# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1884 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1885 --- ## [Painless script for date to minutes calculation](https://discuss.elastic.co/t/painless-script-for-date-to-minutes-calculation/243252)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 9\ **Last updated:** [August 6, 2020, 6:43am UTC](https://discuss.elastic.co/t/painless-script-for-date-to-minutes-calculation/243252 "2020-08-06T06:43:09Z")
Hi All, We are ingesting data using logstash http\_poller, there is a date field which need to be subtracted with a default value (1970.01.01 00:00:00) eg: result.timeworked : 1970.01.01 00:00:40 this field need to be… --- ## [Unable to start ElasticSearch after install on CENTOS 7](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-7/243733)
**Author:** [@ian-hosting](https://discuss.elastic.co/u/ian-hosting)\ **Replies:** 13\ **Last updated:** [August 6, 2020, 6:27am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-7/243733 "2020-08-06T06:27:37Z")
Hi Went through the steps to install the latest ElasticSearch via rpm and all seemed to go well but when I try to start it, there is an error First time attempting to install this so am a bit lost as to where to look f… --- ## [Circuit breaker exception resulted in temination of all the nodes of Elasticsearch](https://discuss.elastic.co/t/circuit-breaker-exception-resulted-in-temination-of-all-the-nodes-of-elasticsearch/242783)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 4\ **Last updated:** [August 6, 2020, 6:07am UTC](https://discuss.elastic.co/t/circuit-breaker-exception-resulted-in-temination-of-all-the-nodes-of-elasticsearch/242783 "2020-08-06T06:07:58Z")
Hi All, I am new to ELK and tried load testing for the first time, I did some heavy load testing in ELK and tried to create a report for last three months .When I ran the command . I can see shards started failing and a… --- ## [Vega - Request must contain a kbn-xsrf header](https://discuss.elastic.co/t/vega-request-must-contain-a-kbn-xsrf-header/243890)
**Author:** [@TVxJVOV](https://discuss.elastic.co/u/TVxJVOV)\ **Replies:** 5\ **Last updated:** [August 6, 2020, 6:12am UTC](https://discuss.elastic.co/t/vega-request-must-contain-a-kbn-xsrf-header/243890 "2020-08-06T06:12:10Z")
Hi! I am new to Kibana. I hope I am using all the terminology in the right way. I am currently working on a Vega viz and I am getting a weird error message. It comes when I do a search query to elastic API. It says: … --- ## [Converting a multiline mysql query into a single line query](https://discuss.elastic.co/t/converting-a-multiline-mysql-query-into-a-single-line-query/243956)
**Author:** [@gonzalo2kx](https://discuss.elastic.co/u/gonzalo2kx)\ **Replies:** 1\ **Last updated:** [August 6, 2020, 5:55am UTC](https://discuss.elastic.co/t/converting-a-multiline-mysql-query-into-a-single-line-query/243956 "2020-08-06T05:55:24Z")
Good day, I am looking for a solution to trim multiple white spaces, removing new lines, and a special character "^M" (in my case) from a multiline mysql query (Not multiline mysql-slow.log) in order to get the mysql qu… --- ## [How can I install systemd module into the ES serverinstalled from the archive?](https://discuss.elastic.co/t/how-can-i-install-systemd-module-into-the-es-serverinstalled-from-the-archive/243656)
**Author:** [@takh777](https://discuss.elastic.co/u/takh777)\ **Replies:** 4\ **Last updated:** [August 6, 2020, 5:34am UTC](https://discuss.elastic.co/t/how-can-i-install-systemd-module-into-the-es-serverinstalled-from-the-archive/243656 "2020-08-06T05:34:11Z")
I've installed Elasticsearch 7.6 from archive (not RPM) on Cent OS 7 and configuring it. ( I cannot use RPM release of ES in this case, due to a requrement from other software.) Now I could launch the server via comman… --- ## [Failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/243766)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 8\ **Last updated:** [August 6, 2020, 5:10am UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/243766 "2020-08-06T05:10:26Z")
Getting the following exception when I try to enable the native ssl cert for es. I have check the permission for "/etc/identity/ca/cacerts.pem". It was also used for envoy proxy and it is working fine with envoy. Any ide… --- ## [Rollup job and how to create new record every minute](https://discuss.elastic.co/t/rollup-job-and-how-to-create-new-record-every-minute/243951)
