# Latest **URL:** https://discuss.elastic.co/latest.md?page=1178 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1179 --- ## [Date format set in advanced settings not replicated in CSV export from Discover](https://discuss.elastic.co/t/date-format-set-in-advanced-settings-not-replicated-in-csv-export-from-discover/300251)
**Author:** [@JulieB](https://discuss.elastic.co/u/JulieB)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 11:27pm UTC](https://discuss.elastic.co/t/date-format-set-in-advanced-settings-not-replicated-in-csv-export-from-discover/300251 "2022-04-08T23:27:04Z")
Version: Kibana 6.8.23 I set up a customized date format in Management \> Advanced Settings of my Kibana UI to YYYY-MM-DD-THH:mm:ss which works well when I look at the data in Discover tab or Dashboard view. However, onc… --- ## [Peak Second Each Day Over Time](https://discuss.elastic.co/t/peak-second-each-day-over-time/301984)
**Author:** [@JWR](https://discuss.elastic.co/u/JWR)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 9:07pm UTC](https://discuss.elastic.co/t/peak-second-each-day-over-time/301984 "2022-04-08T21:07:59Z")
I'm ingesting data real time and would like to see the peak event rate second by day. Essentially, what was the busiest second each day and how many events occurred at that second. It's pretty straightforward on a smal… --- ## [Adding Geo data to monitored hosts](https://discuss.elastic.co/t/adding-geo-data-to-monitored-hosts/301933)
**Author:** [@Christian\_SANCHEZ](https://discuss.elastic.co/u/Christian_SANCHEZ)\ **Replies:** 6\ **Last updated:** [April 8, 2022, 5:37pm UTC](https://discuss.elastic.co/t/adding-geo-data-to-monitored-hosts/301933 "2022-04-08T17:37:27Z")
Hello I have heartbeat running and sending correctly data to my ES. I would like to add geo data to the hosts I monitor to show them on a Map I know we can add geo data to the observer, but is there a way to add geo d… --- ## [Elastic Agent - Upgrading Windows Elastic Agent failing via UI](https://discuss.elastic.co/t/elastic-agent-upgrading-windows-elastic-agent-failing-via-ui/301790)
**Author:** [@zx8086](https://discuss.elastic.co/u/zx8086)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 4:39pm UTC](https://discuss.elastic.co/t/elastic-agent-upgrading-windows-elastic-agent-failing-via-ui/301790 "2022-04-08T16:39:39Z")
Upgrading from 8.1.1 to 8.1.2 Same happens from 8.0.0, seems the file it is looking for isn't downloaded first. Windows 10 Enterprise failed to dispatch actions, error: failed verification of agent binary: 2 errors oc… --- ## [Circuit\_breaking\_exception \[parent\]](https://discuss.elastic.co/t/circuit-breaking-exception-parent/301987)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 4:00pm UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent/301987 "2022-04-08T16:00:08Z")
I have a Elasticsearch cluster with around more than 100 data nodes. around 30 hot nodes and the rest warm nodes. I am coming across an issue where I just try to load data with the index pattern say logs\* in kibana disc… --- ## [Update kibana](https://discuss.elastic.co/t/update-kibana/301967)
**Author:** [@vatsal](https://discuss.elastic.co/u/vatsal)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 3:33pm UTC](https://discuss.elastic.co/t/update-kibana/301967 "2022-04-08T15:33:03Z")
Hi, I want to update kibana . Please tell if I have to do fresh intall or is there any option to update? Thanks. --- ## [Error when using elasticsearch logstash filter](https://discuss.elastic.co/t/error-when-using-elasticsearch-logstash-filter/301952)
**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:29pm UTC](https://discuss.elastic.co/t/error-when-using-elasticsearch-logstash-filter/301952 "2022-04-08T14:29:32Z")
Good day! Please advice. I have an error when using Elasticsearch logstash filter. I need to make a query among index to find a value of ip, and if there is write it in the field 'match' Here is code of my .conf file: … --- ## [Join two csv files](https://discuss.elastic.co/t/join-two-csv-files/301949)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:25pm UTC](https://discuss.elastic.co/t/join-two-csv-files/301949 "2022-04-08T14:25:55Z")
