# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1579

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1580

---

## [Ingest node cloning](https://discuss.elastic.co/t/ingest-node-cloning/262485)

<div class="topic-metadata">

**Author:** [@NickGearls](https://discuss.elastic.co/u/NickGearls)\
**Replies:** 3\
**Last updated:** [February 1, 2021, 7:35am UTC](https://discuss.elastic.co/t/ingest-node-cloning/262485 "2021-02-01T07:35:33Z")

</div>

There is no "clone" feature in ingest nodes as in LogStash. Is it possible to implement this feature with a plugin? I want to use the cloud version, so I don't want to install my own LogStash server for this cloning (a…

---

## [Column span in Kibana canvas data table](https://discuss.elastic.co/t/column-span-in-kibana-canvas-data-table/262654)

<div class="topic-metadata">

**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\
**Replies:** 2\
**Last updated:** [February 1, 2021, 7:27am UTC](https://discuss.elastic.co/t/column-span-in-kibana-canvas-data-table/262654 "2021-02-01T07:27:29Z")

</div>

Hello, Is it possible to perform row-span or column-span operations on Kibana Canvas Data table? Something similar to this?

---

## [Misalignment in TSVB data table](https://discuss.elastic.co/t/misalignment-in-tsvb-data-table/261896)

<div class="topic-metadata">

**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 7:20am UTC](https://discuss.elastic.co/t/misalignment-in-tsvb-data-table/261896 "2021-02-01T07:20:35Z")

</div>

Hi, I'm using Kibana 7.9 and the alignment of records and the headers is not editable and the default looks off. Is there a way to align these? Maybe align everything to the left. Here it seems, the header is left align…

---

## [Alerts & Actions Server Log](https://discuss.elastic.co/t/alerts-actions-server-log/262358)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 7:13am UTC](https://discuss.elastic.co/t/alerts-actions-server-log/262358 "2021-02-01T07:13:19Z")

</div>

Hi, I started using Alerts and Actions in Kibana and I have a question about Server Log action. How can get the results there? Where can I see the messages when action is triggered? Thank you in advance! /Angelos

---

## [Write Operations in Kibana](https://discuss.elastic.co/t/write-operations-in-kibana/262574)

<div class="topic-metadata">

**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 7:05am UTC](https://discuss.elastic.co/t/write-operations-in-kibana/262574 "2021-02-01T07:05:12Z")

</div>

Hello people!!! please how could i write this Splunk function in kibana sum(NetTargetConnectCount) as SumNetTargetConnectCount sum(NetTargetReconnectCount) as SumNetTargetReconnectCount sum(NetTargetRetransmitCount) …

---

## [Logstash ‘77⚠constant::Fixnum is deprecated’ and not work](https://discuss.elastic.co/t/logstash-77constant-fixnum-is-deprecated-and-not-work/262792)

<div class="topic-metadata">

**Author:** [@plumy0902](https://discuss.elastic.co/u/plumy0902)\
**Replies:** 0\
**Last updated:** [February 1, 2021, 6:49am UTC](https://discuss.elastic.co/t/logstash-77constant-fixnum-is-deprecated-and-not-work/262792 "2021-02-01T06:49:15Z")

</div>

Hi I was trying to send data to elasticsearch using scheduler. I want it to run once a day and update new records. But it gets stuck after these outputs. Please suggest any solution, thanks. (ps : logstash version is 7.…

---

## [Index Roller Policy not working](https://discuss.elastic.co/t/index-roller-policy-not-working/262553)

<div class="topic-metadata">

**Author:** [@sureshdpawar](https://discuss.elastic.co/u/sureshdpawar)\
**Replies:** 2\
**Last updated:** [February 1, 2021, 4:39am UTC](https://discuss.elastic.co/t/index-roller-policy-not-working/262553 "2021-02-01T04:39:57Z")

</div>

I am referring to above document to automate rollover with ILM. I am doing it without data streams and by using an ILM index alias, I created a lifecycle policy as named as timeseires\_policy with below setting { …

---

## [Custom Query for Range / Bucket Aggregation](https://discuss.elastic.co/t/custom-query-for-range-bucket-aggregation/262635)

<div class="topic-metadata">

**Author:** [@bhavin.shah](https://discuss.elastic.co/u/bhavin.shah)\
**Replies:** 2\
**Last updated:** [February 1, 2021, 4:08am UTC](https://discuss.elastic.co/t/custom-query-for-range-bucket-aggregation/262635 "2021-02-01T04:08:02Z")

