# Latest **URL:** https://discuss.elastic.co/latest.md?page=1301 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1302 --- ## [Make the Time Range on a map dynamic](https://discuss.elastic.co/t/make-the-time-range-on-a-map-dynamic/294810)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [January 19, 2022, 6:43pm UTC](https://discuss.elastic.co/t/make-the-time-range-on-a-map-dynamic/294810 "2022-01-19T18:43:13Z")
Hi, How would you make a time range dynamic on a map in a canvas? (i.e. it automatically changes over time like 11:59am today to 12:15pm). --- ## [Getting timestamp field from XML attribute](https://discuss.elastic.co/t/getting-timestamp-field-from-xml-attribute/294625)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 10\ **Last updated:** [January 19, 2022, 6:41pm UTC](https://discuss.elastic.co/t/getting-timestamp-field-from-xml-attribute/294625 "2022-01-19T18:41:09Z")
I'm using the xml filter plugin in Logstash to parse a XML document, and am having success with the exception of the @timestamp value, which is found as an attribute value. Here is a snippet of the XML file: \ **Author:** [@dmarshall](https://discuss.elastic.co/u/dmarshall)\ **Replies:** 2\ **Last updated:** [January 19, 2022, 6:28pm UTC](https://discuss.elastic.co/t/using-logstash-to-denomalize-data/294858 "2022-01-19T18:28:43Z") I have data coming in with field names like this: "field\_1" =\> "10" "field\_2" =\> "20" and I'm trying to figure out how to convert it to something more like this: "field" =\> \[ {"num" =\> "1", "val" =\> "10"}, {"num" =\> … --- ## [Dashboard POST URL too long unless re-saving](https://discuss.elastic.co/t/dashboard-post-url-too-long-unless-re-saving/294859)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 6:02pm UTC](https://discuss.elastic.co/t/dashboard-post-url-too-long-unless-re-saving/294859 "2022-01-19T18:02:46Z")
7.16.2 stack I'm running into an issue where it's saying my Dashboard POST URL is too long The odd thing is, if I edit the dashboard and re-save it, the POST URL is fine. I'm stuck on what is causing the dashboard… --- ## [Canvas - Variable in essql](https://discuss.elastic.co/t/canvas-variable-in-essql/294857)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 5:03pm UTC](https://discuss.elastic.co/t/canvas-variable-in-essql/294857 "2022-01-19T17:03:57Z")
Im trying to use the canvas variables, i have managed to get it working via text/markdown, i am trying to use it within an essql statement, heres my example WHERE \\"@timestamp\\" \> TODAY() - INTERVAL 30 DAY AND organizat… --- ## [Create Different "Index Management" and "Index Pattern" For Different Firewall Devices](https://discuss.elastic.co/t/create-different-index-management-and-index-pattern-for-different-firewall-devices/294678)
**Author:** [@Xenial](https://discuss.elastic.co/u/Xenial)\ **Replies:** 1\ **Last updated:** [January 19, 2022, 5:31pm UTC](https://discuss.elastic.co/t/create-different-index-management-and-index-pattern-for-different-firewall-devices/294678 "2022-01-19T17:31:10Z")
Hello Team, I want to create Dashboarding system (SIEM) For two different firewall device (Panorama Palo Alto, Fortianalyzer Fortinet). I want to use Filebeat Modules PANW and FORTINET. How i create 2 Index Management a… --- ## [Metricbeat-7.16.2 HTTP error 401 in : 401 Unauthorized](https://discuss.elastic.co/t/metricbeat-7-16-2-http-error-401-in-401-unauthorized/294816)
**Author:** [@mwoods269](https://discuss.elastic.co/u/mwoods269)\ **Replies:** 1\ **Last updated:** [January 19, 2022, 5:07pm UTC](https://discuss.elastic.co/t/metricbeat-7-16-2-http-error-401-in-401-unauthorized/294816 "2022-01-19T17:07:43Z")
Hello, Environment: singlenode sandbox running 7.16.2 Security enabled (TLS inter node comms) No Https Issue: Installed metricbeat and enabled Elasticsearch however node still reporting as self monitored Gett… --- ## [Combined\_fields + dfs\_query\_then\_fetch causes error](https://discuss.elastic.co/t/combined-fields-dfs-query-then-fetch-causes-error/294410)
**Author:** [@cyradin](https://discuss.elastic.co/u/cyradin)\ **Replies:** 2\ **Last updated:** [January 19, 2022, 5:04pm UTC](https://discuss.elastic.co/t/combined-fields-dfs-query-then-fetch-causes-error/294410 "2022-01-19T17:04:46Z")
Using combined\_fields query with dfs\_query\_then\_fetch causes "docCount must not exceed maxDoc" error if the request goes to multiple shards. Quick example to reproduce the issue (Elasticsearch v7.13.4, v7.15.0) PUT /my… --- ## [Cannot read property 'aliases' of undefined](https://discuss.elastic.co/t/cannot-read-property-aliases-of-undefined/293079)
