# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1445 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1446 --- ## [Hide elasticsearch superuser name and password in logstash conf](https://discuss.elastic.co/t/hide-elasticsearch-superuser-name-and-password-in-logstash-conf/271124)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 3:17pm UTC](https://discuss.elastic.co/t/hide-elasticsearch-superuser-name-and-password-in-logstash-conf/271124 "2021-04-26T15:17:11Z")
Hello all, The logstash (7.x) in the environment resides on the same server as filebeat. I am reluctant to mention superuser name and password info for elasticsearch in logstash.conf. Can I create a new user in Kibana … --- ## [Ingest with condition issue](https://discuss.elastic.co/t/ingest-with-condition-issue/271175)
**Author:** [@tbs575](https://discuss.elastic.co/u/tbs575)\ **Replies:** 4\ **Last updated:** [April 26, 2021, 3:13pm UTC](https://discuss.elastic.co/t/ingest-with-condition-issue/271175 "2021-04-26T15:13:47Z")
met strange issue. created one ingest with condition by Kibana, and tested pass with my data in ingest edit by 'Add documents'. but failed when I use 'Dev Tools' in kibana, 'PUT' same data. why? will be failed, paste t… --- ## [CSV exported losing timezone setting](https://discuss.elastic.co/t/csv-exported-losing-timezone-setting/271004)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 8\ **Last updated:** [April 26, 2021, 3:12pm UTC](https://discuss.elastic.co/t/csv-exported-losing-timezone-setting/271004 "2021-04-26T15:12:11Z")
Hi all, Our kibana 7.12 started to show this behaviour (we are using Elastic Cloud). The dashboards show the timestamp formatted correctly as the Advanced Settings were chosen to be America/Sao\_Paulo. So the dashboard… --- ## [Is it possible to change the font color of the X and Y axis values on a Lens Bar Chart?](https://discuss.elastic.co/t/is-it-possible-to-change-the-font-color-of-the-x-and-y-axis-values-on-a-lens-bar-chart/271196)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 3:10pm UTC](https://discuss.elastic.co/t/is-it-possible-to-change-the-font-color-of-the-x-and-y-axis-values-on-a-lens-bar-chart/271196 "2021-04-26T15:10:06Z")
Hi Team, I'm using a Lens bar chart on one of my Canvas projects to bypass some of the existing printing to PDF issues w/ 7.9.2 where the X axis gets cut off, and I need to find a way to change the font color / size of … --- ## [Difference between results of two queries](https://discuss.elastic.co/t/difference-between-results-of-two-queries/270991)
**Author:** [@Askia\_Mohamed\_Kadri](https://discuss.elastic.co/u/Askia_Mohamed_Kadri)\ **Replies:** 4\ **Last updated:** [April 26, 2021, 2:40pm UTC](https://discuss.elastic.co/t/difference-between-results-of-two-queries/270991 "2021-04-26T14:40:26Z")
Hi! I'm stuck and I really need help. Here is my use case: I would like to perform two queries and get as final result the difference between those two queries based on a specific field. Let's assume that I have these … --- ## [Calculate time difference in scripted field](https://discuss.elastic.co/t/calculate-time-difference-in-scripted-field/271213)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 18\ **Last updated:** [April 26, 2021, 2:22pm UTC](https://discuss.elastic.co/t/calculate-time-difference-in-scripted-field/271213 "2021-04-26T14:22:57Z")
The question is how to get the difference from following date format in a second? For example, if date1 = 4/21/2021 7:53:50 and date2 = 6/21/2021 7:54:10, the answer should 20 . I am trying below code but it is providi… --- ## [Vegalite graph scale according to Min,Max of the value](https://discuss.elastic.co/t/vegalite-graph-scale-according-to-min-max-of-the-value/271246)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 2:00pm UTC](https://discuss.elastic.co/t/vegalite-graph-scale-according-to-min-max-of-the-value/271246 "2021-04-26T14:00:53Z")
I have plotted a graph using Vegalite visualization in Kibana as shown below: As it can be seen, Y-axis scale starts from 0 and goes upto 450. Though it covers the Maximum and Min values of Y variable but not efficie… --- ## [Multiple indexnames from 1 filebeat instance with ilm](https://discuss.elastic.co/t/multiple-indexnames-from-1-filebeat-instance-with-ilm/270762)
