# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=315 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 316 --- ## [How to fix Index Lifecycle Rollover Alias is empty or not defined](https://discuss.elastic.co/t/how-to-fix-index-lifecycle-rollover-alias-is-empty-or-not-defined/351675)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 28\ **Last updated:** [February 4, 2024, 1:10am UTC](https://discuss.elastic.co/t/how-to-fix-index-lifecycle-rollover-alias-is-empty-or-not-defined/351675 "2024-02-04T01:10:54Z")
I've been running this (uses date math) but it doesn't seem to be working: PUT /%3Cos-linux-%7Bnow%2Fd%7D-000001%3E { "aliases": { "os-linux": { "is\_write\_index": true } } } which pr… --- ## [Elastic hive configuration](https://discuss.elastic.co/t/elastic-hive-configuration/352458)
**Author:** [@John\_Papadopoulos](https://discuss.elastic.co/u/John_Papadopoulos)\ **Replies:** 0\ **Last updated:** [February 3, 2024, 12:47pm UTC](https://discuss.elastic.co/t/elastic-hive-configuration/352458 "2024-02-03T12:47:37Z")
Hello. What i have is elastic running in a host windows server and i want to install hive from a WSL ubuntu which will be hosted in the windows server. My elastic config file only accepts https connections. SO i have set… --- ## [Monitoring ES JVM with jolokia javaagent](https://discuss.elastic.co/t/monitoring-es-jvm-with-jolokia-javaagent/352454)
**Author:** [@Kalpesh\_Shekhat](https://discuss.elastic.co/u/Kalpesh_Shekhat)\ **Replies:** 0\ **Last updated:** [February 3, 2024, 9:39am UTC](https://discuss.elastic.co/t/monitoring-es-jvm-with-jolokia-javaagent/352454 "2024-02-03T09:39:38Z")
Hi, I want to monitor ES JVM using jolokia java agent. I have configured below options in /etc/elasticsearch/jvm.options.d/jmx.options -javaagent:/opt/jolokia/jolokia-agent-jvm-javaagent.jar=port=8081,host=localhost a… --- ## [Does elastic have a timestamp field as part of metadata as to when was the document written to index?](https://discuss.elastic.co/t/does-elastic-have-a-timestamp-field-as-part-of-metadata-as-to-when-was-the-document-written-to-index/352449)
**Author:** [@Rachana\_Maniyar](https://discuss.elastic.co/u/Rachana_Maniyar)\ **Replies:** 1\ **Last updated:** [February 3, 2024, 2:32am UTC](https://discuss.elastic.co/t/does-elastic-have-a-timestamp-field-as-part-of-metadata-as-to-when-was-the-document-written-to-index/352449 "2024-02-03T02:32:28Z")
Does elastic have a timestamp field as part of metadata as to when was the document written to index ? current meta fields that i see are only these - I have a usecase where the timestamps in the records could be diffe… --- ## [Logstash for application.log + application.log.1.gz](https://discuss.elastic.co/t/logstash-for-application-log-application-log-1-gz/351577)
**Author:** [@RavaliJ](https://discuss.elastic.co/u/RavaliJ)\ **Replies:** 5\ **Last updated:** [February 2, 2024, 8:59pm UTC](https://discuss.elastic.co/t/logstash-for-application-log-application-log-1-gz/351577 "2024-02-02T20:59:08Z")
Hi, I have Rolling file appenders in my java code which creates log files like - application.log, application.log.1.gz,application.log.2.gz so on. I want to index all of these and make sure messages from log files are r… --- ## [Problems Joining a Cluster](https://discuss.elastic.co/t/problems-joining-a-cluster/351904)
**Author:** [@bryanrood](https://discuss.elastic.co/u/bryanrood)\ **Replies:** 32\ **Last updated:** [February 2, 2024, 8:03pm UTC](https://discuss.elastic.co/t/problems-joining-a-cluster/351904 "2024-02-02T20:03:04Z")
Hi Everyone, I think I posted my first post in the wrong elasticsearch category. I'm trying to get my new cluster up and working and I'm really struggling with order of operation. I have tried a whole bunch of things bu… --- ## [Elasticsearch issue when indexing nanoseconds](https://discuss.elastic.co/t/elasticsearch-issue-when-indexing-nanoseconds/352345)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 2\ **Last updated:** [February 2, 2024, 7:57pm UTC](https://discuss.elastic.co/t/elasticsearch-issue-when-indexing-nanoseconds/352345 "2024-02-02T19:57:32Z")
Hi Team, Could not able to index the nanaseconds? PUT \_template/datenanos { "index\_patterns": \["datenanos"\], "mappings": { "properties": { "timestamp": { "type": "date\_nanos" } } } } … --- ## [How to group documents and show latest document per group](https://discuss.elastic.co/t/how-to-group-documents-and-show-latest-document-per-group/351165)