</div>

Hi, ELK setup - 3 nodes/ 7.10.0 version Query :- I am trying to create one query for business where below is raw data and expected output as well. Left side - is raw data and final data is dealer ID wise brk\_amt wise…

---

## [How i can get timestamp?](https://discuss.elastic.co/t/how-i-can-get-timestamp/262777)

<div class="topic-metadata">

**Author:** [@Ricky\_Alamsyah](https://discuss.elastic.co/u/Ricky_Alamsyah)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 3:27am UTC](https://discuss.elastic.co/t/how-i-can-get-timestamp/262777 "2021-02-01T03:27:05Z")

</div>

how i can get range timestamp with format epoch\_millis ? "mappings": { "properties": { "@timestamp": { "type": "date" }, i try this but not working { "query":{ "bool": { "must": \[{ "match\_all": {} }\], "filter…

---

## [Dynamically assign filter, char\_filter, analyzer?](https://discuss.elastic.co/t/dynamically-assign-filter-char-filter-analyzer/262774)

<div class="topic-metadata">

**Author:** [@adude946](https://discuss.elastic.co/u/adude946)\
**Replies:** 4\
**Last updated:** [February 1, 2021, 2:30am UTC](https://discuss.elastic.co/t/dynamically-assign-filter-char-filter-analyzer/262774 "2021-02-01T02:30:48Z")

</div>

Wanted to know if it's possible to dynamically assign filter, char\_filter & analyzer? We have multilanguage data in ES. The search is language specific which the application detects at request time. So if request is in …

---

## [Include specific fields from document using Ingest pipeline](https://discuss.elastic.co/t/include-specific-fields-from-document-using-ingest-pipeline/262734)

<div class="topic-metadata">

**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 1:02am UTC](https://discuss.elastic.co/t/include-specific-fields-from-document-using-ingest-pipeline/262734 "2021-02-01T01:02:00Z")

</div>

Hi I am ingesting following document to elasticsearch directly . First I am only interested in wprss\_ftp\_feed\_source and its values and exclude all other fields before they are ingested into index . second after select…

---

## [Unable to listen on port 5044 for logstash on unbuntu 20.04](https://discuss.elastic.co/t/unable-to-listen-on-port-5044-for-logstash-on-unbuntu-20-04/262664)

<div class="topic-metadata">

**Author:** [@Paul\_Fleming](https://discuss.elastic.co/u/Paul_Fleming)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 12:48am UTC](https://discuss.elastic.co/t/unable-to-listen-on-port-5044-for-logstash-on-unbuntu-20-04/262664 "2021-02-01T00:48:18Z")

</div>

Using Ubuntu 20.04 I have confirmed OpenSSL is running and then I have installed logstash by running the following commands. \` openssl version -a apt install logstash -y Edit the etc/hosts file and add the following …

---

## [Unregistered Authentication Agent for unix-process](https://discuss.elastic.co/t/unregistered-authentication-agent-for-unix-process/262716)

<div class="topic-metadata">

**Author:** [@Taufik\_Maulana](https://discuss.elastic.co/u/Taufik_Maulana)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 12:45am UTC](https://discuss.elastic.co/t/unregistered-authentication-agent-for-unix-process/262716 "2021-02-01T00:45:39Z")

</div>

Hello everyone, I'm having trouble starting my elasticsearch . This is what journal -xe command's output. -- Subject: Unit elasticsearch.service has begun start-up -- Defined-By: systemd -- Support: http://lists.freed…

---

## [Can I connect MySQL database to elastic search?](https://discuss.elastic.co/t/can-i-connect-mysql-database-to-elastic-search/262743)

<div class="topic-metadata">

**Author:** [@Arun\_Sharma](https://discuss.elastic.co/u/Arun_Sharma)\
**Replies:** 3\
**Last updated:** [February 1, 2021, 12:43am UTC](https://discuss.elastic.co/t/can-i-connect-mysql-database-to-elastic-search/262743 "2021-02-01T00:43:42Z")

</div>

Can I connect a MySQL database with elasticsearch and will I able to make a search engine for organization after learning elasticsearch? For example : if I type on the search bar "how many employees joined today from Mu…

---

## [Conflicting Use Cases? Perf concerns?](https://discuss.elastic.co/t/conflicting-use-cases-perf-concerns/262733)

<div class="topic-metadata">

**Author:** [@brpinard](https://discuss.elastic.co/u/brpinard)\
**Replies:** 2\
**Last updated:** [January 31, 2021, 4:33pm UTC](https://discuss.elastic.co/t/conflicting-use-cases-perf-concerns/262733 "2021-01-31T16:33:06Z")

