# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1991 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1992 --- ## [How can I get all the fields and rows of the most recent write from Elastic with essql?](https://discuss.elastic.co/t/how-can-i-get-all-the-fields-and-rows-of-the-most-recent-write-from-elastic-with-essql/237563)
**Author:** [@jaffarkazi](https://discuss.elastic.co/u/jaffarkazi)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 6:32am UTC](https://discuss.elastic.co/t/how-can-i-get-all-the-fields-and-rows-of-the-most-recent-write-from-elastic-with-essql/237563 "2020-06-18T06:32:50Z")
I have employee records, (say name, dob, address) and a timewritten field, which is time converted to seconds. This data is written to my index every 5 seconds. Suppose there are 5 records. Run 1 will write employee re… --- ## [Kibana Metrics UI with different user](https://discuss.elastic.co/t/kibana-metrics-ui-with-different-user/237431)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 6:19am UTC](https://discuss.elastic.co/t/kibana-metrics-ui-with-different-user/237431 "2020-06-18T06:19:27Z")
With superuser all the infrastructure stuff is OK (logs & metrics). With a different user (who has privileges to Infrastructure UI + all privileges to metricbeat\* indices) the basic UI looks OK, but the "Metric Explorer… --- ## [Stuck with timezone issue in logstash JDBC input](https://discuss.elastic.co/t/stuck-with-timezone-issue-in-logstash-jdbc-input/236707)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 6:10am UTC](https://discuss.elastic.co/t/stuck-with-timezone-issue-in-logstash-jdbc-input/236707 "2020-06-18T06:10:21Z")
I am a bit lost here. Situation: Some transaction happens in Sydney. And the record is stored in SQL database. The time stored is in UTC. 5 mins later, we pull that data using Logstash JDBC input. Kibana pulls up and … --- ## [ELK integration with Active Directory](https://discuss.elastic.co/t/elk-integration-with-active-directory/237562)
**Author:** [@Ohonaf](https://discuss.elastic.co/u/Ohonaf)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 5:38am UTC](https://discuss.elastic.co/t/elk-integration-with-active-directory/237562 "2020-06-18T05:38:37Z")
Dear All, I have an ELK platform and all my users are locally managed. I have licenced version. I need to integrate my ELK with AD so that i can manage my user taking authentication from Active Directory. Can anyone h… --- ## [Reference hosted URL and Port from Kibana](https://discuss.elastic.co/t/reference-hosted-url-and-port-from-kibana/237292)
**Author:** [@Utkarsh\_Mishra](https://discuss.elastic.co/u/Utkarsh_Mishra)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 5:33am UTC](https://discuss.elastic.co/t/reference-hosted-url-and-port-from-kibana/237292 "2020-06-18T05:33:15Z")
Hi All, I am using an internal cloud application within my firm which is a container and can alter host and port at any time. Now I wanted to create a drill-down feature for my dashboard by setting the field type to Lin… --- ## [Elastic Cloud - team support?](https://discuss.elastic.co/t/elastic-cloud-team-support/237428)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 5:28am UTC](https://discuss.elastic.co/t/elastic-cloud-team-support/237428 "2020-06-18T05:28:38Z")
We'd like to use the Elastic Cloud as a team. Is there support for teams? What I'd like to have: Multiple users with different account credentials can log into the same cloud "dashboard" (https://cloud.elastic.co/home)… --- ## [Load JSON data to Kibana dynamically](https://discuss.elastic.co/t/load-json-data-to-kibana-dynamically/237385)
**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\ **Replies:** 2\ **Last updated:** [June 18, 2020, 5:07am UTC](https://discuss.elastic.co/t/load-json-data-to-kibana-dynamically/237385 "2020-06-18T05:07:30Z")
Hi all, I have been using ELK for the past few weeks. It is working very well with my logs data and dynamically I am able to update it also. Now I have some JSON data which is being generated every hour as a JSON file. … --- ## [java.lang.IllegalStateException: The following nodes are not ready yet for enabling x-pack custom metadata:](https://discuss.elastic.co/t/java-lang-illegalstateexception-the-following-nodes-are-not-ready-yet-for-enabling-x-pack-custom-metadata/237555)
