# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=979 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 980 --- ## [Running Elastic Stack in Docker Step5 \](https://discuss.elastic.co/t/running-elastic-stack-in-docker-step5-timestamp/302022)
**Author:** [@Anonymous012](https://discuss.elastic.co/u/Anonymous012)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 12:42pm UTC](https://discuss.elastic.co/t/running-elastic-stack-in-docker-step5-timestamp/302022 "2022-04-10T12:42:12Z")
Hello, I am pretty new to ES and Kibana. I used the official tutorial: Elasticstack Everything worked well till I got to step 5. I do not know how/where I can get the timestamp. You can see in the picture, my ES is r… --- ## [Setting the number of shards and replicas in /etc/filebeat/filebeat.yml](https://discuss.elastic.co/t/setting-the-number-of-shards-and-replicas-in-etc-filebeat-filebeat-yml/302029)
**Author:** [@ristov1](https://discuss.elastic.co/u/ristov1)\ **Replies:** 7\ **Last updated:** [April 10, 2022, 9:53am UTC](https://discuss.elastic.co/t/setting-the-number-of-shards-and-replicas-in-etc-filebeat-filebeat-yml/302029 "2022-04-10T09:53:20Z")
According to filebeat documentation (Configure Elasticsearch index template loading | Filebeat Reference \[8.1\] | Elastic), it should be possible to set the number of shards and replicas for Filebeat indexes with the foll… --- ## [Mapper parsing exception - failed to parse field](https://discuss.elastic.co/t/mapper-parsing-exception-failed-to-parse-field/302040)
**Author:** [@Robert777](https://discuss.elastic.co/u/Robert777)\ **Replies:** 9\ **Last updated:** [April 10, 2022, 9:44am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-failed-to-parse-field/302040 "2022-04-10T09:44:23Z")
Hello, could you please advise what this problem is related to and how to solve it? Below is a snippet of the warning I am getting from logstash. A little situational description, we have a large number of microservice… --- ## [How to use fuzzy and match phrase?](https://discuss.elastic.co/t/how-to-use-fuzzy-and-match-phrase/301386)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 1\ **Last updated:** [April 6, 2022, 2:56pm UTC](https://discuss.elastic.co/t/how-to-use-fuzzy-and-match-phrase/301386 "2022-04-06T14:56:59Z")
I'm using elasticsearch version 7.6.2 I want to search for a sentence and get results of the same words order (like match\_phrase) with sentence fuzziness for example: suppose for simplicity i have 1 document in the in… --- ## [Self developed metricbeat module throws in docker a strange error](https://discuss.elastic.co/t/self-developed-metricbeat-module-throws-in-docker-a-strange-error/301560)
**Author:** [@PascalThalmann](https://discuss.elastic.co/u/PascalThalmann)\ **Replies:** 1\ **Last updated:** [April 10, 2022, 4:45am UTC](https://discuss.elastic.co/t/self-developed-metricbeat-module-throws-in-docker-a-strange-error/301560 "2022-04-10T04:45:38Z")
Hi, I developed a metricbeat module and metricset. I ran "mage update" and "mage build" and tested it in my VM and it ran perfectly. I then zipped the following files, copied dit to another VM (Ubuntu as well) and star… --- ## [How to create Pivot table in Kibana 7.16.2](https://discuss.elastic.co/t/how-to-create-pivot-table-in-kibana-7-16-2/301937)
**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\ **Replies:** 5\ **Last updated:** [April 9, 2022, 8:44pm UTC](https://discuss.elastic.co/t/how-to-create-pivot-table-in-kibana-7-16-2/301937 "2022-04-09T20:44:11Z")
Hi, I need an help. I have a json like: \[ {"name": "Albert", "year": 1980, "class": "B"}, {"name": "John", "year": 1990, "class": "C"}, {"name": "Lerry", "year": 1990, "class": "C"}, {"name": "Joe", "year": 1980, "class… --- ## [Query "bool must match" not returning any value whereas "bool must match\_all" returns](https://discuss.elastic.co/t/query-bool-must-match-not-returning-any-value-whereas-bool-must-match-all-returns/301988)
**Author:** [@Ritika\_Gupta1](https://discuss.elastic.co/u/Ritika_Gupta1)\ **Replies:** 4\ **Last updated:** [April 9, 2022, 8:38pm UTC](https://discuss.elastic.co/t/query-bool-must-match-not-returning-any-value-whereas-bool-must-match-all-returns/301988 "2022-04-09T20:38:09Z")
My Elasticsearch was working perfectly fine before. I had to delete my elastics search for a few months on my server then I installed a new version two weeks back. I created the same index with the same mapping and added… --- ## [How To Search the Documents with Phrase and other Keyword with in slop](https://discuss.elastic.co/t/how-to-search-the-documents-with-phrase-and-other-keyword-with-in-slop/301779)
