# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1560 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1561 --- ## [Not able change type of a field string to date using index template](https://discuss.elastic.co/t/not-able-change-type-of-a-field-string-to-date-using-index-template/263995)
**Author:** [@amp](https://discuss.elastic.co/u/amp)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 10:44am UTC](https://discuss.elastic.co/t/not-able-change-type-of-a-field-string-to-date-using-index-template/263995 "2021-02-11T10:44:49Z")
In elasticsearch 6.3 indexing windows log using Nxlog(3.7). Without any template all the fields indexed as strings. To get a date field we tried to change the Eventdate field as date. But getting parsing error. the be… --- ## [Progress of 7.10.0 to 7.11.0 upgrade status](https://discuss.elastic.co/t/progress-of-7-10-0-to-7-11-0-upgrade-status/263977)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 10:37am UTC](https://discuss.elastic.co/t/progress-of-7-10-0-to-7-11-0-upgrade-status/263977 "2021-02-11T10:37:36Z")
I run single node https://github.com/deviantony/docker-elk dockerized E, L and K. I upgraded the stack with docker-compose build and docker-compose up -d . Now the startup seems to be stuck at: {"type":"log","@timesta… --- ## [Can't really change "cron schedule for retaining snapshots"](https://discuss.elastic.co/t/cant-really-change-cron-schedule-for-retaining-snapshots/263985)
**Author:** [@NejcK](https://discuss.elastic.co/u/NejcK)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 10:23am UTC](https://discuss.elastic.co/t/cant-really-change-cron-schedule-for-retaining-snapshots/263985 "2021-02-11T10:23:34Z")
Going to Stack Management -\> Snapshot and Restore -\> Policies you see the "The cron schedule for retaining snapshots is: 0 20,50 \* \* \* ?. I can change the cron schedule (via UI or console, doesn't matter) to a differe… --- ## [Purpose of TSVB Aggregation feature under Options tab for TSVB table](https://discuss.elastic.co/t/purpose-of-tsvb-aggregation-feature-under-options-tab-for-tsvb-table/263854)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 9:56am UTC](https://discuss.elastic.co/t/purpose-of-tsvb-aggregation-feature-under-options-tab-for-tsvb-table/263854 "2021-02-11T09:56:45Z")
Hello All, In the TSVB panel for Table, I can find choices to aggregate under two different places.. Under the metrics tab Under the options tab There is some special reason/ use of having two aggregation choice… --- ## [Filebeat compatibality](https://discuss.elastic.co/t/filebeat-compatibality/263965)
**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 9:10am UTC](https://discuss.elastic.co/t/filebeat-compatibality/263965 "2021-02-11T09:10:25Z")
Hi all, Can I install and run filebeat on Windows Embedded Standard PC? I think it is 2010 version. Thank you. --- ## [Share only the dasboard](https://discuss.elastic.co/t/share-only-the-dasboard/263959)
**Author:** [@albie.morken](https://discuss.elastic.co/u/albie.morken)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 9:05am UTC](https://discuss.elastic.co/t/share-only-the-dasboard/263959 "2021-02-11T09:05:22Z")
I am trying to display the kibana dashboard in one of the html page. I use the share option provided in the dashboard But instead of getting only that particular dashboard, with this link, I am able to see whole kiban… --- ## [Not able to install "logstash-filter-environment" in linux server : handshake\_failure](https://discuss.elastic.co/t/not-able-to-install-logstash-filter-environment-in-linux-server-handshake-failure/263968)
**Author:** [@sureshkk252](https://discuss.elastic.co/u/sureshkk252)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 8:49am UTC](https://discuss.elastic.co/t/not-able-to-install-logstash-filter-environment-in-linux-server-handshake-failure/263968 "2021-02-11T08:49:05Z")
Hello, i am trying to install "logstash-filter-environment" plugin in a linux server, where i got this error. "Unable to download data from https://rubygems.org - Received fatal alert: handshake\_failure (https://api.rub… --- ## [How should I configure the number of node, shard and replica?](https://discuss.elastic.co/t/how-should-i-configure-the-number-of-node-shard-and-replica/263840)