**Author:** [@Ankur\_Agarwal1](https://discuss.elastic.co/u/Ankur_Agarwal1)\ **Replies:** 1\ **Last updated:** [June 18, 2020, 5:08am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-the-following-nodes-are-not-ready-yet-for-enabling-x-pack-custom-metadata/237555 "2020-06-18T05:08:48Z")
java.lang.IllegalStateException: The following nodes are not ready yet for enabling x-pack custom metadata: --- ## [Elastic SQL query to get data of today ONLY](https://discuss.elastic.co/t/elastic-sql-query-to-get-data-of-today-only/235867)
**Author:** [@jaffarkazi](https://discuss.elastic.co/u/jaffarkazi)\ **Replies:** 8\ **Last updated:** [June 18, 2020, 5:03am UTC](https://discuss.elastic.co/t/elastic-sql-query-to-get-data-of-today-only/235867 "2020-06-18T05:03:03Z")
Through an Elastic SQL query, how can I retrieve data belonging to today only? I've tried: select "@timestamp", today(), now(), TimeOfLastReceivedUpdate FROM "index\*" where Name = 'value' and ("@timestamp" \>= today() A… --- ## [How to get kibana advanced settings from API?](https://discuss.elastic.co/t/how-to-get-kibana-advanced-settings-from-api/236759)
**Author:** [@sudosu](https://discuss.elastic.co/u/sudosu)\ **Replies:** 9\ **Last updated:** [June 18, 2020, 4:53am UTC](https://discuss.elastic.co/t/how-to-get-kibana-advanced-settings-from-api/236759 "2020-06-18T04:53:44Z")
Hi I would like to get the advanced settings in kibana from an API call. I tried GET .kibana/\_search { "query": { "term": { "type": { "value": "config" } } } }\`\`\` but I am gettin… --- ## [Logstash 5.5 and pipelines](https://discuss.elastic.co/t/logstash-5-5-and-pipelines/237482)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 4\ **Last updated:** [June 18, 2020, 4:15am UTC](https://discuss.elastic.co/t/logstash-5-5-and-pipelines/237482 "2020-06-18T04:15:38Z")
Hi , I'm facing Logstash 5.5 , is it right to create multiple pipelines under conf.d directory ? I just created 2 pipelines with 2 different ports and it seems working but I get all messages into all of them unrelate… --- ## [How to get kubernetes node label in elasticsearch - metricbeat?](https://discuss.elastic.co/t/how-to-get-kubernetes-node-label-in-elasticsearch-metricbeat/237553)
**Author:** [@abhishek\_acharya](https://discuss.elastic.co/u/abhishek_acharya)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 3:01am UTC](https://discuss.elastic.co/t/how-to-get-kubernetes-node-label-in-elasticsearch-metricbeat/237553 "2020-06-18T03:01:20Z")
Hi there, I have assigned a label to my node using kubectl command. now i want this metadata information in elasticsearch metricbeat field, but i am unable to get this! Also I have checked in my monitoring-template.yam… --- ## [401 Unauthorized : unable to authenticate user when local metricbeats tries to connect to dockerized ELK](https://discuss.elastic.co/t/401-unauthorized-unable-to-authenticate-user-when-local-metricbeats-tries-to-connect-to-dockerized-elk/237551)
**Author:** [@drjosephliu](https://discuss.elastic.co/u/drjosephliu)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 2:46am UTC](https://discuss.elastic.co/t/401-unauthorized-unable-to-authenticate-user-when-local-metricbeats-tries-to-connect-to-dockerized-elk/237551 "2020-06-18T02:46:29Z")
Hi, I'm very new to ELK and could really do with some help. I've installed dockerized ELK on my computer and started it up with default configuration using docker-compose up -d. The default config uses username elastic … --- ## [Index template - index pattern does not match index name](https://discuss.elastic.co/t/index-template-index-pattern-does-not-match-index-name/237445)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 0\ **Last updated:** [June 17, 2020, 10:02am UTC](https://discuss.elastic.co/t/index-template-index-pattern-does-not-match-index-name/237445 "2020-06-17T10:02:00Z")
I am playing with roolover of indices via ILM. I created index template for all printmessage\_charizard\_1 indices: { "order": 0, "index\_patterns": \[ "printmessage\_charizard\_1-\*" \], "se… --- ## [ElasticSearch.net AND NEST - Indexing without storing file content](https://discuss.elastic.co/t/elasticsearch-net-and-nest-indexing-without-storing-file-content/237526)
**Author:** [@kvickery](https://discuss.elastic.co/u/kvickery)\ **Replies:** 2\ **Last updated:** [June 17, 2020, 11:20pm UTC](https://discuss.elastic.co/t/elasticsearch-net-and-nest-indexing-without-storing-file-content/237526 "2020-06-17T23:20:49Z")
I am using the NEST API with Elasticsearch.NET, and Visual Basic. With the latest version of Elasticsearch how can I create an index so that the when a file is indexed the entire file content is not stored on the server… --- ## [How can I add internal subnets to elasticsearch geoip address](https://discuss.elastic.co/t/how-can-i-add-internal-subnets-to-elasticsearch-geoip-address/237487)
