# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=681 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 682 --- ## [Where did the time picker in discover went?](https://discuss.elastic.co/t/where-did-the-time-picker-in-discover-went/317908)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 4\ **Last updated:** [December 5, 2022, 9:21am UTC](https://discuss.elastic.co/t/where-did-the-time-picker-in-discover-went/317908 "2022-12-05T09:21:02Z")
Hi, I made a fresh install of kibana 8.4.3. Where did the time picker went? Also in Discover panel I have plenty of usecases where I need to specify a time range. Thanks a lot, Andreas --- ## [Collect all logs from a Windows host with Winlogbeat](https://discuss.elastic.co/t/collect-all-logs-from-a-windows-host-with-winlogbeat/322278)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 0\ **Last updated:** [January 2, 2023, 3:40am UTC](https://discuss.elastic.co/t/collect-all-logs-from-a-windows-host-with-winlogbeat/322278 "2023-01-02T03:40:20Z")
Hi, Does anyone know if there is a default config to collect everything available from a Windows host? We are currently running configs to collect specific logs such as System, Security; however we would like to collec… --- ## [Delete Kibana index](https://discuss.elastic.co/t/delete-kibana-index/320405)
**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\ **Replies:** 2\ **Last updated:** [December 5, 2022, 2:39am UTC](https://discuss.elastic.co/t/delete-kibana-index/320405 "2022-12-05T02:39:53Z")
Hi , a new index gets created , every month , so for this december one index got created, if I delete the index and re run , will a new index gets created for December. Note: A new index gets created, if a bot runs on f… --- ## [Alerts for missing results during the last week](https://discuss.elastic.co/t/alerts-for-missing-results-during-the-last-week/322085)
**Author:** [@adiad](https://discuss.elastic.co/u/adiad)\ **Replies:** 1\ **Last updated:** [January 2, 2023, 12:19am UTC](https://discuss.elastic.co/t/alerts-for-missing-results-during-the-last-week/322085 "2023-01-02T00:19:23Z")
Hi Would it be possible to create a watcher using two different overlapping time ranges and get the delta (subtract the results and get only those that are missing) I'm trying to create an alert that checks my last wee… --- ## [Fluentd cannot connect to Elasticsearch](https://discuss.elastic.co/t/fluentd-cannot-connect-to-elasticsearch/322269)
**Author:** [@Zeynal\_Hajili](https://discuss.elastic.co/u/Zeynal_Hajili)\ **Replies:** 13\ **Last updated:** [January 1, 2023, 9:08pm UTC](https://discuss.elastic.co/t/fluentd-cannot-connect-to-elasticsearch/322269 "2023-01-01T21:08:29Z")
Hello everybody, First of all, happy new year to everybody :slight\_smile: I need your help with the ELK stack. I have installed Elastic , Kibana and Fluentd with HelmChart. I have healthy cluster of Elasticsearch ,I … --- ## [Kibana gone wrong](https://discuss.elastic.co/t/kibana-gone-wrong/320418)
**Author:** [@Rohan\_Dina\_Nath](https://discuss.elastic.co/u/Rohan_Dina_Nath)\ **Replies:** 1\ **Last updated:** [December 4, 2022, 9:12pm UTC](https://discuss.elastic.co/t/kibana-gone-wrong/320418 "2022-12-04T21:12:22Z")
Hi all, When displaying in Kibana I am getting this error. I am not sure if this is the right place but any help would be much appriciated. \[esaggs\] \> EsError: index \[.async-search\] blocked by: \[TOO\_MANY\_REQUESTS/12/di… --- ## [\[Elastic 8.5.2\] bug in ingestion pipeline?](https://discuss.elastic.co/t/elastic-8-5-2-bug-in-ingestion-pipeline/322231)
**Author:** [@Pierre\_LANCASTRE](https://discuss.elastic.co/u/Pierre_LANCASTRE)\ **Replies:** 2\ **Last updated:** [January 1, 2023, 7:12pm UTC](https://discuss.elastic.co/t/elastic-8-5-2-bug-in-ingestion-pipeline/322231 "2023-01-01T19:12:57Z")
Hi, For the context, I ve got an Elasticagent on my rsyslog which forwards raw udp log to my Elasticstack (running as standalone). I've defined a K-V action in the pipeline to split the message and create the different… --- ## [Rsyslog is not forwarding logs to elasticsearch](https://discuss.elastic.co/t/rsyslog-is-not-forwarding-logs-to-elasticsearch/322266)