**Author:** [@santhuuu0007](https://discuss.elastic.co/u/santhuuu0007)\ **Replies:** 3\ **Last updated:** [April 9, 2022, 7:35pm UTC](https://discuss.elastic.co/t/how-to-search-the-documents-with-phrase-and-other-keyword-with-in-slop/301779 "2022-04-09T19:35:21Z")
Hi, We are working on analyzing the documents here We have got description field in my document. We have the query for matching the phrase with slop which looks beautiful. i.e. "Certified Operator" when we use this wi… --- ## [Logstash ruby code error](https://discuss.elastic.co/t/logstash-ruby-code-error/302030)
**Author:** [@leela](https://discuss.elastic.co/u/leela)\ **Replies:** 2\ **Last updated:** [April 9, 2022, 5:35pm UTC](https://discuss.elastic.co/t/logstash-ruby-code-error/302030 "2022-04-09T17:35:37Z")
ruby { code =\> " byt = event.get('\[network\]\[bytes\]'); bytes = byt\*8; microsec = ((event.get('\[netflow\]\[flow\_end\_sys\_up\_time\]'))-(event.get('\[netflow\]\[flow\_start\_sys\_up\_time\]')))/1000; avg = bytes/microsec; event.se… --- ## [Clarification on how search\_type works](https://discuss.elastic.co/t/clarification-on-how-search-type-works/300203)
**Author:** [@ncoles](https://discuss.elastic.co/u/ncoles)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 2:34pm UTC](https://discuss.elastic.co/t/clarification-on-how-search-type-works/300203 "2022-04-09T14:34:32Z")
I'm looking into some strange results from a "more like this" query involving search\_type. I switched to dfs\_query\_then\_fetch from the default query\_then\_fetch because I wanted more accurate results and the overhead did… --- ## [ANN Search Timeouts](https://discuss.elastic.co/t/ann-search-timeouts/299879)
**Author:** [@SbstnErhrdt](https://discuss.elastic.co/u/SbstnErhrdt)\ **Replies:** 8\ **Last updated:** [April 9, 2022, 2:10pm UTC](https://discuss.elastic.co/t/ann-search-timeouts/299879 "2022-04-09T14:10:33Z")
We try to use the ANN (Approximate Nearest Neighbor) feature of the 8.0 Version of Elasticsearch. (k-nearest neighbor (kNN) search | Elasticsearch Guide \[8.1\] | Elastic) At the moment we have indexed 16 million document… --- ## [Multi index aggregations](https://discuss.elastic.co/t/multi-index-aggregations/302012)
**Author:** [@kasvith](https://discuss.elastic.co/u/kasvith)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 1:20pm UTC](https://discuss.elastic.co/t/multi-index-aggregations/302012 "2022-04-09T13:20:32Z")
Hi all, I've a scenario like this Im maintaining an index for a list that holds the basic fields like title I also maintain two separate indexes called idx-1 and idx-2 which also have listId as a field. When Im addi… --- ## [Using alias indice in visualization](https://discuss.elastic.co/t/using-alias-indice-in-visualization/302013)
**Author:** [@rogerlee](https://discuss.elastic.co/u/rogerlee)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 1:08pm UTC](https://discuss.elastic.co/t/using-alias-indice-in-visualization/302013 "2022-04-09T13:08:29Z")
Hi Guys, I am trying to use alias indice in visualization, but something weird happens. My version is 7.10, and my data are sample data " kibana\_sample\_data\_flights" and "kibana\_sample\_data\_ecommerce" . I create a ali… --- ## [When ilm is enabled metricbeat can't communicate with kibana](https://discuss.elastic.co/t/when-ilm-is-enabled-metricbeat-cant-communicate-with-kibana/302024)
**Author:** [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)\ **Replies:** 0\ **Last updated:** [April 9, 2022, 12:14pm UTC](https://discuss.elastic.co/t/when-ilm-is-enabled-metricbeat-cant-communicate-with-kibana/302024 "2022-04-09T12:14:24Z")
Hi guys!! I use ELK v7.16.2 I test the metricbeat on my test server with a direct connection (IP). Now in the production environment, I use reverse proxy on ELK domains. On the test environment, everything is ok, als… --- ## [Filebeat -\> kafka -\> logstash multiple brokers](https://discuss.elastic.co/t/filebeat-kafka-logstash-multiple-brokers/301978)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [April 9, 2022, 9:06am UTC](https://discuss.elastic.co/t/filebeat-kafka-logstash-multiple-brokers/301978 "2022-04-09T09:06:21Z")
