# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1830

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1831

---

## [Dynamic Grouping](https://discuss.elastic.co/t/dynamic-grouping/247074)

<div class="topic-metadata">

**Author:** [@Patrick\_Grasseels](https://discuss.elastic.co/u/Patrick_Grasseels)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 9:35am UTC](https://discuss.elastic.co/t/dynamic-grouping/247074 "2020-09-02T09:35:19Z")

</div>

Hi ! We have a big index, with lot of informations, Informations sample : 2020-09-01T04:25:18.357Z|LogLevel=Info |MyBusiness.MyLogger|CorrelationId="0000000000000000000"|10.10.10.10| POST test/order 1001|InputParamet…

---

## [Bar Chart axis label not in center of bar](https://discuss.elastic.co/t/bar-chart-axis-label-not-in-center-of-bar/247039)

<div class="topic-metadata">

**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 9:30am UTC](https://discuss.elastic.co/t/bar-chart-axis-label-not-in-center-of-bar/247039 "2020-09-02T09:30:10Z")

</div>

I had issue, the label on x axis not in center of bar, its cause the first bar ( Jan) didnt have label, can we make it to center of bar? thanks before

---

## [Logstash dateparsefailure](https://discuss.elastic.co/t/logstash-dateparsefailure/247191)

<div class="topic-metadata">

**Author:** [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 9:24am UTC](https://discuss.elastic.co/t/logstash-dateparsefailure/247191 "2020-09-02T09:24:17Z")

</div>

Hi. My log timestamp has a format Sep 2, 2020 @ 11:14:00.000 When I'm trying to parse it in logstash config I'm getting an error \_dateparsefailure date { target =\> "@timestamp" match =\> \[ "timestamp",…

---

## [How can I disable x-pack on ECK](https://discuss.elastic.co/t/how-can-i-disable-x-pack-on-eck/247186)

<div class="topic-metadata">

**Author:** [@packy](https://discuss.elastic.co/u/packy)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 9:06am UTC](https://discuss.elastic.co/t/how-can-i-disable-x-pack-on-eck/247186 "2020-09-02T09:06:33Z")

</div>

Hi , I am using ECK on mips64el platform. However the x-pack does not support mips64el. How can I disable x-pack module ?

---

## [How to snyc mongo data into ES](https://discuss.elastic.co/t/how-to-snyc-mongo-data-into-es/247199)

<div class="topic-metadata">

**Author:** [@Milan\_Suthar](https://discuss.elastic.co/u/Milan_Suthar)\
**Replies:** 0\
**Last updated:** [September 2, 2020, 8:52am UTC](https://discuss.elastic.co/t/how-to-snyc-mongo-data-into-es/247199 "2020-09-02T08:52:59Z")

</div>

as im new to ES i want to replicate my mongodb collections to ES how to snyc mongo(v3.4 ) data into ES ( version can be anyone lastest ), version is not an issue,

---

## [Editor for FieldFormat-plugin in new platform](https://discuss.elastic.co/t/editor-for-fieldformat-plugin-in-new-platform/247124)

<div class="topic-metadata">

**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 8:39am UTC](https://discuss.elastic.co/t/editor-for-fieldformat-plugin-in-new-platform/247124 "2020-09-02T08:39:15Z")

</div>

I have created a simple plugin based on the truncated string plugin, now I am trying to add parameters for the plugin. I would prefer to do that using an editor, much like the base plugin for truncated strings has, but I…

---

## [Elasticsearch fuzzy search not working properly with simpleQueryStringQuery](https://discuss.elastic.co/t/elasticsearch-fuzzy-search-not-working-properly-with-simplequerystringquery/247182)

<div class="topic-metadata">

**Author:** [@vaibhavind](https://discuss.elastic.co/u/vaibhavind)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 8:14am UTC](https://discuss.elastic.co/t/elasticsearch-fuzzy-search-not-working-properly-with-simplequerystringquery/247182 "2020-09-02T08:14:58Z")

</div>

I am using ES 7.8 with dependency 7.1.1 in pom.xml with JDK 1.8. I am trying to perform the search on the whole document rather than on specific fields. So I am not using QueryBuilders.matchQuery or QueryBuilders.multiMa…

---

## [Combine ingest and coordinating role at 7.9](https://discuss.elastic.co/t/combine-ingest-and-coordinating-role-at-7-9/246773)

<div class="topic-metadata">

**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 8:05am UTC](https://discuss.elastic.co/t/combine-ingest-and-coordinating-role-at-7-9/246773 "2020-09-02T08:05:47Z")