**Author:** [@rider9581](https://discuss.elastic.co/u/rider9581)\ **Replies:** 17\ **Last updated:** [February 11, 2021, 8:38am UTC](https://discuss.elastic.co/t/how-should-i-configure-the-number-of-node-shard-and-replica/263840 "2021-02-11T08:38:10Z")
I have one server of the following spec: RAM: 128 GB HDD: 10TB \* 2 SSD: 256 GB CPU: 32 cores and I am going to manage up to 10TB of text data using Elasticsearch 7.9.3. Also, I plan to use Docker for the deployment o… --- ## [Appending Random number in csv file name](https://discuss.elastic.co/t/appending-random-number-in-csv-file-name/263575)
**Author:** [@ritusingh](https://discuss.elastic.co/u/ritusingh)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 8:19am UTC](https://discuss.elastic.co/t/appending-random-number-in-csv-file-name/263575 "2021-02-11T08:19:59Z")
Hi, I want to append random number after the file name. output { stdout { codec =\> rubydebug } csv { # elastic field name fields =\> \["@timestamp","requestid","ngnix.responsebytes","ngnix.cpu.usage"\] #… --- ## [Compare two fields in same document without using script](https://discuss.elastic.co/t/compare-two-fields-in-same-document-without-using-script/263955)
**Author:** [@sardar\_nale](https://discuss.elastic.co/u/sardar_nale)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 7:53am UTC](https://discuss.elastic.co/t/compare-two-fields-in-same-document-without-using-script/263955 "2021-02-11T07:53:14Z")
Hi all, We are using elastic version 7.10.2. I want to compare two fields from a same document.Scripting is disabled in my organization. Kindly help in building below query without using script. Here my query is : nic… --- ## [Correct Index balancing between 2 different datacenter](https://discuss.elastic.co/t/correct-index-balancing-between-2-different-datacenter/263406)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 7:41am UTC](https://discuss.elastic.co/t/correct-index-balancing-between-2-different-datacenter/263406 "2021-02-11T07:41:46Z")
hi there, this is my current scenario: 5 nodes (n1-n2-n3-n4-n5) 1 index with 3 shards and 1 replica 2 datacenter (n1 in DC1, n2 in DC2, n3 in DC1, n4 in DC2, n5 in DC1) shard0 is on n1 and n5 (so in DC1) shard1 is … --- ## [Older indices are not getting deleted after rollover](https://discuss.elastic.co/t/older-indices-are-not-getting-deleted-after-rollover/263953)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 7:04am UTC](https://discuss.elastic.co/t/older-indices-are-not-getting-deleted-after-rollover/263953 "2021-02-11T07:04:10Z")
i did the following steps created an ilm policy. created an index template and attached the ilm policy to it. finally created an index using create index API. when i checked the index under index management section in… --- ## [\[Alerting\] My alerts are broken after upgrading Elastic Cloud to 7.10.2](https://discuss.elastic.co/t/alerting-my-alerts-are-broken-after-upgrading-elastic-cloud-to-7-10-2/263898)
**Author:** [@nickbabkin](https://discuss.elastic.co/u/nickbabkin)\ **Replies:** 3\ **Last updated:** [February 11, 2021, 6:38am UTC](https://discuss.elastic.co/t/alerting-my-alerts-are-broken-after-upgrading-elastic-cloud-to-7-10-2/263898 "2021-02-11T06:38:41Z")
Hi! After upgrading ES cluster and Kibana to 7.10.2, I noticed that some of my alerts have started to throw error and hence refuse to work due to these error: An error occurred when decrypting the alert. Unable to dec… --- ## [ElasticSearch curator Instalation](https://discuss.elastic.co/t/elasticsearch-curator-instalation/263952)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 5:51am UTC](https://discuss.elastic.co/t/elasticsearch-curator-instalation/263952 "2021-02-11T05:51:48Z")
Hi Team, I wanted to install elasticsearch curator in our k8s cluster. What is the best way to have curator in k8s cluster? Is there any helm chart available for elasticsearch curator? Our k8s cluster is running on Fe… --- ## [Filebeat performance is low after upgraded to 7.9.3](https://discuss.elastic.co/t/filebeat-performance-is-low-after-upgraded-to-7-9-3/263828)
**Author:** [@bhavaniprasad\_reddy](https://discuss.elastic.co/u/bhavaniprasad_reddy)\ **Replies:** 4\ **Last updated:** [February 11, 2021, 5:31am UTC](https://discuss.elastic.co/t/filebeat-performance-is-low-after-upgraded-to-7-9-3/263828 "2021-02-11T05:31:02Z")
Hi, I am using Filebeat to read all the application logs in my openshift cluster. The filebeat sends the logs to the logstash for indexing and then to Elasticsearch and finally visible on Kibana. Using 3 filebeat pods … --- ## [Legend in map visualization](https://discuss.elastic.co/t/legend-in-map-visualization/263799)