Hello! I have 2 csv files that share a common field and I would like to pass 2 fields from one of the files to the other. The functionality that I want is the same that I usually have with the Elasticsearch filter obta… --- ## [Weird behavior with cross cluster settings search.remote vs cluster.remote (elastic v6.5.4)](https://discuss.elastic.co/t/weird-behavior-with-cross-cluster-settings-search-remote-vs-cluster-remote-elastic-v6-5-4/301980)
**Author:** [@dcausse](https://discuss.elastic.co/u/dcausse)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 2:16pm UTC](https://discuss.elastic.co/t/weird-behavior-with-cross-cluster-settings-search-remote-vs-cluster-remote-elastic-v6-5-4/301980 "2022-04-08T14:16:18Z")
Hi, we are running Elasticsearch 6.5.4 and we started to use cross cluster search since 6.3. Our settings were using the search.remote section in the cluster settings and since 6.5 we started using the new preferred clu… --- ## [1 of 24 shards failed](https://discuss.elastic.co/t/1-of-24-shards-failed/301928)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 2:13pm UTC](https://discuss.elastic.co/t/1-of-24-shards-failed/301928 "2022-04-08T14:13:39Z")
Hello, already asked a similar creature, but did not receive an answer, when opening the index, this error appears: 1 of 24 shards failed, when you click "show details" it gives the following: Request: { "aggs": { … --- ## [Elasticsearch not able to create index daily for filebeat-17.6.2\*](https://discuss.elastic.co/t/elasticsearch-not-able-to-create-index-daily-for-filebeat-17-6-2/301975)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:52pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-create-index-daily-for-filebeat-17-6-2/301975 "2022-04-08T12:52:57Z")
Recently I tried to deploy journald input for sending systems logs and it's showing in the filebeat indice. but it's not creating indices daily basis it's writing the same indice. Even errors not showing in the Elastics… --- ## [Is Elastic what I need for our solution?](https://discuss.elastic.co/t/is-elastic-what-i-need-for-our-solution/301974)
**Author:** [@alivingstone](https://discuss.elastic.co/u/alivingstone)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:33pm UTC](https://discuss.elastic.co/t/is-elastic-what-i-need-for-our-solution/301974 "2022-04-08T12:33:25Z")
Hey - totally new to Elastic, someone mentioned it may be the solution we need. I've had a quick look and I'm getting more and more confused by all the options! Briefly - we have 16 Forcepoint proxies. They have acces… --- ## [USE JAVA API operation the update method does not work](https://discuss.elastic.co/t/use-java-api-operation-the-update-method-does-not-work/301972)
**Author:** [@Schmidt-cc](https://discuss.elastic.co/u/Schmidt-cc)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 12:29pm UTC](https://discuss.elastic.co/t/use-java-api-operation-the-update-method-does-not-work/301972 "2022-04-08T12:29:15Z")
Hello all Recently， my progarm uesd Elasticsearch update method always fail，code just like this public \ void updateDoc(T t, String docIndex) throws IOException { //update by id Upd… --- ## [New Java API migration](https://discuss.elastic.co/t/new-java-api-migration/301963)
**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 11:46am UTC](https://discuss.elastic.co/t/new-java-api-migration/301963 "2022-04-08T11:46:23Z")
Hi, We are trying to migrate to the new Java client, and we obviously have difficulties in finding our way in the current (light) documentation. Can you help me with the following? // HLRC code … --- ## [Run ingress nginx as a reverse proxy for kibana with appid oauth2 provider (on ECK)](https://discuss.elastic.co/t/run-ingress-nginx-as-a-reverse-proxy-for-kibana-with-appid-oauth2-provider-on-eck/301959)
**Author:** [@David\_O\_Connor](https://discuss.elastic.co/u/David_O_Connor)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 11:19am UTC](https://discuss.elastic.co/t/run-ingress-nginx-as-a-reverse-proxy-for-kibana-with-appid-oauth2-provider-on-eck/301959 "2022-04-08T11:19:35Z")
I've read a number of similar questions on here and blogs online, I've tried a number of configuration changes but cannot seem to get anything to work. I'm using ECK to manage an elastic & kibana stack on IBM cloud IKS (… --- ## [Impossible to rename a field](https://discuss.elastic.co/t/impossible-to-rename-a-field/301956)