</div>

At 7.8 elastic version I use one node as coordinator only + ingest. But now I want update to 7.9 version. And now I am not able set node.ingest: true for coordinator node. Because I getting error can not explicitly co…

---

## [Authentication settings for active directory: sAMAccountName instead of userPrincipalName](https://discuss.elastic.co/t/authentication-settings-for-active-directory-samaccountname-instead-of-userprincipalname/247105)

<div class="topic-metadata">

**Author:** [@Stanvv](https://discuss.elastic.co/u/Stanvv)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 7:40am UTC](https://discuss.elastic.co/t/authentication-settings-for-active-directory-samaccountname-instead-of-userprincipalname/247105 "2020-09-02T07:40:16Z")

</div>

How can I configure logging in with sAMAccountName instead of userPrincipalName ? We used the LDAP realm before, but due to the lack of support on nested groups switched to active\_directory realm with the following set…

---

## [Is this a bug?](https://discuss.elastic.co/t/is-this-a-bug/247159)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/is-this-a-bug/247159 "2020-09-02T07:26:54Z")

</div>

I kept clicking, but the data didn't change and the number exceeded the actual number kibana：8.0

---

## [Why Kibana in Docker container doesn't work out of the box?](https://discuss.elastic.co/t/why-kibana-in-docker-container-doesnt-work-out-of-the-box/247166)

<div class="topic-metadata">

**Author:** [@Alex\_Pravdin](https://discuss.elastic.co/u/Alex_Pravdin)\
**Replies:** 6\
**Last updated:** [September 2, 2020, 7:26am UTC](https://discuss.elastic.co/t/why-kibana-in-docker-container-doesnt-work-out-of-the-box/247166 "2020-09-02T07:26:48Z")

</div>

Hi, I'm trying to run Kibana for the first time. I'm using Docker. Here is my configuration: version: '3.7' services: elasticsearch: image: elasticsearch:5.6.4 ports: - 9200:9200 environment: …

---

## [Weird Date Histogram two weeks error](https://discuss.elastic.co/t/weird-date-histogram-two-weeks-error/247093)

<div class="topic-metadata">

**Author:** [@GilKor](https://discuss.elastic.co/u/GilKor)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 6:33am UTC](https://discuss.elastic.co/t/weird-date-histogram-two-weeks-error/247093 "2020-09-02T06:33:51Z")

</div>

Hi, I have a weird thing where when i pick date histogram and i want to write 2w it doenst allow my, also i cant pick 14d. 13d and 15d - no problem, but 14d not working. when I wriet 20160m which is two weeks again I ca…

---

## [Elastic Search with Docker compose](https://discuss.elastic.co/t/elastic-search-with-docker-compose/247172)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 0\
**Last updated:** [September 2, 2020, 6:00am UTC](https://discuss.elastic.co/t/elastic-search-with-docker-compose/247172 "2020-09-02T06:00:43Z")

</div>

I tried to bring up ES cluster with one node by ingesting some variables,it seems all the variables are not ingested. Is it issue with the syntax or that is how it works ? Here is the compose file ( stripped down versio…

---

## [Multiple instance of Filebeat](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164)

<div class="topic-metadata">

**Author:** [@Priya\_Kapoor](https://discuss.elastic.co/u/Priya_Kapoor)\
**Replies:** 7\
**Last updated:** [September 2, 2020, 5:29am UTC](https://discuss.elastic.co/t/multiple-instance-of-filebeat/247164 "2020-09-02T05:29:12Z")

</div>

How I can create multiple instance for filebeat 7.4.2. I am new to ELK kindly help.

---

## [How can I load my new metricbeat module to ES and Kibana?](https://discuss.elastic.co/t/how-can-i-load-my-new-metricbeat-module-to-es-and-kibana/246233)

<div class="topic-metadata">

**Author:** [@icaruswu](https://discuss.elastic.co/u/icaruswu)\
**Replies:** 3\
**Last updated:** [September 2, 2020, 4:49am UTC](https://discuss.elastic.co/t/how-can-i-load-my-new-metricbeat-module-to-es-and-kibana/246233 "2020-09-02T04:49:50Z")

</div>

I create a new metricbeat module and succeed in getting data, and how can I load this new module to the Elasticsearch and Kibana? I used the localhost:5601 dashboard to check my new module, but did not get the new module…

