in different ports. localhost:80 localhost:8081 now how i can use same metricbeat jolokia module to monitor the both. and i metricbeat tomcat dashboard i would like t…

---

## [Elasticsearch 7.13 2 nodes cluster](https://discuss.elastic.co/t/elasticsearch-7-13-2-nodes-cluster/276079)

<div class="topic-metadata">

**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\
**Replies:** 6\
**Last updated:** [June 17, 2021, 5:29am UTC](https://discuss.elastic.co/t/elasticsearch-7-13-2-nodes-cluster/276079 "2021-06-17T05:29:37Z")

</div>

Hi I have two nodes(xnode1, xnode2) cluster on elasticsearch 7.13. I made cluster succesfully, it showing 2 nodes in cluster. For testing i stop xnode2, it showing 1 node cluster. but when stop xnode1 , then try curl w…

---

## [Wrong fields are comimg](https://discuss.elastic.co/t/wrong-fields-are-comimg/276136)

<div class="topic-metadata">

**Author:** [@stark](https://discuss.elastic.co/u/stark)\
**Replies:** 4\
**Last updated:** [June 17, 2021, 4:50am UTC](https://discuss.elastic.co/t/wrong-fields-are-comimg/276136 "2021-06-17T04:50:18Z")

</div>

boosting terms have higher precedence than keyword i search for eg if i search keyword 'index" top fields contain this word in description and lower fields contain keyword in title but i boost title field why this issue …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1360)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1362)
