# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1485

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1486

---

## [Kibana installation: why does it try to connect to dynatrace on start up?](https://discuss.elastic.co/t/kibana-installation-why-does-it-try-to-connect-to-dynatrace-on-start-up/283782)

<div class="topic-metadata">

**Author:** [@mrproper](https://discuss.elastic.co/u/mrproper)\
**Replies:** 2\
**Last updated:** [September 10, 2021, 12:09am UTC](https://discuss.elastic.co/t/kibana-installation-why-does-it-try-to-connect-to-dynatrace-on-start-up/283782 "2021-09-10T00:09:37Z")

</div>

Hi! Trying to install Kibana 7.14.1 as yum package or from zip onto CentOS 7. Getting error while starting: \[XXX@YYYY kibana-7.14.1-linux-x86\_64\]$ ./bin/kibana /home/XXX/kibana-7.14.1-linux-x86\_64/src/cli/dist.js:10 …

---

## [The need of gpgkey](https://discuss.elastic.co/t/the-need-of-gpgkey/283774)

<div class="topic-metadata">

**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 11:37pm UTC](https://discuss.elastic.co/t/the-need-of-gpgkey/283774 "2021-09-09T23:37:03Z")

</div>

I am performing my installation of Kibana (full ELK stack) in my production environment now. As I am going through the documentation I see that when installing it indicates the need to add the lines : baseurl=https://…

---

## [Trial license expired](https://discuss.elastic.co/t/trial-license-expired/283705)

<div class="topic-metadata">

**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\
**Replies:** 9\
**Last updated:** [September 9, 2021, 11:26pm UTC](https://discuss.elastic.co/t/trial-license-expired/283705 "2021-09-09T23:26:48Z")

</div>

I am running elastic 7.11 and had the enterprise trial license installed. We have xpack security enabled via the elastic configs and I noticed it says when reverting to basic the security will be disabled. Does changing …

---

## [Install ES stack in a k8s cluster composed of multiple machines](https://discuss.elastic.co/t/install-es-stack-in-a-k8s-cluster-composed-of-multiple-machines/283373)

<div class="topic-metadata">

**Author:** [@bigESFan](https://discuss.elastic.co/u/bigESFan)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 11:25pm UTC](https://discuss.elastic.co/t/install-es-stack-in-a-k8s-cluster-composed-of-multiple-machines/283373 "2021-09-09T23:25:00Z")

</div>

I want to install ES stack in a K8s cluster composed of multiple machines which runs vanilla K8s. These machines are all on-prem machines running Ubuntu, hence I need to install ES stack on in-house servers, not on any …

---

## [Elsticsearch-py doubt create and index](https://discuss.elastic.co/t/elsticsearch-py-doubt-create-and-index/283695)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 6\
**Last updated:** [September 9, 2021, 11:12pm UTC](https://discuss.elastic.co/t/elsticsearch-py-doubt-create-and-index/283695 "2021-09-09T23:12:54Z")

</div>

Hi all I've a doubt about the difference between create and index. link Can someone explain to me when I can use one or the other one? I expose the problem. I read from a queue data and in loop a document at times need t…

---

## [System Integration Filters](https://discuss.elastic.co/t/system-integration-filters/283588)

<div class="topic-metadata">

**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 10:54pm UTC](https://discuss.elastic.co/t/system-integration-filters/283588 "2021-09-09T22:54:09Z")

</div>

Hello, For the System integration for elastic-agent, I was curious if we could filter by log level, or eliminate various Event ID's that we may not want to collect due to noise. Collection of all informational logs at s…

---

## [Bitwise, Elasticsearch outside of App Search, Runtime Fields, and search results](https://discuss.elastic.co/t/bitwise-elasticsearch-outside-of-app-search-runtime-fields-and-search-results/283716)

<div class="topic-metadata">

**Author:** [@dgetz-riskalyze](https://discuss.elastic.co/u/dgetz-riskalyze)\
**Replies:** 4\
**Last updated:** [September 9, 2021, 10:09pm UTC](https://discuss.elastic.co/t/bitwise-elasticsearch-outside-of-app-search-runtime-fields-and-search-results/283716 "2021-09-09T22:09:59Z")

</div>

We are just getting started with App Search. I think the answer is no, but in case we are missing something.... Does App Search support bitwise comparisons? For example, could we store a bunch of values in one field a…

---

## [Removing \_source increases size of index](https://discuss.elastic.co/t/removing-source-increases-size-of-index/283699)

<div class="topic-metadata">

**Author:** [@Dan\_Christensen](https://discuss.elastic.co/u/Dan_Christensen)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 10:06pm UTC](https://discuss.elastic.co/t/removing-source-increases-size-of-index/283699 "2021-09-09T22:06:00Z")

