# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1902 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1903 --- ## [Rate() function in elasticsearch](https://discuss.elastic.co/t/rate-function-in-elasticsearch/242895)
**Author:** [@Nikparab](https://discuss.elastic.co/u/Nikparab)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 11:53am UTC](https://discuss.elastic.co/t/rate-function-in-elasticsearch/242895 "2020-07-28T11:53:55Z")
I want to query data present in elasticsearch index using grafana. I want to use rate function. The prometheus query is as below. sum (rate (container\_network\_receive\_bytes\_total{image!="",name=~".",namespace=~"$Namespa… --- ## [Elasticsearch query result in xml](https://discuss.elastic.co/t/elasticsearch-query-result-in-xml/242892)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 11:27am UTC](https://discuss.elastic.co/t/elasticsearch-query-result-in-xml/242892 "2020-07-28T11:27:14Z")
Dears, Is there any way to convert result of query (json) to xml format? Best Regards, Daniel --- ## [Elasticsearch analyzing and mapping data](https://discuss.elastic.co/t/elasticsearch-analyzing-and-mapping-data/242601)
**Author:** [@Saber\_Ben\_Njima](https://discuss.elastic.co/u/Saber_Ben_Njima)\ **Replies:** 5\ **Last updated:** [July 28, 2020, 11:20am UTC](https://discuss.elastic.co/t/elasticsearch-analyzing-and-mapping-data/242601 "2020-07-28T11:20:29Z")
{ "\_index" : "filebeat-7.7.0-2020.06.26", "\_type" : "\_doc", "\_id" : "-cmj8HIBlEC9388KS7SY", "\_score" : 1.0, "\_source" : { "message" : "17-02-2020 11:45:55TO -\> | Brand : TT | Channel : di… --- ## [LDAP or AD implementation in ELK](https://discuss.elastic.co/t/ldap-or-ad-implementation-in-elk/241016)
**Author:** [@RajeshKumar](https://discuss.elastic.co/u/RajeshKumar)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 11:13am UTC](https://discuss.elastic.co/t/ldap-or-ad-implementation-in-elk/241016 "2020-07-28T11:13:54Z")
Hi, I'm trying to setup LDAP authentication in my ELK. My Org has AD/LDAP implemented with in same setup. I used the following settings in my elasticsearch.yml xpack.security.enabled: true xpack.security.transport.ssl… --- ## [Issue in building Kibana rpm 7.8.0 from src](https://discuss.elastic.co/t/issue-in-building-kibana-rpm-7-8-0-from-src/241976)
**Author:** [@Mohitj252](https://discuss.elastic.co/u/Mohitj252)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 10:55am UTC](https://discuss.elastic.co/t/issue-in-building-kibana-rpm-7-8-0-from-src/241976 "2020-07-28T10:55:19Z")
Hi, I am trying to builidng kibana rpm but I am facing issues while running yarn kbn bootstrap --oss command. PFB output of the mentioned command, this error is related to the chrome driver installation. \`info \[kibana\] … --- ## [Metricbeat error unable to send metrics on elastic](https://discuss.elastic.co/t/metricbeat-error-unable-to-send-metrics-on-elastic/242333)
**Author:** [@karunakarsingh](https://discuss.elastic.co/u/karunakarsingh)\ **Replies:** 9\ **Last updated:** [July 28, 2020, 10:54am UTC](https://discuss.elastic.co/t/metricbeat-error-unable-to-send-metrics-on-elastic/242333 "2020-07-28T10:54:18Z")
Hi Team, kindly help I am not able to export metrics on Elasticsearch. Getting this error. WARN elasticsearch/client.go:539 Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Time{wall:0xbfbe3c… --- ## [Tolerance of spelling mistakes when searching with shingles](https://discuss.elastic.co/t/tolerance-of-spelling-mistakes-when-searching-with-shingles/242887)
**Author:** [@LanceWalton](https://discuss.elastic.co/u/LanceWalton)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 10:43am UTC](https://discuss.elastic.co/t/tolerance-of-spelling-mistakes-when-searching-with-shingles/242887 "2020-07-28T10:43:16Z")
Hi. I'm very new to elasticsearch. I hope this is the right forum for asking this question. In https://www.elastic.co/blog/searching-with-shingles, Zachary Tong describes the solution to the problem I have, except at t… --- ## [View query created by HL Rest Client](https://discuss.elastic.co/t/view-query-created-by-hl-rest-client/242870)
