# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1661 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1662 --- ## [Filebeat registry not getting updated](https://discuss.elastic.co/t/filebeat-registry-not-getting-updated/257664)
**Author:** [@Ankush\_Goyal](https://discuss.elastic.co/u/Ankush_Goyal)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:25pm UTC](https://discuss.elastic.co/t/filebeat-registry-not-getting-updated/257664 "2020-12-04T14:25:59Z")
Hi There, Issue: Filebeat is not updating the custom filebeat.registry\_file according to the files present in the filebeat.prospector.paths Specs: System spec: 8 core 8GB ram Intel system Filebeat version: 6.2.2 OS: … --- ## [How to create and embedd Visualizaitions in kibana plugin](https://discuss.elastic.co/t/how-to-create-and-embedd-visualizaitions-in-kibana-plugin/257601)
**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 2:23pm UTC](https://discuss.elastic.co/t/how-to-create-and-embedd-visualizaitions-in-kibana-plugin/257601 "2020-12-04T14:23:47Z")
Hi, I am trying to create a visualization from gui in kibana. and then trying to fetch that visualization (later will export that visualization as json and include it in the package) into kibana plugin using visualizati… --- ## [Ingest-convert.sh getting exception while running the tool](https://discuss.elastic.co/t/ingest-convert-sh-getting-exception-while-running-the-tool/257659)
**Author:** [@anilreddyd](https://discuss.elastic.co/u/anilreddyd)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:09pm UTC](https://discuss.elastic.co/t/ingest-convert-sh-getting-exception-while-running-the-tool/257659 "2020-12-04T14:09:21Z")
I am getting exception while running the ingest-convert tool that converts elastic search parsing json to logstash configuration. Exception in thread "main" javax.script.ScriptException: TypeError: Cannot read property … --- ## [Cisco ASA module Source and Destination IP incorrect](https://discuss.elastic.co/t/cisco-asa-module-source-and-destination-ip-incorrect/257658)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 2:04pm UTC](https://discuss.elastic.co/t/cisco-asa-module-source-and-destination-ip-incorrect/257658 "2020-12-04T14:04:04Z")
Dear Team, We are currently ingesting Cisco ASA logs to our elasticsearch cluster using cisco asa module \[ECS\] which comes with filebeat. After verifying the logs in elasticsearch we could understand that Source.address… --- ## [Azure Marketplace Elasticsearch (self managed) installation failed with VMExtensionProvisioningError](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-self-managed-installation-failed-with-vmextensionprovisioningerror/257657)
**Author:** [@uhikram](https://discuss.elastic.co/u/uhikram)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 1:57pm UTC](https://discuss.elastic.co/t/azure-marketplace-elasticsearch-self-managed-installation-failed-with-vmextensionprovisioningerror/257657 "2020-12-04T13:57:12Z")
Deployed the Elasticsearch (Self-Managed) from Azure Marketplace, it is failing every time. Tried on multiple subscription as well. Version: 7.9.0 Deployment Erorr: {"code":"DeploymentFailed","message":"At least one r… --- ## [Create Kibana plugin to write x-large queries](https://discuss.elastic.co/t/create-kibana-plugin-to-write-x-large-queries/257616)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 1:50pm UTC](https://discuss.elastic.co/t/create-kibana-plugin-to-write-x-large-queries/257616 "2020-12-04T13:50:15Z")
I have an Elasticsearch index of millions of documents. Elasticsearch provides the ability to build statistics and aggregations out of this data and Kibana provides a nice out-of-the-box way to visualize this data. Howe… --- ## [How to set up looging level in Kibana](https://discuss.elastic.co/t/how-to-set-up-looging-level-in-kibana/257649)
**Author:** [@grynhtjnyuk](https://discuss.elastic.co/u/grynhtjnyuk)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 1:06pm UTC](https://discuss.elastic.co/t/how-to-set-up-looging-level-in-kibana/257649 "2020-12-04T13:06:32Z")
hi, could you tell me how to set up explicitly logging level in Kibana as INFO? --- ## [Ingest-convert.sh TypeError](https://discuss.elastic.co/t/ingest-convert-sh-typeerror/256152)