</div>

I’m looking to deliver an Elasticsearch based search experience off our event driven architecture. We have a stream of events on Kalfka. Each event represents a state change for a thing that we can call a case. There a…

---

## [Metricbeat for m3db](https://discuss.elastic.co/t/metricbeat-for-m3db/262605)

<div class="topic-metadata">

**Author:** [@Mohith\_Vegi](https://discuss.elastic.co/u/Mohith_Vegi)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 12:27am UTC](https://discuss.elastic.co/t/metricbeat-for-m3db/262605 "2021-02-01T00:27:32Z")

</div>

how can i monitor m3db using metricbeats, since metricbeat doesn't support m3db module.. plz help

---

## [Clarification on setting up TLS in an elastic cluster](https://discuss.elastic.co/t/clarification-on-setting-up-tls-in-an-elastic-cluster/262613)

<div class="topic-metadata">

**Author:** [@first100](https://discuss.elastic.co/u/first100)\
**Replies:** 0\
**Last updated:** [January 29, 2021, 8:19am UTC](https://discuss.elastic.co/t/clarification-on-setting-up-tls-in-an-elastic-cluster/262613 "2021-01-29T08:19:36Z")

</div>

Hello, im trying to set up TLS in elastic cluster, the cluster works normally without tls, communicating in http, im received from company some certificates for all node of my cluster, ca\_cert.crt, subca\_cert.crt, machi…

---

## [Slack-Alerting | JSON Body](https://discuss.elastic.co/t/slack-alerting-json-body/262677)

<div class="topic-metadata">

**Author:** [@manjesh23](https://discuss.elastic.co/u/manjesh23)\
**Replies:** 0\
**Last updated:** [January 29, 2021, 6:15pm UTC](https://discuss.elastic.co/t/slack-alerting-json-body/262677 "2021-01-29T18:15:28Z")

</div>

Hello All, I am testing Kibana to Slack feature. Where, I am receiving a alert message on Slack but no data is present in there. "actions": { "incoming-webhook": { "throttle\_period\_in\_millis": 10000, …

---

## [Reindexing doesnt work](https://discuss.elastic.co/t/reindexing-doesnt-work/262693)

<div class="topic-metadata">

**Author:** [@Deny7](https://discuss.elastic.co/u/Deny7)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 12:24am UTC](https://discuss.elastic.co/t/reindexing-doesnt-work/262693 "2021-02-01T00:24:36Z")

</div>

Hi, I changed mapping to index so I wanted reindex. I have about 200 daily indicies that I want reindex. I used bellow command. When I ran it gave me 504 timeout error. When I checked GET /\_cat/indices?v there is creat…

---

## [Absolute beginner in elasticsearch](https://discuss.elastic.co/t/absolute-beginner-in-elasticsearch/262763)

<div class="topic-metadata">

**Author:** [@Werner](https://discuss.elastic.co/u/Werner)\
**Replies:** 6\
**Last updated:** [January 31, 2021, 11:36pm UTC](https://discuss.elastic.co/t/absolute-beginner-in-elasticsearch/262763 "2021-01-31T23:36:43Z")

</div>

Hallo ! :slight\_smile: I am an absolute beginner in elasticsearch and after some hours of reading and watching tutorial-videos I got the impression, that it needs a lot of knowledge and preparation, before I can make a …

---

## [Location type geo\_point](https://discuss.elastic.co/t/location-type-geo-point/262059)

<div class="topic-metadata">

**Author:** [@Elves\_Ribeiro](https://discuss.elastic.co/u/Elves_Ribeiro)\
**Replies:** 2\
**Last updated:** [January 31, 2021, 10:48pm UTC](https://discuss.elastic.co/t/location-type-geo-point/262059 "2021-01-31T22:48:12Z")

</div>

Hi, I am trying to create a map on my environment, but I am not able to create the field location type geo\_point. I am using version 7.10.2 My logstash conf geoip { source =\> "ip\_client" } mutate { add\_field =\> …

---

## [Showing document fields as tooltips](https://discuss.elastic.co/t/showing-document-fields-as-tooltips/262760)

<div class="topic-metadata">

**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\
**Replies:** 3\
**Last updated:** [January 31, 2021, 8:07pm UTC](https://discuss.elastic.co/t/showing-document-fields-as-tooltips/262760 "2021-01-31T20:07:11Z")

