# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1655 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1656 --- ## [Currency Format](https://discuss.elastic.co/t/currency-format/257999)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 9\ **Last updated:** [December 8, 2020, 4:23pm UTC](https://discuss.elastic.co/t/currency-format/257999 "2020-12-08T16:23:48Z")
Hi all, My data in Elasticsearch index are numbers (integer, long, float) and amounts in euros € currency whitout affecting those are just a number. I would like to display all amounts with euro € signe. Unfortunately… --- ## [Not able to see latest logs in discover in kibana](https://discuss.elastic.co/t/not-able-to-see-latest-logs-in-discover-in-kibana/257688)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 10\ **Last updated:** [December 8, 2020, 5:23pm UTC](https://discuss.elastic.co/t/not-able-to-see-latest-logs-in-discover-in-kibana/257688 "2020-12-08T17:23:20Z")
Hi Team, I am not able to see latest logs in discover tab in kibana. the last logs I can see is of 1 Dec 2020 but not after that. I can see folders getting created till today in /opt/elasticsearch/nodes/0/indices/, the… --- ## [Auto-logout in Elastic managed service Kibana](https://discuss.elastic.co/t/auto-logout-in-elastic-managed-service-kibana/255092)
**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\ **Replies:** 8\ **Last updated:** [December 8, 2020, 5:09pm UTC](https://discuss.elastic.co/t/auto-logout-in-elastic-managed-service-kibana/255092 "2020-12-08T17:09:11Z")
Hi, I'm presenting a Kibana dashboard on television and after like 6 hours the session automatically logouts and requires to log in again with username and password. I'd like to disable the session from disconnection o… --- ## [Elasticsearch Vulnerabilities](https://discuss.elastic.co/t/elasticsearch-vulnerabilities/258021)
**Author:** [@TerryQ](https://discuss.elastic.co/u/TerryQ)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 4:55pm UTC](https://discuss.elastic.co/t/elasticsearch-vulnerabilities/258021 "2020-12-08T16:55:03Z")
Do these security vulnerabilities apply to the OSS distributions of Elasticsearch? From https://www.elastic.co/community/security/ Thanks --- ## [Inconsistency in no of total hits in results](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023)
**Author:** [@Paresh\_Vaniya](https://discuss.elastic.co/u/Paresh_Vaniya)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 4:47pm UTC](https://discuss.elastic.co/t/inconsistency-in-no-of-total-hits-in-results/258023 "2020-12-08T16:47:34Z")
Hi All, I am using below query for one of the our use cases & we are observing weird thing on total hits count - means assume I hit the below request first time then total hits in result would be 64 and if I hit second … --- ## [Fortigate parsing logs](https://discuss.elastic.co/t/fortigate-parsing-logs/258028)
**Author:** [@sg\_tanoe](https://discuss.elastic.co/u/sg_tanoe)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 4:42pm UTC](https://discuss.elastic.co/t/fortigate-parsing-logs/258028 "2020-12-08T16:42:28Z")
I would like to know how can I adapt log fields from a fortigate? In case, I want to get a result with a variety of field numbers over multiple lines. --- ## [Elasticsearch Index with INDEX\_CREATED status progress](https://discuss.elastic.co/t/elasticsearch-index-with-index-created-status-progress/257872)
**Author:** [@mohamedshokry](https://discuss.elastic.co/u/mohamedshokry)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-index-with-index-created-status-progress/257872 "2020-12-08T16:30:42Z")
Hello, I have a simple question: Is there an API to show current progress on an Elasticsearch index during different phases like 'INDEX\_CREATED'? I know that there is an API to check current recovery, but since the ind… --- ## [Do search templates improve performance?](https://discuss.elastic.co/t/do-search-templates-improve-performance/258018)
**Author:** [@kartoffelsack](https://discuss.elastic.co/u/kartoffelsack)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 4:08pm UTC](https://discuss.elastic.co/t/do-search-templates-improve-performance/258018 "2020-12-08T16:08:16Z")
Coming from a relational background I know that using precompiled queries can also help boosting database query performance. To my understanding search templates are the the equivalent to precompiled queries. Though al… --- ## [Kibana query to remote cluster causes null pointer exception](https://discuss.elastic.co/t/kibana-query-to-remote-cluster-causes-null-pointer-exception/258024)