</div>

I've been trying to find ways to optimize my index size in Elasticsearch. In order to understand the size impact of the \_source field, I dumped an index and re-indexed into another index with \_source {enabled:false}. The…

---

## [Logstash - Difference between date into new field](https://discuss.elastic.co/t/logstash-difference-between-date-into-new-field/283818)

<div class="topic-metadata">

**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\
**Replies:** 6\
**Last updated:** [September 9, 2021, 10:02pm UTC](https://discuss.elastic.co/t/logstash-difference-between-date-into-new-field/283818 "2021-09-09T22:02:17Z")

</div>

Hello team, I'm trying to add a new field to metricbeat data collection through logstash. The idea is to create a field from the difference between two dates (@timestamp and system.process.cpu.start\_date). I've made so…

---

## [Questions regarding auto-reload and encryption](https://discuss.elastic.co/t/questions-regarding-auto-reload-and-encryption/283758)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 6\
**Last updated:** [September 9, 2021, 7:40pm UTC](https://discuss.elastic.co/t/questions-regarding-auto-reload-and-encryption/283758 "2021-09-09T19:40:23Z")

</div>

Apologies beforehand for the dilettante question. I have an up and running Logstash configuration. Now and then I edit my grok parser and then I always have to type systemctl restart logstash so that the latest config i…

---

## [How do I delete all the graph vertices for a particular field?](https://discuss.elastic.co/t/how-do-i-delete-all-the-graph-vertices-for-a-particular-field/283706)

<div class="topic-metadata">

**Author:** [@elizobee](https://discuss.elastic.co/u/elizobee)\
**Replies:** 2\
**Last updated:** [September 9, 2021, 7:42pm UTC](https://discuss.elastic.co/t/how-do-i-delete-all-the-graph-vertices-for-a-particular-field/283706 "2021-09-09T19:42:42Z")

</div>

I can deselect or disable a field from appearing in my graph. But this only applies to new vertices. The old ones remain and can be deleted one by one. I have a lot of vertices and do not want to delete them one by on…

---

## [ECE Self-Hosted Network Diagram Questions](https://discuss.elastic.co/t/ece-self-hosted-network-diagram-questions/283804)

<div class="topic-metadata">

**Author:** [@hodops](https://discuss.elastic.co/u/hodops)\
**Replies:** 4\
**Last updated:** [September 9, 2021, 7:05pm UTC](https://discuss.elastic.co/t/ece-self-hosted-network-diagram-questions/283804 "2021-09-09T19:05:16Z")

</div>

A lot of the finer details of the director(and ECE in general) seem to be obfuscated from the administrators/users likely by design for simplicity. However for compliance purposes I need to be able to create traffic flo…

---

## [Infinite extent for field "field": \[Infinity, -Infinity\]](https://discuss.elastic.co/t/infinite-extent-for-field-field-infinity-infinity/282387)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 5:19pm UTC](https://discuss.elastic.co/t/infinite-extent-for-field-field-infinity-infinity/282387 "2021-09-09T17:19:23Z")

</div>

Hi all! I decided to use the suggestion on this link that suggest to create panel of vega with altair. Everything works fine except for the warning. I've tried to remove warnings on setting advance but I dindn't mange to…

---

## [Kibana Visualizations imported into Canvas cannot inherit global time range](https://discuss.elastic.co/t/kibana-visualizations-imported-into-canvas-cannot-inherit-global-time-range/283333)

<div class="topic-metadata">

**Author:** [@Robert\_Gates](https://discuss.elastic.co/u/Robert_Gates)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 4:49pm UTC](https://discuss.elastic.co/t/kibana-visualizations-imported-into-canvas-cannot-inherit-global-time-range/283333 "2021-09-09T16:49:25Z")

</div>

When importing an existing visualisation into a canvas ('Add Element' \> 'Add from Kibana') I expected the global time range to apply to all elements. As it is, it seems to hardcode to last 15 minutes, and I'm unable…

---

## [Logstash Ruby Tmp Folders - Temporary Solution](https://discuss.elastic.co/t/logstash-ruby-tmp-folders-temporary-solution/283793)

<div class="topic-metadata">

**Author:** [@Tydorius](https://discuss.elastic.co/u/Tydorius)\
**Replies:** 0\
**Last updated:** [September 9, 2021, 2:38pm UTC](https://discuss.elastic.co/t/logstash-ruby-tmp-folders-temporary-solution/283793 "2021-09-09T14:38:55Z")

</div>

I am currently experiencing the known issue where JRuby files are not cleaned up in /tmp on CentOS 7. My temporary resolution has been to set up a cron job to remove these folders. To save others trouble, here is my set…

---

## [Can 'scripted field' in index patterns be used to calculate a value using two existing fields?](https://discuss.elastic.co/t/can-scripted-field-in-index-patterns-be-used-to-calculate-a-value-using-two-existing-fields/283778)

<div class="topic-metadata">

**Author:** [@lchen](https://discuss.elastic.co/u/lchen)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 3:36pm UTC](https://discuss.elastic.co/t/can-scripted-field-in-index-patterns-be-used-to-calculate-a-value-using-two-existing-fields/283778 "2021-09-09T15:36:59Z")

</div>

I have two timestamp fields in my index and I want to calculate the time difference between two fields using scripted fields, and after that, I want to use fields in the visualization. is this possible?