</div>

I'm missing something obvious here, I know I am, but I have struggled to find an answer. I have a small index of 20 documents in ES 7.10.2 with a GeoPoint in the top level, with other fields stored as objects and nested…

---

## [Remapping an index](https://discuss.elastic.co/t/remapping-an-index/262400)

<div class="topic-metadata">

**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\
**Replies:** 2\
**Last updated:** [January 31, 2021, 7:38pm UTC](https://discuss.elastic.co/t/remapping-an-index/262400 "2021-01-31T19:38:43Z")

</div>

I've followed is guide in an attempt to apply a new (reduced) mapping to an existing index : I realise that this is a very old blog post. The "atomic" step which is said to re-index , doesn't seem to index any documen…

---

## [Help with reducing mapping](https://discuss.elastic.co/t/help-with-reducing-mapping/262394)

<div class="topic-metadata">

**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\
**Replies:** 9\
**Last updated:** [January 31, 2021, 7:36pm UTC](https://discuss.elastic.co/t/help-with-reducing-mapping/262394 "2021-01-31T19:36:35Z")

</div>

Hi All. I'm new to the ELK stack, and am hoping I'm not trying to re-invent the wheel. Steep learning curve at the moment and am just after some help and guidance really. I'm using FileBeat to send logs out from our Ku…

---

## [Dynamic mapping setting not honoured](https://discuss.elastic.co/t/dynamic-mapping-setting-not-honoured/262551)

<div class="topic-metadata">

**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 7:32pm UTC](https://discuss.elastic.co/t/dynamic-mapping-setting-not-honoured/262551 "2021-01-31T19:32:24Z")

</div>

If I create new index with a mapping definition eg. { "mappings": { "dynamic": "false", "properties": { ...} } } and then send data to it with fields that aren't included in the mapping, they ar…

---

## [GPG Key](https://discuss.elastic.co/t/gpg-key/261891)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 3\
**Last updated:** [January 31, 2021, 6:52pm UTC](https://discuss.elastic.co/t/gpg-key/261891 "2021-01-31T18:52:29Z")

</div>

hi guys, i wanna ask something about installation elastic and beats, because they need GPG-key and my server can't access public internet. how can i add a GPG Key manually? thanks

---

## [Elasticsearch configuration in a shared server/node](https://discuss.elastic.co/t/elasticsearch-configuration-in-a-shared-server-node/262729)

<div class="topic-metadata">

**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-configuration-in-a-shared-server-node/262729 "2021-01-31T17:32:45Z")

</div>

I do know it's better to have separate server for each job, but I have a shared server between Elasticsearch and MySQL, with a total 8 Gig RAM. we should avoid swapping in Elasticsearch, so I set bootstrap.memory\_lock: …

---

## [Multiple values match query in Update by query](https://discuss.elastic.co/t/multiple-values-match-query-in-update-by-query/262757)

<div class="topic-metadata">

**Author:** [@sarvendras](https://discuss.elastic.co/u/sarvendras)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 5:16pm UTC](https://discuss.elastic.co/t/multiple-values-match-query-in-update-by-query/262757 "2021-01-31T17:16:30Z")

</div>

Hi All, I have to update one field based on match of multiple values of a field.I want to update field amt as 9000 based on query of multiple values of RRN but multiple values are not supported and giving error. Is the…

---

## [Monitoring/tasks consistently running task](https://discuss.elastic.co/t/monitoring-tasks-consistently-running-task/262754)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 1\
**Last updated:** [January 31, 2021, 4:25pm UTC](https://discuss.elastic.co/t/monitoring-tasks-consistently-running-task/262754 "2021-01-31T16:25:19Z")

</div>

Can anyone explain these lines in the cat/tasks? should we be worried about them?

---

## [Creating new user in Kibana, login fine but unable to view logs](https://discuss.elastic.co/t/creating-new-user-in-kibana-login-fine-but-unable-to-view-logs/262747)

<div class="topic-metadata">

**Author:** [@umen](https://discuss.elastic.co/u/umen)\
**Replies:** 4\
**Last updated:** [January 31, 2021, 2:03pm UTC](https://discuss.elastic.co/t/creating-new-user-in-kibana-login-fine-but-unable-to-view-logs/262747 "2021-01-31T14:03:21Z")

</div>

Hello all i created new use in kibana with kibana\_admin,kibana\_system rules but when i login to kibana with the new user, I cant view the logs which i can view with the default user of kibana . i can see all the filt…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1578)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1580)