**Author:** [@mrusch](https://discuss.elastic.co/u/mrusch)\ **Replies:** 2\ **Last updated:** [February 2, 2024, 7:55pm UTC](https://discuss.elastic.co/t/how-to-group-documents-and-show-latest-document-per-group/351165 "2024-02-02T19:55:11Z")
Scenario: We have a third party tool for server patching and it sucks when it comes to reporting. So I want to build a dashboard in Kibana which shows patch status of thousands of servers. Available data so far per serv… --- ## [How to do a distance sort over entities which each have multiple locations](https://discuss.elastic.co/t/how-to-do-a-distance-sort-over-entities-which-each-have-multiple-locations/352439)
**Author:** [@BradDotyBWell](https://discuss.elastic.co/u/BradDotyBWell)\ **Replies:** 12\ **Last updated:** [February 2, 2024, 7:30pm UTC](https://discuss.elastic.co/t/how-to-do-a-distance-sort-over-entities-which-each-have-multiple-locations/352439 "2024-02-02T19:30:50Z")
Your product is simple-minded when it comes to distance searches. We have organizations who have multiple locations each. When a user does a search, we MUST use the closest location for each org to that user. Your pro… --- ## [Half\_float for Dense vector field](https://discuss.elastic.co/t/half-float-for-dense-vector-field/352387)
**Author:** [@mwon](https://discuss.elastic.co/u/mwon)\ **Replies:** 2\ **Last updated:** [February 2, 2024, 6:42pm UTC](https://discuss.elastic.co/t/half-float-for-dense-vector-field/352387 "2024-02-02T18:42:58Z")
Hi, Currently, Dense vector field is restricted to float (32bit) or byte (int8). Is there any plan to add half\_float option? Thanks --- ## [Pagination on logstash http filter](https://discuss.elastic.co/t/pagination-on-logstash-http-filter/352320)
**Author:** [@Johnson\_will](https://discuss.elastic.co/u/Johnson_will)\ **Replies:** 7\ **Last updated:** [February 2, 2024, 6:40pm UTC](https://discuss.elastic.co/t/pagination-on-logstash-http-filter/352320 "2024-02-02T18:40:15Z")
I am generating a token by using http\_poller input plugin, using the generated token in http filter part and splitting the fields from results, Can anyone please suggest me on Pagination. As the api results are around 4… --- ## [Agent 8.12.0 Standalone ignoring agent.logging settings](https://discuss.elastic.co/t/agent-8-12-0-standalone-ignoring-agent-logging-settings/352441)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 0\ **Last updated:** [February 2, 2024, 6:33pm UTC](https://discuss.elastic.co/t/agent-8-12-0-standalone-ignoring-agent-logging-settings/352441 "2024-02-02T18:33:23Z")
I have these settings logging: level: error files: name: elastic-agent keepfiles: 7 metrics: enabled: false logging.level:error is not working. I am still seeing info and warning level logs. … --- ## [Filter fields in TVSB Data Tables](https://discuss.elastic.co/t/filter-fields-in-tvsb-data-tables/352434)
**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\ **Replies:** 0\ **Last updated:** [February 2, 2024, 5:36pm UTC](https://discuss.elastic.co/t/filter-fields-in-tvsb-data-tables/352434 "2024-02-02T17:36:45Z")
Hello, I was wondering if there's a way to make TVSB fields filterable? I have created this table in TVSB: The fields are not filterable. Why did I choose this method? The reason I didn't use lens, is because I w… --- ## [Access RBAC features on Kibana without having to enable SSL on ElasticSearch](https://discuss.elastic.co/t/access-rbac-features-on-kibana-without-having-to-enable-ssl-on-elasticsearch/352234)
**Author:** [@Albatross](https://discuss.elastic.co/u/Albatross)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 5:33pm UTC](https://discuss.elastic.co/t/access-rbac-features-on-kibana-without-having-to-enable-ssl-on-elasticsearch/352234 "2024-02-02T17:33:33Z")
I have a multi-node ES Cluster with mandatory in-house mTLS capabilities between different nodes hence I do not want to enable SSL on Elastic Search. However, I would like to take advantage of the RBAC features available… --- ## [Aggregate query after filter](https://discuss.elastic.co/t/aggregate-query-after-filter/352428)
**Author:** [@akashmaharana93](https://discuss.elastic.co/u/akashmaharana93)\ **Replies:** 2\ **Last updated:** [February 2, 2024, 5:29pm UTC](https://discuss.elastic.co/t/aggregate-query-after-filter/352428 "2024-02-02T17:29:38Z")
I want the count of documents post filter in a dataset. So I am invoking a DSL query to do this but not getting any result. For ex : Count number of error messages in logs for a given date range. My query for fetching … --- ## [How to exclude a template from Elasticsearch Auto index creation](https://discuss.elastic.co/t/how-to-exclude-a-template-from-elasticsearch-auto-index-creation/352392)
