# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1593 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1594 --- ## [\[HELP\] cannot automate rollovers with filebeat](https://discuss.elastic.co/t/help-cannot-automate-rollovers-with-filebeat/261809)
**Author:** [@lachezar.uzunov](https://discuss.elastic.co/u/lachezar.uzunov)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 3:06pm UTC](https://discuss.elastic.co/t/help-cannot-automate-rollovers-with-filebeat/261809 "2021-01-21T15:06:01Z")
Hello everyone. I am trying to create automation rollup system to archive and delete checkpoint firewall logs based on conditions. The problem I face is not being able to automate my filebeat to write to the new create… --- ## [Scripted upsert issues](https://discuss.elastic.co/t/scripted-upsert-issues/261808)
**Author:** [@Dede\_Pessu](https://discuss.elastic.co/u/Dede_Pessu)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 3:05pm UTC](https://discuss.elastic.co/t/scripted-upsert-issues/261808 "2021-01-21T15:05:12Z")
I am currently trying to do calculations based on correlating field values from different documents and decided achieve this by using scripted\_upsert method to update and create the documents based on the document id but… --- ## [Elastic Search Connection error](https://discuss.elastic.co/t/elastic-search-connection-error/261348)
**Author:** [@Tlm\_Konstantinos](https://discuss.elastic.co/u/Tlm_Konstantinos)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 2:07pm UTC](https://discuss.elastic.co/t/elastic-search-connection-error/261348 "2021-01-21T14:07:16Z")
Hi every one I have installed elastic search through docker-compose on a machine. The version of elastic search in the yaml file is 1.11.0 and from python withn pyelasticsearch 7.6.0 I im tryig to get all the indices fro… --- ## [Scripted fields to convert seconds to hours](https://discuss.elastic.co/t/scripted-fields-to-convert-seconds-to-hours/261790)
**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 2:04pm UTC](https://discuss.elastic.co/t/scripted-fields-to-convert-seconds-to-hours/261790 "2021-01-21T14:04:20Z")
Cant figure it out, need an additional field that will convert seconds into hours I have a number field called Session-Time which i need converting into hours and displayed in another field. I have tried to create a scr… --- ## [How create watcher for ML anomalies detected](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 1:54pm UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639 "2021-01-21T13:54:54Z")
hi! where can I find documentation on creating and configuring watchdogs for machine learning jobs? --- ## [Missing plugin-descriptor.properties](https://discuss.elastic.co/t/missing-plugin-descriptor-properties/261650)
**Author:** [@TimWardFS](https://discuss.elastic.co/u/TimWardFS)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 1:13pm UTC](https://discuss.elastic.co/t/missing-plugin-descriptor-properties/261650 "2021-01-21T13:13:20Z")
Experimenting with an offline install of https://artifacts.elastic.co/downloads/elasticsearch-plugins/repository-s3/repository-s3-7.10.0.zip into an Elasticsearch which says it's 7.10.0 using the command sudo bin/elasti… --- ## [How to Execute Query to fetch inprogess processes](https://discuss.elastic.co/t/how-to-execute-query-to-fetch-inprogess-processes/261774)
**Author:** [@abhi.coerian](https://discuss.elastic.co/u/abhi.coerian)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 12:26pm UTC](https://discuss.elastic.co/t/how-to-execute-query-to-fetch-inprogess-processes/261774 "2021-01-21T12:26:47Z")
I have log 'analytics', which contains a list of events of process logs ( for eg: CRUD) that occured over a period of time. I am looking to find a set of records that were record added but not deleted from system. docum… --- ## [Performance degradation when using Date field in epoch millis vs date values stored as long numbers](https://discuss.elastic.co/t/performance-degradation-when-using-date-field-in-epoch-millis-vs-date-values-stored-as-long-numbers/261773)