**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 12:55pm UTC](https://discuss.elastic.co/t/ingest-convert-sh-typeerror/256152 "2020-12-04T12:55:33Z")
I'm trying to convert filebeat-7.10.0-iis-error-pipeline to logstash config with ./ingest-convert.sh --input file:///root/error.json --output file:///root/iss-access.conf I tried with java bundled with logstash 7.10.0 … --- ## [TSVB derivative not showing data when time \< 4 hours](https://discuss.elastic.co/t/tsvb-derivative-not-showing-data-when-time-4-hours/257614)
**Author:** [@bering](https://discuss.elastic.co/u/bering)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 12:42pm UTC](https://discuss.elastic.co/t/tsvb-derivative-not-showing-data-when-time-4-hours/257614 "2020-12-04T12:42:16Z")
My use case is collecting wait stats from MS SQL server, these metrics records waits on different things, I collect these waits every 5 minutes. These waits are just growing until the server restarts, so using TSVB with… --- ## [Question about default refresh\_interval and upsert](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581)
**Author:** [@dbrt](https://discuss.elastic.co/u/dbrt)\ **Replies:** 6\ **Last updated:** [December 4, 2020, 12:17pm UTC](https://discuss.elastic.co/t/question-about-default-refresh-interval-and-upsert/257581 "2020-12-04T12:17:40Z")
Hello everyone, First of all, I am pretty new to ElasticSearch; please forgive me if the answer to my questions are obvious. We have switched to ElasticSearch 7.x from ElasticSearch 6.8 and I was very interested by the… --- ## [Multiple projects in same Kibana](https://discuss.elastic.co/t/multiple-projects-in-same-kibana/257347)
**Author:** [@xacobecm](https://discuss.elastic.co/u/xacobecm)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 11:36am UTC](https://discuss.elastic.co/t/multiple-projects-in-same-kibana/257347 "2020-12-04T11:36:57Z")
This is my first post here, so hello everybody and thanks in advance for any help given. I've been working with elastic for a while now, until now I implemented it in the project's k8s cluster. Now, for multiple develo… --- ## [Location based dashboard](https://discuss.elastic.co/t/location-based-dashboard/257559)
**Author:** [@vibhz](https://discuss.elastic.co/u/vibhz)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 11:22am UTC](https://discuss.elastic.co/t/location-based-dashboard/257559 "2020-12-04T11:22:51Z")
Hi, I am trying to create location based dashboard in kibana. location details are not available in the log message, we have to add a logic to map these. Please help. Usecase : Each location contains 400 servers, once w… --- ## [Helm Chart - existingClaim](https://discuss.elastic.co/t/helm-chart-existingclaim/255887)
**Author:** [@voipas](https://discuss.elastic.co/u/voipas)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 10:48am UTC](https://discuss.elastic.co/t/helm-chart-existingclaim/255887 "2020-12-04T10:48:37Z")
Hey, I would like to ask if there are any option to use existingClaim setting to install elasticsearch using helm? I was not able to find this information here: https://github.com/elastic/helm-charts/tree/master/elastics… --- ## [\[Filebeat\] HAProxy module in combination with autodiscover](https://discuss.elastic.co/t/filebeat-haproxy-module-in-combination-with-autodiscover/257539)
**Author:** [@dacamposol](https://discuss.elastic.co/u/dacamposol)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 3:51pm UTC](https://discuss.elastic.co/t/filebeat-haproxy-module-in-combination-with-autodiscover/257539 "2020-12-03T15:51:20Z")
Good afternoon everyone, I have a server where are running one instance of haproxy and one instance of filebeat in different containers. In order to have the output of haproxy accesible by docker logs, I have configure… --- ## [\[ERROR\]\[logstashoutputselasticsearch\] Attempted to send a bulk request to elasticsearch but Elasticsearch appears to be unreachable or down](https://discuss.elastic.co/t/error-logstashoutputselasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/257646)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 10:25am UTC](https://discuss.elastic.co/t/error-logstashoutputselasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/257646 "2020-12-04T10:25:35Z")
What to do when this appears in the logstash log? \[2020-12-04T09:46:50,568\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Marking url as dead. Last error: \[LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreacha… --- ## [Filebeat stops harvesting files after logrotate](https://discuss.elastic.co/t/filebeat-stops-harvesting-files-after-logrotate/257013)
