# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1871 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1872 --- ## [Subquery Factoring in Kibana](https://discuss.elastic.co/t/subquery-factoring-in-kibana/241660)
**Author:** [@tenet\_testuser1](https://discuss.elastic.co/u/tenet_testuser1)\ **Replies:** 3\ **Last updated:** [August 12, 2020, 2:45pm UTC](https://discuss.elastic.co/t/subquery-factoring-in-kibana/241660 "2020-08-12T14:45:27Z")
Hello, I have a technical issue with a report and wanted to get some help. I want to select the top10 products by sales ranking for the most recent week, and for that subset (say top 10 products). I would like to see h… --- ## ['sincedb\_path' for http\_poller not working](https://discuss.elastic.co/t/sincedb-path-for-http-poller-not-working/244734)
**Author:** [@AditiKhalatkar](https://discuss.elastic.co/u/AditiKhalatkar)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 2:28pm UTC](https://discuss.elastic.co/t/sincedb-path-for-http-poller-not-working/244734 "2020-08-12T14:28:05Z")
I am trying to ingest data from an API using http\_poller plugin in logstash. Tried using some methods, however was it is throwing error like this. Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC wa… --- ## [How to calculate timestamp difference in logstash config file?](https://discuss.elastic.co/t/how-to-calculate-timestamp-difference-in-logstash-config-file/244732)
**Author:** [@Rahul\_Chougule](https://discuss.elastic.co/u/Rahul_Chougule)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 2:25pm UTC](https://discuss.elastic.co/t/how-to-calculate-timestamp-difference-in-logstash-config-file/244732 "2020-08-12T14:25:10Z")
I have two timestamp fields: submit\_date("MM/dd/YYYY HH:mm") and completed date("MM/dd/YYYY HH:mm"). I want to calculate time difference between these two fields and wanted to add it as a new field while ingesting data … --- ## [Need Architecture Support](https://discuss.elastic.co/t/need-architecture-support/244457)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 2:21pm UTC](https://discuss.elastic.co/t/need-architecture-support/244457 "2020-08-12T14:21:24Z")
Hello, I want help to setup Server for ELK stack Client will send Logs on UDP port on logstash average EPS will be 2000 eps. I want help regarding How many Elastic and Logstash server will be needed, and what should b… --- ## [Unexpected token u in JSON at position 0](https://discuss.elastic.co/t/unexpected-token-u-in-json-at-position-0/243997)
**Author:** [@NagleZhang](https://discuss.elastic.co/u/NagleZhang)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 2:12pm UTC](https://discuss.elastic.co/t/unexpected-token-u-in-json-at-position-0/243997 "2020-08-12T14:12:10Z")
full stack error SyntaxError: Unexpected token u in JSON at position 0 at JSON.parse (\) at https://mydomain/bundles/commons.bundle.js:3:3397719 at https://mydomain/bundles/kbn-ui-shared-deps/kbn-ui… --- ## [Number\_format\_exception in check-rollover-ready step](https://discuss.elastic.co/t/number-format-exception-in-check-rollover-ready-step/244609)
**Author:** [@patrykga](https://discuss.elastic.co/u/patrykga)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 2:08pm UTC](https://discuss.elastic.co/t/number-format-exception-in-check-rollover-ready-step/244609 "2020-08-12T14:08:38Z")
Hi I have problem with my ilm policy? Can someone help me where I should looking for any issue with this?: "indices" : { "logstash-2020-08-11" : { "index" : "logstash-2020-08-11", "managed" : true, … --- ## [Elasticsearch 6.8 returns date as long not string](https://discuss.elastic.co/t/elasticsearch-6-8-returns-date-as-long-not-string/244193)
**Author:** [@larryrodrigues](https://discuss.elastic.co/u/larryrodrigues)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-returns-date-as-long-not-string/244193 "2020-08-12T14:05:42Z")
FYI. The data is being indexed to elasticsearch from Spark dataframe. Putting date data directly in Kibana, and querying, return date as String. Elasticsearch 6.8/Kibana date field query always returns long value, not … --- ## [Manage synonyms using Kibana](https://discuss.elastic.co/t/manage-synonyms-using-kibana/244513)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 2:00pm UTC](https://discuss.elastic.co/t/manage-synonyms-using-kibana/244513 "2020-08-12T14:00:28Z")