**Author:** [@Veysel\_yuksel](https://discuss.elastic.co/u/Veysel_yuksel)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 5:16pm UTC](https://discuss.elastic.co/t/how-to-exclude-a-template-from-elasticsearch-auto-index-creation/352392 "2024-02-02T17:16:29Z")
Hello everyone, I have beats index template in my cluster. Auto index creation (\*) is enabled for all templates in this cluster. And I decided to setup new cluster for beats data. But I need to prevent access to old clu… --- ## [Which is the best suggested to be used either Java API client or Java High Level Rest Client](https://discuss.elastic.co/t/which-is-the-best-suggested-to-be-used-either-java-api-client-or-java-high-level-rest-client/352355)
**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\ **Replies:** 4\ **Last updated:** [February 2, 2024, 4:57pm UTC](https://discuss.elastic.co/t/which-is-the-best-suggested-to-be-used-either-java-api-client-or-java-high-level-rest-client/352355 "2024-02-02T16:57:31Z")
Hi Team, Can you please help in identifying the best one to use among Java API Client and Java High Level Rest Client (as I can see HLRC is deprecated). Also, just wanted to know whether HLRC is permanently deprecated … --- ## [Painless scripted field with nested IF statment](https://discuss.elastic.co/t/painless-scripted-field-with-nested-if-statment/352091)
**Author:** [@auato](https://discuss.elastic.co/u/auato)\ **Replies:** 0\ **Last updated:** [January 30, 2024, 1:20pm UTC](https://discuss.elastic.co/t/painless-scripted-field-with-nested-if-statment/352091 "2024-01-30T13:20:11Z")
I have these two working scripted fields: def M3 = doc\['obj'\].value.splitOnToken('\_'); return M3.length \>= 4 ? M3\[3\] : null; def M2 = doc\['obj'\].value.splitOnToken('\_'); return M2.length \>= 4 ? M2\[2\] : null; that I wo… --- ## [S3 Repository](https://discuss.elastic.co/t/s3-repository/352282)
**Author:** [@Haytham\_Shammout](https://discuss.elastic.co/u/Haytham_Shammout)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 4:43pm UTC](https://discuss.elastic.co/t/s3-repository/352282 "2024-02-02T16:43:34Z")
Hello Dears, We are new to S3 repository and taking snapshots in ELK, we faced a case as below appreciate your support on it. First of all we implement policy to take snapshots as below SC. after taking 2 snapshots… --- ## [Taking average of a numeric field and customise it](https://discuss.elastic.co/t/taking-average-of-a-numeric-field-and-customise-it/352179)
**Author:** [@sharmavipul92](https://discuss.elastic.co/u/sharmavipul92)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 4:36pm UTC](https://discuss.elastic.co/t/taking-average-of-a-numeric-field-and-customise-it/352179 "2024-02-02T16:36:50Z")
Hi I have a duration field of type number having duration in milliseconds. I want to take the average of it, and show it in kibana dashboard metrics as dd:hh:mm:ss format, or basically run a script over the average valu… --- ## [Different outputs when using kibana inspect and dashboard?](https://discuss.elastic.co/t/different-outputs-when-using-kibana-inspect-and-dashboard/351719)
**Author:** [@moomoo21](https://discuss.elastic.co/u/moomoo21)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 4:36pm UTC](https://discuss.elastic.co/t/different-outputs-when-using-kibana-inspect-and-dashboard/351719 "2024-02-02T16:36:35Z")
Hello, I am having some trouble with Elasticsearch and kibana, I am able to use the inspect element to get the raw request command of my desired query in Elasticsearch: { "version": true, "size": 500, "sort": \[ … --- ## [Disable ES|QL in kibana.yml for multiple spaces](https://discuss.elastic.co/t/disable-es-ql-in-kibana-yml-for-multiple-spaces/352281)
**Author:** [@toki0709](https://discuss.elastic.co/u/toki0709)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 4:33pm UTC](https://discuss.elastic.co/t/disable-es-ql-in-kibana-yml-for-multiple-spaces/352281 "2024-02-02T16:33:01Z")
Hi, for multiple spcaes I would to like to disable ES|QL feature. I could disable from advance settings but would like to do it from kibana.yml. Could any one give me an hint how to do so? Thanks in advance … --- ## [Table visualization in a custom plugin](https://discuss.elastic.co/t/table-visualization-in-a-custom-plugin/352139)
