# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1833 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1834 --- ## [Date Parse failures](https://discuss.elastic.co/t/date-parse-failures/246821)
**Author:** [@vvwood](https://discuss.elastic.co/u/vvwood)\ **Replies:** 7\ **Last updated:** [August 31, 2020, 9:37pm UTC](https://discuss.elastic.co/t/date-parse-failures/246821 "2020-08-31T21:37:51Z")
I have tried opening an official support case without getting any help on the following topic. Hoping someone here can help.... I have several log sources with a date field like this: Mar 22 2020 21:52:00 In my Index T… --- ## [Fail to send data to elastic unexpected EOF](https://discuss.elastic.co/t/fail-to-send-data-to-elastic-unexpected-eof/246732)
**Author:** [@greyhats13](https://discuss.elastic.co/u/greyhats13)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 9:31pm UTC](https://discuss.elastic.co/t/fail-to-send-data-to-elastic-unexpected-eof/246732 "2020-08-31T21:31:13Z")
Hi guys, we are shipping the logs to elastic public endpoint (internet) from go microservices using this modulule elastic https://github.com/elastic/go-elasticsearch, but we encounter this error: 1. "could not get index… --- ## [Output logs to host based on timestamp](https://discuss.elastic.co/t/output-logs-to-host-based-on-timestamp/246357)
**Author:** [@ManjaroBlack](https://discuss.elastic.co/u/ManjaroBlack)\ **Replies:** 7\ **Last updated:** [August 31, 2020, 9:30pm UTC](https://discuss.elastic.co/t/output-logs-to-host-based-on-timestamp/246357 "2020-08-31T21:30:52Z")
I have logs that are a mix of old and new. I'd like to send any logs that are newer than 2 weeks to fast SSD, otherwise send to slower HDD. Can someone point me in the direction to figure this out? --- ## [Creating dynamic rollup indexes](https://discuss.elastic.co/t/creating-dynamic-rollup-indexes/246578)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 9:26pm UTC](https://discuss.elastic.co/t/creating-dynamic-rollup-indexes/246578 "2020-08-31T21:26:49Z")
Hi Team, I am working on rollup indices for the first time and don't have much idea about its capabilities. I want to rollup my data every month and can have all the visualization/scripts/dashboards in the current indi… --- ## [Exiting: resource 'filebeat-7.9.0' exists, but it is not an alias](https://discuss.elastic.co/t/exiting-resource-filebeat-7-9-0-exists-but-it-is-not-an-alias/245745)
**Author:** [@oicfar](https://discuss.elastic.co/u/oicfar)\ **Replies:** 10\ **Last updated:** [August 31, 2020, 8:38pm UTC](https://discuss.elastic.co/t/exiting-resource-filebeat-7-9-0-exists-but-it-is-not-an-alias/245745 "2020-08-31T20:38:55Z")
hi, after update to ELK 7.9.0 I deleted the filebeat-7.8.x indexes, templatres and now I see this Exiting: resource 'filebeat-7.9.0' exists, but it is not an alias ERROR in the log. Regards, Rafal --- ## [Hitting 'too\_many\_clauses' exception when used in aggregation filter context](https://discuss.elastic.co/t/hitting-too-many-clauses-exception-when-used-in-aggregation-filter-context/247010)
**Author:** [@Karthik\_Arun](https://discuss.elastic.co/u/Karthik_Arun)\ **Replies:** 0\ **Last updated:** [August 31, 2020, 8:13pm UTC](https://discuss.elastic.co/t/hitting-too-many-clauses-exception-when-used-in-aggregation-filter-context/247010 "2020-08-31T20:13:44Z")
I have a terms query returning over 5k clauses and when this is used within the filter context of the query, I never hit this 'too\_many\_clauses exception - you have exceeded 1024 clauses'. However if I use this terms qu… --- ## [Elastic-Agent enrollment problem](https://discuss.elastic.co/t/elastic-agent-enrollment-problem/246426)
**Author:** [@bernhard.fluehmann](https://discuss.elastic.co/u/bernhard.fluehmann)\ **Replies:** 8\ **Last updated:** [August 31, 2020, 6:17pm UTC](https://discuss.elastic.co/t/elastic-agent-enrollment-problem/246426 "2020-08-31T18:17:49Z")
I am trying to test elastic-agent and ingest-mangement, unfortunately without success so far. The agent is installed on linux machines (centos-7/8) and enrolled like described in the manuals. The agents show up in kiba… --- ## [Logstash will not create an index pattern in elastic search](https://discuss.elastic.co/t/logstash-will-not-create-an-index-pattern-in-elastic-search/246992)