---

## [Disable swap on Linux?](https://discuss.elastic.co/t/disable-swap-on-linux/283266)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 5\
**Last updated:** [September 9, 2021, 3:04pm UTC](https://discuss.elastic.co/t/disable-swap-on-linux/283266 "2021-09-09T15:04:22Z")

</div>

Hello Reading this Disable swapping | Elasticsearch Guide \[master\] | Elastic it seems the general advice is to disable swap completely....That being said, I have Elastic, Logstash and Kibana all installed on the same se…

---

## [Lookup fields / index](https://discuss.elastic.co/t/lookup-fields-index/283680)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 4:48pm UTC](https://discuss.elastic.co/t/lookup-fields-index/283680 "2021-09-08T16:48:51Z")

</div>

Hi, Consider an index with a field with error-codes in it (version 7.14.1) . Is it possible to (for example) have another index (or another way to store a list of key:value data) with the errorcode as key and a descrip…

---

## [Encrypt or hide ES credentials in td-agent configuration file](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770)

<div class="topic-metadata">

**Author:** [@Swathi\_Nayak](https://discuss.elastic.co/u/Swathi_Nayak)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 1:49pm UTC](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770 "2021-09-09T13:49:51Z")

</div>

We have a td-agent configuration file that connects to elastic search with SSL enabled. User and password is used for safe connection. But these credentials are in plain text. How to encrypt or hide these credentials? \<m…

---

## [Canvas bar chart: is it possible to have the y-axis in a time format](https://discuss.elastic.co/t/canvas-bar-chart-is-it-possible-to-have-the-y-axis-in-a-time-format/283642)

<div class="topic-metadata">

**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\
**Replies:** 2\
**Last updated:** [September 9, 2021, 1:21pm UTC](https://discuss.elastic.co/t/canvas-bar-chart-is-it-possible-to-have-the-y-axis-in-a-time-format/283642 "2021-09-09T13:21:31Z")

</div>

Hi, I am creating a bar chart on canvas where the x-axis is in months and the y-axis is in seconds for some sort of process to be completed. I was wondering if instead of having the y-axis in seconds you can get it to b…

---

## [MISP objects cannot be stored in Elastic & Kibana](https://discuss.elastic.co/t/misp-objects-cannot-be-stored-in-elastic-kibana/283780)

<div class="topic-metadata">

**Author:** [@Abanob\_Medhat](https://discuss.elastic.co/u/Abanob_Medhat)\
**Replies:** 0\
**Last updated:** [September 9, 2021, 1:13pm UTC](https://discuss.elastic.co/t/misp-objects-cannot-be-stored-in-elastic-kibana/283780 "2021-09-09T13:13:28Z")

</div>

Hi , I have a problem with MISP integration with Filebeat & ELK. I'm using Virustotal module on MISP and the results of virustotoal are saved in objects in the same Event . the problem is that all objects cannot be sa…

---

## [Kibana DMARC IP location](https://discuss.elastic.co/t/kibana-dmarc-ip-location/282574)

<div class="topic-metadata">

**Author:** [@hapkoek](https://discuss.elastic.co/u/hapkoek)\
**Replies:** 4\
**Last updated:** [September 9, 2021, 8:10am UTC](https://discuss.elastic.co/t/kibana-dmarc-ip-location/282574 "2021-09-09T08:10:04Z")

</div>

Hi all, Recently I installed Elastic and Kibana to create a dashboard for DMARC statistics. (ParseDMARC) Currently Kibana uses ParseDMARC objects to import the data. Two of the fields are Source\_IP and Destination\_IP. …

---

## [Elastic Agent won't enroll](https://discuss.elastic.co/t/elastic-agent-wont-enroll/282212)

<div class="topic-metadata">

**Author:** [@greggailly](https://discuss.elastic.co/u/greggailly)\
**Replies:** 11\
**Last updated:** [September 9, 2021, 12:23pm UTC](https://discuss.elastic.co/t/elastic-agent-wont-enroll/282212 "2021-09-09T12:23:07Z")

</div>

Hi, We are having difficulties with some agents not enrolling properly into fleet especially on Windows machines. The setup seems to be ok as we can enroll from some servers. However on other servers when launching th…

