# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=863 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 864 --- ## [Duplicates between rolled over indices](https://discuss.elastic.co/t/duplicates-between-rolled-over-indices/309807)
**Author:** [@wisemandev](https://discuss.elastic.co/u/wisemandev)\ **Replies:** 1\ **Last updated:** [July 17, 2022, 8:04am UTC](https://discuss.elastic.co/t/duplicates-between-rolled-over-indices/309807 "2022-07-17T08:04:59Z")
Hi everyone, I realise this is a fairly common part of the learning curve with implementing ES, I just cant find quite the right info to ease my mind about our indexing strategy. Hoping to get some guidance here. We ha… --- ## [Pipelines don't working](https://discuss.elastic.co/t/pipelines-dont-working/309793)
**Author:** [@White\_Hat](https://discuss.elastic.co/u/White_Hat)\ **Replies:** 3\ **Last updated:** [July 17, 2022, 6:35am UTC](https://discuss.elastic.co/t/pipelines-dont-working/309793 "2022-07-17T06:35:30Z")
I want to log two separate servers that each has filebeat installed. this is my pipeline: - pipeline.id: beats-server config.string: | input { beats { port =\> 5400 } } output { if \[source\] == 'src' { … --- ## [ES and Kibana are working but I can't access it](https://discuss.elastic.co/t/es-and-kibana-are-working-but-i-cant-access-it/309795)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 1\ **Last updated:** [July 17, 2022, 3:57am UTC](https://discuss.elastic.co/t/es-and-kibana-are-working-but-i-cant-access-it/309795 "2022-07-17T03:57:05Z")
Hi there. I installed the latest versions of elasticsearch and kibana. sudo systemctl status elasticsearcrh.service and sudo systemctl status kibana.service When I run them both appear to be working. I am able to m… --- ## [Log timestamp is not getting through date filter getting date\_time\_parse\_exception](https://discuss.elastic.co/t/log-timestamp-is-not-getting-through-date-filter-getting-date-time-parse-exception/309705)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 17\ **Last updated:** [July 16, 2022, 9:23pm UTC](https://discuss.elastic.co/t/log-timestamp-is-not-getting-through-date-filter-getting-date-time-parse-exception/309705 "2022-07-16T21:23:19Z")
Hi Team, I have following logstash configuration for where I have written the date pattern to parse my timestamp, but time is not working. I'm getting \_dateparsefailure. here is the configuration. input{.............}… --- ## [How to use dsl](https://discuss.elastic.co/t/how-to-use-dsl/309718)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [July 16, 2022, 6:29pm UTC](https://discuss.elastic.co/t/how-to-use-dsl/309718 "2022-07-16T18:29:43Z")
Hi all, I want to learn elasticsearch DSL but i dont know what is the use of query , filter. I want practical questions which teach me actual use of particular function. Sorry for this silly question but i want to learn… --- ## [Change in a field for the selected time period](https://discuss.elastic.co/t/change-in-a-field-for-the-selected-time-period/307913)
**Author:** [@baahubali](https://discuss.elastic.co/u/baahubali)\ **Replies:** 3\ **Last updated:** [July 16, 2022, 11:41am UTC](https://discuss.elastic.co/t/change-in-a-field-for-the-selected-time-period/307913 "2022-07-16T11:41:31Z")
We can find the Daily, Weekly, Monthly or Yearly changes for a field using Lens now. Great! But how do we find Change in a field for the selected time period in the top right? This is a very basic requirement but I hav… --- ## [High IOwiats on ELK Linux Instance](https://discuss.elastic.co/t/high-iowiats-on-elk-linux-instance/309597)
**Author:** [@AmarKolhapuri](https://discuss.elastic.co/u/AmarKolhapuri)\ **Replies:** 2\ **Last updated:** [July 16, 2022, 12:34am UTC](https://discuss.elastic.co/t/high-iowiats-on-elk-linux-instance/309597 "2022-07-16T00:34:23Z")
Hi All, We have a Weblogic server and other applications/servers(HTTP server) that write logs to the Logs mount. In order to monitor the performance of the application, this mount is shared with the ELK stack. After re… --- ## [Elasticsearch 8.3 Heap Memory Sizing Confusion](https://discuss.elastic.co/t/elasticsearch-8-3-heap-memory-sizing-confusion/309771)