**Author:** [@Aksel](https://discuss.elastic.co/u/Aksel)\ **Replies:** 6\ **Last updated:** [January 1, 2023, 6:37pm UTC](https://discuss.elastic.co/t/rsyslog-is-not-forwarding-logs-to-elasticsearch/322266 "2023-01-01T18:37:25Z")
I'm trying to configure rsyslog to send logs to logstash and then forward them to elasticsearch. I have create a config file /etc/rsyslog.d/60-output.conf with the following content: \*.\* @localhost:10514;json-template … --- ## [Shards Failure - Kibana Dashboard](https://discuss.elastic.co/t/shards-failure-kibana-dashboard/318287)
**Author:** [@balaa](https://discuss.elastic.co/u/balaa)\ **Replies:** 5\ **Last updated:** [December 4, 2022, 9:06pm UTC](https://discuss.elastic.co/t/shards-failure-kibana-dashboard/318287 "2022-12-04T21:06:29Z")
Hi Team, We are are using ELK 7.16.3 version and when ever the timeframe is more than 30 days i am getting the shards failure in my dashboard. node\_disconnected\_exception at shard 0 index sd-daily-20220422-00105-000… --- ## [What datatype to select](https://discuss.elastic.co/t/what-datatype-to-select/321847)
**Author:** [@Hasan](https://discuss.elastic.co/u/Hasan)\ **Replies:** 7\ **Last updated:** [January 1, 2023, 3:54pm UTC](https://discuss.elastic.co/t/what-datatype-to-select/321847 "2023-01-01T15:54:24Z")
Hello, while importing my dataset I have this column which consist of numerical and string values. When setting the datatype in mappings to keyword its not showing the numerical values and by changing it to double its sh… --- ## [Elasticsearch output plugin ssl verification](https://discuss.elastic.co/t/elasticsearch-output-plugin-ssl-verification/322264)
**Author:** [@Mahdi\_Moazami](https://discuss.elastic.co/u/Mahdi_Moazami)\ **Replies:** 2\ **Last updated:** [January 1, 2023, 2:51pm UTC](https://discuss.elastic.co/t/elasticsearch-output-plugin-ssl-verification/322264 "2023-01-01T14:51:13Z")
Hi elastic team I've configured a pipeline containing a file input, some filters and elasticsearch output. the target es server is secured by ssl and the certificates are generated using the the way explained in docs. n… --- ## [Integrate Fortigate with Logstash](https://discuss.elastic.co/t/integrate-fortigate-with-logstash/322262)
**Author:** [@khaled7](https://discuss.elastic.co/u/khaled7)\ **Replies:** 0\ **Last updated:** [January 1, 2023, 12:51pm UTC](https://discuss.elastic.co/t/integrate-fortigate-with-logstash/322262 "2023-01-01T12:51:56Z")
Hello Team can anyone tell me a way or video explain how to integrate fortigate logs with logstash and elasticsearch and a way to make it appear in kibana i have elasticsearch 7.17.6 Kibana 7.17.6 Logstash 7.17.6 T… --- ## [Subtract timestamps from logs basis a field and show as a view on dashboard](https://discuss.elastic.co/t/subtract-timestamps-from-logs-basis-a-field-and-show-as-a-view-on-dashboard/317718)
**Author:** [@Murali\_Y](https://discuss.elastic.co/u/Murali_Y)\ **Replies:** 3\ **Last updated:** [November 7, 2022, 6:58am UTC](https://discuss.elastic.co/t/subtract-timestamps-from-logs-basis-a-field-and-show-as-a-view-on-dashboard/317718 "2022-11-07T06:58:22Z")
Apologies for reposting this. As a newbie to Kiabana, I couldn't achieve the earlier proposed solution from Kibana views. Can someone please guide me how and where to add equation or add code to achieve below? Any snippe… --- ## [Upload more then one log in Kibana](https://discuss.elastic.co/t/upload-more-then-one-log-in-kibana/319859)
**Author:** [@g.bas](https://discuss.elastic.co/u/g.bas)\ **Replies:** 2\ **Last updated:** [December 4, 2022, 3:10pm UTC](https://discuss.elastic.co/t/upload-more-then-one-log-in-kibana/319859 "2022-12-04T15:10:14Z")
Hello I have a question I am new to the whole topic and now have the problem. That I can only upload a log for a visualization. So my concrete question is how I can load more than one log file on the one hand when creati… --- ## [How to get api url to perform this action from my mobile app](https://discuss.elastic.co/t/how-to-get-api-url-to-perform-this-action-from-my-mobile-app/318254)
**Author:** [@Gilles\_GNANAGBE](https://discuss.elastic.co/u/Gilles_GNANAGBE)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 6:01am UTC](https://discuss.elastic.co/t/how-to-get-api-url-to-perform-this-action-from-my-mobile-app/318254 "2022-11-07T06:01:41Z")
Example : DELETE index PUT index/\_doc/1 { "foo": "bar" } GET index/\_search { "query": { "match": { "foo": "bar" } } } from what api url can i perform this from my mobile app ? I'm very new in thi… --- ## [Kibana Visualization Bar/Line color not stable](https://discuss.elastic.co/t/kibana-visualization-bar-line-color-not-stable/316054)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [October 10, 2022, 5:37am UTC](https://discuss.elastic.co/t/kibana-visualization-bar-line-color-not-stable/316054 "2022-10-10T05:37:52Z")