**Author:** [@bwink](https://discuss.elastic.co/u/bwink)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 4:02pm UTC](https://discuss.elastic.co/t/kibana-query-to-remote-cluster-causes-null-pointer-exception/258024 "2020-12-08T16:02:44Z")
Cluster#1 7.10.0 Kibana#1 7.10.0 Cluster#2 7.9.2 Kibana#2 7.9.2 Problem#1 I have a local Kibana (kibana#1) to a local cluster (cluster#1) and everything works perfectly on querying an index pattern. I set up a diffe… --- ## [Kafka monitoring using JMX input plugin](https://discuss.elastic.co/t/kafka-monitoring-using-jmx-input-plugin/257936)
**Author:** [@madhan0618](https://discuss.elastic.co/u/madhan0618)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 5:33am UTC](https://discuss.elastic.co/t/kafka-monitoring-using-jmx-input-plugin/257936 "2020-12-08T05:33:05Z")
I read some tech notes on using jolokio jars to get logstash to consume JMX data from kafka and send it ES. Also came across the JMX input plugin. Installed and configured it and I am able to get the JMX metrics from ka… --- ## [Hive table with Elasticsearch](https://discuss.elastic.co/t/hive-table-with-elasticsearch/257736)
**Author:** [@irfangk1](https://discuss.elastic.co/u/irfangk1)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 3:33pm UTC](https://discuss.elastic.co/t/hive-table-with-elasticsearch/257736 "2020-12-08T15:33:55Z")
Need help in connecting or synchronised hive table with Elasticsearch.can any one share steps --- ## [Handling MQRFH2 header in logstash](https://discuss.elastic.co/t/handling-mqrfh2-header-in-logstash/258016)
**Author:** [@hassan2sn](https://discuss.elastic.co/u/hassan2sn)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 3:10pm UTC](https://discuss.elastic.co/t/handling-mqrfh2-header-in-logstash/258016 "2020-12-08T15:10:10Z")
Hi Guys, Can you please suggest , how to handle incoming MQRFH2 header in logstash, this is going to the dead letter queue, whenever there is an MQRFH2 / usr folder header in request --- ## [LogStash - Upload using MySQL](https://discuss.elastic.co/t/logstash-upload-using-mysql/257604)
**Author:** [@nottyheadedboss](https://discuss.elastic.co/u/nottyheadedboss)\ **Replies:** 12\ **Last updated:** [December 8, 2020, 2:52pm UTC](https://discuss.elastic.co/t/logstash-upload-using-mysql/257604 "2020-12-08T14:52:52Z")
I am new to the world of ELK and trying to learn. But Logstash is proving to be a big hurdle. I tried loading data from a CSV file and that caused lot of issues and I have been unable to upload using CSV. So I tried a ne… --- ## [ROW\_NUMBER in ES SQL](https://discuss.elastic.co/t/row-number-in-es-sql/257923)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 2:17pm UTC](https://discuss.elastic.co/t/row-number-in-es-sql/257923 "2020-12-08T14:17:34Z")
Hello, does the command ROW\_NUMBER() exist for ES SQL? When not, is there something equivalent to it? Can someone do an example, please? With best regards --- ## [Convert DateTime to integer](https://discuss.elastic.co/t/convert-datetime-to-integer/257924)
**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 2:15pm UTC](https://discuss.elastic.co/t/convert-datetime-to-integer/257924 "2020-12-08T14:15:05Z")
Hello, we have strings in the format "2020-11-10T12:43:58" saved in Kibana. When using ES SQL, we want to convert these strings into an integer or float so that the integer/float increases as the DateTime increases as … --- ## [Version mismatch between Elasticsearch and Logstash, beats](https://discuss.elastic.co/t/version-mismatch-between-elasticsearch-and-logstash-beats/257982)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 1:53pm UTC](https://discuss.elastic.co/t/version-mismatch-between-elasticsearch-and-logstash-beats/257982 "2020-12-08T13:53:23Z")
Hi, We have AWS Elasticsearch service with version 7.4 We want to make it centralized Elasticsearch. We have one standalone ELK stack (version: 7.6.2) with filebeat, metricbeat configured. We are planning to point th… --- ## [Do I need a Gold license if I am using the Elastic Cloud Gold Subscription?](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998)