**Author:** [@Varsha\_Meghana](https://discuss.elastic.co/u/Varsha_Meghana)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 11:53am UTC](https://discuss.elastic.co/t/performance-degradation-when-using-date-field-in-epoch-millis-vs-date-values-stored-as-long-numbers/261773 "2021-01-21T11:53:16Z")
Hi, we are migrating to Elastic search 7.x from ES 1.7 We were storing various date values as long numbers (milliseconds) in our Elastic 1.7 server. However, we would want to move to ES 7.x and decided to make use of "… --- ## [Does Rally support custom metrics or custom index in the configuration](https://discuss.elastic.co/t/does-rally-support-custom-metrics-or-custom-index-in-the-configuration/261652)
**Author:** [@111430](https://discuss.elastic.co/u/111430)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 11:49am UTC](https://discuss.elastic.co/t/does-rally-support-custom-metrics-or-custom-index-in-the-configuration/261652 "2021-01-21T11:49:22Z")
I have many different versions of ES clusters that I often test with Rally. Does Rally support custom metrics or custom index in the configuration? From the documents, Rally - Metrics -\* is written by default and does no… --- ## [Keyword field update with existing value](https://discuss.elastic.co/t/keyword-field-update-with-existing-value/261522)
**Author:** [@rajaraman](https://discuss.elastic.co/u/rajaraman)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 11:29am UTC](https://discuss.elastic.co/t/keyword-field-update-with-existing-value/261522 "2021-01-21T11:29:53Z")
Hi, is it possible to update value in TEAM (keyword field) with existing value in the form ("NETWORK TEAM","DBA TEAM") when, i update , it updates as whole text.("NETWORK TEAM,DBA TEAM") please, help --- ## [Conditional scripted field with if else](https://discuss.elastic.co/t/conditional-scripted-field-with-if-else/261646)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 11\ **Last updated:** [January 21, 2021, 11:20am UTC](https://discuss.elastic.co/t/conditional-scripted-field-with-if-else/261646 "2021-01-21T11:20:55Z")
Hello Team, I am new to this tool, Could you please help me to fix this painless script. I am trying get new scripted field with \[ResTime\] value when \[Region\] is "APJ" else blank. if (doc\['Region'\].value == 'APJ') { … --- ## [Error Trying to package a custom made beat](https://discuss.elastic.co/t/error-trying-to-package-a-custom-made-beat/261752)
**Author:** [@Avi\_Adnahani](https://discuss.elastic.co/u/Avi_Adnahani)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 9:25am UTC](https://discuss.elastic.co/t/error-trying-to-package-a-custom-made-beat/261752 "2021-01-21T09:25:45Z")
Hello, I am trying to create a new custom beat, after running "mage -v package" I get the error: sh: 1: build/mage-linux-amd64: not found Error: failed building for linux/386: exit status 127 after investigating I fou… --- ## [Termvector api fails for artificial document](https://discuss.elastic.co/t/termvector-api-fails-for-artificial-document/261761)
**Author:** [@murari\_tikmani](https://discuss.elastic.co/u/murari_tikmani)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 10:09am UTC](https://discuss.elastic.co/t/termvector-api-fails-for-artificial-document/261761 "2021-01-21T10:09:54Z")
I have a use case where I want to find the score of each word in my artificial document when compared against existing corpus. For that I am using termvector api on an artificial document. The api fails if we use "filt… --- ## [How to get the latest index data？If write data regularly every day。](https://discuss.elastic.co/t/how-to-get-the-latest-index-data-if-write-data-regularly-every-day/261386)
**Author:** [@111395](https://discuss.elastic.co/u/111395)\ **Replies:** 8\ **Last updated:** [January 21, 2021, 9:57am UTC](https://discuss.elastic.co/t/how-to-get-the-latest-index-data-if-write-data-regularly-every-day/261386 "2021-01-21T09:57:40Z")
Hi, I have a requirement is save the latest data to the new index from old index。 The old index writes data regularly every day。 In fact, I just want to visualize with the latest data，But I didn't find the right way, … --- ## [Build error when using \`kibanaReact\` and \`kibanaUtils\` in kibana 3rd party plugin](https://discuss.elastic.co/t/build-error-when-using-kibanareact-and-kibanautils-in-kibana-3rd-party-plugin/261748)