**Author:** [@afarley](https://discuss.elastic.co/u/afarley)\ **Replies:** 1\ **Last updated:** [July 16, 2022, 12:32am UTC](https://discuss.elastic.co/t/elasticsearch-8-3-heap-memory-sizing-confusion/309771 "2022-07-16T00:32:08Z")
Hello all, I'm a little confused with the new sizing documentation that was written for the 8.3 release. It mentions leaving 1kb Heap available per field in an index. Does this mean 1kb heap should be available per fiel… --- ## [Cycle through Dropdown Filter Values every minute in Canvas](https://discuss.elastic.co/t/cycle-through-dropdown-filter-values-every-minute-in-canvas/308990)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 9:30pm UTC](https://discuss.elastic.co/t/cycle-through-dropdown-filter-values-every-minute-in-canvas/308990 "2022-07-15T21:30:19Z")
Hi In Kibana, is there any way that I can have the canvas automatically change the dropdown filter value chosen every minute? E.g. Location - 00000D changes to Location - 000064 after 1 minute and changes again after an… --- ## [Source code of kibana dashboard](https://discuss.elastic.co/t/source-code-of-kibana-dashboard/309463)
**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 9:20pm UTC](https://discuss.elastic.co/t/source-code-of-kibana-dashboard/309463 "2022-07-15T21:20:38Z")
Hello After creating my dashboard with kibana , is there a way to view the source code of this dashboard and how can I find or view the source code of my kibana dashboard already created ? --- ## [Anomaly detection score details](https://discuss.elastic.co/t/anomaly-detection-score-details/309704)
**Author:** [@Amit\_Thombre](https://discuss.elastic.co/u/Amit_Thombre)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 9:13pm UTC](https://discuss.elastic.co/t/anomaly-detection-score-details/309704 "2022-07-15T21:13:04Z")
PFA the image showing 2 anomalies. The first has got a score of 55 but it is written that it is 2 times higher and second is with score 29 but it is more than 3 time higher. Questions is why is the anomaly with 3 ti… --- ## [Date range query with another query](https://discuss.elastic.co/t/date-range-query-with-another-query/309515)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 9:11pm UTC](https://discuss.elastic.co/t/date-range-query-with-another-query/309515 "2022-07-15T21:11:21Z")
I have 2 queries like this and i have to apply date range filter, is it possible to merge the 2 queries, i am applying search on the same index in 2 queries. first query GET index\_1/\_search { "\_source": \["file.filen… --- ## [Unable to bulk\_create index-pattern](https://discuss.elastic.co/t/unable-to-bulk-create-index-pattern/309754)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 8:48pm UTC](https://discuss.elastic.co/t/unable-to-bulk-create-index-pattern/309754 "2022-07-15T20:48:10Z")
Hello World! I'm trying to follow these: Grant privileges and roles needed for setup | Auditbeat Reference \[7.17\] | Elastic Grant privileges and roles needed for setup | Filebeat Reference \[7.17\] | Elastic Grant privi… --- ## [Error: \[o.e.b.Elasticsearch \] fatal exception while booting Elasticsearchorg.elasticsearch.bootstrap.StartupException: org.elasticsearch.ElasticsearchSecurityException:](https://discuss.elastic.co/t/error-o-e-b-elasticsearch-fatal-exception-while-booting-elasticsearchorg-elasticsearch-bootstrap-startupexception-org-elasticsearch-elasticsearchsecurityexception/308685)
**Author:** [@kkumar.e](https://discuss.elastic.co/u/kkumar.e)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 8:44pm UTC](https://discuss.elastic.co/t/error-o-e-b-elasticsearch-fatal-exception-while-booting-elasticsearchorg-elasticsearch-bootstrap-startupexception-org-elasticsearch-elasticsearchsecurityexception/308685 "2022-07-15T20:44:15Z")
Hi All, I am running into an ssl certificate issue when trying to form a cluster with 2 Elasticsearch nodes created on 2 AWS EC2 servers spread across 2 subnets. I followed the steps in the below ref link to generate CA… --- ## [Getting {"error":"no handler found for uri \[/\_security/api\_key\] and method \[POST\]"}](https://discuss.elastic.co/t/getting-error-no-handler-found-for-uri-security-api-key-and-method-post/309757)