**Author:** [@kunalyadav](https://discuss.elastic.co/u/kunalyadav)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 1:47pm UTC](https://discuss.elastic.co/t/do-i-need-a-gold-license-if-i-am-using-the-elastic-cloud-gold-subscription/257998 "2020-12-08T13:47:38Z")
Is it possible to run an ELK deployment on Elastic Cloud with the Gold subscription without having the Gold license? I have seen that for self-managed ELK we need to get the Gold license. Is that the same case with Ela… --- ## [Way to send dictionary file to multiple nodes in multiple server machines](https://discuss.elastic.co/t/way-to-send-dictionary-file-to-multiple-nodes-in-multiple-server-machines/257948)
**Author:** [@Dahea\_Moon](https://discuss.elastic.co/u/Dahea_Moon)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 1:38pm UTC](https://discuss.elastic.co/t/way-to-send-dictionary-file-to-multiple-nodes-in-multiple-server-machines/257948 "2020-12-08T13:38:00Z")
Hello, Elastic Team. I'm using one cluster with three nodes in two server machines. Is there any method to update user / synonym dictionary file at once? Unfortunately, machines cannot use shared folder. For now, we … --- ## [Elasticsearch query search sort return null](https://discuss.elastic.co/t/elasticsearch-query-search-sort-return-null/256064)
**Author:** [@magesh\_kumar](https://discuss.elastic.co/u/magesh_kumar)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-query-search-sort-return-null/256064 "2020-12-08T10:19:25Z")
I'm recently upgrade elasticsearch to 7.9.3 version. All are good but sort not working in one of my index called user\_products. searched query curl -X GET "localhost:9200/user\_products/\_search?pretty" -H 'Content-Typ… --- ## [Communication between ruby and translate plugin in logstash filter](https://discuss.elastic.co/t/communication-between-ruby-and-translate-plugin-in-logstash-filter/257828)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 1:01pm UTC](https://discuss.elastic.co/t/communication-between-ruby-and-translate-plugin-in-logstash-filter/257828 "2020-12-08T13:01:00Z")
Hi all, Do you have any idea or example how in ruby plugin (in logstash filter) invoke translate plugin and then collect and use the translated data again in ruby plugin? Thank. Best regards --- ## [Logstash filter error "mapper \[@version\] cannot be changed from type \[keyword\] to \[text\]"](https://discuss.elastic.co/t/logstash-filter-error-mapper-version-cannot-be-changed-from-type-keyword-to-text/257409)
**Author:** [@rrcoudian](https://discuss.elastic.co/u/rrcoudian)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 12:05pm UTC](https://discuss.elastic.co/t/logstash-filter-error-mapper-version-cannot-be-changed-from-type-keyword-to-text/257409 "2020-12-08T12:05:48Z")
Greetings, and thank you in advance for your support! Could you please help us with the syntax of our ES 7.10 logstash.conf file to parse an application log file via filebeat that was tested on ES 6.6, but we are now us… --- ## [How often does logstash send data to google cloud storage?](https://discuss.elastic.co/t/how-often-does-logstash-send-data-to-google-cloud-storage/257973)
**Author:** [@iooi](https://discuss.elastic.co/u/iooi)\ **Replies:** 1\ **Last updated:** [December 8, 2020, 11:06am UTC](https://discuss.elastic.co/t/how-often-does-logstash-send-data-to-google-cloud-storage/257973 "2020-12-08T11:06:03Z")
Config pipeline.yml output { stdout { codec =\> rubydebug } google\_cloud\_storage { bucket =\> "my\_nginx" json\_key\_file =\> "/my/secret/path/credentials.json" temp\_directory… --- ## [How to show last n records in ascending order in kibana dashboard](https://discuss.elastic.co/t/how-to-show-last-n-records-in-ascending-order-in-kibana-dashboard/257323)
**Author:** [@ajain16](https://discuss.elastic.co/u/ajain16)\ **Replies:** 7\ **Last updated:** [December 8, 2020, 10:49am UTC](https://discuss.elastic.co/t/how-to-show-last-n-records-in-ascending-order-in-kibana-dashboard/257323 "2020-12-08T10:49:22Z")
Hi All, We have data and time field in X axis and we are showing data on X axis from today to today+25 records. e.g 3Dec, 2 Dec, 1 Dec, 30 Nov, 29 Nov etc. We need to show total 25 data count in reverse order. e.g 25 … --- ## [Parse dotnet logs to filebeat](https://discuss.elastic.co/t/parse-dotnet-logs-to-filebeat/257968)
