# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1380 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1381 --- ## [Authentication of \[elastic\] was terminated by realm \[reserved\]](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/275072)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 14\ **Last updated:** [June 7, 2021, 2:28pm UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved/275072 "2021-06-07T14:28:09Z")
My ELK stack version is 7.9.2 My aim is to enable authentication in Kibana login page but I'm not able to do that. I'm alays directed to the dashboard directly and it never asks for username and password ELK servers ar… --- ## [Value does not exist](https://discuss.elastic.co/t/value-does-not-exist/274833)
**Author:** [@kehers](https://discuss.elastic.co/u/kehers)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 2:04pm UTC](https://discuss.elastic.co/t/value-does-not-exist/274833 "2021-06-07T14:04:05Z")
I am familiar with checking if a field exists using the exists query. I am wondering if there is a way to check if a value does not exist instead; something like this: GET /\_search { "query": { "bool": { "m… --- ## [Data Path per-Index Basis](https://discuss.elastic.co/t/data-path-per-index-basis/275157)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 2:00pm UTC](https://discuss.elastic.co/t/data-path-per-index-basis/275157 "2021-06-07T14:00:57Z")
Hi Elastic Community, I'm running a three node cluster. I've defined the directory for storing indices with data.path in elasticsearch.yml. Is it possible to change the storing directory for a specific index? Personall… --- ## [Display aggregated counter value per interval](https://discuss.elastic.co/t/display-aggregated-counter-value-per-interval/272333)
**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\ **Replies:** 8\ **Last updated:** [June 7, 2021, 1:34pm UTC](https://discuss.elastic.co/t/display-aggregated-counter-value-per-interval/272333 "2021-06-07T13:34:33Z")
I have two counters for open and closes issues, something like this: timpestamp: epoch\_mill1, total: 2000, open: 200, closed: 1800 timpestamp: epoch\_mill2, total: 2200, open: 250, closed: 1950 timpestamp: epoch\_mill3, t… --- ## ["Latest" transform new feature - does it reduce load compared to a scripted metric?](https://discuss.elastic.co/t/latest-transform-new-feature-does-it-reduce-load-compared-to-a-scripted-metric/274888)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 1:20pm UTC](https://discuss.elastic.co/t/latest-transform-new-feature-does-it-reduce-load-compared-to-a-scripted-metric/274888 "2021-06-07T13:20:28Z")
I have been making use of scripted metrics to find the latest document inside a traditional transform. The new "Latest" document transform offering works to work really well and is dead simple to use! Question - would … --- ## [Selecting a dashboard links to a blank screen](https://discuss.elastic.co/t/selecting-a-dashboard-links-to-a-blank-screen/275151)
**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 12:55pm UTC](https://discuss.elastic.co/t/selecting-a-dashboard-links-to-a-blank-screen/275151 "2021-06-07T12:55:11Z")
Hello, Selecting a dashboard in Kibana leads to a blank screen. Any ideas on what could be causing this? --- ## [Network bandwidth from firewall logs in timelion](https://discuss.elastic.co/t/network-bandwidth-from-firewall-logs-in-timelion/274637)
**Author:** [@jfs1](https://discuss.elastic.co/u/jfs1)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 12:54pm UTC](https://discuss.elastic.co/t/network-bandwidth-from-firewall-logs-in-timelion/274637 "2021-06-07T12:54:52Z")
I configured timelion to graph network usage (in Mbps) for all HTTPS traffic. The timelion expression is : .es(q="observer.ingress.interface.name:Untrust-4 and destination.port:443",index="fw-\*",timefield="@timestamp",m… --- ## [Logstash/grok to match only first occurrence and stop parsing repeatedly for same values](https://discuss.elastic.co/t/logstash-grok-to-match-only-first-occurrence-and-stop-parsing-repeatedly-for-same-values/274201)