Is it possible to manage the synonyms from file using Kibana? I can not find it in the UI. --- ## [Changing which elements are hidden in embed mode?](https://discuss.elastic.co/t/changing-which-elements-are-hidden-in-embed-mode/244534)
**Author:** [@MarcoRocco](https://discuss.elastic.co/u/MarcoRocco)\ **Replies:** 3\ **Last updated:** [August 12, 2020, 1:51pm UTC](https://discuss.elastic.co/t/changing-which-elements-are-hidden-in-embed-mode/244534 "2020-08-12T13:51:48Z")
Hey y'all, I have a custom build of kibana running with quite a few source code changes, one thing I'm kind of stuck on is modifying which elements of a dashboard are hidden/displayed when embed=true. I'd like to show p… --- ## [Can some one help please: sum of the field by filtering in transforms not working](https://discuss.elastic.co/t/can-some-one-help-please-sum-of-the-field-by-filtering-in-transforms-not-working/244301)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 0\ **Last updated:** [August 9, 2020, 11:16am UTC](https://discuss.elastic.co/t/can-some-one-help-please-sum-of-the-field-by-filtering-in-transforms-not-working/244301 "2020-08-09T11:16:47Z")
Hi, I am trying to create transform with the scenario, grouping by every 15 mins and aggregation should be like as below. Getting the count of the records for each filter. but not able to perform Sum or max on the fil… --- ## [How to remove the specific Icingabeat field names sent to elasticsearch?](https://discuss.elastic.co/t/how-to-remove-the-specific-icingabeat-field-names-sent-to-elasticsearch/244304)
**Author:** [@Pankaj\_Navneet](https://discuss.elastic.co/u/Pankaj_Navneet)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 1:44pm UTC](https://discuss.elastic.co/t/how-to-remove-the-specific-icingabeat-field-names-sent-to-elasticsearch/244304 "2020-08-12T13:44:58Z")
Hi Team, I have integrated Icinga to my ELK cluster using Icingabeat. Everything is working as expected, but now I don't want to include some of the available fields that are sent to Elasticsearch from Icingabeat. Reas… --- ## [Intercept specific Request/Response](https://discuss.elastic.co/t/intercept-specific-request-response/243829)
**Author:** [@koyassan](https://discuss.elastic.co/u/koyassan)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:44pm UTC](https://discuss.elastic.co/t/intercept-specific-request-response/243829 "2020-08-12T13:44:20Z")
Hi guys, I'm trying to develop a plugin that intercept some specific requests, such as /some/api/request. My main goal is intercept the payload and the response of that request. I'm thinking about add these script in so… --- ## [Kibana 7.6.0 - Unable to generate report. Error: Failed to decrypt report job data](https://discuss.elastic.co/t/kibana-7-6-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/244721)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 1:41pm UTC](https://discuss.elastic.co/t/kibana-7-6-0-unable-to-generate-report-error-failed-to-decrypt-report-job-data/244721 "2020-08-12T13:41:54Z")
I've been googling around for a solution for this, and all the answers seem to be pretty much the exact same. But they don't seem to be my problem. Generating a report by any used results in the following error: Unabl… --- ## [Prometheus irate function in kibana](https://discuss.elastic.co/t/prometheus-irate-function-in-kibana/244543)
**Author:** [@panwarsagar](https://discuss.elastic.co/u/panwarsagar)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:39pm UTC](https://discuss.elastic.co/t/prometheus-irate-function-in-kibana/244543 "2020-08-12T13:39:26Z")
Hi, I am moving some metrics from Prometheus to Kibana. In one of the visualization Prometheus is using irate function. (avg by (job) (irate(process\_cpu\_seconds\_total\[5m\])) \* 100) Could you please help me to implemen… --- ## [Slow date\_histogram after upgrading to 7.8.0](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-8-0/244404)
**Author:** [@Chan\_Terence](https://discuss.elastic.co/u/Chan_Terence)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:33pm UTC](https://discuss.elastic.co/t/slow-date-histogram-after-upgrading-to-7-8-0/244404 "2020-08-12T13:33:51Z")
Hi there, We noticed a serious performance degradation of date\_histogram aggregations on our cluster after upgrading to 7.8.0. We have two indexes with 1.2billion documents and use only date\_histogram, but this query n… --- ## [Logstash plugin missing for google pub sub](https://discuss.elastic.co/t/logstash-plugin-missing-for-google-pub-sub/244724)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 1:33pm UTC](https://discuss.elastic.co/t/logstash-plugin-missing-for-google-pub-sub/244724 "2020-08-12T13:33:23Z")