**Author:** [@Marcel\_van\_Zoggel](https://discuss.elastic.co/u/Marcel_van_Zoggel)\ **Replies:** 4\ **Last updated:** [April 26, 2021, 1:57pm UTC](https://discuss.elastic.co/t/multiple-indexnames-from-1-filebeat-instance-with-ilm/270762 "2021-04-26T13:57:09Z")
I want to use filebeat on a server with 2 different logfolders. Each folder must go to a different indexname. This i can set via a custom field per input (fe. Field log\_type) in combination with output.elasticsearch.ind… --- ## [Logstash healthcheck](https://discuss.elastic.co/t/logstash-healthcheck/271088)
**Author:** [@sulsulatoff](https://discuss.elastic.co/u/sulsulatoff)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 1:43pm UTC](https://discuss.elastic.co/t/logstash-healthcheck/271088 "2021-04-26T13:43:42Z")
Our Logstash runs in a pod every 30 mins. Once in a while, it stops working and we need to restart the pod. Is there a way logstash can notify an external server that it's up and running (an http endpoint) --- ## [Relocation in loop on Elasticsearch 7.7](https://discuss.elastic.co/t/relocation-in-loop-on-elasticsearch-7-7/270486)
**Author:** [@dextermorgan](https://discuss.elastic.co/u/dextermorgan)\ **Replies:** 1\ **Last updated:** [April 26, 2021, 1:25pm UTC](https://discuss.elastic.co/t/relocation-in-loop-on-elasticsearch-7-7/270486 "2021-04-26T13:25:18Z")
We recently upgraded from ES 5.4 to ES 7.7 and are facing this weird issue in production where relocation goes in a loop. Have noticed majorly on large clusters and having hot/cold config. e.g. following is cluster confi… --- ## [Query to calculate login success and failure rates](https://discuss.elastic.co/t/query-to-calculate-login-success-and-failure-rates/270787)
**Author:** [@Venkatesh\_Sridharan](https://discuss.elastic.co/u/Venkatesh_Sridharan)\ **Replies:** 1\ **Last updated:** [April 26, 2021, 12:45pm UTC](https://discuss.elastic.co/t/query-to-calculate-login-success-and-failure-rates/270787 "2021-04-26T12:45:21Z")
Hello All, I have a list of login events on the index which has the following fields. ip\_address: \ login\_success: \ Now I want to query the logs and get a count of number of success and failed logins from e… --- ## [Csv with date column](https://discuss.elastic.co/t/csv-with-date-column/271255)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 0\ **Last updated:** [April 26, 2021, 12:37pm UTC](https://discuss.elastic.co/t/csv-with-date-column/271255 "2021-04-26T12:37:34Z")
hi all, i have below blocks of csv data....date comes in first line followed by csv data ...i need to bring date with csv data as a column to process it with timestamp. 20210409 0030 Counter node-3 … --- ## [Customized Uptime dashboard , need to remove the TLS certificate field and modify the other field name](https://discuss.elastic.co/t/customized-uptime-dashboard-need-to-remove-the-tls-certificate-field-and-modify-the-other-field-name/271254)
**Author:** [@priya\_singh](https://discuss.elastic.co/u/priya_singh)\ **Replies:** 0\ **Last updated:** [April 26, 2021, 12:31pm UTC](https://discuss.elastic.co/t/customized-uptime-dashboard-need-to-remove-the-tls-certificate-field-and-modify-the-other-field-name/271254 "2021-04-26T12:31:16Z")
Hi Teams , I have to customizwd the uptime dashboard as per client requiremnet . need to rename the Monitor to Backend System Url to Url Encode as well nned to made this feild value disabled Remove the TLS Certifica… --- ## [Many ttl:-2 states in registry file cause registry file big and makes the performance of filebeat unstable](https://discuss.elastic.co/t/many-ttl-2-states-in-registry-file-cause-registry-file-big-and-makes-the-performance-of-filebeat-unstable/271253)
**Author:** [@hukaixuan](https://discuss.elastic.co/u/hukaixuan)\ **Replies:** 0\ **Last updated:** [April 26, 2021, 12:16pm UTC](https://discuss.elastic.co/t/many-ttl-2-states-in-registry-file-cause-registry-file-big-and-makes-the-performance-of-filebeat-unstable/271253 "2021-04-26T12:16:53Z")
how filebeat with k8s autodiscover configuration deal with ttl:-2 states entries when doing cleanup? our registry file got really big and lots of ttl:-2 state in it, seems like they didn't got cleaned thanks a lot f… --- ## [Elasticsearch snapshot struck in inprogress state](https://discuss.elastic.co/t/elasticsearch-snapshot-struck-in-inprogress-state/271240)