**Author:** [@andrerca12](https://discuss.elastic.co/u/andrerca12)\ **Replies:** 10\ **Last updated:** [January 19, 2022, 4:43pm UTC](https://discuss.elastic.co/t/cannot-read-property-aliases-of-undefined/293079 "2022-01-19T16:43:35Z")
Hello, After i updated my Elasticsearch to version 7.16, Kibana can’t load Index Management page, with error Cannot read property ‘aliases’ of undefined. Everything else is working fine, my applications are streaming … --- ## [Winlogbeat Manual EVTX Upload - Performance](https://discuss.elastic.co/t/winlogbeat-manual-evtx-upload-performance/294840)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 3:16pm UTC](https://discuss.elastic.co/t/winlogbeat-manual-evtx-upload-performance/294840 "2022-01-19T15:16:35Z")
Hi Guys, I am using winlogbeat on a regular basis to upload multiple evtx files to elastic(with powershell). The problem is that sometimes it takes a very long time for the upload to complete(hours). Is there a way to… --- ## [How to decrypt data who are encrypted in postgres and pass them to elastic before indexing them](https://discuss.elastic.co/t/how-to-decrypt-data-who-are-encrypted-in-postgres-and-pass-them-to-elastic-before-indexing-them/294852)
**Author:** [@Albi\_Zeqollari](https://discuss.elastic.co/u/Albi_Zeqollari)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 4:19pm UTC](https://discuss.elastic.co/t/how-to-decrypt-data-who-are-encrypted-in-postgres-and-pass-them-to-elastic-before-indexing-them/294852 "2022-01-19T16:19:16Z")
Some examples pls! --- ## [Automate Logstash Pipelines, Parsing](https://discuss.elastic.co/t/automate-logstash-pipelines-parsing/294845)
**Author:** [@harry\_cook](https://discuss.elastic.co/u/harry_cook)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 3:50pm UTC](https://discuss.elastic.co/t/automate-logstash-pipelines-parsing/294845 "2022-01-19T15:50:57Z")
Hi Folks, Is there a way to automatically generate logstash pipelines based on certain inputs ? Has anyone worked on such use cases ? --- ## [Vega in Kibana - how to make the chart responsive to resizing](https://discuss.elastic.co/t/vega-in-kibana-how-to-make-the-chart-responsive-to-resizing/294841)
**Author:** [@katja1](https://discuss.elastic.co/u/katja1)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 3:22pm UTC](https://discuss.elastic.co/t/vega-in-kibana-how-to-make-the-chart-responsive-to-resizing/294841 "2022-01-19T15:22:12Z")
Hello all, I created a dashboard in Kibana and included also some Vega visualizations. My problem is that I cannot make the Vega bar chart responsive in sense of dynamically adjusting the size when the window size chang… --- ## [Is there any way to get more than one field from an aggregation?](https://discuss.elastic.co/t/is-there-any-way-to-get-more-than-one-field-from-an-aggregation/294741)
**Author:** [@Maxi\_Donadio](https://discuss.elastic.co/u/Maxi_Donadio)\ **Replies:** 4\ **Last updated:** [January 19, 2022, 2:56pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-get-more-than-one-field-from-an-aggregation/294741 "2022-01-19T14:56:01Z")
Hi! I need to know if it's possible to get more than one value from an aggregation. If I were to write my desired query as SQL it'd be something like: SELECT value1, value2, value3 FROM table WHERE condition. I'd like t… --- ## [Deleted logstash-plain.log - it's not coming back!](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821)
**Author:** [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Replies:** 6\ **Last updated:** [January 19, 2022, 2:12pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821 "2022-01-19T14:12:31Z")
Hi All, Help, in a process of trying to debug i deleted logstash-plain.log from /var/log/logstash. but its not come back! Any ideas how i get it back please? --- ## [One index/index template per module](https://discuss.elastic.co/t/one-index-index-template-per-module/294823)