**Author:** [@Pranath](https://discuss.elastic.co/u/Pranath)\ **Replies:** 4\ **Last updated:** [February 11, 2021, 4:38am UTC](https://discuss.elastic.co/t/legend-in-map-visualization/263799 "2021-02-11T04:38:57Z")
Hello, I have tried to get legend (as above one) for below map but didn't find that option anywhere in 7.9 version. Is there any way to add legend in map ? --- ## [Logstash Data Persistency](https://discuss.elastic.co/t/logstash-data-persistency/263948)
**Author:** [@leventyalcin](https://discuss.elastic.co/u/leventyalcin)\ **Replies:** 0\ **Last updated:** [February 11, 2021, 4:21am UTC](https://discuss.elastic.co/t/logstash-data-persistency/263948 "2021-02-11T04:21:52Z")
Hi, As you might know, in-flight queue is hold in memory by Logstash. I'm trying to enable data persistency with a persistent queue. However, restarting logstash or the instance wipes out the data. When I saw that I t… --- ## [Certificate error when creation S3 repository for snapshot](https://discuss.elastic.co/t/certificate-error-when-creation-s3-repository-for-snapshot/263947)
**Author:** [@deependra](https://discuss.elastic.co/u/deependra)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 3:59am UTC](https://discuss.elastic.co/t/certificate-error-when-creation-s3-repository-for-snapshot/263947 "2021-02-11T03:59:00Z")
Hi team, I am trying to create a S3 repository so that I can send snapshot to it and then restore on destination cluster. I am using elasticsearch 5.2.2 version and have installed equivalent s3 repo plugin. OS - cento… --- ## [Agent service will not start, failure to authenticate to Kibana when using API key w/Elasticsearch](https://discuss.elastic.co/t/agent-service-will-not-start-failure-to-authenticate-to-kibana-when-using-api-key-w-elasticsearch/263906)
**Author:** [@dvo](https://discuss.elastic.co/u/dvo)\ **Replies:** 3\ **Last updated:** [February 11, 2021, 1:35am UTC](https://discuss.elastic.co/t/agent-service-will-not-start-failure-to-authenticate-to-kibana-when-using-api-key-w-elasticsearch/263906 "2021-02-11T01:35:52Z")
Hello all, we're doing a POC with Windows servers running \*beat agents sending perf and event log data to a Linux VM running ELK Stack. Everything is latest version. We want to standardize on agents authenticating using … --- ## [Remove garbage from message end](https://discuss.elastic.co/t/remove-garbage-from-message-end/263916)
**Author:** [@John\_Smith](https://discuss.elastic.co/u/John_Smith)\ **Replies:** 3\ **Last updated:** [February 10, 2021, 11:19pm UTC](https://discuss.elastic.co/t/remove-garbage-from-message-end/263916 "2021-02-10T23:19:13Z")
Hello, I've following message send by filebeat: "message" =\> "{"country-code":"GB","payload":"{\\"access\_token\\":\\"\*\*\*\*\*\*\*\*\*\*\\",\\"token\_type\\":\\"Bearer\\",}","status":"ok","status-code":200,"error":"","content-type":"app… --- ## [Kibana React Plugin CSS is affecting other areas of the site](https://discuss.elastic.co/t/kibana-react-plugin-css-is-affecting-other-areas-of-the-site/263936)
**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 9:55pm UTC](https://discuss.elastic.co/t/kibana-react-plugin-css-is-affecting-other-areas-of-the-site/263936 "2021-02-10T21:55:03Z")
I have a Kibana plugin, done in React, only intended as an element for Canvas Dashboard. However, I notice that certain CSS styling changes also affect other areas of the site when the plugin is deployed. Is there anythi… --- ## [Master node with 100% CPU](https://discuss.elastic.co/t/master-node-with-100-cpu/263003)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 9\ **Last updated:** [February 10, 2021, 9:36pm UTC](https://discuss.elastic.co/t/master-node-with-100-cpu/263003 "2021-02-10T21:36:32Z")
we are getting 100% CPU usage for a master node. the cluster is hosted in the Elastic cloud. any help will be appreciated! attached below the tasks (it seems to run /admin/snapshot/delete constantly ) --- ## [Optimistic locking](https://discuss.elastic.co/t/optimistic-locking/263847)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 9:28pm UTC](https://discuss.elastic.co/t/optimistic-locking/263847 "2021-02-10T21:28:11Z")
Hi all and sorry for poor english I wonder if it's correct to talk about concurrency in elasticsearch . Exists an optimistic locks for document in elasticsearch? I found this page , I wonder if it is usefull lock docu… --- ## [Cluster Node Down](https://discuss.elastic.co/t/cluster-node-down/263853)