**Author:** [@\_Sree](https://discuss.elastic.co/u/_Sree)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 9:50am UTC](https://discuss.elastic.co/t/filebeat-stops-harvesting-files-after-logrotate/257013 "2020-12-04T09:50:30Z")
I'm using wazuh kibana plugin and using filebeat to ship alerts to elasticsearch. Filebeat stop indexing data to wazuh-alerts index daily at midnight. I will be able to see new data only after restarting filebeat and it … --- ## [Elasticsearch bucket script aggregation in Kibana](https://discuss.elastic.co/t/elasticsearch-bucket-script-aggregation-in-kibana/257026)
**Author:** [@lakshman-battini](https://discuss.elastic.co/u/lakshman-battini)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 9:33am UTC](https://discuss.elastic.co/t/elasticsearch-bucket-script-aggregation-in-kibana/257026 "2020-12-04T09:33:28Z")
I am trying to create the visualization in Kibana, to show the count of orders whose average api time is less than 60 Sec. Below are the sample ES index documents: order\_id time api 1 50.0 /login 1 … --- ## [Does Filebeat Module fortinet support TLS/SSL](https://discuss.elastic.co/t/does-filebeat-module-fortinet-support-tls-ssl/257639)
**Author:** [@AndWe](https://discuss.elastic.co/u/AndWe)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 9:30am UTC](https://discuss.elastic.co/t/does-filebeat-module-fortinet-support-tls-ssl/257639 "2020-12-04T09:30:45Z")
Hi All Does the fortinet module for filebeat support TLS/SSL? According to documentation it doesn't. But for input its using the tcp input. And this input is supporting TLS/SSL. Any chance to implement TLS/SSL for for… --- ## [Canvas Search field with auto suggest](https://discuss.elastic.co/t/canvas-search-field-with-auto-suggest/257366)
**Author:** [@Alfar](https://discuss.elastic.co/u/Alfar)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 9:23am UTC](https://discuss.elastic.co/t/canvas-search-field-with-auto-suggest/257366 "2020-12-04T09:23:18Z")
Hi there, Are there any ways to create a search field with auto suggest in Kibana Canvas.I already tried with drop down filter, but it does not work for search and auto suggest.Thankful for the positive responses --- ## [Logstash / Enrich processor event sample rate](https://discuss.elastic.co/t/logstash-enrich-processor-event-sample-rate/257635)
**Author:** [@fran6ssl](https://discuss.elastic.co/u/fran6ssl)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 9:18am UTC](https://discuss.elastic.co/t/logstash-enrich-processor-event-sample-rate/257635 "2020-12-04T09:18:14Z")
Hi, I have multiple CSVs files with sensors data. Each data file holds the timestamp and the numeric value of the sensor at that time. Each sensor has a different sample rate. For a exemple we have a temperature sensor… --- ## [Rollover exact definition in ILM policy](https://discuss.elastic.co/t/rollover-exact-definition-in-ilm-policy/257542)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 9:14am UTC](https://discuss.elastic.co/t/rollover-exact-definition-in-ilm-policy/257542 "2020-12-04T09:14:47Z")
Hello all ! In the delete phase of the ILM policy, we can delete x days or x hours from rollover. But what is exactly this "rollover" ? : Is it the date when index has been renewed as he reached max size (or documen… --- ## [Highlight and complex search](https://discuss.elastic.co/t/highlight-and-complex-search/257633)
**Author:** [@FABIAN\_HUTIN](https://discuss.elastic.co/u/FABIAN_HUTIN)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 9:10am UTC](https://discuss.elastic.co/t/highlight-and-complex-search/257633 "2020-12-04T09:10:35Z")
Hey guys, Newbie Elastic user here. I'd like to share with you an issue I have while using the highlight feature in a complex search operation. What I want to achieve is to get the list of fields that match my search … --- ## [Mapping is present but field is missing](https://discuss.elastic.co/t/mapping-is-present-but-field-is-missing/257500)