**Author:** [@sutty100](https://discuss.elastic.co/u/sutty100)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 10:23am UTC](https://discuss.elastic.co/t/view-query-created-by-hl-rest-client/242870 "2020-07-28T10:23:28Z")
I can't find a way to output the query created by the Java 7.8 High level Rest Client. I want to take the query and explain it/debug it in Kibana dev tools. However without an easy way to output the query being sent to e… --- ## [Kibana Controls Does not Show All Possible Values](https://discuss.elastic.co/t/kibana-controls-does-not-show-all-possible-values/241957)
**Author:** [@pulkit007](https://discuss.elastic.co/u/pulkit007)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 10:13am UTC](https://discuss.elastic.co/t/kibana-controls-does-not-show-all-possible-values/241957 "2020-07-28T10:13:35Z")
Hi, I am using Kibana 6.6.0. In that, I am trying to create controls based on the distinct possible values of a particular filed. Now, all the distinct possible values are not shown in the controls. I have also create… --- ## [Merge date and time field](https://discuss.elastic.co/t/merge-date-and-time-field/242862)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 10:07am UTC](https://discuss.elastic.co/t/merge-date-and-time-field/242862 "2020-07-28T10:07:34Z")
So, I have been trying to parse fortigate logs using logstash, I came across date and time fields, in fortigate there are two different fields, I tried to parse those fileds using mutate {add\_field =\> { "@timestamp" =\> … --- ## [Parse multi line json](https://discuss.elastic.co/t/parse-multi-line-json/242677)
**Author:** [@laxmikanth](https://discuss.elastic.co/u/laxmikanth)\ **Replies:** 11\ **Last updated:** [July 28, 2020, 9:57am UTC](https://discuss.elastic.co/t/parse-multi-line-json/242677 "2020-07-28T09:57:40Z")
Hi, When I try to parse multi line json as below, I am seeing in ELK as multiline, \_jsonparsefailure, \_grokparsefailure from below json file content, want to remove KEY4 & host and send rest of the fields to elastic se… --- ## [DSL query aggregation question](https://discuss.elastic.co/t/dsl-query-aggregation-question/242873)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 9:43am UTC](https://discuss.elastic.co/t/dsl-query-aggregation-question/242873 "2020-07-28T09:43:10Z")
Dears, I have some query with aggregation like this: "aggs": { "NAME": { "terms": { "script": "doc\['si.rc.keyword'\].getValue().substring(0,1)", "order": { "\_key": "asc" } … --- ## [Drilldowns using scripted fields to preserve timestamps](https://discuss.elastic.co/t/drilldowns-using-scripted-fields-to-preserve-timestamps/242339)
**Author:** [@kilianten](https://discuss.elastic.co/u/kilianten)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 9:31am UTC](https://discuss.elastic.co/t/drilldowns-using-scripted-fields-to-preserve-timestamps/242339 "2020-07-28T09:31:25Z")
Hey, Im currently using 7.2 Kibana I'd like to be able to preserve the timestamp when using drilldowns in scripted fields. For example, if I'm looking at a dashboard with the timerange 30d-Now to now, I'd like to be ab… --- ## [ElasticSearch Transform Find Time Difference across documents](https://discuss.elastic.co/t/elasticsearch-transform-find-time-difference-across-documents/242861)
**Author:** [@vihar\_mamania](https://discuss.elastic.co/u/vihar_mamania)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 9:16am UTC](https://discuss.elastic.co/t/elasticsearch-transform-find-time-difference-across-documents/242861 "2020-07-28T09:16:48Z")
I have multiple logs being sent out to Elasticsearch in the following way: { "resourceId" : 12345, "event" : "SUBMITTED/PROCESSING/SUCCESSFUL" "event\_time" : "dateString" } Resource Id w… --- ## [Is there any configuration that can maintain the green status for .security-7 index always?](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 6\ **Last updated:** [July 28, 2020, 9:14am UTC](https://discuss.elastic.co/t/is-there-any-configuration-that-can-maintain-the-green-status-for-security-7-index-always/242834 "2020-07-28T09:14:18Z")
Is there any configuration that can maintain the green status for .security-7 index always? --- ## [Issue with sending logs in secure Kafka](https://discuss.elastic.co/t/issue-with-sending-logs-in-secure-kafka/242707)
