# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1853 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1854 --- ## [Embed HTML5 chart(s) from TradingView, as charts or page/plugin?](https://discuss.elastic.co/t/embed-html5-chart-s-from-tradingview-as-charts-or-page-plugin/245633)
**Author:** [@richardfoster](https://discuss.elastic.co/u/richardfoster)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 3:03pm UTC](https://discuss.elastic.co/t/embed-html5-chart-s-from-tradingview-as-charts-or-page-plugin/245633 "2020-08-20T15:03:51Z")
Hi, I'm scoping the suitability of using ELK to deal with financial/market data. ELK does everything I need, however candlestick charts are required, and the ideal solution is to embed: https://www.tradingview.com/HTML5-… --- ## [Metricbeat system collecting processes differently between servers](https://discuss.elastic.co/t/metricbeat-system-collecting-processes-differently-between-servers/245637)
**Author:** [@luiz.ooliveira](https://discuss.elastic.co/u/luiz.ooliveira)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 2:59pm UTC](https://discuss.elastic.co/t/metricbeat-system-collecting-processes-differently-between-servers/245637 "2020-08-20T14:59:48Z")
I have metricbeat installed on my Data Nodes collecting system metrics. The case is that all servers are very similar in resources and has the same configs, but processes are being collected differently between them. I… --- ## [Is there a way to display index last refreshed time in Elasticsearch/Kibana](https://discuss.elastic.co/t/is-there-a-way-to-display-index-last-refreshed-time-in-elasticsearch-kibana/245641)
**Author:** [@Divya\_Girase](https://discuss.elastic.co/u/Divya_Girase)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 2:52pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-display-index-last-refreshed-time-in-elasticsearch-kibana/245641 "2020-08-20T14:52:28Z")
Hello, Is there a way in Elasticsearch or Kibana with which I can determine when was the last time an index was refreshed. I am using python API to refresh the indices programmatically using python without the wait for … --- ## [Cannot use "+" in document id](https://discuss.elastic.co/t/cannot-use-in-document-id/245645)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 2:32pm UTC](https://discuss.elastic.co/t/cannot-use-in-document-id/245645 "2020-08-20T14:32:03Z")
I would like to search a document using below query and my document id contains "+" character. GET tpp\_lookup\_1808/\_doc/2FDC1B40E46EMD5DOHcKn5%2FR%2Bq6Wiipsx8Hkg==2020 in the response from kibana, "+" character is re… --- ## [Kibana Extremely slow Start Up Time on Openshift/Kubernetes while Optimizing and caching bundles](https://discuss.elastic.co/t/kibana-extremely-slow-start-up-time-on-openshift-kubernetes-while-optimizing-and-caching-bundles/245203)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 13\ **Last updated:** [August 20, 2020, 2:22pm UTC](https://discuss.elastic.co/t/kibana-extremely-slow-start-up-time-on-openshift-kubernetes-while-optimizing-and-caching-bundles/245203 "2020-08-20T14:22:11Z")
Hi guys, The deployment of kibana on openshift is extremely slow after or during this step: "Optimizing and caching bundles.... This may take a few minutes" The deployment takes about 7-8 minutes. You have an Idea how… --- ## [Packetbeat does not add kubernetes metadata](https://discuss.elastic.co/t/packetbeat-does-not-add-kubernetes-metadata/245622)
**Author:** [@Tim\_Stoop](https://discuss.elastic.co/u/Tim_Stoop)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 2:21pm UTC](https://discuss.elastic.co/t/packetbeat-does-not-add-kubernetes-metadata/245622 "2020-08-20T14:21:45Z")
Hi, I've started a minikube (using Kubernetes 1.18.3) to test out ECK and specifically packetbeat. The minikube profile is called "packetbeat" (important, as that's the hostname for the Virtualbox VM as well) and I foll… --- ## [SQL Server data to Elasticsearch using LogStash](https://discuss.elastic.co/t/sql-server-data-to-elasticsearch-using-logstash/245488)
**Author:** [@sukumar.koganti](https://discuss.elastic.co/u/sukumar.koganti)\ **Replies:** 30\ **Last updated:** [August 20, 2020, 2:15pm UTC](https://discuss.elastic.co/t/sql-server-data-to-elasticsearch-using-logstash/245488 "2020-08-20T14:15:18Z")
HI I am tryting to integrate the Sql server data to Elasticsearch with Logstash in my local machine. I am using the Microsoft Sql Server 2019 and jdbc using the below --Microsoft JDBC Driver 4.2 for SQL Server This i… --- ## [How to disable login page for oss Kibana-7.2.1](https://discuss.elastic.co/t/how-to-disable-login-page-for-oss-kibana-7-2-1/245672)