Hello All, I want to make a visual with stable bar colors but colors are changing once i add those visuals on dashboard. And also they change when i try to change them from dashboard or from inside the visual. Is there … --- ## [Cisco FTD cisco.ftd.security Unknown Field Search](https://discuss.elastic.co/t/cisco-ftd-cisco-ftd-security-unknown-field-search/320814)
**Author:** [@cmenuey](https://discuss.elastic.co/u/cmenuey)\ **Replies:** 2\ **Last updated:** [December 31, 2022, 6:27pm UTC](https://discuss.elastic.co/t/cisco-ftd-cisco-ftd-security-unknown-field-search/320814 "2022-12-31T18:27:35Z")
Hi all, I'm trying to figure out the best way I can build some dashboards or perform searches against the data field cisco.ftd.security from the Cisco FTD integration. When I attempt to search any of the terms in this f… --- ## [Elastic search: running with the root UID is forbidden](https://discuss.elastic.co/t/elastic-search-running-with-the-root-uid-is-forbidden/322221)
**Author:** [@gopublog](https://discuss.elastic.co/u/gopublog)\ **Replies:** 2\ **Last updated:** [December 31, 2022, 6:22pm UTC](https://discuss.elastic.co/t/elastic-search-running-with-the-root-uid-is-forbidden/322221 "2022-12-31T18:22:41Z")
I am trying to install elasticsearch in my aks cluster and it is failing. I have followed the below steps: root@developer1:~/elasticsearch# git clone https://github.com/elastic/helm-charts.git Cloning into 'helm-charts… --- ## [Fleet Data streams is No data streams](https://discuss.elastic.co/t/fleet-data-streams-is-no-data-streams/318283)
**Author:** [@eezzlife](https://discuss.elastic.co/u/eezzlife)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 3:20am UTC](https://discuss.elastic.co/t/fleet-data-streams-is-no-data-streams/318283 "2022-11-07T03:20:08Z")
Hello every one! I'm having some issues, here are my installation steps Install Elasticsearch with Docker on sever A. .env # Password for the 'elastic' user (at least 6 characters) ELASTIC\_PASSWORD=urpassword # Pas… --- ## [Elasticsearch connection problem in elassandra](https://discuss.elastic.co/t/elasticsearch-connection-problem-in-elassandra/322236)
**Author:** [@priyankaksa](https://discuss.elastic.co/u/priyankaksa)\ **Replies:** 3\ **Last updated:** [December 31, 2022, 2:48pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-problem-in-elassandra/322236 "2022-12-31T14:48:36Z")
I am new to Elassandra. I want to make setup(windows 10) and hit queries from Elasticsearch url. I have installed Elassandra and start it is working fine but am not able to access Elasticsearch url. I also tried to c… --- ## [How to give shorter hit a higher score?](https://discuss.elastic.co/t/how-to-give-shorter-hit-a-higher-score/322245)
**Author:** [@JohnDope](https://discuss.elastic.co/u/JohnDope)\ **Replies:** 0\ **Last updated:** [December 31, 2022, 2:07pm UTC](https://discuss.elastic.co/t/how-to-give-shorter-hit-a-higher-score/322245 "2022-12-31T14:07:10Z")
I am building a ngram search example with ES. Is is possible to take account the shortest length of all the hits? Here's an example: Documents: {"aliases": \["ElonMuskTesla", "ElonTesla"\]} {"aliases": \["ElonMusk"\]} De… --- ## [Elasticsearch cluster on AWS ECS with discovery-ec2 fails to start after version 8.1.3](https://discuss.elastic.co/t/elasticsearch-cluster-on-aws-ecs-with-discovery-ec2-fails-to-start-after-version-8-1-3/322206)
**Author:** [@RaJiska](https://discuss.elastic.co/u/RaJiska)\ **Replies:** 1\ **Last updated:** [December 31, 2022, 12:48pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-on-aws-ecs-with-discovery-ec2-fails-to-start-after-version-8-1-3/322206 "2022-12-31T12:48:44Z")
Hi, EDIT: After more tests, this issue appears from version 8.2.0 onwards, while 8.1.3 seems to work as expected. Looking at the change log, I can see the following change for version 8.2.0 Support IMDSv2 for EC2 Discov… --- ## [Color code table row and graph bar depending depending on a threshold](https://discuss.elastic.co/t/color-code-table-row-and-graph-bar-depending-depending-on-a-threshold/318233)