**Author:** [@stor314](https://discuss.elastic.co/u/stor314)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 6:08pm UTC](https://discuss.elastic.co/t/logstash-will-not-create-an-index-pattern-in-elastic-search/246992 "2020-08-31T18:08:23Z")
I am an extreme beginner with the elastic stack, I'm simply trying to create a very simple setup with elasticsearch logstash and kibana on my local machine. All of them are installed and are able to run, using versions 7… --- ## [Disable/enable in kibana 7.9 through roles](https://discuss.elastic.co/t/disable-enable-in-kibana-7-9-through-roles/246436)
**Author:** [@Muhammad\_Umair\_Baig](https://discuss.elastic.co/u/Muhammad_Umair_Baig)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 6:04pm UTC](https://discuss.elastic.co/t/disable-enable-in-kibana-7-9-through-roles/246436 "2020-08-31T18:04:13Z")
Hi Team, i am using Kibana/elasticsearch 7.9 version. I have couple of questions. Is there anyway that i can hide navbar for a specific user based on the role? Hide "Edit profile" menu item and remove dashboard ca… --- ## [Dangling links error](https://discuss.elastic.co/t/dangling-links-error/245601)
**Author:** [@keraghu](https://discuss.elastic.co/u/keraghu)\ **Replies:** 11\ **Last updated:** [August 31, 2020, 5:55pm UTC](https://discuss.elastic.co/t/dangling-links-error/245601 "2020-08-31T17:55:23Z")
Hi We have elastic search setup on docker swarm. The elastic search data nodes automatically restarted, but all the nodes did not up and running, then, we did manual retstart ( portainer) But now we are getting an da… --- ## [Unassigned ilm-history shard cluster in RED state](https://discuss.elastic.co/t/unassigned-ilm-history-shard-cluster-in-red-state/246970)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 5:49pm UTC](https://discuss.elastic.co/t/unassigned-ilm-history-shard-cluster-in-red-state/246970 "2020-08-31T17:49:13Z")
dufing upgrade 7.4.2 -\> 7.9 I received an error "failed shard on node \[GnAJTEqpTeyawpDyUli4Aw\]: failed to create index, failure IllegalArgumentException\[unknown setting \[index.hidden\] please check that any required plug… --- ## [Kibana - Visualization shows 0 results](https://discuss.elastic.co/t/kibana-visualization-shows-0-results/246993)
**Author:** [@spiri](https://discuss.elastic.co/u/spiri)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 5:45pm UTC](https://discuss.elastic.co/t/kibana-visualization-shows-0-results/246993 "2020-08-31T17:45:53Z")
Hello, I integrated my syslog-ng with Elasticsearch + Kibana and I want to show the count of denied and allowed connections in a pie. So I created a new visualization for a pie, then splitted the slice twice and select… --- ## [Generate custom report and automate sending using watcher](https://discuss.elastic.co/t/generate-custom-report-and-automate-sending-using-watcher/246973)
**Author:** [@vivekkarne](https://discuss.elastic.co/u/vivekkarne)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 5:44pm UTC](https://discuss.elastic.co/t/generate-custom-report-and-automate-sending-using-watcher/246973 "2020-08-31T17:44:19Z")
I have a saved search which when exported as csv from the discover page works fine, i then copy the url and create a watcher following to process here: Automatically generate reports | Kibana Guide \[master\] | Elastic Bu… --- ## [Kibana Homepage Not Loading](https://discuss.elastic.co/t/kibana-homepage-not-loading/246758)
**Author:** [@guilloryg](https://discuss.elastic.co/u/guilloryg)\ **Replies:** 7\ **Last updated:** [August 31, 2020, 5:43pm UTC](https://discuss.elastic.co/t/kibana-homepage-not-loading/246758 "2020-08-31T17:43:54Z")
Good Morning, I am running in an issue with the loading of the x.x.x.x:5601/app/home. In IE 11 I get a blank page and with Firefox it get a constant Elastic Loading. Has anyone experienced this issue and solved the pro… --- ## [Metricbeat MongoDB Dashboard - Memory stats issue](https://discuss.elastic.co/t/metricbeat-mongodb-dashboard-memory-stats-issue/246570)
**Author:** [@sandeep3](https://discuss.elastic.co/u/sandeep3)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 5:34pm UTC](https://discuss.elastic.co/t/metricbeat-mongodb-dashboard-memory-stats-issue/246570 "2020-08-31T17:34:04Z")
Hi , Even after configured the Metricbeat dashboard for MongoDB. The dashboard displaying the number of connections and opcounters but not displaying the memort stats. Here we are using the mongodb cluster and we need t… --- ## [Can i control the time interval on the Dashboard?(Not visualization)](https://discuss.elastic.co/t/can-i-control-the-time-interval-on-the-dashboard-not-visualization/246902)