**Author:** [@deadpool](https://discuss.elastic.co/u/deadpool)\ **Replies:** 4\ **Last updated:** [August 19, 2020, 11:24pm UTC](https://discuss.elastic.co/t/how-to-disable-login-page-for-oss-kibana-7-2-1/245672 "2020-08-19T23:24:09Z")
Hi, we are using oss Kibana 7.2.1 (docker.elastic.co/kibana/kibana-oss:7.2.1) docker image for connecting to Elastic search which is having username and password Authentication and it is working by pulling username,passw… --- ## [Detecting bottleneck in Elasticsearch indexing](https://discuss.elastic.co/t/detecting-bottleneck-in-elasticsearch-indexing/242060)
**Author:** [@Merlin\_Nunez](https://discuss.elastic.co/u/Merlin_Nunez)\ **Replies:** 17\ **Last updated:** [August 20, 2020, 2:04pm UTC](https://discuss.elastic.co/t/detecting-bottleneck-in-elasticsearch-indexing/242060 "2020-08-20T14:04:48Z")
I posted about this same issue before but did not get an answer, I continued investigating but I´m still unable to get to the root cause of this. I have the following configuration in docker containers: 3 ES data nodes… --- ## [Create root field for all fields](https://discuss.elastic.co/t/create-root-field-for-all-fields/245740)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 1:49pm UTC](https://discuss.elastic.co/t/create-root-field-for-all-fields/245740 "2020-08-20T13:49:01Z")
Hi there, I have a question about ruby or anything else if it is possible. @Badger had a nice ruby script a few years ago. But it doesnt work right now and I am not familiar with ruby. ruby { init =\> ' E… --- ## [Open source Elasticsearch does not use template in index creation](https://discuss.elastic.co/t/open-source-elasticsearch-does-not-use-template-in-index-creation/245673)
**Author:** [@hweber](https://discuss.elastic.co/u/hweber)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 1:42pm UTC](https://discuss.elastic.co/t/open-source-elasticsearch-does-not-use-template-in-index-creation/245673 "2020-08-20T13:42:32Z")
I am using an open source build of Elasticsearch, version 7.8.0. I executed curl -ivvk -H "Content-Type: application/json" -H "Accept: application/json" -u username:password -X PUT "https://localhost:9200/\_template/tes… --- ## [Elasticsearch : JNA native support library not loading](https://discuss.elastic.co/t/elasticsearch-jna-native-support-library-not-loading/245492)
**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 1:32pm UTC](https://discuss.elastic.co/t/elasticsearch-jna-native-support-library-not-loading/245492 "2020-08-20T13:32:52Z")
SO after I performed the “git clone” command and updated the yml files with correct artifactory location, when I run the master deployment I get these BELOW. Any ideas? :blush: lmk ty \[lewellf\_adm@awva-pclif03001 ela… --- ## [Print some line to stdout, Logstash filter pipeline](https://discuss.elastic.co/t/print-some-line-to-stdout-logstash-filter-pipeline/245748)
**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 1:33pm UTC](https://discuss.elastic.co/t/print-some-line-to-stdout-logstash-filter-pipeline/245748 "2020-08-20T13:33:20Z")
Hello, is there a way to print a line to stdout in filter pipeline some field, or any text? I have found there is stdout plugin to use, but have not found a single correct example how. Would be good to have some possibi… --- ## [Where do is set setup.ilm.overwrite: true](https://discuss.elastic.co/t/where-do-is-set-setup-ilm-overwrite-true/245565)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 12:58pm UTC](https://discuss.elastic.co/t/where-do-is-set-setup-ilm-overwrite-true/245565 "2020-08-20T12:58:04Z")
Hello, filebeat setup shows me that Overwriting ILM policy is disabled, it also shows me how to enable it, but i do not know where to set it, can anyone point me to the right file? \[root@ELASTIC99004 ~\]# filebeat setup… --- ## [Multiple docker container for multiple pipeline of logstash](https://discuss.elastic.co/t/multiple-docker-container-for-multiple-pipeline-of-logstash/245684)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 12:56pm UTC](https://discuss.elastic.co/t/multiple-docker-container-for-multiple-pipeline-of-logstash/245684 "2020-08-20T12:56:32Z")