**Author:** [@Eric\_wei](https://discuss.elastic.co/u/Eric_wei)\ **Replies:** 8\ **Last updated:** [January 21, 2021, 9:46am UTC](https://discuss.elastic.co/t/build-error-when-using-kibanareact-and-kibanautils-in-kibana-3rd-party-plugin/261748 "2021-01-21T09:46:30Z")
Hello, I'm trying to use kibanaReact and kibanaUtils in my kibana plugin. These 2 plugins added as requiredBundles in the kibana.json, ... "requiredBundles": \["kibanaUtils", "kibanaReact"\] ... But error keep happens … --- ## [Kibana reporting](https://discuss.elastic.co/t/kibana-reporting/261662)
**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 8:56am UTC](https://discuss.elastic.co/t/kibana-reporting/261662 "2021-01-21T08:56:55Z")
Hello Team, haw to solve \[Reporting error Request-URI Too Long\] when genering a pdf report from kibana 7.4.0 ? thanks for help. --- ## [Restrict specific time range](https://discuss.elastic.co/t/restrict-specific-time-range/261496)
**Author:** [@andyet921](https://discuss.elastic.co/u/andyet921)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 8:41am UTC](https://discuss.elastic.co/t/restrict-specific-time-range/261496 "2021-01-21T08:41:10Z")
Hello all, is there any method that I can restrict specific time range? I want to restrict time range from yesterday 12 p.m. to today 12:00 p.m. so that my Kibana dashboard can show the specific time range's data. Thank… --- ## [Unable to run Query in Kibana DSL](https://discuss.elastic.co/t/unable-to-run-query-in-kibana-dsl/261746)
**Author:** [@tamilarasanbravo](https://discuss.elastic.co/u/tamilarasanbravo)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 8:34am UTC](https://discuss.elastic.co/t/unable-to-run-query-in-kibana-dsl/261746 "2021-01-21T08:34:17Z")
Hi Team, There is an aggregation query which I ran in the Kibana "Dev Tools"(PFB) but failing to run in the kibana Discover page (query) Query { "size": 100, "aggs": { "group\_by\_pull\_request": { "terms"… --- ## [Logstash Persistent Queues](https://discuss.elastic.co/t/logstash-persistent-queues/261745)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 8:32am UTC](https://discuss.elastic.co/t/logstash-persistent-queues/261745 "2021-01-21T08:32:18Z")
Hi, I'm seeing some weird behaviour where logstash appears to be bottlenecking throughput from filebeat yet persistent queues are not filling. Is this possible? Note: Logstash appears to be the bottleneck as throughput… --- ## [How to highlight partial word when using edge\_ngram filter](https://discuss.elastic.co/t/how-to-highlight-partial-word-when-using-edge-ngram-filter/261742)
**Author:** [@ralgo](https://discuss.elastic.co/u/ralgo)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 8:16am UTC](https://discuss.elastic.co/t/how-to-highlight-partial-word-when-using-edge-ngram-filter/261742 "2021-01-21T08:16:37Z")
I am using the edge\_ngram filter in my analyzer, e.g. I index a word "EVA京", it will be mapped to an array \[E, EV, EVA, 京\]. And then I search "EV", of cause "EVA京" can be recalled. But the highlight works wrong! The resu… --- ## [How to debug Java Thread Park issues between client process and the AWS Elastic Search?](https://discuss.elastic.co/t/how-to-debug-java-thread-park-issues-between-client-process-and-the-aws-elastic-search/261720)
**Author:** [@Sumaiya](https://discuss.elastic.co/u/Sumaiya)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 8:02am UTC](https://discuss.elastic.co/t/how-to-debug-java-thread-park-issues-between-client-process-and-the-aws-elastic-search/261720 "2021-01-21T08:02:47Z")
Use case : The Sping boot is calling the AWS Elastic server for the searching for an object through RestHighLevelClient Issue : On the client-side we see Java Thread Parked from 1 to 6 secs How do I find out - What … --- ## [Filebeat/Logstash Interface](https://discuss.elastic.co/t/filebeat-logstash-interface/261736)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 7:51am UTC](https://discuss.elastic.co/t/filebeat-logstash-interface/261736 "2021-01-21T07:51:08Z")
Hi, What is the impact on the beat-input of logstash if each filebeat is creating a large number of connections, for example 128? Thx D --- ## [Index strategy for updated docs](https://discuss.elastic.co/t/index-strategy-for-updated-docs/261734)