**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\ **Replies:** 0\ **Last updated:** [August 6, 2020, 3:33am UTC](https://discuss.elastic.co/t/rollup-job-and-how-to-create-new-record-every-minute/243951 "2020-08-06T03:33:18Z")
Hi all, I am new to rollup job and would like to schedule to get max and count for an index. I am using sample tutorial index sensor with cron run every minute \*/1 \* \* \* \* ?. The issue is the rollup index is created an… --- ## [Elastic Search Bulk API (Delete) vs DeleteByQuery](https://discuss.elastic.co/t/elastic-search-bulk-api-delete-vs-deletebyquery/243617)
**Author:** [@jbiju94](https://discuss.elastic.co/u/jbiju94)\ **Replies:** 4\ **Last updated:** [August 6, 2020, 3:26am UTC](https://discuss.elastic.co/t/elastic-search-bulk-api-delete-vs-deletebyquery/243617 "2020-08-06T03:26:00Z")
My requirement is to delete a particular document (with doc\_id) from multiple indices in one go. But the catch is that I am not aware which all indices would have this doc and I will have to fire a delete request for the… --- ## [Unable to decode response from prometheus endpoint](https://discuss.elastic.co/t/unable-to-decode-response-from-prometheus-endpoint/243949)
**Author:** [@jaikunwar](https://discuss.elastic.co/u/jaikunwar)\ **Replies:** 0\ **Last updated:** [August 6, 2020, 2:50am UTC](https://discuss.elastic.co/t/unable-to-decode-response-from-prometheus-endpoint/243949 "2020-08-06T02:50:12Z")
I am using metricbeat but getting error like: Error fetching data prometheus.collector: unable to decode response from prometheus endpoint: error making http request Get http://testserver:9104/metrics: net:/http: reques… --- ## ['Kibana server is not ready' after 7.7.1-7.8.1](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-7-7-1-7-8-1/243937)
**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\ **Replies:** 2\ **Last updated:** [August 6, 2020, 2:34am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-after-7-7-1-7-8-1/243937 "2020-08-06T02:34:07Z")
After experiencing slowness in the Kibana UI from the jump from 6.8.9 to 7.7.1, I was told on the forums I should upgrade to 7.8 as that had a number of UI performance improvements. All elasticsearch nodes were upgraded… --- ## [Kibana unable to create and update index pattern](https://discuss.elastic.co/t/kibana-unable-to-create-and-update-index-pattern/243644)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 3\ **Last updated:** [August 6, 2020, 2:15am UTC](https://discuss.elastic.co/t/kibana-unable-to-create-and-update-index-pattern/243644 "2020-08-06T02:15:09Z")
Hi all... I have an issue creating new Index in Kibana 7.5.0; when i want to save the index pattern i get error : the circle only spining but the index pattern still not succes create. the issue not just found w… --- ## [Community Beats - Unitybeat creation of binary](https://discuss.elastic.co/t/community-beats-unitybeat-creation-of-binary/243218)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 12\ **Last updated:** [August 6, 2020, 2:11am UTC](https://discuss.elastic.co/t/community-beats-unitybeat-creation-of-binary/243218 "2020-08-06T02:11:44Z")
Testing/Running this on a Windows 10 machine so that I can install it on a Dell EMC server. I'm trying to utilize the Community Beat, Unitybeat, and I've installed Go and tested it out with the instruction from here, ht… --- ## [Azure self managed elasticsearch - how to add a node](https://discuss.elastic.co/t/azure-self-managed-elasticsearch-how-to-add-a-node/243948)
**Author:** [@jpatel](https://discuss.elastic.co/u/jpatel)\ **Replies:** 0\ **Last updated:** [August 6, 2020, 1:27am UTC](https://discuss.elastic.co/t/azure-self-managed-elasticsearch-how-to-add-a-node/243948 "2020-08-06T01:27:02Z")
How do I add a node to the self managed ES cluster running on Azure ? I understand that if it was VM based (and not from market place self-managed), I would add a VM, install ES and modify yml file to add the node. Than… --- ## [Dashboard Drill Down - source of updated viz that support?](https://discuss.elastic.co/t/dashboard-drill-down-source-of-updated-viz-that-support/243812)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 11:18pm UTC](https://discuss.elastic.co/t/dashboard-drill-down-source-of-updated-viz-that-support/243812 "2020-08-05T23:18:58Z")