**Author:** [@theirfan](https://discuss.elastic.co/u/theirfan)\ **Replies:** 23\ **Last updated:** [June 7, 2021, 12:10pm UTC](https://discuss.elastic.co/t/logstash-grok-to-match-only-first-occurrence-and-stop-parsing-repeatedly-for-same-values/274201 "2021-06-07T12:10:28Z")
Hi all, I have this issue with logstash/grok. Stated Working with ELK some days back. A newbie, please help. I have a log (sample below) Timestamp temperature 20 Timestamp temperature 20 Timestamp temperature 21 N… --- ## [Batch request failed with status 0 meaning](https://discuss.elastic.co/t/batch-request-failed-with-status-0-meaning/272321)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 11:40am UTC](https://discuss.elastic.co/t/batch-request-failed-with-status-0-meaning/272321 "2021-06-07T11:40:43Z")
I'm getting this error on my visuals and I can't find information anywhere about what it may mean. Can anyone tell me? --- ## [Import JSON with nested fields](https://discuss.elastic.co/t/import-json-with-nested-fields/275010)
**Author:** [@aamrankw](https://discuss.elastic.co/u/aamrankw)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 11:06am UTC](https://discuss.elastic.co/t/import-json-with-nested-fields/275010 "2021-06-07T11:06:23Z")
Hello all, I would like your support in defining a proper filter for importing the following JSON object: { "status": "ok", "message-type": "work-list", "message-version": "1.0.0", "message": { … --- ## [Unable to update mappings for Date fields in order to prepare for migration from 6.x to 7.x](https://discuss.elastic.co/t/unable-to-update-mappings-for-date-fields-in-order-to-prepare-for-migration-from-6-x-to-7-x/275138)
**Author:** [@Raja\_Kolluri](https://discuss.elastic.co/u/Raja_Kolluri)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 11:04am UTC](https://discuss.elastic.co/t/unable-to-update-mappings-for-date-fields-in-order-to-prepare-for-migration-from-6-x-to-7-x/275138 "2021-06-07T11:04:32Z")
Hi, i am trying to migrate Elasticsearch from 6.x to 7.x version. "Indices" Tab in Upgrade Assistant 7.0 page in Kibana shows below warning message for most of my indices, This index has date fields with deprecated f… --- ## [Fleet-Server for arm64](https://discuss.elastic.co/t/fleet-server-for-arm64/274900)
**Author:** [@fgierlinger](https://discuss.elastic.co/u/fgierlinger)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 11:02am UTC](https://discuss.elastic.co/t/fleet-server-for-arm64/274900 "2021-06-07T11:02:00Z")
For all you aarch64/arm64 loving people out there, I ported fleet-server to arm64. If you are running a raspberry pi elastic cluster and are trying out the bleeding edge releases, the last 7.13.x release left you out in… --- ## [Heartbeat remote error: tls: handshake failure](https://discuss.elastic.co/t/heartbeat-remote-error-tls-handshake-failure/274999)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 10:55am UTC](https://discuss.elastic.co/t/heartbeat-remote-error-tls-handshake-failure/274999 "2021-06-07T10:55:26Z")
Dear team, I recently enabled TLS on http and wanted to configure heartbeat to communicate with els on HTTPS. I have done following configuration: # ----------------------------------- ElasticSearch connection --------… --- ## [Elastic agents and existing beats](https://discuss.elastic.co/t/elastic-agents-and-existing-beats/274972)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 10:54am UTC](https://discuss.elastic.co/t/elastic-agents-and-existing-beats/274972 "2021-06-07T10:54:49Z")
If i have a server with winlog beat and filebeat iis module, can i install the elastic agent on this with the same integrations or do i need to uninstall the current set of beats? --- ## [Filebeat - Non-zero metrics in the last 30s](https://discuss.elastic.co/t/filebeat-non-zero-metrics-in-the-last-30s/275114)