**Author:** [@pskhanapur](https://discuss.elastic.co/u/pskhanapur)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 9:01am UTC](https://discuss.elastic.co/t/mapping-is-present-but-field-is-missing/257500 "2020-12-04T09:01:19Z")
I have field which has mapping. I can verify that using GET /INDEX/\_mapping. However it is not visible in the fields in the search option in (Index pattern page). The field is visible in the Discover as well --- ## [Two Index pattern with different time filter field names](https://discuss.elastic.co/t/two-index-pattern-with-different-time-filter-field-names/257503)
**Author:** [@pskhanapur](https://discuss.elastic.co/u/pskhanapur)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 8:55am UTC](https://discuss.elastic.co/t/two-index-pattern-with-different-time-filter-field-names/257503 "2020-12-04T08:55:19Z")
I have one index and I want to visualize my data using two different time filters (i.e. two different fields). Do I need to create two index patterns? Is it even possible to create two index pattern on same index? I tho… --- ## [Node count doesn't match](https://discuss.elastic.co/t/node-count-doesnt-match/257623)
**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 8:33am UTC](https://discuss.elastic.co/t/node-count-doesnt-match/257623 "2020-12-04T08:33:11Z")
Hello, I manage a big Elasticsearch cluster with the following details: Elasticsearch version 5.6.6 Dedicated Master nodes - 3 Data nodes - 56 Total nodes - 59 Data nodes details : baremetal; 31 GB jvm heap; 4 x … --- ## [X-Pack / Elastic - Cannot read security-version string in index .security](https://discuss.elastic.co/t/x-pack-elastic-cannot-read-security-version-string-in-index-security/257595)
**Author:** [@luffy937](https://discuss.elastic.co/u/luffy937)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 8:28am UTC](https://discuss.elastic.co/t/x-pack-elastic-cannot-read-security-version-string-in-index-security/257595 "2020-12-04T08:28:15Z")
Hello All, I'm coming to you because I think I checked all possibilities to correct my issue... I run an Elastic stack in a docker-compose file, the stack run well but I have a lot of error message in my docker-compose… --- ## [DateTime in Human Readable format Kibana](https://discuss.elastic.co/t/datetime-in-human-readable-format-kibana/257618)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 8:18am UTC](https://discuss.elastic.co/t/datetime-in-human-readable-format-kibana/257618 "2020-12-04T08:18:50Z")
Hi Team, I was trying to create a metric visualization to show when was the last time server health is checked Max(DateTime) really doesnot make more sense to user,so i created the scripted field "LastCheckInHumanReada… --- ## [Filebeat ingestion pipeline for ElasticSearch slow logs](https://discuss.elastic.co/t/filebeat-ingestion-pipeline-for-elasticsearch-slow-logs/257133)
**Author:** [@libbkmz](https://discuss.elastic.co/u/libbkmz)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 8:15am UTC](https://discuss.elastic.co/t/filebeat-ingestion-pipeline-for-elasticsearch-slow-logs/257133 "2020-12-04T08:15:28Z")
Hello, I've found and possibly created a bug fix when ElasticSearch ingestion pipelines do not capture data from the regex groups in the grok processor. My setup - ES, Kibana, and Filebeat with version 7.6.2. I have th… --- ## [Connection Reset By Peer IOException](https://discuss.elastic.co/t/connection-reset-by-peer-ioexception/257457)
**Author:** [@surabhi11](https://discuss.elastic.co/u/surabhi11)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 8:06am UTC](https://discuss.elastic.co/t/connection-reset-by-peer-ioexception/257457 "2020-12-04T08:06:04Z")
Hi All, We are getting Connection reset by peer issue with ElasticSearch Rest Client connection. Below issue is faced with both single & multi node cluster setup. Can someone please help in resolving this issue? Than… --- ## [Visualization show date format have day of week in Kibana](https://discuss.elastic.co/t/visualization-show-date-format-have-day-of-week-in-kibana/257301)
**Author:** [@thuhaa](https://discuss.elastic.co/u/thuhaa)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 7:22am UTC](https://discuss.elastic.co/t/visualization-show-date-format-have-day-of-week-in-kibana/257301 "2020-12-04T07:22:33Z")
My index have date time type attribute. I want to create visualize use date histogram aggregation with interval days. It will be show date format like 2020-12-02. But I want to date show format have day of week like 2020… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1660) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1662)