Hi - Is there somewhere I can go to see if and when each visualization type (metrics, pie, gauge, TSVB etc) has support for dashboard drill-downs built-in? As I understand I can do dashboard drill-downs from line charts… --- ## [Drilldown using scripted field](https://discuss.elastic.co/t/drilldown-using-scripted-field/243747)
**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 9:59pm UTC](https://discuss.elastic.co/t/drilldown-using-scripted-field/243747 "2020-08-05T21:59:52Z")
how to apply filter when chart is aggregated using scripted field? --- ## [Is there any way to make a sync line across charts on hover in dashboard?](https://discuss.elastic.co/t/is-there-any-way-to-make-a-sync-line-across-charts-on-hover-in-dashboard/243665)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 9:54pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-make-a-sync-line-across-charts-on-hover-in-dashboard/243665 "2020-08-05T21:54:31Z")
I find that in stack monitoring, it is default to have such line as screen captured below Is it possible to make the same line on dashboard? Thanks. --- ## [Show the diff between 2 lines in Kibana](https://discuss.elastic.co/t/show-the-diff-between-2-lines-in-kibana/243802)
**Author:** [@jdevilla20](https://discuss.elastic.co/u/jdevilla20)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 9:50pm UTC](https://discuss.elastic.co/t/show-the-diff-between-2-lines-in-kibana/243802 "2020-08-05T21:50:50Z")
I am using the rollup feature to rollup 2 indexes. They are defined as the following: PUT /frontend { "settings": { "number\_of\_shards": 5 }, "mappings": { "properties": { "owner": { "type": "key… --- ## [Upsert Document on the basis of datetime format](https://discuss.elastic.co/t/upsert-document-on-the-basis-of-datetime-format/243864)
**Author:** [@rishabh\_jain](https://discuss.elastic.co/u/rishabh_jain)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 12:22pm UTC](https://discuss.elastic.co/t/upsert-document-on-the-basis-of-datetime-format/243864 "2020-08-05T12:22:31Z")
Hello, If I wanted to update an existing document if it satisfies the condition. See an example below: Index: test\_index Add tweet and lastupdated fields to document 1 as below. Please note that the lastupdated fiel… --- ## [Kibana histogram chart](https://discuss.elastic.co/t/kibana-histogram-chart/243808)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 9:39pm UTC](https://discuss.elastic.co/t/kibana-histogram-chart/243808 "2020-08-05T21:39:29Z")
Hi, this pic is an example in "metabase". It shows busiest hours of the day and the best-selling day of week in a month for example. I know I can create a line chart like this in kibana But it shows the busiest hou… --- ## [How to make a graph where x buckets show two different sources of information in the visualization tool?](https://discuss.elastic.co/t/how-to-make-a-graph-where-x-buckets-show-two-different-sources-of-information-in-the-visualization-tool/243830)
**Author:** [@Morrisseyroo](https://discuss.elastic.co/u/Morrisseyroo)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 9:30pm UTC](https://discuss.elastic.co/t/how-to-make-a-graph-where-x-buckets-show-two-different-sources-of-information-in-the-visualization-tool/243830 "2020-08-05T21:30:26Z")
Hey guys, I'm new to Kibana and trying to learn how to make visualizations. I can do simple ones so far but I'm getting stuck on how to add more than 1 source like in this sample photo. To clarify using the example, see… --- ## [Post ingest, how can I generate lat long fields into geo point](https://discuss.elastic.co/t/post-ingest-how-can-i-generate-lat-long-fields-into-geo-point/243796)
**Author:** [@brasspuma](https://discuss.elastic.co/u/brasspuma)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 9:16pm UTC](https://discuss.elastic.co/t/post-ingest-how-can-i-generate-lat-long-fields-into-geo-point/243796 "2020-08-05T21:16:12Z")
I've ingested CSV data via Apache NiFi and posted to Elasticsearch. I've come to realize that there are "lat" and "lon" values in my index. My index is already in the 10's of millions of records. \`{"name":"Sam", "lat": … --- ## [Upload multiple synonyms txt files in Elastic Search](https://discuss.elastic.co/t/upload-multiple-synonyms-txt-files-in-elastic-search/243932)