**Author:** [@ksw4147](https://discuss.elastic.co/u/ksw4147)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 5:19pm UTC](https://discuss.elastic.co/t/can-i-control-the-time-interval-on-the-dashboard-not-visualization/246902 "2020-08-31T17:19:26Z")
On the visualization such as line chart, i can control the time interval. But on the dashboard i want to control the time interval each chart. Such as someone it 15m interval other is 1H interval. OR i want to change All… --- ## [Enable TLS logstash to \<-\> Elasticsearch](https://discuss.elastic.co/t/enable-tls-logstash-to-elasticsearch/246986)
**Author:** [@Fetakunen](https://discuss.elastic.co/u/Fetakunen)\ **Replies:** 0\ **Last updated:** [August 31, 2020, 4:43pm UTC](https://discuss.elastic.co/t/enable-tls-logstash-to-elasticsearch/246986 "2020-08-31T16:43:59Z")
Hi, i'm trying to secure my stack to enable alerts. Elasticsearch and Kibana is up and running but when i'm trying to enable https to the elasticsearch from logstash i get crash. The output config looks like this: outp… --- ## [Custom ECS to Index Template](https://discuss.elastic.co/t/custom-ecs-to-index-template/245638)
**Author:** [@jakobdoering](https://discuss.elastic.co/u/jakobdoering)\ **Replies:** 7\ **Last updated:** [August 31, 2020, 4:05pm UTC](https://discuss.elastic.co/t/custom-ecs-to-index-template/245638 "2020-08-31T16:05:54Z")
Hi, we extended ECS for a specific use case where logstash is used to read some CSV, filter the data to match the custom ECS Extension and then send the data to elasticsearch. I am now wondering how to transfer my ECS e… --- ## [Index lifecycle policy is not working](https://discuss.elastic.co/t/index-lifecycle-policy-is-not-working/246792)
**Author:** [@olg32](https://discuss.elastic.co/u/olg32)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 4:02pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-is-not-working/246792 "2020-08-31T16:02:06Z")
I've created a simple lifecycle policy where index records older than 10 days are deleted. Using Kibana I set the policy as follows: However, my index keeps growing by the day as I get daily index records that are o… --- ## [How to define mustache variable for Kibana TSVB time series label](https://discuss.elastic.co/t/how-to-define-mustache-variable-for-kibana-tsvb-time-series-label/246071)
**Author:** [@Roy\_Zhang](https://discuss.elastic.co/u/Roy_Zhang)\ **Replies:** 10\ **Last updated:** [August 31, 2020, 3:50pm UTC](https://discuss.elastic.co/t/how-to-define-mustache-variable-for-kibana-tsvb-time-series-label/246071 "2020-08-31T15:50:54Z")
Dear Kibana Experts, According to https://www.elastic.co/guide/en/kibana/master/TSVB.html, for "series that are grouped by a term, I need to specify a mustache variable of {{key}} to substitute the term" for labels. … --- ## [Can Kibana support moving functions?](https://discuss.elastic.co/t/can-kibana-support-moving-functions/246896)
**Author:** [@Roy\_Zhang](https://discuss.elastic.co/u/Roy_Zhang)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 3:50pm UTC](https://discuss.elastic.co/t/can-kibana-support-moving-functions/246896 "2020-08-31T15:50:31Z")
Dear Kibana experts, Elastic API can support moving functions, can Kibana visualization solutions (visualize, Lens, TSVG, etc) support moving functions? I go through kibana docs, seems Kibana can only support moving ave… --- ## [Creating a kibana role using Dev Tools](https://discuss.elastic.co/t/creating-a-kibana-role-using-dev-tools/246963)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 3:20pm UTC](https://discuss.elastic.co/t/creating-a-kibana-role-using-dev-tools/246963 "2020-08-31T15:20:50Z")
Hi, I am using ElasticCloud v7.9.0, I use Dev Tools to do the setup on kibana like creating users, indexes,... I want to create a kibana role as well however I get an error: PUT /\_security/role/mytestrole { … --- ## [Logstash error instability \[logstash.inputs.udp\]](https://discuss.elastic.co/t/logstash-error-instability-logstash-inputs-udp/246944)