**Author:** [@genehunter29009](https://discuss.elastic.co/u/genehunter29009)\ **Replies:** 1\ **Last updated:** [June 17, 2020, 10:37pm UTC](https://discuss.elastic.co/t/how-can-i-add-internal-subnets-to-elasticsearch-geoip-address/237487 "2020-06-17T22:37:39Z")
at one time I had found a link that showed how to post a new ip range to the geoip database in elasticsearch so that I could show the office internal users were logged in from. I cant seem to find that link today. Does a… --- ## [Your socket connection to the sever was not read from or written to within the timeout period](https://discuss.elastic.co/t/your-socket-connection-to-the-sever-was-not-read-from-or-written-to-within-the-timeout-period/237542)
**Author:** [@Annette1](https://discuss.elastic.co/u/Annette1)\ **Replies:** 0\ **Last updated:** [June 17, 2020, 10:11pm UTC](https://discuss.elastic.co/t/your-socket-connection-to-the-sever-was-not-read-from-or-written-to-within-the-timeout-period/237542 "2020-06-17T22:11:13Z")
Logstash to s3 output - getting Your socket connection to the sever was not read from or written to within the timeout period. AWS - explanation The number of bytes set in the "Content-Length" header is more than the ac… --- ## [Kibana discover and dashboard pages are not refreshing automatically](https://discuss.elastic.co/t/kibana-discover-and-dashboard-pages-are-not-refreshing-automatically/236824)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 1\ **Last updated:** [June 17, 2020, 9:34pm UTC](https://discuss.elastic.co/t/kibana-discover-and-dashboard-pages-are-not-refreshing-automatically/236824 "2020-06-17T21:34:22Z")
Hi Team, I installed elk stack version 7.7 and filebeat version 7.6 but the discover and dashboard pages are not reflecting automatically as expected. Can you please help on this to make it work. --- ## [Scripted field in kibana (painless)](https://discuss.elastic.co/t/scripted-field-in-kibana-painless/237358)
**Author:** [@nb03briceno](https://discuss.elastic.co/u/nb03briceno)\ **Replies:** 1\ **Last updated:** [June 17, 2020, 9:32pm UTC](https://discuss.elastic.co/t/scripted-field-in-kibana-painless/237358 "2020-06-17T21:32:30Z")
Hello everyone, I'm trying to create a simple scripted field in my index of ES. Basically, I have a field "attempResult" in my index that could be null when the grok(logstash pattern) does not match, or "Successful", "F… --- ## [Embedded Kibana datepicker](https://discuss.elastic.co/t/embedded-kibana-datepicker/237412)
**Author:** [@nickgregz](https://discuss.elastic.co/u/nickgregz)\ **Replies:** 1\ **Last updated:** [June 17, 2020, 9:26pm UTC](https://discuss.elastic.co/t/embedded-kibana-datepicker/237412 "2020-06-17T21:26:36Z")
When regular Kibana dashboards are shared/embedded the date/time picker is missing but when a Discover dashboards is shared the date/time picker is there. Is there any way to include the date/time picker in shared dashbo… --- ## [Hide index patterns Kibana 7.6](https://discuss.elastic.co/t/hide-index-patterns-kibana-7-6/237417)
**Author:** [@GeorgeCaraus](https://discuss.elastic.co/u/GeorgeCaraus)\ **Replies:** 1\ **Last updated:** [June 17, 2020, 9:18pm UTC](https://discuss.elastic.co/t/hide-index-patterns-kibana-7-6/237417 "2020-06-17T21:18:00Z")
Hello, I have grated access to some users in Kibana 7.6 (security in x-pack) and each user has an index pattern associated to its account. User A can see all the index patterns, but can only access the data from its ow… --- ## [Bug!? Scripted Field Editing is not possible if Name have spaces like "This is a test"](https://discuss.elastic.co/t/bug-scripted-field-editing-is-not-possible-if-name-have-spaces-like-this-is-a-test/237451)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 1\ **Last updated:** [June 17, 2020, 9:16pm UTC](https://discuss.elastic.co/t/bug-scripted-field-editing-is-not-possible-if-name-have-spaces-like-this-is-a-test/237451 "2020-06-17T21:16:51Z")
Hi ES Team, I found a bug (looks like a bug) which occurs to Kibana version 7.3.1 (not tested in other versions) Here is what I did: add a Scripted Field Name: This is a test painless string string Script: if (!doc… --- ## [Slow Kibana after update 6.8.1 -\> 7.6.2](https://discuss.elastic.co/t/slow-kibana-after-update-6-8-1-7-6-2/237491)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 1\ **Last updated:** [June 17, 2020, 9:04pm UTC](https://discuss.elastic.co/t/slow-kibana-after-update-6-8-1-7-6-2/237491 "2020-06-17T21:04:58Z")
