# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1854 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1855 --- ## [String type conversion to date type](https://discuss.elastic.co/t/string-type-conversion-to-date-type/245698)
**Author:** [@Rachana\_Pole](https://discuss.elastic.co/u/Rachana_Pole)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 8:26am UTC](https://discuss.elastic.co/t/string-type-conversion-to-date-type/245698 "2020-08-20T08:26:58Z")
Hi all, I have a field that provides the date information but is coming is of String Data Type. Ex: metrics.database.state.my\_session\_time 2020-Aug-19 04:40:53 I want to convert it into a date format. I tried a few da… --- ## [Change Upper left side Logo in Kibana version 7.8.0](https://discuss.elastic.co/t/change-upper-left-side-logo-in-kibana-version-7-8-0/245182)
**Author:** [@Mayank\_Damani](https://discuss.elastic.co/u/Mayank_Damani)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 8:22am UTC](https://discuss.elastic.co/t/change-upper-left-side-logo-in-kibana-version-7-8-0/245182 "2020-08-20T08:22:28Z")
I want to change upper left side logo in Kibana version 7.8.0 as shown in below image. What i tried is changing their svg code with my own svg code in node\_modules\\@kbn\\ui-shared-deps\\target\\kbn-ui-shared-deps.@elastic.j… --- ## [How to escape special characters in regexp](https://discuss.elastic.co/t/how-to-escape-special-characters-in-regexp/245727)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:17am UTC](https://discuss.elastic.co/t/how-to-escape-special-characters-in-regexp/245727 "2020-08-20T08:17:03Z")
How to escape special characters in regular expression query GET my\_index/\_search { "\_source": \["file.filename"\], "query": { "regexp": { "content": "KRISHNA\\-\\1H3\[a-zA-Z0-9\]\*" } }, "highlight": { "fields": { "… --- ## [Logstash to azure blob](https://discuss.elastic.co/t/logstash-to-azure-blob/245725)
**Author:** [@nikul\_jain](https://discuss.elastic.co/u/nikul_jain)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:10am UTC](https://discuss.elastic.co/t/logstash-to-azure-blob/245725 "2020-08-20T08:10:20Z")
What is the best way to have output to azure blob --- ## [Timelion throws error while querying on empty data](https://discuss.elastic.co/t/timelion-throws-error-while-querying-on-empty-data/245223)
**Author:** [@Castor](https://discuss.elastic.co/u/Castor)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 8:08am UTC](https://discuss.elastic.co/t/timelion-throws-error-while-querying-on-empty-data/245223 "2020-08-20T08:08:21Z")
Hello I am trying to calculate total x value divided by total y value in percentage. .es(q="\*",metric=sum:x.value,split=element.name:10).cusum().divide(.es(q="\*",metric=sum:y.value, split=element.name:10).cusum()).mult… --- ## [Enterprise Certs](https://discuss.elastic.co/t/enterprise-certs/245723)
**Author:** [@nitin7](https://discuss.elastic.co/u/nitin7)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 8:00am UTC](https://discuss.elastic.co/t/enterprise-certs/245723 "2020-08-20T08:00:55Z")
Hi, I am setting up TLS on the transport layer. If I use the certs generated from the elastic search cert util then node trust the certificate and all works but when I am trying to use enterprise certs I get the error … --- ## [Filebeat with high memory consumption after logrotate](https://discuss.elastic.co/t/filebeat-with-high-memory-consumption-after-logrotate/243497)
**Author:** [@mohanisch](https://discuss.elastic.co/u/mohanisch)\ **Replies:** 6\ **Last updated:** [August 20, 2020, 7:56am UTC](https://discuss.elastic.co/t/filebeat-with-high-memory-consumption-after-logrotate/243497 "2020-08-20T07:56:12Z")
Hello! We use Filebeat (in Docker, version 7.8) to send logs to Logstash. Every night at 0:01 logrotate runs on the machine where Filebeat is running. It is rotating ~20-25 logfiles. Logrotate is configured with followi… --- ## [Using alt key code in logstash](https://discuss.elastic.co/t/using-alt-key-code-in-logstash/245094)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 7\ **Last updated:** [August 20, 2020, 7:52am UTC](https://discuss.elastic.co/t/using-alt-key-code-in-logstash/245094 "2020-08-20T07:52:00Z")