**Author:** [@JSFern83](https://discuss.elastic.co/u/JSFern83)\ **Replies:** 3\ **Last updated:** [February 2, 2024, 4:20pm UTC](https://discuss.elastic.co/t/table-visualization-in-a-custom-plugin/352139 "2024-02-02T16:20:55Z")
Hi All, I am trying to bring the following dashboard into the custom plugin that I am working on. This dashboard is for displaying a set of posts in table format. Below is the saved\_object structure for this particu… --- ## [Bug report regarding time zone in Kibana](https://discuss.elastic.co/t/bug-report-regarding-time-zone-in-kibana/352366)
**Author:** [@VijayIQA](https://discuss.elastic.co/u/VijayIQA)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 4:20pm UTC](https://discuss.elastic.co/t/bug-report-regarding-time-zone-in-kibana/352366 "2024-02-02T16:20:27Z")
Hi Team, Deployed Kibana 8.12.0 and Elasticsearch 8.12.0 as Docker container. for that used custom docker file to install tzdata here is the Docker file USER root RUN apt-get update && apt-get install -y tzdata --no-in… --- ## [Filebeat and Okta System Logs HA scenario](https://discuss.elastic.co/t/filebeat-and-okta-system-logs-ha-scenario/352012)
**Author:** [@g.vecchi](https://discuss.elastic.co/u/g.vecchi)\ **Replies:** 2\ **Last updated:** [February 2, 2024, 4:16pm UTC](https://discuss.elastic.co/t/filebeat-and-okta-system-logs-ha-scenario/352012 "2024-02-02T16:16:06Z")
Hi guys, I need to send Okta System Logs to our Elastic Cloud tenant and I'm looking for a scenario that satisfies active-active or active-passive high availability configuration. In case of the active-active one, 2 co… --- ## [Cannot run curator from cron in docker container as the elasticsearch user](https://discuss.elastic.co/t/cannot-run-curator-from-cron-in-docker-container-as-the-elasticsearch-user/352039)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 10\ **Last updated:** [February 2, 2024, 4:08pm UTC](https://discuss.elastic.co/t/cannot-run-curator-from-cron-in-docker-container-as-the-elasticsearch-user/352039 "2024-02-02T16:08:46Z")
In my 8.8.2 Elasticsearch container, I have this cron job in the cron table: \* 1 \* \* \* su elasticsearch /bin/bash -c "export ES\_CURATOR\_USERNAME=curator ES\_CURATOR\_PASSWORD=xxxxx; /usr/local/bin/curator --config /config… --- ## [How to apply same filter on different pages freely in Kibana Canvas in the same index?](https://discuss.elastic.co/t/how-to-apply-same-filter-on-different-pages-freely-in-kibana-canvas-in-the-same-index/351624)
**Author:** [@kpj2024](https://discuss.elastic.co/u/kpj2024)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 4:03pm UTC](https://discuss.elastic.co/t/how-to-apply-same-filter-on-different-pages-freely-in-kibana-canvas-in-the-same-index/351624 "2024-02-02T16:03:26Z")
Hi everyone, I need some help here, please. In Kibana canvas, version 8.3.3, I have 2 pages on the workpad and I use the same document index for both. On the first page I have a filter dropdown control and a table, ju… --- ## [Data inconsistencty shown in ELK](https://discuss.elastic.co/t/data-inconsistencty-shown-in-elk/350963)
**Author:** [@Ravi\_Pattar](https://discuss.elastic.co/u/Ravi_Pattar)\ **Replies:** 4\ **Last updated:** [February 2, 2024, 3:50pm UTC](https://discuss.elastic.co/t/data-inconsistencty-shown-in-elk/350963 "2024-02-02T15:50:22Z")
Hello, I am running with ELK version 7.17.15. # curl -X GET "localhost:9200" { "name" : "ip", "cluster\_name" : "name", "cluster\_uuid" : "uudi", "version" : { "number" : "7.17.15", "build\_flavor" : "defa… --- ## [Limit in index document filter using Roles](https://discuss.elastic.co/t/limit-in-index-document-filter-using-roles/351794)
**Author:** [@stobbe](https://discuss.elastic.co/u/stobbe)\ **Replies:** 0\ **Last updated:** [January 25, 2024, 11:40am UTC](https://discuss.elastic.co/t/limit-in-index-document-filter-using-roles/351794 "2024-01-25T11:40:49Z")
In a role I added a document filter on an index like below:: { "bool": { "filter": \[ { "terms": { "data\_stream.dataset": \["1","2","3","4","5","6","7","8","9","0"\] } … --- ## [Temporarily change the display time zone for searches in kibana](https://discuss.elastic.co/t/temporarily-change-the-display-time-zone-for-searches-in-kibana/352337)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [February 2, 2024, 3:40pm UTC](https://discuss.elastic.co/t/temporarily-change-the-display-time-zone-for-searches-in-kibana/352337 "2024-02-02T15:40:06Z")
We have kibana setup to display timestamp in local time (+1200/1300). Occasionally we need to send search result to external parties on other time zone. When doing this I like to have the timestamps in UTC -- everyone … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=314) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=316)