**Author:** [@esalih](https://discuss.elastic.co/u/esalih)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 7:39am UTC](https://discuss.elastic.co/t/index-strategy-for-updated-docs/261734 "2021-01-21T07:39:49Z")
I plan to keep group of events as a single doc at elastic. Events in a group has a common unique id (e.g, event\_group\_1), and events of a single group arrive in general within a day to my processing pipeline. I update th… --- ## [Esrally to test resiliency of the server](https://discuss.elastic.co/t/esrally-to-test-resiliency-of-the-server/260150)
**Author:** [@ven1](https://discuss.elastic.co/u/ven1)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 7:22am UTC](https://discuss.elastic.co/t/esrally-to-test-resiliency-of-the-server/260150 "2021-01-21T07:22:44Z")
I like to test the resiliency of the elasticsearch cluster when there is a server failure (1 Elasticsearch Node is down). I am following the below process esrally rally as loadgenerator and to deploy a 4 node cluster. … --- ## [An existing connection was forcibly closed by the remote host](https://discuss.elastic.co/t/an-existing-connection-was-forcibly-closed-by-the-remote-host/261246)
**Author:** [@279zlj](https://discuss.elastic.co/u/279zlj)\ **Replies:** 8\ **Last updated:** [January 21, 2021, 7:15am UTC](https://discuss.elastic.co/t/an-existing-connection-was-forcibly-closed-by-the-remote-host/261246 "2021-01-21T07:15:44Z")
Exception in thread "main" java.io.IOException: 远程主机强迫关闭了一个现有的连接。 at org.elasticsearch.client.RestClient$SyncResponseListener.get(RestClient.java:964) at org.elasticsearch.client.RestClient.performRequest(RestClient.ja… --- ## [Tooltip Font-size through CSS - Enhanced Table](https://discuss.elastic.co/t/tooltip-font-size-through-css-enhanced-table/261728)
**Author:** [@sam7](https://discuss.elastic.co/u/sam7)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 6:47am UTC](https://discuss.elastic.co/t/tooltip-font-size-through-css-enhanced-table/261728 "2021-01-21T06:47:53Z")
I am using TVSB markdown to show some images. Used tooltip on the images while hover over it. But, I want to increase the size of fonts-appeared in tool tip using CSS. Any Suggestions? --- ## [Logstash Output Plugin for Hbase](https://discuss.elastic.co/t/logstash-output-plugin-for-hbase/261726)
**Author:** [@arpit1305](https://discuss.elastic.co/u/arpit1305)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 6:02am UTC](https://discuss.elastic.co/t/logstash-output-plugin-for-hbase/261726 "2021-01-21T06:02:51Z")
Hi, I am looking for logstash output to be stored in Hbase. Any guidance or inputs please? Regards, Arpit --- ## [Why isn't the template working inside logstash?](https://discuss.elastic.co/t/why-isnt-the-template-working-inside-logstash/261723)
**Author:** [@chb1828](https://discuss.elastic.co/u/chb1828)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 5:47am UTC](https://discuss.elastic.co/t/why-isnt-the-template-working-inside-logstash/261723 "2021-01-21T05:47:41Z")
I'm using logstash 7.0.0. I install my template but it doesn't apply. Logs in logstash are print like this. Attempting to install template {:manage\_template=\>{"template"=\>"news\*", "settings"=\>{"index.refresh\_interval"… --- ## [Correlation in ELK dashboard](https://discuss.elastic.co/t/correlation-in-elk-dashboard/260160)
**Author:** [@Sivajanani](https://discuss.elastic.co/u/Sivajanani)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 5:37am UTC](https://discuss.elastic.co/t/correlation-in-elk-dashboard/260160 "2021-01-21T05:37:21Z")
Hello All, I have an index with below fields and data set, 1.indicator:13.12.14.15 action:success 2.indicators:13.12.14.15 tags:elk-search 3.indicator:14.4.5.67.84 action:success I have built a das… --- ## [Performace Tuning to avoid Latency](https://discuss.elastic.co/t/performace-tuning-to-avoid-latency/261717)
**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 5:27am UTC](https://discuss.elastic.co/t/performace-tuning-to-avoid-latency/261717 "2021-01-21T05:27:49Z")
How can we do performance tuning in Metricbeat Configuration file to avoid any latency? or What are the best practices one should follow to avoid any latency in production? Any recommendation or suggestion would be help… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1592) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1594)