---

## [Analyse usage on Kibana](https://discuss.elastic.co/t/analyse-usage-on-kibana/283443)

<div class="topic-metadata">

**Author:** [@Ankit\_Vishwakarma](https://discuss.elastic.co/u/Ankit_Vishwakarma)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 11:53am UTC](https://discuss.elastic.co/t/analyse-usage-on-kibana/283443 "2021-09-09T11:53:13Z")

</div>

I want to capture the user's action on Kibana dashboard. User actions like the open dashboard, click on visualizations, etc. Is there any metric that captures user actions/events? This will help us to identify the usage…

---

## [Java Heap dump consuming disk space](https://discuss.elastic.co/t/java-heap-dump-consuming-disk-space/283068)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 11\
**Last updated:** [September 9, 2021, 11:35am UTC](https://discuss.elastic.co/t/java-heap-dump-consuming-disk-space/283068 "2021-09-09T11:35:41Z")

</div>

We have been getting java heap out of memory errors quite regularly, so this time we decided to take the heap dump and analyze it. But, unfortunately its tough for us to make anything out of it. So we are seeking for …

---

## [Logstash - based on filed type create a new field](https://discuss.elastic.co/t/logstash-based-on-filed-type-create-a-new-field/283684)

<div class="topic-metadata">

**Author:** [@antonisnyc94](https://discuss.elastic.co/u/antonisnyc94)\
**Replies:** 5\
**Last updated:** [September 9, 2021, 10:43am UTC](https://discuss.elastic.co/t/logstash-based-on-filed-type-create-a-new-field/283684 "2021-09-09T10:43:42Z")

</div>

Hello, I've been trying for 1-2 days to figure out why to create new fields when the type of the event is object but I cant seem to make it work.. This is the error im getting: Could not index event to Elasticsearch. …

---

## [Is there any method to show specific host into one single chart in the dashboard?](https://discuss.elastic.co/t/is-there-any-method-to-show-specific-host-into-one-single-chart-in-the-dashboard/283166)

<div class="topic-metadata">

**Author:** [@afan](https://discuss.elastic.co/u/afan)\
**Replies:** 4\
**Last updated:** [September 9, 2021, 10:41am UTC](https://discuss.elastic.co/t/is-there-any-method-to-show-specific-host-into-one-single-chart-in-the-dashboard/283166 "2021-09-09T10:41:41Z")

</div>

I am trying to build the dashboard right now and able to show the CPU/memory usage by single specific host as below. however, I would like to group some specific hostnames (just like uat servers or app servers) to sho…

---

## [How get sum for example with integer fields of each doc](https://discuss.elastic.co/t/how-get-sum-for-example-with-integer-fields-of-each-doc/283747)

<div class="topic-metadata">

**Author:** [@Grigor\_Martirosyan](https://discuss.elastic.co/u/Grigor_Martirosyan)\
**Replies:** 5\
**Last updated:** [September 9, 2021, 10:39am UTC](https://discuss.elastic.co/t/how-get-sum-for-example-with-integer-fields-of-each-doc/283747 "2021-09-09T10:39:33Z")

</div>

I use elastic with spring boot ,and have integer fields in my doc and now I need to do some calculation with those fields for each doc ,is that possible?? this is some try Script script = new Script("{\\n" + …

---

## [Linux file beat configuration not working](https://discuss.elastic.co/t/linux-file-beat-configuration-not-working/283731)

<div class="topic-metadata">

**Author:** [@Kannan\_Rajendran](https://discuss.elastic.co/u/Kannan_Rajendran)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 10:18am UTC](https://discuss.elastic.co/t/linux-file-beat-configuration-not-working/283731 "2021-09-09T10:18:34Z")

</div>

i'm trying to take log from linux machine with oracle database installed. Based on the below configuration the filebeat doesn't pull any info to elastic search. filebeat.inputs: - type: log enabled: true paths: …

---

## [Filebeat logstash communication](https://discuss.elastic.co/t/filebeat-logstash-communication/283757)

<div class="topic-metadata">

**Author:** [@Nitzan\_Zaifman](https://discuss.elastic.co/u/Nitzan_Zaifman)\
**Replies:** 0\
**Last updated:** [September 9, 2021, 9:05am UTC](https://discuss.elastic.co/t/filebeat-logstash-communication/283757 "2021-09-09T09:05:35Z")

</div>

Hi, I've took a look at However I still have multiple questions regarding filebeat's logstash output. How many TCP connections are generated? from my testing even with multiple pipelines (the default) and setting u…

[Previous page](https://discuss.elastic.co/latest.md?page=1484)

[Next page](https://discuss.elastic.co/latest.md?page=1486)