**Author:** [@Tahir\_Khan](https://discuss.elastic.co/u/Tahir_Khan)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 9:24pm UTC](https://discuss.elastic.co/t/cluster-node-down/263853 "2021-02-10T21:24:59Z")
How can i know the cluster node is down through API i was trying with \_cluster/health but its not giving the details about the node down server. I have checked other API as well but didnt got anything. Is there anyway… --- ## [Ingest pipeline error - ailed to parse with all enclosed parsers](https://discuss.elastic.co/t/ingest-pipeline-error-ailed-to-parse-with-all-enclosed-parsers/263809)
**Author:** [@Glenn\_Glashagen](https://discuss.elastic.co/u/Glenn_Glashagen)\ **Replies:** 5\ **Last updated:** [February 10, 2021, 9:12pm UTC](https://discuss.elastic.co/t/ingest-pipeline-error-ailed-to-parse-with-all-enclosed-parsers/263809 "2021-02-10T21:12:04Z")
Hello everybody, I'm recently encountering problem with my ingestion pipeline, where part of if tries to parse a date. If it fails to do so, it should continue and not create the fields time\_log and rest\_message. This … --- ## [How to connect filebeat to azure elasticsearch](https://discuss.elastic.co/t/how-to-connect-filebeat-to-azure-elasticsearch/263833)
**Author:** [@vikramp](https://discuss.elastic.co/u/vikramp)\ **Replies:** 3\ **Last updated:** [February 10, 2021, 9:08pm UTC](https://discuss.elastic.co/t/how-to-connect-filebeat-to-azure-elasticsearch/263833 "2021-02-10T21:08:47Z")
what will be the elastic search ip/url of azure elastic-search as it contains 3 master node and 3 slave node. --- ## [Filebeat:7.10.0 not publishing/pushing logs to single node elasticsearch cluster deployed in kubernetes cluster](https://discuss.elastic.co/t/filebeat-7-10-0-not-publishing-pushing-logs-to-single-node-elasticsearch-cluster-deployed-in-kubernetes-cluster/263123)
**Author:** [@nirmal\_elastic](https://discuss.elastic.co/u/nirmal_elastic)\ **Replies:** 17\ **Last updated:** [February 10, 2021, 7:15pm UTC](https://discuss.elastic.co/t/filebeat-7-10-0-not-publishing-pushing-logs-to-single-node-elasticsearch-cluster-deployed-in-kubernetes-cluster/263123 "2021-02-10T19:15:18Z")
I have single node elasticsearch deployed on master node of k8s cluster and it's accessible using nodePort:30339 curl http://xx.xx.xx.xx:30339 { "name" : "elasticsearch-0", "cluster\_name" : "docker-cluster", "cluste… --- ## [Path.data and path.log not used](https://discuss.elastic.co/t/path-data-and-path-log-not-used/263912)
**Author:** [@Mark\_Pevec](https://discuss.elastic.co/u/Mark_Pevec)\ **Replies:** 1\ **Last updated:** [February 10, 2021, 7:00pm UTC](https://discuss.elastic.co/t/path-data-and-path-log-not-used/263912 "2021-02-10T19:00:14Z")
I am running Elasticsearch on VMs in Google Cloud (using the standard latest 7.x debian package installation) and am trying out different configurations. I recently tried to run a cluster with VMs with local SSD (local … --- ## [Cisco Umbrella selfhosted s3 the queue is not processing](https://discuss.elastic.co/t/cisco-umbrella-selfhosted-s3-the-queue-is-not-processing/263152)
**Author:** [@YegorKovylyayev](https://discuss.elastic.co/u/YegorKovylyayev)\ **Replies:** 8\ **Last updated:** [February 10, 2021, 6:52pm UTC](https://discuss.elastic.co/t/cisco-umbrella-selfhosted-s3-the-queue-is-not-processing/263152 "2021-02-10T18:52:46Z")
Hello, can not connect Cisco Umbrella from self hosted s3 to filebeat on cisco.yml is have: - module: cisco umbrella: enabled: true var.input: s3 var.queue\_url: https://sqs.eu-west-1.amazonaws.com/111111111… --- ## [Pg\_trgm similarity ( text, text ) → real (postgresql Function) on ElasticSearch](https://discuss.elastic.co/t/pg-trgm-similarity-text-text-real-postgresql-function-on-elasticsearch/263920)
**Author:** [@zied\_marouani](https://discuss.elastic.co/u/zied_marouani)\ **Replies:** 0\ **Last updated:** [February 10, 2021, 6:34pm UTC](https://discuss.elastic.co/t/pg-trgm-similarity-text-text-real-postgresql-function-on-elasticsearch/263920 "2021-02-10T18:34:47Z")
Hello , i'm trying to imrpove the search time for a text from a postgresql database using Elasticsearch , the problem is the search returns a nameof product with best score using "similarity" function in Postgresql exam… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1559) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1561)