**Author:** [@Suman\_Thota](https://discuss.elastic.co/u/Suman_Thota)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 8:39pm UTC](https://discuss.elastic.co/t/getting-error-no-handler-found-for-uri-security-api-key-and-method-post/309757 "2022-07-15T20:39:28Z")
Getting {"error":"no handler found for uri \[/\_security/api\_key\] and method \[POST\]"} when following instructions in Create API key API | Elasticsearch Guide \[8.3\] | Elastic to create an api key. Elasticsearch version: 8.… --- ## [Can cross cluster can be spread across multicloud?](https://discuss.elastic.co/t/can-cross-cluster-can-be-spread-across-multicloud/309660)
**Author:** [@jay224](https://discuss.elastic.co/u/jay224)\ **Replies:** 3\ **Last updated:** [July 15, 2022, 7:53pm UTC](https://discuss.elastic.co/t/can-cross-cluster-can-be-spread-across-multicloud/309660 "2022-07-15T19:53:06Z")
Can cross cluster replication be spread across multi cloud environment? Need it to create multi-cloud solution that can be kept in sync. --- ## [Transform data mismatch with source index](https://discuss.elastic.co/t/transform-data-mismatch-with-source-index/309659)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 7:07pm UTC](https://discuss.elastic.co/t/transform-data-mismatch-with-source-index/309659 "2022-07-15T19:07:23Z")
Hi, I'm using transforms to aggregate our access logs to a daily aggregate, e.g. "customer A had 500 requests totalling 1000 credits". Problem The problem that I now have is that I want to verify that the transformed … --- ## [Scripted Field Painless](https://discuss.elastic.co/t/scripted-field-painless/309328)
**Author:** [@FKarraz](https://discuss.elastic.co/u/FKarraz)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 6:18pm UTC](https://discuss.elastic.co/t/scripted-field-painless/309328 "2022-07-15T18:18:19Z")
Good morning. I am having problems when generating a scripted field. The situation is as follows. Inside my index, I have "field1" and "field2", if "field1" = 0, "field2" does not exist, if "field1" = 1, "field2" contain… --- ## [Unable to push messages to Kafka streams](https://discuss.elastic.co/t/unable-to-push-messages-to-kafka-streams/309458)
**Author:** [@Rao\_Nelakurti](https://discuss.elastic.co/u/Rao_Nelakurti)\ **Replies:** 5\ **Last updated:** [July 15, 2022, 4:39pm UTC](https://discuss.elastic.co/t/unable-to-push-messages-to-kafka-streams/309458 "2022-07-15T16:39:45Z")
Hi Team, I'm trying to send application logs (filebeat -\> logstash-\> kafka topic) to kafka stream. For some reason I'm not able to see logs in kafka. Here is my filebeat.conf filebeat.spool\_size: 2048 filebeat.idle\_ti… --- ## [\[C# NEST\] Query results with special characters not mapping properly](https://discuss.elastic.co/t/c-nest-query-results-with-special-characters-not-mapping-properly/309749)
**Author:** [@jleonapl](https://discuss.elastic.co/u/jleonapl)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 4:28pm UTC](https://discuss.elastic.co/t/c-nest-query-results-with-special-characters-not-mapping-properly/309749 "2022-07-15T16:28:55Z")
When performing queries on indices that have field names with special characters, they are not correctly mapped to the provided model. Example index: { "\_index" : "my-index-with-special-characters", "\_i… --- ## [Kibana Plugins Degraded](https://discuss.elastic.co/t/kibana-plugins-degraded/309748)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 4\ **Last updated:** [July 15, 2022, 4:22pm UTC](https://discuss.elastic.co/t/kibana-plugins-degraded/309748 "2022-07-15T16:22:42Z")
Hi there, I´ve done a few searchs for this kind of solution and I could not find anywhere. Can someone help me? Jul 15 12:00:36 kbn kibana\[3899\]: \[2022-07-15T12:00:36.438-03:00\]\[ERROR\]\[plugins.securitySolution\] Bulk… --- ## [How to visualize a single state on kibana maps?](https://discuss.elastic.co/t/how-to-visualize-a-single-state-on-kibana-maps/309628)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 4:20pm UTC](https://discuss.elastic.co/t/how-to-visualize-a-single-state-on-kibana-maps/309628 "2022-07-15T16:20:19Z")
I've a GEOJSON file for a state (Maharashtra), and visualized it on Kibana maps. I'm able to see the state. but I want to see the map for that state only, not other part (states, countries) on maps. how can I do this?? … --- ## [Elastalert2 reaalert every 5 minutes and group the number of hits](https://discuss.elastic.co/t/elastalert2-reaalert-every-5-minutes-and-group-the-number-of-hits/309710)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 3:50pm UTC](https://discuss.elastic.co/t/elastalert2-reaalert-every-5-minutes-and-group-the-number-of-hits/309710 "2022-07-15T15:50:21Z")