**Author:** [@sacher](https://discuss.elastic.co/u/sacher)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 10:46am UTC](https://discuss.elastic.co/t/filebeat-non-zero-metrics-in-the-last-30s/275114 "2021-06-07T10:46:08Z")
The file update has not been detected, but the file has been updated and the ES index has not been written. log 2021-06-04T12:39:30.519Z INFO instance/beat.go:304 Setup Beat: filebeat; Version: 7.12.1 2021-06-04T12:39:… --- ## [Disable autosize warning](https://discuss.elastic.co/t/disable-autosize-warning/275127)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 10:17am UTC](https://discuss.elastic.co/t/disable-autosize-warning/275127 "2021-06-07T10:17:39Z")
Kibana version : 7.10 Elasticsearch version : 7.10 APM Server version : 7.10 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Windows elastic agent does not run](https://discuss.elastic.co/t/windows-elastic-agent-does-not-run/274606)
**Author:** [@Enrique\_Pedroza](https://discuss.elastic.co/u/Enrique_Pedroza)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 8:59am UTC](https://discuss.elastic.co/t/windows-elastic-agent-does-not-run/274606 "2021-06-07T08:59:00Z")
I have installed elastic fleet agent in windows machine. It works fine but to run it as a service at boot it gives error and do not launch. If i manually run it woks, the problem is the windows service. At the moment of… --- ## [Create scripted field showing time differences](https://discuss.elastic.co/t/create-scripted-field-showing-time-differences/275134)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 10:36am UTC](https://discuss.elastic.co/t/create-scripted-field-showing-time-differences/275134 "2021-06-07T10:36:02Z")
Hi everyone, I am running Elastic Stack 7.9 with a basic license. In my data I have two date fields and I want to create a scripted field that writes the difference in a nice format. I easily get the difference by just … --- ## [Performance of 'Update by query' for frequent runs with at most 1 object returned](https://discuss.elastic.co/t/performance-of-update-by-query-for-frequent-runs-with-at-most-1-object-returned/275122)
**Author:** [@hariso](https://discuss.elastic.co/u/hariso)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 10:06am UTC](https://discuss.elastic.co/t/performance-of-update-by-query-for-frequent-runs-with-at-most-1-object-returned/275122 "2021-06-07T10:06:51Z")
How does UBQ perform when it's being run frequently, and where at most one object will be updated? I have a cluster with a significant number of indexes and quite some documents (a few billions in total). In certain proc… --- ## [Error with](https://discuss.elastic.co/t/error-with/274054)
**Author:** [@Denden](https://discuss.elastic.co/u/Denden)\ **Replies:** 5\ **Last updated:** [June 7, 2021, 9:50am UTC](https://discuss.elastic.co/t/error-with/274054 "2021-06-07T09:50:54Z")
Hello there, I have a single ELK node, and I have some error that I can't find soutions. One of them is : illegal\_argument\_exception at shard 0index metricbeat-7.11.2-2021.05.26node ugebynP7RImmkUP5TCeGEA Typ… --- ## [Transform api gives unsupported aggregation type \[multi\_terms\]](https://discuss.elastic.co/t/transform-api-gives-unsupported-aggregation-type-multi-terms/274616)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 9:25am UTC](https://discuss.elastic.co/t/transform-api-gives-unsupported-aggregation-type-multi-terms/274616 "2021-06-07T09:25:58Z")
Below is my query for getting distinct values of the fields. { "size": 0, "aggs": { "unique\_pair": { "multi\_terms": { "terms": \[ { "field": "username" }, {… --- ## [Google Workplace no new events](https://discuss.elastic.co/t/google-workplace-no-new-events/275121)
**Author:** [@ab52](https://discuss.elastic.co/u/ab52)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 9:15am UTC](https://discuss.elastic.co/t/google-workplace-no-new-events/275121 "2021-06-07T09:15:08Z")
Hi All, i have configure filebeat to grab the data from Google, but after a period of time it will stop grabbing the data from Google. If i restart the filebeat process ( Centos7.6 : Filebeat v 7.11.2-1 ) new events wil… --- ## [Unusual disk read spike during ES migration](https://discuss.elastic.co/t/unusual-disk-read-spike-during-es-migration/273625)