**Author:** [@mehdielfi](https://discuss.elastic.co/u/mehdielfi)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 11:06am UTC](https://discuss.elastic.co/t/impossible-to-rename-a-field/301956 "2022-04-08T11:06:48Z")
Hi i struggle to find the solution i try to rename a JSON field from X-Global-Transaction-Id to X-Global-Transaction-ID Here is the filter logstash filter { mutate { rename =\> {"\[response\_http\_head… --- ## [Filebeat (google\_workspace module) retrieving partial events on initial startup](https://discuss.elastic.co/t/filebeat-google-workspace-module-retrieving-partial-events-on-initial-startup/301180)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 7\ **Last updated:** [April 8, 2022, 10:23am UTC](https://discuss.elastic.co/t/filebeat-google-workspace-module-retrieving-partial-events-on-initial-startup/301180 "2022-04-08T10:23:35Z")
Hello I would like to ask question related to below topic. I want to retrieve events backtracking up to 96 h for drive events . However, I was only able to retrieve partial of them . Looking at DEBUG log , the start… --- ## [Search\_after without PIT](https://discuss.elastic.co/t/search-after-without-pit/300788)
**Author:** [@ahmedasadi](https://discuss.elastic.co/u/ahmedasadi)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 10:11am UTC](https://discuss.elastic.co/t/search-after-without-pit/300788 "2022-04-08T10:11:28Z")
In the documentation for 'search\_after', it says that inconsistent results may be returned if a refresh occurs when not using a PIT. I have a few questions: Can duplicate results be returned? Will it return all the doc… --- ## [APM Elastic - also monitoring mobile apps?](https://discuss.elastic.co/t/apm-elastic-also-monitoring-mobile-apps/301948)
**Author:** [@Victoria\_Nobauer](https://discuss.elastic.co/u/Victoria_Nobauer)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 10:08am UTC](https://discuss.elastic.co/t/apm-elastic-also-monitoring-mobile-apps/301948 "2022-04-08T10:08:49Z")
Hi, I am looking for a documentation, if APM Elastic is only monitoring websites or if i can use it for mobile app monitoring too? Can someone help me? Thanks! --- ## [Elastic APM identify all its own - \* self discovery](https://discuss.elastic.co/t/elastic-apm-identify-all-its-own-self-discovery/301944)
**Author:** [@kunal.khandelwal](https://discuss.elastic.co/u/kunal.khandelwal)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 9:23am UTC](https://discuss.elastic.co/t/elastic-apm-identify-all-its-own-self-discovery/301944 "2022-04-08T09:23:35Z")
Hi Team, I want to know that, is there any option for auto/self discovery elastic APM? so that it can automatically identify the logs of APM with CF? Thanks! --- ## ["You are not authorized to access Monitoring" after upgrade to 8.1.0](https://discuss.elastic.co/t/you-are-not-authorized-to-access-monitoring-after-upgrade-to-8-1-0/299473)
**Author:** [@bricevalenza](https://discuss.elastic.co/u/bricevalenza)\ **Replies:** 5\ **Last updated:** [April 7, 2022, 12:10pm UTC](https://discuss.elastic.co/t/you-are-not-authorized-to-access-monitoring-after-upgrade-to-8-1-0/299473 "2022-04-07T12:10:56Z")
Hello, after upgrading my stack to version 8.1.0, I can't access the monitoring page on Kibana. I checked rights on my (local) account and it's OK. I also made a role with very large accesses, and still the same … --- ## [The url of kibana is not showing as expected](https://discuss.elastic.co/t/the-url-of-kibana-is-not-showing-as-expected/301934)
**Author:** [@Aditya\_Maheshwari](https://discuss.elastic.co/u/Aditya_Maheshwari)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 8:16am UTC](https://discuss.elastic.co/t/the-url-of-kibana-is-not-showing-as-expected/301934 "2022-04-08T08:16:20Z")
Hello, This is my first post. I am trying to see the logs as per the filter applied on Elasticsearch but as soon as i go to kibana the url in the app state, instead of showing me the filters of Elasticsearch, it is gett… --- ## [Logstash Filter, is there a better way than mine](https://discuss.elastic.co/t/logstash-filter-is-there-a-better-way-than-mine/301879)