Hi Team, I ahve deployed Logstash in Kubernetes of version 6.3.2 and truying to get the input from google pub sub. Reecived error: Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, … --- ## [Delete and re-create an index pattern](https://discuss.elastic.co/t/delete-and-re-create-an-index-pattern/244689)
**Author:** [@leo.hamon](https://discuss.elastic.co/u/leo.hamon)\ **Replies:** 7\ **Last updated:** [August 12, 2020, 1:31pm UTC](https://discuss.elastic.co/t/delete-and-re-create-an-index-pattern/244689 "2020-08-12T13:31:42Z")
Hi everyone, I have an issue with my dashboards. They are built on an index pattern, I wanted to know if I can delete the index safely and re-create another one with the same name ? Will I keep my dashboards safe, or wi… --- ## [ElasticSearch on Kubernetes, one master nod not discovered when xpack.security.transport.ssl.enabled=true](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-one-master-nod-not-discovered-when-xpack-security-transport-ssl-enabled-true/244717)
**Author:** [@Uvais\_Ibrahim](https://discuss.elastic.co/u/Uvais_Ibrahim)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 1:05pm UTC](https://discuss.elastic.co/t/elasticsearch-on-kubernetes-one-master-nod-not-discovered-when-xpack-security-transport-ssl-enabled-true/244717 "2020-08-12T13:05:36Z")
I have deployed an elasticsearch in Kubernetes with 3 masters and 3 data nodes. All the pods are running. NAME READY STATUS RESTARTS AGE elasticsearch-master-v1-0 1/1 Running 0 … --- ## [Kibana error after DNS entry](https://discuss.elastic.co/t/kibana-error-after-dns-entry/244616)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 1:11pm UTC](https://discuss.elastic.co/t/kibana-error-after-dns-entry/244616 "2020-08-12T13:11:01Z")
Hi All, WE have configured elastic stack by mentioning the IP address in all the config files and we have done OKta integration also. Now we have done a DNS entry for the IP address used, after this change we are not ab… --- ## [Getting error while configuring metricbeat for Oracle module](https://discuss.elastic.co/t/getting-error-while-configuring-metricbeat-for-oracle-module/244402)
**Author:** [@puja](https://discuss.elastic.co/u/puja)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 12:58pm UTC](https://discuss.elastic.co/t/getting-error-while-configuring-metricbeat-for-oracle-module/244402 "2020-08-12T12:58:47Z")
I am using 7.7.0 version of ELK stack and trying to configure Oracle module of metricbeat. Below is my oracle.yml - Module: oracle Docs: https://www.elastic.co/guide/en/beats/metricbeat/7.6/metricbeat-module-oracle.htm… --- ## [Using elastic search for user journey tracking](https://discuss.elastic.co/t/using-elastic-search-for-user-journey-tracking/244703)
**Author:** [@Dheeraj\_Joshi](https://discuss.elastic.co/u/Dheeraj_Joshi)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 12:35pm UTC](https://discuss.elastic.co/t/using-elastic-search-for-user-journey-tracking/244703 "2020-08-12T12:35:20Z")
An external system generated many phases of customer journey. Phases like Anonymous, Registered, Subscriber etc. These are sent as events from a third party system who provides user management capabilities. Events would… --- ## [How to solve kibana5.4.0 Loophole](https://discuss.elastic.co/t/how-to-solve-kibana5-4-0-loophole/241955)
**Author:** [@111351](https://discuss.elastic.co/u/111351)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 12:21pm UTC](https://discuss.elastic.co/t/how-to-solve-kibana5-4-0-loophole/241955 "2020-08-12T12:21:15Z")
i need to user es5.4.0 , who can help me solve kibana5.4.0 XSS loophole thanks for you advice --- ## [Index Epoch to date time in elasticserarch](https://discuss.elastic.co/t/index-epoch-to-date-time-in-elasticserarch/244709)