**Author:** [@suryart](https://discuss.elastic.co/u/suryart)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 9:07am UTC](https://discuss.elastic.co/t/unusual-disk-read-spike-during-es-migration/273625 "2021-06-07T09:07:10Z")
We have 4 ES machines running on AWS under a VPC behind an LB which are currently working without any issues. We wanted to migrate these 4 ES machines from this older VPC to the newer VPC behind a new LB. So, we followe… --- ## [Range query](https://discuss.elastic.co/t/range-query/275116)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 8:13am UTC](https://discuss.elastic.co/t/range-query/275116 "2021-06-07T08:13:21Z")
i am using the below range query to read data from elasticsearch using spark and in kibana i have set Asia/Riyadh Timezone for date formatting. .set("es.query","""{ "query": { "range": { "@timestamp": { "gte": "now… --- ## [Unable to open kibana ui](https://discuss.elastic.co/t/unable-to-open-kibana-ui/275117)
**Author:** [@1ac727ff300829bca0fa](https://discuss.elastic.co/u/1ac727ff300829bca0fa)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 8:12am UTC](https://discuss.elastic.co/t/unable-to-open-kibana-ui/275117 "2021-06-07T08:12:52Z")
this is my kibana.yml # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601 # Specifies the address to which the Kibana server will bind. IP addresses and host names are bo… --- ## [Elassandra 6.2.3 to Elasticsearch 7.7.1 data migration process](https://discuss.elastic.co/t/elassandra-6-2-3-to-elasticsearch-7-7-1-data-migration-process/275100)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 14\ **Last updated:** [June 7, 2021, 8:10am UTC](https://discuss.elastic.co/t/elassandra-6-2-3-to-elasticsearch-7-7-1-data-migration-process/275100 "2021-06-07T08:10:23Z")
I want to migrate the data from Elassandra 6.2.3 cluster to Elasticsearch 7.7.1 cluster. Let's suppose that Elasticsearch 7.7.1 has the same index schemas, templates and aliases. (Except maybe changes related to breakin… --- ## [Elasticsearch Conflict Error](https://discuss.elastic.co/t/elasticsearch-conflict-error/275104)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 7:50am UTC](https://discuss.elastic.co/t/elasticsearch-conflict-error/275104 "2021-06-07T07:50:05Z")
Below is my query and code for delete\_by\_query. While code is running after some time i get Elasticsearch conflict error. What do i do wrong? How can i solve this ? body\_val = { "query": { "bool": … --- ## [Indices is not deleting after 60 days of retention](https://discuss.elastic.co/t/indices-is-not-deleting-after-60-days-of-retention/275106)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 7:43am UTC](https://discuss.elastic.co/t/indices-is-not-deleting-after-60-days-of-retention/275106 "2021-06-07T07:43:40Z")
Using ELK 7.11 Following are the indicies that should be deleted health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open log-pb-flow-20… --- ## [Lifecycle Policy doesn't delete documents correctly](https://discuss.elastic.co/t/lifecycle-policy-doesnt-delete-documents-correctly/275105)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 7:31am UTC](https://discuss.elastic.co/t/lifecycle-policy-doesnt-delete-documents-correctly/275105 "2021-06-07T07:31:47Z")
Good morning! I set up a lifecycle policy as follows last week, in the hope that documents older than 3 days would be deleted but it hasn't worked, can you tell me why? My intention is to store the data for only that lo… --- ## [Timestamp](https://discuss.elastic.co/t/timestamp/274734)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 12\ **Last updated:** [June 7, 2021, 7:25am UTC](https://discuss.elastic.co/t/timestamp/274734 "2021-06-07T07:25:33Z")
Hello Expert, If i would like to insert old data for example last year data in ES, could I change the timestamp as date of last year? If No, then what is the solution to insert the data which correspondence the time? T… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1379) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1381)