Currently I run 20 pipeline in a system some just pulls data few times a day some just once a day some every few minute I was thinking to run multiple docker image on a single system, where slower pipeline is running… --- ## [Where audit logger methods are called](https://discuss.elastic.co/t/where-audit-logger-methods-are-called/243470)
**Author:** [@houshmand1996](https://discuss.elastic.co/u/houshmand1996)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 12:46pm UTC](https://discuss.elastic.co/t/where-audit-logger-methods-are-called/243470 "2020-08-20T12:46:08Z")
where clientWrapper in kibana calls methods like this public async update\( type: string, id: string, attributes: Partial\, options: SavedObjectsUpdateOptions = {} ) { a… --- ## [Log threshold alert](https://discuss.elastic.co/t/log-threshold-alert/245317)
**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 12:27pm UTC](https://discuss.elastic.co/t/log-threshold-alert/245317 "2020-08-20T12:27:50Z")
We are attempting to make a Log Threshold alert, however it is sending alerts when it shouldn't be. The query we are trying to alert on is labels.application: "theapp" and message: "\*limit request headers fields size\*". … --- ## [\[function\_score\] malformed query, expected \[END\_OBJECT\] but found \[FIELD\_NAME\]](https://discuss.elastic.co/t/function-score-malformed-query-expected-end-object-but-found-field-name/245759)
**Author:** [@abhijeet\_sinha](https://discuss.elastic.co/u/abhijeet_sinha)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 12:12pm UTC](https://discuss.elastic.co/t/function-score-malformed-query-expected-end-object-but-found-field-name/245759 "2020-08-20T12:12:50Z")
What's wrong with this query? GET /catalog/\_search {"query": { "function\_score": { "boost\_mode": "multiply", "functions": \[ { "field\_value\_factor": { "field": "boostFactor", "factor"… --- ## [Make only has create-metricset](https://discuss.elastic.co/t/make-only-has-create-metricset/244515)
**Author:** [@rJosef](https://discuss.elastic.co/u/rJosef)\ **Replies:** 5\ **Last updated:** [August 20, 2020, 11:46am UTC](https://discuss.elastic.co/t/make-only-has-create-metricset/244515 "2020-08-20T11:46:10Z")
Make collect and make don't exist in the makefile of the current version of meticbeat. --- ## [Reverse keyword vs new Wildcard data type](https://discuss.elastic.co/t/reverse-keyword-vs-new-wildcard-data-type/245751)
**Author:** [@TheWorkingDeveloper](https://discuss.elastic.co/u/TheWorkingDeveloper)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 11:28am UTC](https://discuss.elastic.co/t/reverse-keyword-vs-new-wildcard-data-type/245751 "2020-08-20T11:28:09Z")
In email wildcard searching: user\_email\* \*@domain.com Would reverse keyword be faster in searching than wildcard given a single wildcard? moc.niamod@\* on reverse keyword vs \*@domain.com on wildcard For example. So… --- ## [Alert monitor - Keep getting 1 hit every 5 minutes.. want it to change to 100 hits every five minutes](https://discuss.elastic.co/t/alert-monitor-keep-getting-1-hit-every-5-minutes-want-it-to-change-to-100-hits-every-five-minutes/245350)
**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 11:16am UTC](https://discuss.elastic.co/t/alert-monitor-keep-getting-1-hit-every-5-minutes-want-it-to-change-to-100-hits-every-five-minutes/245350 "2020-08-20T11:16:46Z")
Hi, I want to be able to receive alerts for security WAF blocks for 100 hits every 5 minutes instead of 1 hit every five minutes.. Is it possible on kibana? --- ## [JSON parsing depth in logstash](https://discuss.elastic.co/t/json-parsing-depth-in-logstash/245205)
**Author:** [@rakesh15](https://discuss.elastic.co/u/rakesh15)\ **Replies:** 4\ **Last updated:** [August 20, 2020, 11:02am UTC](https://discuss.elastic.co/t/json-parsing-depth-in-logstash/245205 "2020-08-20T11:02:37Z")
Hi All, Im trying to index the camel logs by using grok pattern and json filter in logstash and then push the same to ES. Below is the sample log snippet that I'm trying to parse. 07:32:49.805 \[Camel (MyCamel) thread … --- ## [Two Logstash instances in the same machine are faster than only one](https://discuss.elastic.co/t/two-logstash-instances-in-the-same-machine-are-faster-than-only-one/245753)