**Author:** [@bluelight](https://discuss.elastic.co/u/bluelight)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 3:05pm UTC](https://discuss.elastic.co/t/logstash-error-instability-logstash-inputs-udp/246944 "2020-08-31T15:05:46Z")
Hello Folks, I face many problems really big problems I was receiving logs fine before 2months ago. there is no stability in logstash it's doing self crashing. and I'm no more receive TCP Packets only UDP packets. Here… --- ## [Logstash (jdbc\_static) : Exception when filling lookup db from loader](https://discuss.elastic.co/t/logstash-jdbc-static-exception-when-filling-lookup-db-from-loader/246948)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 0\ **Last updated:** [August 31, 2020, 12:48pm UTC](https://discuss.elastic.co/t/logstash-jdbc-static-exception-when-filling-lookup-db-from-loader/246948 "2020-08-31T12:48:06Z")
Hi, This is my confing: loader\_schedule =\> "\* \*/1 \* \* \*" jdbc\_user =\> "logstash" jdbc\_password =\> "password" jdbc\_driver\_class =\> "com.mysql.jdbc.Driver" jdbc\_connection\_string =\> "jdbc:mysql://x.x.x.x.:3306/mydb" stagi… --- ## [Field 'app.response.abc' not found; typically this occurs with arrays which are not mapped as single value](https://discuss.elastic.co/t/field-app-response-abc-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/246968)
**Author:** [@Ayush\_Goyal](https://discuss.elastic.co/u/Ayush_Goyal)\ **Replies:** 0\ **Last updated:** [August 31, 2020, 2:14pm UTC](https://discuss.elastic.co/t/field-app-response-abc-not-found-typically-this-occurs-with-arrays-which-are-not-mapped-as-single-value/246968 "2020-08-31T14:14:15Z")
I an trying to read elastic index from hadoop but getting below error Caused by: org.elasticsearch.hadoop.EsHadoopIllegalStateException: Field 'app.response.abc' not found; typically this occurs with arrays which are n… --- ## [Generate Alert for entries not present in the log for a given time window](https://discuss.elastic.co/t/generate-alert-for-entries-not-present-in-the-log-for-a-given-time-window/245874)
**Author:** [@akhettar](https://discuss.elastic.co/u/akhettar)\ **Replies:** 5\ **Last updated:** [August 31, 2020, 2:03pm UTC](https://discuss.elastic.co/t/generate-alert-for-entries-not-present-in-the-log-for-a-given-time-window/245874 "2020-08-31T14:03:57Z")
Hello there, I am hoping if somebody can help me write monitor's query to generate an alert to be pushed to a slack channel. I am using ELK stack v 7.4.2. Here is the payload of the message: { "metaData":{ "t… --- ## [Elastic Agent System Integration](https://discuss.elastic.co/t/elastic-agent-system-integration/246607)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 1:59pm UTC](https://discuss.elastic.co/t/elastic-agent-system-integration/246607 "2020-08-31T13:59:13Z")
The Elastic Agent collects Filebeat logs. Within 'Fleet' I have the system-1 default. This module collects the logs form usual logfiles like /var/log/syslog\* etc. But also the logs from /var/lib/elastic-agent/logs/defau… --- ## [Index RollOver policy and deleting logs after specific time](https://discuss.elastic.co/t/index-rollover-policy-and-deleting-logs-after-specific-time/246778)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 1:38pm UTC](https://discuss.elastic.co/t/index-rollover-policy-and-deleting-logs-after-specific-time/246778 "2020-08-31T13:38:22Z")
Hi, I have an ElasticCloud that I want to setups indexes on it and a policy to delete the old logs. I have created a lifecycle policy for deleting the logs which are older that 30 days: PUT \_ilm/policy/deleting\_po… --- ## [Elasticsearch Winlogbeats cause "caught exception while handling client http traffic"](https://discuss.elastic.co/t/elasticsearch-winlogbeats-cause-caught-exception-while-handling-client-http-traffic/246686)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 1:37pm UTC](https://discuss.elastic.co/t/elasticsearch-winlogbeats-cause-caught-exception-while-handling-client-http-traffic/246686 "2020-08-31T13:37:30Z")
Hi All, I was wondering if anyone has any help for what I'm seeing. I have about 150 winlogbeats pointing to a 3 node ES cluster. Over the course of about an hour, I get about 20,000 logs of: caught exception while han… --- ## [Error loading integrations](https://discuss.elastic.co/t/error-loading-integrations/246643)
**Author:** [@grfneto](https://discuss.elastic.co/u/grfneto)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 1:31pm UTC](https://discuss.elastic.co/t/error-loading-integrations/246643 "2020-08-31T13:31:06Z")
Hi everyone, after update of version 7.8 to 7.9 in Kibana doesn't visualization the Integration tab. When i try configuration showed the message error: Error connecting to package registry at https://epr-7-9.elastic.co… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1832) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1834)