**Author:** [@722826c085cfc824006d](https://discuss.elastic.co/u/722826c085cfc824006d)\ **Replies:** 1\ **Last updated:** [April 26, 2021, 11:01am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-struck-in-inprogress-state/271240 "2021-04-26T11:01:55Z")
we are using opensource elasticsearch version 5.6.10. In one of my ES cluster, the elasticsearch snapshot was struck in inprogress state from few days. I tried below options, but it didn't work out. ElasticSearch Versi… --- ## [Making cURL PUT, POST and DELETE requests?](https://discuss.elastic.co/t/making-curl-put-post-and-delete-requests/271235)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 3\ **Last updated:** [April 26, 2021, 10:46am UTC](https://discuss.elastic.co/t/making-curl-put-post-and-delete-requests/271235 "2021-04-26T10:46:44Z")
Sometimes Kibana times out when making certain large requests so I think I am forced to do it thru CLI. Issue is that I do not know how to currently make the sintaxis. I already generated a api key. For the sake of a e… --- ## [Adding additional weight without matching](https://discuss.elastic.co/t/adding-additional-weight-without-matching/270865)
**Author:** [@Silas\_Hansen](https://discuss.elastic.co/u/Silas_Hansen)\ **Replies:** 4\ **Last updated:** [April 26, 2021, 10:07am UTC](https://discuss.elastic.co/t/adding-additional-weight-without-matching/270865 "2021-04-26T10:07:14Z")
I want to be able to Match a subset of the index with a query\_string query. Add additional weight to documents that match a set of post-evaluated criterias. Example: Let's say I have these two documents: \[ { … --- ## [Shard allocation awareness implementation in elasticsarch](https://discuss.elastic.co/t/shard-allocation-awareness-implementation-in-elasticsarch/271193)
**Author:** [@722826c085cfc824006d](https://discuss.elastic.co/u/722826c085cfc824006d)\ **Replies:** 3\ **Last updated:** [April 26, 2021, 9:55am UTC](https://discuss.elastic.co/t/shard-allocation-awareness-implementation-in-elasticsarch/271193 "2021-04-26T09:55:25Z")
we are using open source elasticsearch 5.6.10 from last 2 years in AWS cloud, but didn't implement shard allocation awareness in the clusters. Since the lack of shard allocation of awareness, the shards are distributed i… --- ## [Metricbeat attempting to fetch metrics for unlisted metricset - why?](https://discuss.elastic.co/t/metricbeat-attempting-to-fetch-metrics-for-unlisted-metricset-why/271066)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 9:38am UTC](https://discuss.elastic.co/t/metricbeat-attempting-to-fetch-metrics-for-unlisted-metricset-why/271066 "2021-04-26T09:38:10Z")
I've installed metricbeat (7.12.0) and enabled the elasticsearch-xpack module. And configured it like so: - module: elasticsearch xpack.enabled: true period: 10s scope: cluster hosts: \["my-internal-elb.us-east… --- ## [Make two indexes which different fields communicate](https://discuss.elastic.co/t/make-two-indexes-which-different-fields-communicate/271137)
**Author:** [@dumpnetflow](https://discuss.elastic.co/u/dumpnetflow)\ **Replies:** 3\ **Last updated:** [April 26, 2021, 9:07am UTC](https://discuss.elastic.co/t/make-two-indexes-which-different-fields-communicate/271137 "2021-04-26T09:07:23Z")
Hi Everyone, I have two indexes which are automatically generated by an application which I cannot modify. Index one has two fields: { "mappings": { "properties": { "src.ip.address": { "type": "ip" }, "dst.ip.ad… --- ## [Logging DELETE query in logs](https://discuss.elastic.co/t/logging-delete-query-in-logs/271229)
**Author:** [@Kunal\_Salvi](https://discuss.elastic.co/u/Kunal_Salvi)\ **Replies:** 0\ **Last updated:** [April 26, 2021, 8:07am UTC](https://discuss.elastic.co/t/logging-delete-query-in-logs/271229 "2021-04-26T08:07:40Z")
Hello Elasticsearch team, Is there any place where Elasticsearch logs DELETE query action. Is any feature in BASIC license where I can trace the DELETE action happing on Elasticsearch? I understand the audit events can … --- ## [Using kibana7.10 with elasticsearch7.12 and beats 7.12](https://discuss.elastic.co/t/using-kibana7-10-with-elasticsearch7-12-and-beats-7-12/271176)
**Author:** [@ghaithTK](https://discuss.elastic.co/u/ghaithTK)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 7:50am UTC](https://discuss.elastic.co/t/using-kibana7-10-with-elasticsearch7-12-and-beats-7-12/271176 "2021-04-26T07:50:37Z")
hii Can i use kibana7.10 with elasticsearch 7.12 and beats7.12? thanx --- ## [Kibana cluster email alerts](https://discuss.elastic.co/t/kibana-cluster-email-alerts/270712)