**Author:** [@ricferr1976](https://discuss.elastic.co/u/ricferr1976)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:58am UTC](https://discuss.elastic.co/t/two-logstash-instances-in-the-same-machine-are-faster-than-only-one/245753 "2020-08-20T10:58:28Z")
Hello. I have a setup with a log source that is sending about 4k EPS and i have an HAProxy that is receiving those messages and sending them to currently only one Logstash machine. That machine has 8 cores and 8GB of R… --- ## [Multi search API: Getting more than 500 hits](https://discuss.elastic.co/t/multi-search-api-getting-more-than-500-hits/245752)
**Author:** [@MartaB](https://discuss.elastic.co/u/MartaB)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:51am UTC](https://discuss.elastic.co/t/multi-search-api-getting-more-than-500-hits/245752 "2020-08-20T10:51:06Z")
Hello guys! I kindly need your help with something. I'm building a script using groovy. The main goal is to retrieve all the logs we have on our server so I can use that logs, apply some logic (e.g., regex, conditional… --- ## [How to handle "cannot parse empty date"?](https://discuss.elastic.co/t/how-to-handle-cannot-parse-empty-date/245749)
**Author:** [@Rachana\_Pole](https://discuss.elastic.co/u/Rachana_Pole)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:43am UTC](https://discuss.elastic.co/t/how-to-handle-cannot-parse-empty-date/245749 "2020-08-20T10:43:33Z")
Hi all, I had a field that provides date information in String format. I converted it to Date type format using mappings as shown in the below mapping sample. Ex: "stats" : { "properties" : { … --- ## [Template wildcard data type, normalizer/analyzer for case insensitive search](https://discuss.elastic.co/t/template-wildcard-data-type-normalizer-analyzer-for-case-insensitive-search/245743)
**Author:** [@TheWorkingDeveloper](https://discuss.elastic.co/u/TheWorkingDeveloper)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 10:36am UTC](https://discuss.elastic.co/t/template-wildcard-data-type-normalizer-analyzer-for-case-insensitive-search/245743 "2020-08-20T10:36:07Z")
I have a data ingest that contains user input and want to wildcard search it. But I need the search to be case insensitive. "normalizer": { "lowercase\_normalizer": { "type": "custom", "char\_filter": \[\], … --- ## [CCR: deleted follower index without unfollow](https://discuss.elastic.co/t/ccr-deleted-follower-index-without-unfollow/245548)
**Author:** [@pravinpr](https://discuss.elastic.co/u/pravinpr)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 9:04am UTC](https://discuss.elastic.co/t/ccr-deleted-follower-index-without-unfollow/245548 "2020-08-20T09:04:30Z")
Hi, I have deleted an index on follower cluster without unfollowing it. I need to create a follower with same index name. However, unable to do that. Can you please suggest? --- ## [Wildcard datatype lowercase](https://discuss.elastic.co/t/wildcard-datatype-lowercase/245726)
**Author:** [@covolution](https://discuss.elastic.co/u/covolution)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 9:00am UTC](https://discuss.elastic.co/t/wildcard-datatype-lowercase/245726 "2020-08-20T09:00:45Z")
I am looking at the Wildcard datatype introduced in 7.9. I would like to normalize it first by lowercasing and removing whitespace. I can't work out the syntax. "normalizer" and "analyzer" don't seem to be supported. --- ## [Can I install 2 different version of filebeat on the same machine?](https://discuss.elastic.co/t/can-i-install-2-different-version-of-filebeat-on-the-same-machine/245731)
**Author:** [@aannee](https://discuss.elastic.co/u/aannee)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:46am UTC](https://discuss.elastic.co/t/can-i-install-2-different-version-of-filebeat-on-the-same-machine/245731 "2020-08-20T08:46:42Z")
Hi, I'm planning to install 2 different version of filebeat on the same machine. Is this possible? --- ## [Data Visualizer - Import button grayed out for CSV import](https://discuss.elastic.co/t/data-visualizer-import-button-grayed-out-for-csv-import/245664)
**Author:** [@kaoutar\_id](https://discuss.elastic.co/u/kaoutar_id)\ **Replies:** 7\ **Last updated:** [August 20, 2020, 7:56am UTC](https://discuss.elastic.co/t/data-visualizer-import-button-grayed-out-for-csv-import/245664 "2020-08-20T07:56:03Z")
I'm unable to import a CSV file to Elasticsearch using the Data Visualizer. I get to upload the file and see the file stats but after that when I type the name of the index the import button remains gray and can't import… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1852) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1854)