**Author:** [@shefu](https://discuss.elastic.co/u/shefu)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 8:47pm UTC](https://discuss.elastic.co/t/upload-multiple-synonyms-txt-files-in-elastic-search/243932 "2020-08-05T20:47:03Z")
I have implemented "one index per language" approach in Elastic search as we have multiple languages. Each index will have its own mapping based on language. Defined Synonyms for each language and mapped to specific map… --- ## [Painless script issue in date comparision](https://discuss.elastic.co/t/painless-script-issue-in-date-comparision/243927)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 8:08pm UTC](https://discuss.elastic.co/t/painless-script-issue-in-date-comparision/243927 "2020-08-05T20:08:39Z")
I have written a painless script to get the time difference between two date fields, but i'm not getting the correct answer. default\_date : 01-01-1970 00:00:00 result.taskslatable\_duration.value : 01-01-1970 00:40:00 b… --- ## [Using packetbeat with pf\_ring](https://discuss.elastic.co/t/using-packetbeat-with-pf-ring/243925)
**Author:** [@luciferdude](https://discuss.elastic.co/u/luciferdude)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 7:58pm UTC](https://discuss.elastic.co/t/using-packetbeat-with-pf-ring/243925 "2020-08-05T19:58:59Z")
Hello, Testing packetbeat with af\_packet and pcap. getting an error when testing with pf\_ring. I have 10 GB NIC and trying to capture DNS traffic over that nic. ERROR instance/beat.go:906 Exiting: Unknown sniffer type:… --- ## [Upgrade assistant long reindex time](https://discuss.elastic.co/t/upgrade-assistant-long-reindex-time/243923)
**Author:** [@Tudor\_Frincu](https://discuss.elastic.co/u/Tudor_Frincu)\ **Replies:** 0\ **Last updated:** [August 5, 2020, 7:47pm UTC](https://discuss.elastic.co/t/upgrade-assistant-long-reindex-time/243923 "2020-08-05T19:47:34Z")
Hello, I have a elasticsearch cluster that we just migrated from 5.6.4 to 6.8.10. The cluster has 3 master nodes, 3 client nodes and 3 data nodes. They have the following resources allocated: master node : CPU 1000MH… --- ## [\[s3 Logstash\] Setting bucket prefix to be specific range of days](https://discuss.elastic.co/t/s3-logstash-setting-bucket-prefix-to-be-specific-range-of-days/243787)
**Author:** [@ian2](https://discuss.elastic.co/u/ian2)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 7:37pm UTC](https://discuss.elastic.co/t/s3-logstash-setting-bucket-prefix-to-be-specific-range-of-days/243787 "2020-08-05T19:37:14Z")
We're pushing logs into an s3 bucket. We've setup the our indexer configuration and tested with a single folder within our bucket - which naming convention is the date (e.g. my-bucket-of-logs/20200804) however we want to… --- ## [How can I use query match AND instead of comma?](https://discuss.elastic.co/t/how-can-i-use-query-match-and-instead-of-comma/243712)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 7:08pm UTC](https://discuss.elastic.co/t/how-can-i-use-query-match-and-instead-of-comma/243712 "2020-08-05T19:08:04Z")
Hi; My question is really simple but I couldn't find any solution for that ? I have a 3 columns "why, target,rate,similarto" . This is a kind of recommendation system . target is "A Hotel", similarto is "B Hotel, C Hote… --- ## [Exiting: missing field accessing 'output.elasticsearch.index' (source:'command line flag')](https://discuss.elastic.co/t/exiting-missing-field-accessing-output-elasticsearch-index-source-command-line-flag/243791)
**Author:** [@luado](https://discuss.elastic.co/u/luado)\ **Replies:** 1\ **Last updated:** [August 5, 2020, 6:59pm UTC](https://discuss.elastic.co/t/exiting-missing-field-accessing-output-elasticsearch-index-source-command-line-flag/243791 "2020-08-05T18:59:39Z")
I have made a custom beat. It runs fine. When I run it from inside a docker container it complains that I'm trying to change the index. My Dockerfile goes like this: FROM ubuntu MAINTAINER Luis Eduardo Pessoa ARG … --- ## [Logstash does not create index on elasticsearch](https://discuss.elastic.co/t/logstash-does-not-create-index-on-elasticsearch/243773)
**Author:** [@asuarez](https://discuss.elastic.co/u/asuarez)\ **Replies:** 4\ **Last updated:** [August 5, 2020, 6:38pm UTC](https://discuss.elastic.co/t/logstash-does-not-create-index-on-elasticsearch/243773 "2020-08-05T18:38:07Z")
Hello, I am new to Elastic, I need help with the development of Logstash, I could not get any logstash to automatically create indexes in ElasticSearch. I have created 2 logstast .conf and none create the indexes, I lea… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1883) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1885)