Hi all, i am using logstash to write some data into txt file so that my output configuration of logstash is as following: output { csv { fields =\> \["My\_Data"\] path =\> "D:\\app\_%{year}\_%{mounth}\_%{day}.txt" } stdout { c… --- ## [SNMPTRAP v3](https://discuss.elastic.co/t/snmptrap-v3/245722)
**Author:** [@shaigbdb](https://discuss.elastic.co/u/shaigbdb)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 7:47am UTC](https://discuss.elastic.co/t/snmptrap-v3/245722 "2020-08-20T07:47:54Z")
Hi, I'm looking for a way to get information from snmptrap V3 into Elasticsearch. The Logstash snmptrap plugin does not support V3. I was able to get the traps into LS and ES using the UDP plugin, however I'm getting g… --- ## [Inner\_hits with elasticsearch-hadoop](https://discuss.elastic.co/t/inner-hits-with-elasticsearch-hadoop/245580)
**Author:** [@HadoopMarc](https://discuss.elastic.co/u/HadoopMarc)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 7:44am UTC](https://discuss.elastic.co/t/inner-hits-with-elasticsearch-hadoop/245580 "2020-08-20T07:44:48Z")
Trying here to use a nested query with inner\_hits in combination with elasticsearch-hadoop. I use es-6.8.1 via python using: df = spark.read.format("org.elasticsearch.spark.sql") I specify the "es.read.metadata": "tru… --- ## [How to settings threadpool on elastic cloud?](https://discuss.elastic.co/t/how-to-settings-threadpool-on-elastic-cloud/245544)
**Author:** [@chautm](https://discuss.elastic.co/u/chautm)\ **Replies:** 5\ **Last updated:** [August 20, 2020, 5:11am UTC](https://discuss.elastic.co/t/how-to-settings-threadpool-on-elastic-cloud/245544 "2020-08-20T05:11:55Z")
My project using elastic cloud but reject error: EsThreadPoolExecutor\[name = instance-0000000003/write, queue capacity = 200 On breaking change description "Thread pool settings are now node-level settings. As such, it… --- ## [Cant connect second Elastic node](https://discuss.elastic.co/t/cant-connect-second-elastic-node/245648)
**Author:** [@mmax](https://discuss.elastic.co/u/mmax)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 4:10pm UTC](https://discuss.elastic.co/t/cant-connect-second-elastic-node/245648 "2020-08-19T16:10:25Z")
Hi, I'm mounting a ELK cluster elastic-node1 elastic-node2 kibana-node1 (logstash will created after) I have one node elastic who's connected to kibana, i set up xpack.security / transport ssl, with elasticnode-1 i… --- ## [Filebeat metric libbeat.output.write.bytes does not change for type elasticsearch](https://discuss.elastic.co/t/filebeat-metric-libbeat-output-write-bytes-does-not-change-for-type-elasticsearch/245563)
**Author:** [@EugRomanchenko](https://discuss.elastic.co/u/EugRomanchenko)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 9:10am UTC](https://discuss.elastic.co/t/filebeat-metric-libbeat-output-write-bytes-does-not-change-for-type-elasticsearch/245563 "2020-08-19T09:10:17Z")
We use the HTTP Endpoint functionality to monitor the internal statistics of Filebeat agents. We have configured Elasticsearch output and write our logs into AWS Elasticsearch index. And we are monitoring the indicator l… --- ## [Delete old logs](https://discuss.elastic.co/t/delete-old-logs/245268)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 13\ **Last updated:** [August 20, 2020, 7:30am UTC](https://discuss.elastic.co/t/delete-old-logs/245268 "2020-08-20T07:30:50Z")
Is it possible to have logs older than 3 month deleted? Or set a size limit? Is it possible to do so from Kibana? Thanks ahead! --- ## [Combine two nested text fields using script](https://discuss.elastic.co/t/combine-two-nested-text-fields-using-script/245718)
**Author:** [@AntonyUkken](https://discuss.elastic.co/u/AntonyUkken)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 7:21am UTC](https://discuss.elastic.co/t/combine-two-nested-text-fields-using-script/245718 "2020-08-20T07:21:40Z")
I need to combine two text nested fields to a new field using scripts. POST script/\_update\_by\_query { "script": { "source": """ ctx.\_source.example = ctx.\_source.field1 + '\_' + ctx.\_source.field2 """, … --- ## [Adding new button to saved search object to export saved search object raw data from dashboard](https://discuss.elastic.co/t/adding-new-button-to-saved-search-object-to-export-saved-search-object-raw-data-from-dashboard/244407)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 7:20am UTC](https://discuss.elastic.co/t/adding-new-button-to-saved-search-object-to-export-saved-search-object-raw-data-from-dashboard/244407 "2020-08-20T07:20:28Z")