**Author:** [@walter.franssen](https://discuss.elastic.co/u/walter.franssen)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 10:32am UTC](https://discuss.elastic.co/t/parse-dotnet-logs-to-filebeat/257968 "2020-12-08T10:32:18Z")
Hi, We running dotnet applications in k8s and I see that the log from our dotnet application are parse on a single line instead adding more lines to one line of log. What is the best solution for getting multiply lines… --- ## [Machine Learning - Categorization status changed to warn](https://discuss.elastic.co/t/machine-learning-categorization-status-changed-to-warn/257841)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 10:27am UTC](https://discuss.elastic.co/t/machine-learning-categorization-status-changed-to-warn/257841 "2020-12-08T10:27:13Z")
Hi, I created a categorization ml job, and I get this message a lot: Categorization status changed to 'warn' for 'client\_event\_key' '\*\*\*\*' after 1186 buckets I quote the following from the documentation If the cate… --- ## [How to change my data to kv in Logstash](https://discuss.elastic.co/t/how-to-change-my-data-to-kv-in-logstash/257449)
**Author:** [@Mick1](https://discuss.elastic.co/u/Mick1)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 10:15am UTC](https://discuss.elastic.co/t/how-to-change-my-data-to-kv-in-logstash/257449 "2020-12-08T10:15:56Z")
The source data format cannot be changed First stroke： {value=12123, key=ABC2}, {value=2223, key=AB21C}, {value=1243, key=A4B1C}, {value=15223, key=AB35C}, {value=122123, key=A24BC}, {value=122213, key=AB33C}, {value=2… --- ## [Exisisting field doesn't show on Dashboard filters, but it does in discover and visualizations](https://discuss.elastic.co/t/exisisting-field-doesnt-show-on-dashboard-filters-but-it-does-in-discover-and-visualizations/257691)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [December 8, 2020, 10:14am UTC](https://discuss.elastic.co/t/exisisting-field-doesnt-show-on-dashboard-filters-but-it-does-in-discover-and-visualizations/257691 "2020-12-08T10:14:55Z")
Hi a specific field doesn't show on the filter of the dashboards, but it exists and can be found in discovery and in the visualizations I have reloaded the index pattern, checked his existance through a month, but … --- ## [Improving search query time](https://discuss.elastic.co/t/improving-search-query-time/257880)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 5\ **Last updated:** [December 8, 2020, 8:39am UTC](https://discuss.elastic.co/t/improving-search-query-time/257880 "2020-12-08T08:39:19Z")
Hi, Setup: Elasticseach 6.3.0, 2 shards, 4 replicas on 5 dedicated data nodes. I have a 10,000,000 products feed index - each document represent a product and look like: { "id": 123, "active": true… --- ## [Kibana 7.10 Dashboard Drilldown - filter on fewer values in destination dashbaord)](https://discuss.elastic.co/t/kibana-7-10-dashboard-drilldown-filter-on-fewer-values-in-destination-dashbaord/257821)
**Author:** [@AndyH](https://discuss.elastic.co/u/AndyH)\ **Replies:** 2\ **Last updated:** [December 8, 2020, 9:16am UTC](https://discuss.elastic.co/t/kibana-7-10-dashboard-drilldown-filter-on-fewer-values-in-destination-dashbaord/257821 "2020-12-08T09:16:21Z")
I've been playing with the new Create Drilldown feature available in Kibana 7.10 dashboards. On the parent dashboard I have a stacked horizontal bar chart: The y-axis (i.e. bar label) is a "Site Name" The x-axis (i.e.… --- ## [Elasticsearch take snapshot then clean indices which older than 7 days](https://discuss.elastic.co/t/elasticsearch-take-snapshot-then-clean-indices-which-older-than-7-days/257957)
**Author:** [@KA3AXCTAH](https://discuss.elastic.co/u/KA3AXCTAH)\ **Replies:** 0\ **Last updated:** [December 8, 2020, 9:09am UTC](https://discuss.elastic.co/t/elasticsearch-take-snapshot-then-clean-indices-which-older-than-7-days/257957 "2020-12-08T09:09:15Z")
I have Elasticsearch 7.4.1 cluster for storing logs, and i have this SLM pattern applied in my cluster curl -X PUT "afghanistan-01.elastic:9200/\_slm/policy/nightly-snapshots?pretty" -H 'Content-Type: application/json' -… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1654) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1656)