---

## [Fliebeat netflow vs elastiflow](https://discuss.elastic.co/t/fliebeat-netflow-vs-elastiflow/247114)

<div class="topic-metadata">

**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 4:22am UTC](https://discuss.elastic.co/t/fliebeat-netflow-vs-elastiflow/247114 "2020-09-02T04:22:52Z")

</div>

Hello , here im, trying to find a nice solution for netflow analisis. After reading elastiflow at https://github.com/robcowart/elastiflow And testing my recently working filebeat netflow module can not find more than …

---

## [Enriching MMDB files with your own data using Go](https://discuss.elastic.co/t/enriching-mmdb-files-with-your-own-data-using-go/247158)

<div class="topic-metadata">

**Author:** [@nchelluri](https://discuss.elastic.co/u/nchelluri)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 2:49am UTC](https://discuss.elastic.co/t/enriching-mmdb-files-with-your-own-data-using-go/247158 "2020-09-02T02:49:14Z")

</div>

I work for MaxMind and it was pointed out to me that a popular blog post of ours around here was this post from 2015 showing how to build an MMDB using Perl. Well, it's 2020 now and we've got a post showing how to enric…

---

## [Fetch application logs running on kubernetes using filebeat](https://discuss.elastic.co/t/fetch-application-logs-running-on-kubernetes-using-filebeat/247075)

<div class="topic-metadata">

**Author:** [@Shefali](https://discuss.elastic.co/u/Shefali)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 1:59am UTC](https://discuss.elastic.co/t/fetch-application-logs-running-on-kubernetes-using-filebeat/247075 "2020-09-02T01:59:17Z")

</div>

I am trying to find proper solution but haven't got any. My java application is running on kubernetes and creating logs inside the pod. I have to fetch those logs from filebeat to elasticsearch (running on the server). …

---

## [Unable to get Logstash Centralised Management working](https://discuss.elastic.co/t/unable-to-get-logstash-centralised-management-working/247091)

<div class="topic-metadata">

**Author:** [@david.preston](https://discuss.elastic.co/u/david.preston)\
**Replies:** 0\
**Last updated:** [September 1, 2020, 12:42pm UTC](https://discuss.elastic.co/t/unable-to-get-logstash-centralised-management-working/247091 "2020-09-01T12:42:58Z")

</div>

This morning i tried to move an existing logstash to use Centralised Management. I configured the logstash yml as per documentation. xpack.management.enabled: true xpack.management.pipeline.id: \["{pipeline-id}"\] xpac…

---

## [I'm still able to define a document type in 7.9. Is this a bug?](https://discuss.elastic.co/t/im-still-able-to-define-a-document-type-in-7-9-is-this-a-bug/247125)

<div class="topic-metadata">

**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 1:48am UTC](https://discuss.elastic.co/t/im-still-able-to-define-a-document-type-in-7-9-is-this-a-bug/247125 "2020-09-02T01:48:27Z")

</div>

By adding a new document this way curl --location --request PUT 'http://localhost:9200/example1/product/1' \\ --header 'Content-Type: application/json' \\ --data-raw '{ "title": "example title", "a…

---

## [Kibana inline script](https://discuss.elastic.co/t/kibana-inline-script/245331)

<div class="topic-metadata">

**Author:** [@kinlee](https://discuss.elastic.co/u/kinlee)\
**Replies:** 6\
**Last updated:** [September 2, 2020, 1:00am UTC](https://discuss.elastic.co/t/kibana-inline-script/245331 "2020-09-02T01:00:09Z")

</div>

As per docu, it says "If you use Kibana, set script.allowed\_types to both or inline . Some Kibana features rely on inline scripts and do not function as expected if Elasticsearch does not allow inline scripts." wha…

---

## [Beats to create daily index](https://discuss.elastic.co/t/beats-to-create-daily-index/247096)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 2\
**Last updated:** [September 2, 2020, 12:31am UTC](https://discuss.elastic.co/t/beats-to-create-daily-index/247096 "2020-09-02T00:31:43Z")

</div>

Auditbeat is configured to send data to Elasticsearch directly. I'm trying to get auditbeat to create a new index every day. Right now this is the index that beats uses: auditbeat-7.9.0-2020.08.24-000001, even though to…

---

## [Filebeat + netflow module , there is nothing to visualize on kibana](https://discuss.elastic.co/t/filebeat-netflow-module-there-is-nothing-to-visualize-on-kibana/246849)

<div class="topic-metadata">

**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\
**Replies:** 13\
**Last updated:** [September 1, 2020, 8:55pm UTC](https://discuss.elastic.co/t/filebeat-netflow-module-there-is-nothing-to-visualize-on-kibana/246849 "2020-09-01T20:55:49Z")