Seeking your advice and help. Currently my Heartbeat will monitor system health for every 5 minutes. Then, it will save the data to Elasticsearch. My Elastalert2 will retrieve the date from Elasticsearch. I have 2 syst… --- ## [Kibana Error in Report Generation](https://discuss.elastic.co/t/kibana-error-in-report-generation/309401)
**Author:** [@Apoorv\_Agarwal](https://discuss.elastic.co/u/Apoorv_Agarwal)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 3:40pm UTC](https://discuss.elastic.co/t/kibana-error-in-report-generation/309401 "2022-07-15T15:40:00Z")
I am getting the following error while trying to generate a csv report from Kibana. Following is the error code I can see in the logs: {"type":"log","@timestamp":"2022-07-12T10:20:45Z","tags":\["debug","legacy-service… --- ## [Json message storing with message. extension in index](https://discuss.elastic.co/t/json-message-storing-with-message-extension-in-index/309726)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 3:26pm UTC](https://discuss.elastic.co/t/json-message-storing-with-message-extension-in-index/309726 "2022-07-15T15:26:02Z")
Hi Team, I have small query here. I am sending json messag on Kafka queue and indexing the same in Elasticsearch. It is inserting properly but all the fields are storing with message.field extension. Is there any param… --- ## [: i/o timeout](https://discuss.elastic.co/t/i-o-timeout/309648)
**Author:** [@Rook1](https://discuss.elastic.co/u/Rook1)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 3:14pm UTC](https://discuss.elastic.co/t/i-o-timeout/309648 "2022-07-15T15:14:35Z")
Hello, i have a problems with heartbeat. It's work normally before and now very often shows down( : i/o timeout ) but internet's is good if i tried open sites manually is too open good. I don;t understand why heartbeat a… --- ## [Kibana 7.12.0 server.cors setting seems not work](https://discuss.elastic.co/t/kibana-7-12-0-server-cors-setting-seems-not-work/309561)
**Author:** [@Terry\_Li](https://discuss.elastic.co/u/Terry_Li)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 2:57pm UTC](https://discuss.elastic.co/t/kibana-7-12-0-server-cors-setting-seems-not-work/309561 "2022-07-15T14:57:09Z")
Hi, I need to login Kibana via my application ("http://localhost:3000"). I post login data to "http://localhost:5601/internal/security/login" by ajax, but "Access-Control-Allow-Origin" header not show in the response $.… --- ## [Aggregate values of multi-value fields from one document?](https://discuss.elastic.co/t/aggregate-values-of-multi-value-fields-from-one-document/309549)
**Author:** [@Muhammed\_Ashique](https://discuss.elastic.co/u/Muhammed_Ashique)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 2:43pm UTC](https://discuss.elastic.co/t/aggregate-values-of-multi-value-fields-from-one-document/309549 "2022-07-15T14:43:51Z")
I am parsing a json object into elasticsearch. one object is consist of nested json and this have multiple value. This field is provid ing multiple values like below. (also attached screenshot. How can i aggregate… --- ## [Add a new node to ES cluster v 8.1](https://discuss.elastic.co/t/add-a-new-node-to-es-cluster-v-8-1/309743)
**Author:** [@pcb1](https://discuss.elastic.co/u/pcb1)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 1:46pm UTC](https://discuss.elastic.co/t/add-a-new-node-to-es-cluster-v-8-1/309743 "2022-07-15T13:46:47Z")
Hello, I have ES -8,1 cluster working . The only change I made to the existing nodes in the cluster is : xpack.security.http.ssl: enabled: false Now , I want to add new data node but getting errors here are my steps… --- ## [Unable to monitor logstash from kibana](https://discuss.elastic.co/t/unable-to-monitor-logstash-from-kibana/309728)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 1:27pm UTC](https://discuss.elastic.co/t/unable-to-monitor-logstash-from-kibana/309728 "2022-07-15T13:27:06Z")
Hi Team, I am trying to monitor logstash from Kibana. Ihave modified the logstash.yml file but its not adding to kibana / not able to see it from kibana. My Elasticsearch is running with TLS. added below parameters in… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=862) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=864)