**Author:** [@emmanuel\_t](https://discuss.elastic.co/u/emmanuel_t)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 1:48pm UTC](https://discuss.elastic.co/t/one-index-index-template-per-module/294823 "2022-01-19T13:48:26Z")
Hello, I'd like to enable just a few filebeat modules (let's say nginx, postgresql). And I'd like to have on Elasticsearch one index per module (per month). So... filebeat-nginx-2022-01 and filebeat-postgresql-2022-01. … --- ## [Could not find or load main class org.elasticsearch.bootstrap.Elasticsearch Caused by: java.lang.ClassNotFoundException: org.elasticsearch.bootstrap.Elasticsearch](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch-caused-by-java-lang-classnotfoundexception-org-elasticsearch-bootstrap-elasticsearch/293451)
**Author:** [@Vivek\_Paralikar](https://discuss.elastic.co/u/Vivek_Paralikar)\ **Replies:** 2\ **Last updated:** [January 19, 2022, 1:44pm UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-bootstrap-elasticsearch-caused-by-java-lang-classnotfoundexception-org-elasticsearch-bootstrap-elasticsearch/293451 "2022-01-19T13:44:57Z")
Starting Elasticsearch Server Error: Could not find or load main class org.… --- ## [Preserve logs original creation sequence when timestamp is identical](https://discuss.elastic.co/t/preserve-logs-original-creation-sequence-when-timestamp-is-identical/294818)
**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 1:30pm UTC](https://discuss.elastic.co/t/preserve-logs-original-creation-sequence-when-timestamp-is-identical/294818 "2022-01-19T13:30:20Z")
Hi, I have logs with similar timestamp out of order: I understand logstash does not preserve creation order. I read that using dissect filter together with grok could solve the issue but can't find any examples. This i… --- ## [Troubles starting elasticsearch.service after the upgrade from 6.8.22 to 7.14.2](https://discuss.elastic.co/t/troubles-starting-elasticsearch-service-after-the-upgrade-from-6-8-22-to-7-14-2/294664)
**Author:** [@Penchev](https://discuss.elastic.co/u/Penchev)\ **Replies:** 4\ **Last updated:** [January 19, 2022, 12:35pm UTC](https://discuss.elastic.co/t/troubles-starting-elasticsearch-service-after-the-upgrade-from-6-8-22-to-7-14-2/294664 "2022-01-19T12:35:26Z")
Hi Folks, I have troubles starting Elasticsearch.service after the upgrade from 6.8.22 to 7.14.2. The errors are related to: failed to load plugin class \[org.Elasticsearch.xpack.security.Security\] Realm settings have… --- ## [Elasticsearch CCR, former follower (leader) index is not writable](https://discuss.elastic.co/t/elasticsearch-ccr-former-follower-leader-index-is-not-writable/292962)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 1\ **Last updated:** [January 19, 2022, 12:29pm UTC](https://discuss.elastic.co/t/elasticsearch-ccr-former-follower-leader-index-is-not-writable/292962 "2022-01-19T12:29:58Z")
I use ES 7.7.1 Below UC that I am trying to test: I have two clusters leader and follower. On leader I have created index, and alias. Starting follow process, I see that index replicated to the follower as well as ali… --- ## [Upgrading ECK operator from 1.0.0-beta1 to latest version](https://discuss.elastic.co/t/upgrading-eck-operator-from-1-0-0-beta1-to-latest-version/293347)
**Author:** [@radw](https://discuss.elastic.co/u/radw)\ **Replies:** 2\ **Last updated:** [January 19, 2022, 12:23pm UTC](https://discuss.elastic.co/t/upgrading-eck-operator-from-1-0-0-beta1-to-latest-version/293347 "2022-01-19T12:23:36Z")
Hey all. I'm having a little bit of a hard time understanding how to upgrade my eck operator and elastic stack version. Currently I'm on eck 1.0.0-beta1 which is compatible with the latest operator as per this guide Up… --- ## [Logstash not running any query except select version()](https://discuss.elastic.co/t/logstash-not-running-any-query-except-select-version/294809)
**Author:** [@Mizo10](https://discuss.elastic.co/u/Mizo10)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 12:19pm UTC](https://discuss.elastic.co/t/logstash-not-running-any-query-except-select-version/294809 "2022-01-19T12:19:00Z")
Hello, I'm new to logstash, I'm running a logstash pipeline configuration in an aws instance with the following configuration : input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://my.domain:3306/db\_name" … --- ## [How to update query on multiple indexes](https://discuss.elastic.co/t/how-to-update-query-on-multiple-indexes/294724)