</div>

Hi guys , im very exited about watching netflow data on elk. My elk is already working, I added metricbeat and can see nice graphics. Then with similar methods , installed filebeat and enable netflow module following t…

---

## [Misunderstood ILM](https://discuss.elastic.co/t/misunderstood-ilm/247057)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 9\
**Last updated:** [September 1, 2020, 8:49pm UTC](https://discuss.elastic.co/t/misunderstood-ilm/247057 "2020-09-01T20:49:48Z")

</div>

I was looking at a solution to delete old logs and I was suggested to set up ILM. I only now realize that ILM rolls over the entire index rather than old entries. If I understand correctly if I set up ILM to 3 months an…

---

## [Ingesting .doc .txt .csv .sql and some others](https://discuss.elastic.co/t/ingesting-doc-txt-csv-sql-and-some-others/246861)

<div class="topic-metadata">

**Author:** [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)\
**Replies:** 7\
**Last updated:** [September 1, 2020, 8:48pm UTC](https://discuss.elastic.co/t/ingesting-doc-txt-csv-sql-and-some-others/246861 "2020-09-01T20:48:07Z")

</div>

Hi everyone, I have a question. What would be the fastest way to ingest data? I have a folder that contains a variety of file formats including .doc, .txt, .csv and .sql. I have roughly 30 gigs of files like this that I…

---

## [Watcher Email Configuration not able to send mail:](https://discuss.elastic.co/t/watcher-email-configuration-not-able-to-send-mail/246850)

<div class="topic-metadata">

**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\
**Replies:** 6\
**Last updated:** [September 1, 2020, 8:38pm UTC](https://discuss.elastic.co/t/watcher-email-configuration-not-able-to-send-mail/246850 "2020-09-01T20:38:39Z")

</div>

Continuing the discussion from Watcher email configuration: 1)I am facing this Issue while testing Mail through watcher: 2)This is yml configuration: 3)Secure Password: For the Email Configuration i have do…

---

## [How to ingest old logs into slow storage and newer logs into fast storage](https://discuss.elastic.co/t/how-to-ingest-old-logs-into-slow-storage-and-newer-logs-into-fast-storage/247009)

<div class="topic-metadata">

**Author:** [@ManjaroBlack](https://discuss.elastic.co/u/ManjaroBlack)\
**Replies:** 4\
**Last updated:** [September 1, 2020, 8:23pm UTC](https://discuss.elastic.co/t/how-to-ingest-old-logs-into-slow-storage-and-newer-logs-into-fast-storage/247009 "2020-09-01T20:23:16Z")

</div>

I am experimenting with the Elastic Stack on my laptop. I need to ingest a bunch of logs dating back a few years up to current time. I am using logstash to process the logs and send them to elasticsearch. I have limited …

---

## [Date Range series in Kibana: how to fit the global date range filter of kibana?](https://discuss.elastic.co/t/date-range-series-in-kibana-how-to-fit-the-global-date-range-filter-of-kibana/247107)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 3\
**Last updated:** [September 1, 2020, 7:59pm UTC](https://discuss.elastic.co/t/date-range-series-in-kibana-how-to-fit-the-global-date-range-filter-of-kibana/247107 "2020-09-01T19:59:14Z")

</div>

I have created this date range filter on a visualization using the acceptable date formats here is my first draft OK, I am happy if I stick to now. But if I go back in time in my global filter, then the visualizati…

---

## [Hot-cold setup](https://discuss.elastic.co/t/hot-cold-setup/246858)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [September 1, 2020, 7:53pm UTC](https://discuss.elastic.co/t/hot-cold-setup/246858 "2020-09-01T19:53:07Z")

</div>

I have running cluster, five data node with node.attr.box\_type: hot now I would like to introduce cold storage as well I have a node which I will be using as cold storage node.attr.box\_type: cold but most all my i…

---

## [Time zone in the field?](https://discuss.elastic.co/t/time-zone-in-the-field/247139)

<div class="topic-metadata">

**Author:** [@Alex9](https://discuss.elastic.co/u/Alex9)\
**Replies:** 1\
**Last updated:** [September 1, 2020, 7:52pm UTC](https://discuss.elastic.co/t/time-zone-in-the-field/247139 "2020-09-01T19:52:06Z")

</div>

Good day :slightly\_smiling\_face: (I probably have a simple question, but I haven't been able to figure it out on my own) Please tell me how to properly configure the date display in the fields? I have a service that, …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1829)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1831)