**Author:** [@sana1](https://discuss.elastic.co/u/sana1)\ **Replies:** 0\ **Last updated:** [August 12, 2020, 12:05pm UTC](https://discuss.elastic.co/t/index-epoch-to-date-time-in-elasticserarch/244709 "2020-08-12T12:05:18Z")
I have a filed in my index with epoch time value as "1,596,041,843.199" when ever I try to re-index is using date mapping it gives me error "ailed to parse field \[field\_name\] of type \[date\] in document with id 'xxxxxxxx… --- ## [Is kibana supports dynamic filters to a URL?](https://discuss.elastic.co/t/is-kibana-supports-dynamic-filters-to-a-url/244613)
**Author:** [@kibana\_anil](https://discuss.elastic.co/u/kibana_anil)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 11:58am UTC](https://discuss.elastic.co/t/is-kibana-supports-dynamic-filters-to-a-url/244613 "2020-08-12T11:58:58Z")
Is kibana supports dynamic filters to a URL ? Example - create a filter on an index and saved this search. copy the URL This search URL is associated to the one of the field in Index Pattern. But, I couldn't add diff… --- ## [Field has been missed in aggregate](https://discuss.elastic.co/t/field-has-been-missed-in-aggregate/244595)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 7\ **Last updated:** [August 12, 2020, 11:52am UTC](https://discuss.elastic.co/t/field-has-been-missed-in-aggregate/244595 "2020-08-12T11:52:36Z")
Hi all, I am trying to build a data table visualize so that show sum of my field named as "amount". for this purpose, i am trying to use sum aggregation in the metric part but i cannot find my field in the "field" part… --- ## [Cannot search for events based on scripted fields](https://discuss.elastic.co/t/cannot-search-for-events-based-on-scripted-fields/244659)
**Author:** [@vivekkarne](https://discuss.elastic.co/u/vivekkarne)\ **Replies:** 4\ **Last updated:** [August 12, 2020, 11:52am UTC](https://discuss.elastic.co/t/cannot-search-for-events-based-on-scripted-fields/244659 "2020-08-12T11:52:09Z")
Hi, When i search using scripted fields in kibana, i either get no matching hits or I get a shards failed error. Can anyone please help me to look into this. Entire ELK stack is 7.4.2. s\_query body: if(doc\['qu… --- ## [Winlogbeat error during setup](https://discuss.elastic.co/t/winlogbeat-error-during-setup/244093)
**Author:** [@JohnLyman](https://discuss.elastic.co/u/JohnLyman)\ **Replies:** 8\ **Last updated:** [August 12, 2020, 11:47am UTC](https://discuss.elastic.co/t/winlogbeat-error-during-setup/244093 "2020-08-12T11:47:05Z")
When running .\\winlogbeat-7.8.1-windows-x86\_64\\winlogbeat.exe export index-pattern I'm getting the following error: Error generating Index Pattern: field \ is duplicated. I verified that this error goes all… --- ## [Collect first document from each bucket](https://discuss.elastic.co/t/collect-first-document-from-each-bucket/244152)
**Author:** [@stwrt](https://discuss.elastic.co/u/stwrt)\ **Replies:** 2\ **Last updated:** [August 12, 2020, 11:14am UTC](https://discuss.elastic.co/t/collect-first-document-from-each-bucket/244152 "2020-08-12T11:14:59Z")
Hi, I need some help with a query: I have a "students" index, and each student has a "classroomId" and a "grade" fields. I need to get the best student in each class. I'm using "aggs", but what I get is the list of a… --- ## [Packetbeat memory usage](https://discuss.elastic.co/t/packetbeat-memory-usage/244177)
**Author:** [@sidiney.crescencio](https://discuss.elastic.co/u/sidiney.crescencio)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 10:55am UTC](https://discuss.elastic.co/t/packetbeat-memory-usage/244177 "2020-08-12T10:55:40Z")
Hi there, I have recently deployed the ELK stack and beats to my servers, and for some of them I'm facing an issue with Packetbeat consuming 50-70% memory of the server Beats: 7.8.0 Mongo: 4.0.6 This happens mostly d… --- ## [Elastic kibana explain method into percentage](https://discuss.elastic.co/t/elastic-kibana-explain-method-into-percentage/241462)
**Author:** [@aretai](https://discuss.elastic.co/u/aretai)\ **Replies:** 1\ **Last updated:** [August 12, 2020, 10:28am UTC](https://discuss.elastic.co/t/elastic-kibana-explain-method-into-percentage/241462 "2020-08-12T10:28:22Z")
Hi there, I currently have a search system that displays percentage of found words in the database. I'm thinking of moving to elastic search, but I still want the results to be displayed as percentage. Is it possible?… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1870) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1872)