current Kibana version: 6.3.2 to get the next feature: I need to upgrade Kibana version to 7.3.0 now before I do that I have to ask.. I added saved search object to my dashboard that saved search have no filters, … --- ## [Regular expressions](https://discuss.elastic.co/t/regular-expressions/245716)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 7:08am UTC](https://discuss.elastic.co/t/regular-expressions/245716 "2020-08-20T07:08:14Z")
I have a word like this in my text, "KRISHNA-1H3" How to searh this word using regular expressions in kibana? and how to use regular expression for special characters? I am using this query: GET my\_index/\_search { … --- ## [Logstash collection for the fields newly added in indexes](https://discuss.elastic.co/t/logstash-collection-for-the-fields-newly-added-in-indexes/245710)
**Author:** [@Dayanidhi\_M](https://discuss.elastic.co/u/Dayanidhi_M)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 6:07am UTC](https://discuss.elastic.co/t/logstash-collection-for-the-fields-newly-added-in-indexes/245710 "2020-08-20T06:07:57Z")
How to load logstash collection to exiting indexes which few new fields added to it....am using JDBC plugin to for logstash collection.......please share your inputs and thoughts which is highly helpful for me --- ## [Getting "Encountered a retryable error. Will Retry with exponential backoff {:code=\>403, :url=\>"http://127.0.0.1:8800/\_bulk"}"](https://discuss.elastic.co/t/getting-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-403-url-http-127-0-0-1-8800-bulk/245703)
**Author:** [@mostafa\_kamal](https://discuss.elastic.co/u/mostafa_kamal)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 5:39am UTC](https://discuss.elastic.co/t/getting-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-403-url-http-127-0-0-1-8800-bulk/245703 "2020-08-20T05:39:23Z")
I am trying to send logs from filebeat to logstash, but getting the following error message \[2020-08-20T06:52:31,108\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[797474f8edf561358316c00f5117e9f69c7d9881a02a0e167b0d2d76… --- ## [Metricbeat kubernetes module](https://discuss.elastic.co/t/metricbeat-kubernetes-module/245704)
**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 5:15am UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-module/245704 "2020-08-20T05:15:43Z")
I try to get jvm information through jolokia, Through the debug log, I see that the return value is obtained, but it is not written into the index. uptime information can be written Configuration logging.level: debug… --- ## [Failed to authenticate user elastic](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic/245604)
**Author:** [@Divyabharathi](https://discuss.elastic.co/u/Divyabharathi)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 5:10am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-elastic/245604 "2020-08-20T05:10:11Z")
I have 3 instances of elasticsearch 7.6 (2-master+data & 1- data). Cluster name is same in all three instances. I have enabled the security using xpack.security.enabled=true and xpack.security.transport.ssl.enabled=true … --- ## [HTTP POLLER NTLM AUTH](https://discuss.elastic.co/t/http-poller-ntlm-auth/245683)
**Author:** [@gutierrezfj](https://discuss.elastic.co/u/gutierrezfj)\ **Replies:** 1\ **Last updated:** [August 20, 2020, 5:04am UTC](https://discuss.elastic.co/t/http-poller-ntlm-auth/245683 "2020-08-20T05:04:29Z")
What is the parameter for an NTML type authentication using HTTP POLLER?. I need to verify the response of many websites but first I must go through the NTML authentication. I appreciate your help! --- ## [Kibana Dev Tools: How to execute multiple statements in one shot?](https://discuss.elastic.co/t/kibana-dev-tools-how-to-execute-multiple-statements-in-one-shot/245682)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 4:12am UTC](https://discuss.elastic.co/t/kibana-dev-tools-how-to-execute-multiple-statements-in-one-shot/245682 "2020-08-20T04:12:49Z")
hi We don't have access to ssh/backend/elastic-port directly. So the only interaction we have is with Kibana's DEV console to update and retrieve data So i've around 60 commands (mainly deleting and creating watchers)… --- ## [Is there a way to specify multiple cacert files](https://discuss.elastic.co/t/is-there-a-way-to-specify-multiple-cacert-files/245694)