Hi, I have 3 brokers in one kafka cluster with zookeeper server and i create some topics with --replication-factor 3 --partitions 3 I run the zookeeper and the 3 brokers it works fine but when i kill the broker 1 it di… --- ## [Stability of the Kibana Fleet API](https://discuss.elastic.co/t/stability-of-the-kibana-fleet-api/301993)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 5\ **Last updated:** [April 9, 2022, 1:26am UTC](https://discuss.elastic.co/t/stability-of-the-kibana-fleet-api/301993 "2022-04-09T01:26:29Z")
Hi All, I was wondering what the current stability of the Kibana Fleet API is? I see that it is still in tech preview and there is an open issue for it going GA, but was wonder if it is safe to start investing in buildi… --- ## [Date format set in advanced settings not replicated in CSV export from Discover](https://discuss.elastic.co/t/date-format-set-in-advanced-settings-not-replicated-in-csv-export-from-discover/300251)
**Author:** [@JulieB](https://discuss.elastic.co/u/JulieB)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 11:27pm UTC](https://discuss.elastic.co/t/date-format-set-in-advanced-settings-not-replicated-in-csv-export-from-discover/300251 "2022-04-08T23:27:04Z")
Version: Kibana 6.8.23 I set up a customized date format in Management \> Advanced Settings of my Kibana UI to YYYY-MM-DD-THH:mm:ss which works well when I look at the data in Discover tab or Dashboard view. However, onc… --- ## [Peak Second Each Day Over Time](https://discuss.elastic.co/t/peak-second-each-day-over-time/301984)
**Author:** [@JWR](https://discuss.elastic.co/u/JWR)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 9:07pm UTC](https://discuss.elastic.co/t/peak-second-each-day-over-time/301984 "2022-04-08T21:07:59Z")
I'm ingesting data real time and would like to see the peak event rate second by day. Essentially, what was the busiest second each day and how many events occurred at that second. It's pretty straightforward on a smal… --- ## [Adding Geo data to monitored hosts](https://discuss.elastic.co/t/adding-geo-data-to-monitored-hosts/301933)
**Author:** [@Christian\_SANCHEZ](https://discuss.elastic.co/u/Christian_SANCHEZ)\ **Replies:** 6\ **Last updated:** [April 8, 2022, 5:37pm UTC](https://discuss.elastic.co/t/adding-geo-data-to-monitored-hosts/301933 "2022-04-08T17:37:27Z")
Hello I have heartbeat running and sending correctly data to my ES. I would like to add geo data to the hosts I monitor to show them on a Map I know we can add geo data to the observer, but is there a way to add geo d… --- ## [Circuit\_breaking\_exception \[parent\]](https://discuss.elastic.co/t/circuit-breaking-exception-parent/301987)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 4:00pm UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent/301987 "2022-04-08T16:00:08Z")
I have a Elasticsearch cluster with around more than 100 data nodes. around 30 hot nodes and the rest warm nodes. I am coming across an issue where I just try to load data with the index pattern say logs\* in kibana disc… --- ## [Update kibana](https://discuss.elastic.co/t/update-kibana/301967)
**Author:** [@vatsal](https://discuss.elastic.co/u/vatsal)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 3:33pm UTC](https://discuss.elastic.co/t/update-kibana/301967 "2022-04-08T15:33:03Z")
Hi, I want to update kibana . Please tell if I have to do fresh intall or is there any option to update? Thanks. --- ## [Error when using elasticsearch logstash filter](https://discuss.elastic.co/t/error-when-using-elasticsearch-logstash-filter/301952)
**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:29pm UTC](https://discuss.elastic.co/t/error-when-using-elasticsearch-logstash-filter/301952 "2022-04-08T14:29:32Z")
Good day! Please advice. I have an error when using Elasticsearch logstash filter. I need to make a query among index to find a value of ip, and if there is write it in the field 'match' Here is code of my .conf file: … --- ## [Join two csv files](https://discuss.elastic.co/t/join-two-csv-files/301949)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:25pm UTC](https://discuss.elastic.co/t/join-two-csv-files/301949 "2022-04-08T14:25:55Z")