**Author:** [@svasilyev](https://discuss.elastic.co/u/svasilyev)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 8:45am UTC](https://discuss.elastic.co/t/issue-with-sending-logs-in-secure-kafka/242707 "2020-07-28T08:45:35Z")
my problem looks the same https://discuss.elastic.co/t/issue-with-sending-to-kafka-0-10-2-1-over-tls/111252 but my version work however my logs are written for some time (different on several servers) and then they sto… --- ## [Issue: Adds all available datetime fields from index template with empty value, when add date\_index\_name processor in pipeline of filebeat fortinet module](https://discuss.elastic.co/t/issue-adds-all-available-datetime-fields-from-index-template-with-empty-value-when-add-date-index-name-processor-in-pipeline-of-filebeat-fortinet-module/240680)
**Author:** [@umeshnagori](https://discuss.elastic.co/u/umeshnagori)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 8:31am UTC](https://discuss.elastic.co/t/issue-adds-all-available-datetime-fields-from-index-template-with-empty-value-when-add-date-index-name-processor-in-pipeline-of-filebeat-fortinet-module/240680 "2020-07-28T08:31:32Z")
ISSUE Adds all available datetime fields from index template with empty value (even those fields those are otherwise used by disabled modules and disabled) , when add date\_index\_name processor in pipeline of filebeat fo… --- ## [Configuration for ELK+filebeat with docker](https://discuss.elastic.co/t/configuration-for-elk-filebeat-with-docker/239227)
**Author:** [@Govinda8594](https://discuss.elastic.co/u/Govinda8594)\ **Replies:** 0\ **Last updated:** [June 30, 2020, 6:16am UTC](https://discuss.elastic.co/t/configuration-for-elk-filebeat-with-docker/239227 "2020-06-30T06:16:07Z")
(topic withdrawn by author, will be automatically deleted in 24 hours unless flagged) --- ## [Pass applied filter value in dashboard in URL field](https://discuss.elastic.co/t/pass-applied-filter-value-in-dashboard-in-url-field/242859)
**Author:** [@ruben.ramirez](https://discuss.elastic.co/u/ruben.ramirez)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 8:14am UTC](https://discuss.elastic.co/t/pass-applied-filter-value-in-dashboard-in-url-field/242859 "2020-07-28T08:14:00Z")
Hi everyone. I want to take the value of the applied filter and enter it in a filter to be applied in the other dashboard. For example I have this filter: And I want to add this value to a link in a url filter field… --- ## [ElasticSearch is being attacked?](https://discuss.elastic.co/t/elasticsearch-is-being-attacked/242727)
**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-is-being-attacked/242727 "2020-07-28T08:07:37Z")
Hi, I have installed ES since month now, everything was fine until Friday. Each time, I need to restore ES manually (Delete / Restart / Launch my jobs). But since Friday, after a few hours, everything is down again! M… --- ## [MetricBeat on Openshift](https://discuss.elastic.co/t/metricbeat-on-openshift/242795)
**Author:** [@jaikunwar](https://discuss.elastic.co/u/jaikunwar)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 8:07am UTC](https://discuss.elastic.co/t/metricbeat-on-openshift/242795 "2020-07-28T08:07:09Z")
I am trying to run metricbeat on openshift using docker file: #Docker file: FROM docker-secure-com/metricbeat/metricbeat:latest COPY metricbeat.yml /etc/metricbeat/config/metricbeat.yml COPY metricbeat.yml /etc/metri… --- ## [Elasticsearch sub aggregation not working with max](https://discuss.elastic.co/t/elasticsearch-sub-aggregation-not-working-with-max/242852)
**Author:** [@Raza\_Jamil](https://discuss.elastic.co/u/Raza_Jamil)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 7:48am UTC](https://discuss.elastic.co/t/elasticsearch-sub-aggregation-not-working-with-max/242852 "2020-07-28T07:48:24Z")
I have nested data of shape: albums have tracks, tracks have versions. album: { tracks: \[ { id: 1, mainTrackID: 1, // mainTrackID = id means main track versions: \[ { … --- ## [How push beats agents to multiple machines ( Avoid Manual installation )](https://discuss.elastic.co/t/how-push-beats-agents-to-multiple-machines-avoid-manual-installation/242842)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 7:49am UTC](https://discuss.elastic.co/t/how-push-beats-agents-to-multiple-machines-avoid-manual-installation/242842 "2020-07-28T07:49:13Z")
Hi , If we have large number of Linux and Windows machines in our infrastructure ( Suppose 100+ windows and Linux machines ) . Manual installation takes large amount of time . How we can automate beat remote installat… --- ## [Logstash - Retry with exponential backoff code=\>400,](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff-code-400/242849)