**Author:** [@Qingkun\_Li](https://discuss.elastic.co/u/Qingkun_Li)\ **Replies:** 2\ **Last updated:** [August 20, 2020, 3:50am UTC](https://discuss.elastic.co/t/is-there-a-way-to-specify-multiple-cacert-files/245694 "2020-08-20T03:50:31Z")
Can we specify multiple cacert files? I have multiple Elasticsearch clusters configured with the same domain name (e.g. es.xxx.com), and use DNS to decide which Elasticsearch cluster to use. So my logstash output setting… --- ## [Negative free swap space size](https://discuss.elastic.co/t/negative-free-swap-space-size/242626)
**Author:** [@teebu](https://discuss.elastic.co/u/teebu)\ **Replies:** 3\ **Last updated:** [August 20, 2020, 3:45am UTC](https://discuss.elastic.co/t/negative-free-swap-space-size/242626 "2020-08-20T03:45:22Z")
I installed ES 7.8.0 to my local kubernetes cluster using the helm chart into my docker-for-windows and WSL2. I'm seeing this error message in my logs constantly. {"type": "server", "timestamp": "2020-07-26T03:23:47,931… --- ## [Search.totalhits breaking change in ES 7: Java rest client 6.7](https://discuss.elastic.co/t/search-totalhits-breaking-change-in-es-7-java-rest-client-6-7/245690)
**Author:** [@Musfiqur\_Siddique](https://discuss.elastic.co/u/Musfiqur_Siddique)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 1:30am UTC](https://discuss.elastic.co/t/search-totalhits-breaking-change-in-es-7-java-rest-client-6-7/245690 "2020-08-20T01:30:22Z")
Before ES 7, search.totalhits was a number. In ES 7, it is an object with a value and relation. The behavior can be retained by setting track\_total\_hits=true and rest\_total\_hits\_as\_int=true in search request. But how to… --- ## [Elastic Cloud - Not able to vizualize data from filebeats](https://discuss.elastic.co/t/elastic-cloud-not-able-to-vizualize-data-from-filebeats/245441)
**Author:** [@Eduardo\_Iglesias](https://discuss.elastic.co/u/Eduardo_Iglesias)\ **Replies:** 2\ **Last updated:** [August 19, 2020, 11:05pm UTC](https://discuss.elastic.co/t/elastic-cloud-not-able-to-vizualize-data-from-filebeats/245441 "2020-08-19T23:05:25Z")
Hello team, I'm not able to visualize any data coming from filebeat. I'm new on Elastic. I setup an Elastic Cloud based instance and I would like to send logs from my computer (using filebeat). FIlebeat.yml config file… --- ## [Help to customizing Index and Type](https://discuss.elastic.co/t/help-to-customizing-index-and-type/245251)
**Author:** [@Moksha20](https://discuss.elastic.co/u/Moksha20)\ **Replies:** 6\ **Last updated:** [August 19, 2020, 10:58pm UTC](https://discuss.elastic.co/t/help-to-customizing-index-and-type/245251 "2020-08-19T22:58:28Z")
Hi, I have migrated ELK 6.x to ELK 7.8.In previous version I used to ship log using logship.py where as now I have to use filebeats. I am facing two issues here 1)'index' and 'type' I am getting as meta format that is… --- ## [How to view the history of tasks/activities in elasticsearch by all superusers](https://discuss.elastic.co/t/how-to-view-the-history-of-tasks-activities-in-elasticsearch-by-all-superusers/245658)
**Author:** [@ELK\_User\_Arun](https://discuss.elastic.co/u/ELK_User_Arun)\ **Replies:** 1\ **Last updated:** [August 19, 2020, 11:02pm UTC](https://discuss.elastic.co/t/how-to-view-the-history-of-tasks-activities-in-elasticsearch-by-all-superusers/245658 "2020-08-19T23:02:14Z")
Hi All, I would like to know if there is a possibility of viewing the recent changes (history) made to the ELK stack. Because I witnessed that the stack is missing quite a huge number of shards this morning but the requ… --- ## [How to enable memory lock](https://discuss.elastic.co/t/how-to-enable-memory-lock/245674)
**Author:** [@AshokBachchan](https://discuss.elastic.co/u/AshokBachchan)\ **Replies:** 1\ **Last updated:** [August 19, 2020, 11:00pm UTC](https://discuss.elastic.co/t/how-to-enable-memory-lock/245674 "2020-08-19T23:00:14Z")
Hi All, We are unable to lock the memory for elasticsearch, our OS is CentOS Linux 7 (Core) ES cluster is not giving proper performance. what is the recommendation on this???. Please suggest us. GET \_nodes?filter\_pa… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1853) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1855)