Hi everybody, after Elastic Stack updating from 6.8.1 to 7.6.2 we noticed that Kibana is slower to opening dashboards, settings, home and any other tab. Can we improve speed by changing some settings or understand the … --- ## [Geoip to geopoint in logstash kibana 7.7](https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032)
**Author:** [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)\ **Replies:** 3\ **Last updated:** [June 17, 2020, 9:03pm UTC](https://discuss.elastic.co/t/geoip-to-geopoint-in-logstash-kibana-7-7/237032 "2020-06-17T21:03:11Z")
Hi I am using the latest 7.7.1 version of elk stack and my logstash geoip snippet looks as below: if \[log\_type\] == "querylog" { grok{ match =\> {"message" =\> "%{TIMESTAMP\_ISO8601:Activity-Time}%{SPACE}USERID=%{QUOTEDS… --- ## [Use Mutate after KV filter](https://discuss.elastic.co/t/use-mutate-after-kv-filter/237460)
**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\ **Replies:** 3\ **Last updated:** [June 17, 2020, 8:46pm UTC](https://discuss.elastic.co/t/use-mutate-after-kv-filter/237460 "2020-06-17T20:46:04Z")
Is it not possible to use mutate filter after kv filter on fields created by the kv filter? I have key value pairs which get divided by a kv filter. this is working great, the new fields appears on discover menu in kiba… --- ## [How vector based text similarity works under the hood?](https://discuss.elastic.co/t/how-vector-based-text-similarity-works-under-the-hood/237498)
**Author:** [@yash\_budukh](https://discuss.elastic.co/u/yash_budukh)\ **Replies:** 3\ **Last updated:** [June 17, 2020, 7:35pm UTC](https://discuss.elastic.co/t/how-vector-based-text-similarity-works-under-the-hood/237498 "2020-06-17T19:35:32Z")
This blog says that we’ve provided a match\_all query, which means the script will be run over all documents in the index. This is a current limitation of vector similarity in Elasticsearch — vectors can be used for scor… --- ## [Client-options "verify\_certs:false" seems to be ignored](https://discuss.elastic.co/t/client-options-verify-certs-false-seems-to-be-ignored/237529)
**Author:** [@micas](https://discuss.elastic.co/u/micas)\ **Replies:** 0\ **Last updated:** [June 17, 2020, 7:34pm UTC](https://discuss.elastic.co/t/client-options-verify-certs-false-seems-to-be-ignored/237529 "2020-06-17T19:34:57Z")
I seem to be getting this same problem as the issue https://github.com/elastic/rally/issues/472 with esrally 1.4.1 and 2.0.0 esrally --pipeline benchmark-only --track=nyc\_taxis --challenge append-no-conflicts-index-only… --- ## [Querying analytics exploration](https://discuss.elastic.co/t/querying-analytics-exploration/232977)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 7\ **Last updated:** [June 17, 2020, 7:24pm UTC](https://discuss.elastic.co/t/querying-analytics-exploration/232977 "2020-06-17T19:24:28Z")
Hello, Elastic 7.6.1 Queries in the analytics explorer does not seem to behave similar to what I'm used to? Tried escaping =\> process.parent.executable : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" … --- ## [Anomaly Detection Kibana skipping data](https://discuss.elastic.co/t/anomaly-detection-kibana-skipping-data/235200)
**Author:** [@alexisdrnt](https://discuss.elastic.co/u/alexisdrnt)\ **Replies:** 11\ **Last updated:** [June 17, 2020, 7:17pm UTC](https://discuss.elastic.co/t/anomaly-detection-kibana-skipping-data/235200 "2020-06-17T19:17:52Z")
I'm running a ML job with a simple low\_count detector, with a daily bucket, and I have an hourly frequency for my datafeed. Everything seem to work correctly, however sometimes for a certain reason some data get skipped… --- ## [Logstash to Elastic Cloud error 400](https://discuss.elastic.co/t/logstash-to-elastic-cloud-error-400/237524)
**Author:** [@zee67](https://discuss.elastic.co/u/zee67)\ **Replies:** 0\ **Last updated:** [June 17, 2020, 7:10pm UTC](https://discuss.elastic.co/t/logstash-to-elastic-cloud-error-400/237524 "2020-06-17T19:10:18Z")
Trying to connect Logstash to Elastic Cloud but getting error 400. My Logstash config is below, any help appreciated. input { tcp { port =\> 9600 } } filter { grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:sysl… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1990) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1992)