**Author:** [@cRaZyT](https://discuss.elastic.co/u/cRaZyT)\ **Replies:** 3\ **Last updated:** [April 8, 2022, 7:57am UTC](https://discuss.elastic.co/t/logstash-filter-is-there-a-better-way-than-mine/301879 "2022-04-08T07:57:40Z")
Hi, I have the following Logstash filter, which works, but I find it anything but good, that should work better, right? Input: "The container group started for TEST" if "The container group started for" in \[messa… --- ## [ElasticSearch Sizing](https://discuss.elastic.co/t/elasticsearch-sizing/301931)
**Author:** [@ELIASP](https://discuss.elastic.co/u/ELIASP)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch-sizing/301931 "2022-04-08T07:35:55Z")
I am trying to understand the number of shards that I need to create, primary and replicas. I have run the following calucation Total Data (GB)= Raw data (GB) per day \* Number of days retained \* (Number of replicas + 1… --- ## [Schedule salesforce plugin Logstash](https://discuss.elastic.co/t/schedule-salesforce-plugin-logstash/301873)
**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\ **Replies:** 2\ **Last updated:** [April 8, 2022, 7:06am UTC](https://discuss.elastic.co/t/schedule-salesforce-plugin-logstash/301873 "2022-04-08T07:06:07Z")
Hi, i'm trying to pull data from salesforce to Elasticsearch through Logstash but i didn't find something similar to the schedule parameter of the JDBC plugin. Any idea on how can i schedule the input? I can't run it m… --- ## [Jupyter -\> Vega -\> Kibana visualization (without disabling security). How?](https://discuss.elastic.co/t/jupyter-vega-kibana-visualization-without-disabling-security-how/301899)
**Author:** [@J\_Todd](https://discuss.elastic.co/u/J_Todd)\ **Replies:** 4\ **Last updated:** [April 8, 2022, 6:25am UTC](https://discuss.elastic.co/t/jupyter-vega-kibana-visualization-without-disabling-security-how/301899 "2022-04-08T06:25:02Z")
So we want to leverage the data-science and visualization strengths of Python on our ELK data and then use the Elastic API to send the resulting visualization to update a dashboard. Specifically, this refers to setting t… --- ## [How convert update\_by\_query with params as array to Java Rest client SDK](https://discuss.elastic.co/t/how-convert-update-by-query-with-params-as-array-to-java-rest-client-sdk/301870)
**Author:** [@vitaly1233](https://discuss.elastic.co/u/vitaly1233)\ **Replies:** 2\ **Last updated:** [April 7, 2022, 5:02pm UTC](https://discuss.elastic.co/t/how-convert-update-by-query-with-params-as-array-to-java-rest-client-sdk/301870 "2022-04-07T17:02:45Z")
Hi, Working with version 7.15 Trying to do "update all by query " using script. The main idea to iterate the params in array and update as in the query below to all matched documents. The script: POST : http://11.1… --- ## [Removing fields from Index](https://discuss.elastic.co/t/removing-fields-from-index/301623)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 4\ **Last updated:** [April 8, 2022, 5:56am UTC](https://discuss.elastic.co/t/removing-fields-from-index/301623 "2022-04-08T05:56:17Z")
Hi sorry for bothering you everytime. I upload some logs into elastic via filebeat, but there is some other information added to my original logs like the host name os kernel ..., and the main message become unformatted… --- ## [Few unassigned shards](https://discuss.elastic.co/t/few-unassigned-shards/301920)
**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\ **Replies:** 0\ **Last updated:** [April 8, 2022, 4:49am UTC](https://discuss.elastic.co/t/few-unassigned-shards/301920 "2022-04-08T04:49:53Z")
hi Everyone, I upgraded my last node but due to some issue 36 shards left unassigned. and its not getting assigned because of below issue: "can\_allocate" : "no\_valid\_shard\_copy", "allocate\_explanation" : "cannot alloc… --- ## [Performance issue with concurrent call ElasticSearch API](https://discuss.elastic.co/t/performance-issue-with-concurrent-call-elasticsearch-api/301912)
**Author:** [@css.carlyle](https://discuss.elastic.co/u/css.carlyle)\ **Replies:** 1\ **Last updated:** [April 8, 2022, 4:43am UTC](https://discuss.elastic.co/t/performance-issue-with-concurrent-call-elasticsearch-api/301912 "2022-04-08T04:43:40Z")
Hello all, Recently, my program failed the stress test (Jmeter) :dizzy\_face:, my requirement is that get response from Elasticsearch within 5 seconds when it was 50, 100, 500, 1000, 1300 concurrent call. During the stre… [Previous page](https://discuss.elastic.co/latest.md?page=1177) [Next page](https://discuss.elastic.co/latest.md?page=1179)