Hello! I have 2 csv files that share a common field and I would like to pass 2 fields from one of the files to the other. The functionality that I want is the same that I usually have with the Elasticsearch filter obta… --- ## [Weird behavior with cross cluster settings search.remote vs cluster.remote (elastic v6.5.4)](https://discuss.elastic.co/t/weird-behavior-with-cross-cluster-settings-search-remote-vs-cluster-remote-elastic-v6-5-4/301980)
**Author:** [@dcausse](https://discuss.elastic.co/u/dcausse)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:16pm UTC](https://discuss.elastic.co/t/weird-behavior-with-cross-cluster-settings-search-remote-vs-cluster-remote-elastic-v6-5-4/301980 "2022-04-08T14:16:18Z")
Hi, we are running Elasticsearch 6.5.4 and we started to use cross cluster search since 6.3. Our settings were using the search.remote section in the cluster settings and since 6.5 we started using the new preferred clu… --- ## [1 of 24 shards failed](https://discuss.elastic.co/t/1-of-24-shards-failed/301928)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 2:13pm UTC](https://discuss.elastic.co/t/1-of-24-shards-failed/301928 "2022-04-08T14:13:39Z")
Hello, already asked a similar creature, but did not receive an answer, when opening the index, this error appears: 1 of 24 shards failed, when you click "show details" it gives the following: Request: { "aggs": { … --- ## [Elasticsearch not able to create index daily for filebeat-17.6.2\*](https://discuss.elastic.co/t/elasticsearch-not-able-to-create-index-daily-for-filebeat-17-6-2/301975)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-create-index-daily-for-filebeat-17-6-2/301975 "2022-04-08T12:52:57Z")
Recently I tried to deploy journald input for sending systems logs and it's showing in the filebeat indice. but it's not creating indices daily basis it's writing the same indice. Even errors not showing in the Elastics… --- ## [Is Elastic what I need for our solution?](https://discuss.elastic.co/t/is-elastic-what-i-need-for-our-solution/301974)
**Author:** [@alivingstone](https://discuss.elastic.co/u/alivingstone)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:33pm UTC](https://discuss.elastic.co/t/is-elastic-what-i-need-for-our-solution/301974 "2022-04-08T12:33:25Z")
Hey - totally new to Elastic, someone mentioned it may be the solution we need. I've had a quick look and I'm getting more and more confused by all the options! Briefly - we have 16 Forcepoint proxies. They have acces… --- ## [USE JAVA API operation the update method does not work](https://discuss.elastic.co/t/use-java-api-operation-the-update-method-does-not-work/301972)
**Author:** [@Schmidt-cc](https://discuss.elastic.co/u/Schmidt-cc)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:29pm UTC](https://discuss.elastic.co/t/use-java-api-operation-the-update-method-does-not-work/301972 "2022-04-08T12:29:15Z")
Hello all Recently， my progarm uesd Elasticsearch update method always fail，code just like this public \ void updateDoc(T t, String docIndex) throws IOException { //update by id Upd… --- ## [New Java API migration](https://discuss.elastic.co/t/new-java-api-migration/301963)
**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 11:46am UTC](https://discuss.elastic.co/t/new-java-api-migration/301963 "2022-04-08T11:46:23Z")
Hi, We are trying to migrate to the new Java client, and we obviously have difficulties in finding our way in the current (light) documentation. Can you help me with the following? // HLRC code … --- ## [Run ingress nginx as a reverse proxy for kibana with appid oauth2 provider (on ECK)](https://discuss.elastic.co/t/run-ingress-nginx-as-a-reverse-proxy-for-kibana-with-appid-oauth2-provider-on-eck/301959)
**Author:** [@David\_O\_Connor](https://discuss.elastic.co/u/David_O_Connor)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 11:19am UTC](https://discuss.elastic.co/t/run-ingress-nginx-as-a-reverse-proxy-for-kibana-with-appid-oauth2-provider-on-eck/301959 "2022-04-08T11:19:35Z")
I've read a number of similar questions on here and blogs online, I've tried a number of configuration changes but cannot seem to get anything to work. I'm using ECK to manage an elastic & kibana stack on IBM cloud IKS (… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=978) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=980)