**Author:** [@Murali\_Y](https://discuss.elastic.co/u/Murali_Y)\ **Replies:** 5\ **Last updated:** [November 6, 2022, 5:25pm UTC](https://discuss.elastic.co/t/color-code-table-row-and-graph-bar-depending-depending-on-a-threshold/318233 "2022-11-06T17:25:59Z")
Referring below/attached table screenshot: We want to show different color coding of a bar graph (or) a row item in a table depending on a threshold value. Threshold is not same for processes mentioned under 'processes… --- ## [List of Active indexes being written to](https://discuss.elastic.co/t/list-of-active-indexes-being-written-to/322140)
**Author:** [@deeksha](https://discuss.elastic.co/u/deeksha)\ **Replies:** 1\ **Last updated:** [December 31, 2022, 6:32am UTC](https://discuss.elastic.co/t/list-of-active-indexes-being-written-to/322140 "2022-12-31T06:32:06Z")
How can I get what indexes are being actively written to in my Elasticsearch cluster. --- ## [Kibana is Not Loading Properly using Nginx reverse Proxy](https://discuss.elastic.co/t/kibana-is-not-loading-properly-using-nginx-reverse-proxy/317098)
**Author:** [@sugriv\_1605](https://discuss.elastic.co/u/sugriv_1605)\ **Replies:** 2\ **Last updated:** [November 6, 2022, 3:16pm UTC](https://discuss.elastic.co/t/kibana-is-not-loading-properly-using-nginx-reverse-proxy/317098 "2022-11-06T15:16:47Z")
Hi, I am hosting Kibana using Nginx reverse proxy but the in browser getting 404 /spaces/enter output. Kibana is running on http://IP:5601 Elasticsearch Open on http://IP:9200 I am able to open Kibana on my servers u… --- ## [Logstash pipeline High avliliblity](https://discuss.elastic.co/t/logstash-pipeline-high-avliliblity/321965)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 13\ **Last updated:** [December 31, 2022, 1:30am UTC](https://discuss.elastic.co/t/logstash-pipeline-high-avliliblity/321965 "2022-12-31T01:30:02Z")
hello Everyone, How to achieve The Logstash Pipeline HA? I have 3 Nodes if any node opening count of pipeline after that the node is down what happen? what is the solutions to achieve the HA? --- ## [Windows Mass Beats Deployment](https://discuss.elastic.co/t/windows-mass-beats-deployment/322055)
**Author:** [@Nathan.Arnall](https://discuss.elastic.co/u/Nathan.Arnall)\ **Replies:** 3\ **Last updated:** [December 31, 2022, 12:37am UTC](https://discuss.elastic.co/t/windows-mass-beats-deployment/322055 "2022-12-31T00:37:08Z")
Powershell script for deploying beats modules. Can be used with group policy. Hopefully this can be of use to anyone else starting out with the ELK stack. $beats = "Metricbeat", "Heartbeat", "Auditbeat", "Winlogbeat", … --- ## [Could not retrieve Elasticsearch deprecation issues](https://discuss.elastic.co/t/could-not-retrieve-elasticsearch-deprecation-issues/315274)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 4\ **Last updated:** [November 5, 2022, 4:31pm UTC](https://discuss.elastic.co/t/could-not-retrieve-elasticsearch-deprecation-issues/315274 "2022-11-05T16:31:00Z")
I've got a test cluster with a separate monitoring cluster and a production cluster with a separate monitoring cluster. "Review deprecated settings and resolve issues" in the Kibana Upgrade Assistant works on all four cl… --- ## [Aggregate with dynamic time range](https://discuss.elastic.co/t/aggregate-with-dynamic-time-range/322205)
**Author:** [@pedro123](https://discuss.elastic.co/u/pedro123)\ **Replies:** 1\ **Last updated:** [December 30, 2022, 11:54pm UTC](https://discuss.elastic.co/t/aggregate-with-dynamic-time-range/322205 "2022-12-30T23:54:07Z")
Hello, I am trying to create an aggregation based on a dynamic time frame which I want to calculate. I was trying to do something like this But I cant get it to work... Any suggestions? --- ## [Kibana scripted field is not showing value](https://discuss.elastic.co/t/kibana-scripted-field-is-not-showing-value/322183)
**Author:** [@gloria123451](https://discuss.elastic.co/u/gloria123451)\ **Replies:** 2\ **Last updated:** [December 30, 2022, 10:23pm UTC](https://discuss.elastic.co/t/kibana-scripted-field-is-not-showing-value/322183 "2022-12-30T22:23:40Z")
I am new to kibana.. I am trying to create a scripted field, when I run the script nothing is displayed in the result. however, when I filter the field I get the expected result.. why is this not propagating?... what … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=680) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=682)