**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 7:34am UTC](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff-code-400/242849 "2020-07-28T07:34:15Z")
Hi, I have started logstash with the following error: \[2020-07-28T15:19:51,466\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[ac34975042de783740a7fba68d15a74cca99c92e561d5fc2f692e54892613f0d\] Encountered a retryable err… --- ## [Kibana OSS ERROR: missing authentication credentials for REST request](https://discuss.elastic.co/t/kibana-oss-error-missing-authentication-credentials-for-rest-request/242836)
**Author:** [@Souji\_T](https://discuss.elastic.co/u/Souji_T)\ **Replies:** 6\ **Last updated:** [July 28, 2020, 7:15am UTC](https://discuss.elastic.co/t/kibana-oss-error-missing-authentication-credentials-for-rest-request/242836 "2020-07-28T07:15:14Z")
Hello, I have the problem that I can’t use Kibana OSS if my Elasticsearch is protected with basic authentication. I wanted to use the Kibana OSS version and figured out that in version 7.6.2 it was still working but wit… --- ## [Elastic Stack performance](https://discuss.elastic.co/t/elastic-stack-performance/242653)
**Author:** [@ArousOussema](https://discuss.elastic.co/u/ArousOussema)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 7:05am UTC](https://discuss.elastic.co/t/elastic-stack-performance/242653 "2020-07-28T07:05:41Z")
Greetings, I'm a student at the Hochschule Darmstadt in Germany. I'm currently working on a project for my university, where we’re trying to find a suitable Log management tool for our big data cluster. It will be so h… --- ## [Use 2 version ES on one server](https://discuss.elastic.co/t/use-2-version-es-on-one-server/242415)
**Author:** [@YURA](https://discuss.elastic.co/u/YURA)\ **Replies:** 4\ **Last updated:** [July 28, 2020, 6:50am UTC](https://discuss.elastic.co/t/use-2-version-es-on-one-server/242415 "2020-07-28T06:50:10Z")
I have server CentOS 7, there is running ES version "number" : "6.4.0", can I install new version (version 7\*) and use both of them at the same time on one server? I wanna use 2 differet verion on server, is it possib… --- ## [Some indexes have been deleted, now I see indexes called meow?](https://discuss.elastic.co/t/some-indexes-have-been-deleted-now-i-see-indexes-called-meow/242731)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 2\ **Last updated:** [July 28, 2020, 6:41am UTC](https://discuss.elastic.co/t/some-indexes-have-been-deleted-now-i-see-indexes-called-meow/242731 "2020-07-28T06:41:42Z")
If you have seen a number of your indices recently "disappear", and then when checking your logs you see they have been deleted, and you can also see other log entries that mention the term meow, like this; \[t19hfzgnp7-… --- ## [Logstash jdbc sqlite file in readonly directory](https://discuss.elastic.co/t/logstash-jdbc-sqlite-file-in-readonly-directory/242838)
**Author:** [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)\ **Replies:** 0\ **Last updated:** [July 28, 2020, 6:34am UTC](https://discuss.elastic.co/t/logstash-jdbc-sqlite-file-in-readonly-directory/242838 "2020-07-28T06:34:34Z")
Hi all, I need your help for a Logstash-Pipeline. We have an third party application which stores is logs in a sqlite .db File (Windows Server). We want to integrate these Logs in our Stack. What we done so far: Mou… --- ## [Logstash not connecting to elasticsearch after enabling xpack.security on single.node](https://discuss.elastic.co/t/logstash-not-connecting-to-elasticsearch-after-enabling-xpack-security-on-single-node/242741)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 3\ **Last updated:** [July 28, 2020, 6:05am UTC](https://discuss.elastic.co/t/logstash-not-connecting-to-elasticsearch-after-enabling-xpack-security-on-single-node/242741 "2020-07-28T06:05:07Z")
Hello, I have configured elastic stack on Docker with below docker-compose on single node model. Initially disabled xpack-security and everything working fine. Post that enabled, xpack-security and restarted stack. Log… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1901) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1903)