**Author:** [@pk5859](https://discuss.elastic.co/u/pk5859)\ **Replies:** 3\ **Last updated:** [January 19, 2022, 12:08pm UTC](https://discuss.elastic.co/t/how-to-update-query-on-multiple-indexes/294724 "2022-01-19T12:08:49Z")
I have 3 indexes A, B & C i want to update on all three indexes. However python client.update() syntax won't allow it. \_index="A","B","C" query = {"doc": {"cluster":"1" }} client.update(index=\_index, id=id, body=quer… --- ## [Newbie in Painless](https://discuss.elastic.co/t/newbie-in-painless/294700)
**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\ **Replies:** 13\ **Last updated:** [January 19, 2022, 12:08pm UTC](https://discuss.elastic.co/t/newbie-in-painless/294700 "2022-01-19T12:08:13Z")
Hi Team, I'm struggling so bad to find good examples on how to use painless. I need a script that sums a count of 4 weeks and does the mean of it. Please, can someone share something that could help me do it? A course… --- ## [Elasticsearch log parser](https://discuss.elastic.co/t/elasticsearch-log-parser/294807)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 11:55am UTC](https://discuss.elastic.co/t/elasticsearch-log-parser/294807 "2022-01-19T11:55:56Z")
Hello, I'm using latest ubuntu Linux, and I would to ask You which is the best log reader for logs from for example Elasticsearch logs - I'm using Atom as log editor but don't cover my expectations. I would like to ask… --- ## [Unable to retrieve version information from Elasticsearch nodes. Request timed out](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-request-timed-out/294805)
**Author:** [@nandhini\_r](https://discuss.elastic.co/u/nandhini_r)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 11:50am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-request-timed-out/294805 "2022-01-19T11:50:51Z")
Hi All, Elasticsearch is running, but accessing Elasticsearch from the browser it shouldn’t working, the chrome tab should return JSON what I have seen using curl command. I’ll be sharing the JSON that should be display… --- ## [Elasticsearch behind NAT](https://discuss.elastic.co/t/elasticsearch-behind-nat/294773)
**Author:** [@rudyawall](https://discuss.elastic.co/u/rudyawall)\ **Replies:** 1\ **Last updated:** [January 19, 2022, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-behind-nat/294773 "2022-01-19T11:37:44Z")
Hi Everybody, I already installed the elasticserach but behind the NAT, i'm using google cloud I wanna configuration elasticserach can access from external network, using 0.0.0.0 but always failed to connect when Iam … --- ## [My Filebeat isn't working when pushing Sophos XG firewall logs](https://discuss.elastic.co/t/my-filebeat-isnt-working-when-pushing-sophos-xg-firewall-logs/294799)
**Author:** [@Siyabonga](https://discuss.elastic.co/u/Siyabonga)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 11:15am UTC](https://discuss.elastic.co/t/my-filebeat-isnt-working-when-pushing-sophos-xg-firewall-logs/294799 "2022-01-19T11:15:39Z")
Hi Guys I am getting the following error when configuring Filebeat can any one please assist? Overwriting ILM policy is disabled. Set setup.ilm.overwrite: true for enabling. Index setup finished. Loading dashboards (K… --- ## [Creating a simple "traffic light" indicator using timestamp for one of the revealed images](https://discuss.elastic.co/t/creating-a-simple-traffic-light-indicator-using-timestamp-for-one-of-the-revealed-images/294798)
**Author:** [@hbay1](https://discuss.elastic.co/u/hbay1)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 11:10am UTC](https://discuss.elastic.co/t/creating-a-simple-traffic-light-indicator-using-timestamp-for-one-of-the-revealed-images/294798 "2022-01-19T11:10:40Z")
Hi, I'm trying to create a standard traffic light in kibana canvas based on uptime of some applications. I've been using the following query for showing a green and red square, but now I want to add a yellow square as … --- ## [TLS Certificate Expired issue in Uptime](https://discuss.elastic.co/t/tls-certificate-expired-issue-in-uptime/292565)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 13\ **Last updated:** [January 19, 2022, 11:09am UTC](https://discuss.elastic.co/t/tls-certificate-expired-issue-in-uptime/292565 "2022-01-19T11:09:38Z")
Hi, After renewing certificate on all levels for one domain we still have TLS Certificate showing Expired message in its monitor in Uptime. Interestingly monitor is not down, but shows expired certificate. Anyone know… [Previous page](https://discuss.elastic.co/latest.md?page=1300) [Next page](https://discuss.elastic.co/latest.md?page=1302)