**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\ **Replies:** 1\ **Last updated:** [April 26, 2021, 7:26am UTC](https://discuss.elastic.co/t/kibana-cluster-email-alerts/270712 "2021-04-26T07:26:22Z")
Hi, I have configured monitoring.cluster\_alerts.email\_notifications.email\_address in kibana.yml in elasticsearch.yml I am using SES The SES configuration does not allow me to include a from, ES refuses to start if its… --- ## [Environmental variable in Logstash](https://discuss.elastic.co/t/environmental-variable-in-logstash/271063)
**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\ **Replies:** 1\ **Last updated:** [April 26, 2021, 6:25am UTC](https://discuss.elastic.co/t/environmental-variable-in-logstash/271063 "2021-04-26T06:25:41Z")
Hi Folks, I use Logstash to send logs to a cloud SIEM. In particular I use an output plugin for the SIEM Vendor In order to authenticate towards the cloud Logstash presents id which is public and don't bother me and k… --- ## [Missing authentication credentials for REST request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271215)
**Author:** [@jojbapsaekki](https://discuss.elastic.co/u/jojbapsaekki)\ **Replies:** 1\ **Last updated:** [April 26, 2021, 5:51am UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/271215 "2021-04-26T05:51:17Z")
xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certificate xpack.security.transport.ssl.keystore.path: elastic-certificates.p12 xpack.security.tran… --- ## [Logstash is not starting in windows](https://discuss.elastic.co/t/logstash-is-not-starting-in-windows/270577)
**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\ **Replies:** 4\ **Last updated:** [April 26, 2021, 4:36am UTC](https://discuss.elastic.co/t/logstash-is-not-starting-in-windows/270577 "2021-04-26T04:36:00Z")
Hey Guys , I am using Logstash to send logs to kibana . I have configured logstash in windows instances with Two pipelines in my pipelines.yaml and this is the config that is present in pipelines.yml - pipeline.id… --- ## [Autodiscovering logstash nodes in Kubernetes](https://discuss.elastic.co/t/autodiscovering-logstash-nodes-in-kubernetes/270002)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 7\ **Last updated:** [April 26, 2021, 4:20am UTC](https://discuss.elastic.co/t/autodiscovering-logstash-nodes-in-kubernetes/270002 "2021-04-26T04:20:14Z")
So, I have a Logstash Statefulset running in Kubernetes. I have a headless service defined to establish network connection to the logstash pods. I deployed beats as a deployment using the official docker image, and I wa… --- ## [Watcher does not show results in the mail message](https://discuss.elastic.co/t/watcher-does-not-show-results-in-the-mail-message/271106)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 2\ **Last updated:** [April 26, 2021, 2:59am UTC](https://discuss.elastic.co/t/watcher-does-not-show-results-in-the-mail-message/271106 "2021-04-26T02:59:15Z")
Hello good day, I have a problem with the action of a watch, it does not show me the results in the email message it sends, I use {{ctx.payload.hits.total}} and also {{ctx.payload.aggregations.heartbeat\_count}} to show t… --- ## [Query about number of CPU cores](https://discuss.elastic.co/t/query-about-number-of-cpu-cores/271144)
**Author:** [@Yash\_Srivastava](https://discuss.elastic.co/u/Yash_Srivastava)\ **Replies:** 3\ **Last updated:** [April 25, 2021, 7:52pm UTC](https://discuss.elastic.co/t/query-about-number-of-cpu-cores/271144 "2021-04-25T19:52:44Z")
I want to know Number of cpu cores used in Elastic Cloud for IO/Intensive and Compute-Intensive hardware profiles for 4 GB RAM setup. Any idea? --- ## [ZFS Module for Metricbeat](https://discuss.elastic.co/t/zfs-module-for-metricbeat/271202)
**Author:** [@Niecke](https://discuss.elastic.co/u/Niecke)\ **Replies:** 0\ **Last updated:** [April 25, 2021, 7:44pm UTC](https://discuss.elastic.co/t/zfs-module-for-metricbeat/271202 "2021-04-25T19:44:43Z")
I am looking for the possibility to gather metrics from ZFS pools and datasets. Sadly this seems not to be implemented in metricbeat (Metricbeat: Add support for ZFS metrics · Issue #10848 · elastic/beats · GitHub). I th… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1444) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1446)