# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1518

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1519

---

## [Is it possible to Upgrade the elastic-operator without the downtime](https://discuss.elastic.co/t/is-it-possible-to-upgrade-the-elastic-operator-without-the-downtime/281960)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 12:44pm UTC](https://discuss.elastic.co/t/is-it-possible-to-upgrade-the-elastic-operator-without-the-downtime/281960 "2021-08-19T12:44:11Z")

</div>

We are trying to upgrade from elastic-operator-1.1.0 to 1.3.0,.Is there any way to upgrade the operator without any rolling restarts for existing elasticsearch pods.

---

## [Filebeat holding deleted files... please help with 'correct' values to use in close\_inactive, etc](https://discuss.elastic.co/t/filebeat-holding-deleted-files-please-help-with-correct-values-to-use-in-close-inactive-etc/281956)

<div class="topic-metadata">

**Author:** [@baldpoem54](https://discuss.elastic.co/u/baldpoem54)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 12:35pm UTC](https://discuss.elastic.co/t/filebeat-holding-deleted-files-please-help-with-correct-values-to-use-in-close-inactive-etc/281956 "2021-08-19T12:35:53Z")

</div>

Hoping the community here can help me as google hasn't. I have a case where filebeat is holding deleted files open until the process is recycled. I know there on configs to help address this, but I'm struggling on what…

---

## [Unselect all fields at once in Graph in Kibana](https://discuss.elastic.co/t/unselect-all-fields-at-once-in-graph-in-kibana/280875)

<div class="topic-metadata">

**Author:** [@vladik22](https://discuss.elastic.co/u/vladik22)\
**Replies:** 6\
**Last updated:** [August 19, 2021, 11:47am UTC](https://discuss.elastic.co/t/unselect-all-fields-at-once-in-graph-in-kibana/280875 "2021-08-19T11:47:35Z")

</div>

Hi I have Bar graph with a lot of fields in Vertical axis, about 100. How to unselect all them at once? I want to turn on the fields only that I need every time. If I can turn of them all at start and turn on a few fiel…

---

## [Elastic sinc with serilog](https://discuss.elastic.co/t/elastic-sinc-with-serilog/281950)

<div class="topic-metadata">

**Author:** [@Shakila\_Jayarathna](https://discuss.elastic.co/u/Shakila_Jayarathna)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 11:55am UTC](https://discuss.elastic.co/t/elastic-sinc-with-serilog/281950 "2021-08-19T11:55:15Z")

</div>

Hello, here is my code sample using serilog to log details for elastic search. And i dont get any error. But my log is not working. Any help

---

## [Duplicate Y-Axis value on number](https://discuss.elastic.co/t/duplicate-y-axis-value-on-number/281790)

<div class="topic-metadata">

**Author:** [@Celiken](https://discuss.elastic.co/u/Celiken)\
**Replies:** 12\
**Last updated:** [August 19, 2021, 11:51am UTC](https://discuss.elastic.co/t/duplicate-y-axis-value-on-number/281790 "2021-08-19T11:51:18Z")

</div>

Hi, I'm trying to create a vertical bar visualizations, but since the Y-axis range isn't big, it creates some weird things. I want to visualize the max value of invalidBatteryCount over time, this value can be in the r…

---

## [Possible to determine time diff between 2 entries which are groupable](https://discuss.elastic.co/t/possible-to-determine-time-diff-between-2-entries-which-are-groupable/281916)

<div class="topic-metadata">

**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\
**Replies:** 2\
**Last updated:** [August 19, 2021, 10:47am UTC](https://discuss.elastic.co/t/possible-to-determine-time-diff-between-2-entries-which-are-groupable/281916 "2021-08-19T10:47:13Z")

</div>

Hi, I would like to know if its possible in Kibana to be able to determine a duration time between 2 entries with the same correlationId. For example i have 2 entries in my index with both the same correlationId so they…

---

## [Watcher if log occours](https://discuss.elastic.co/t/watcher-if-log-occours/281928)

<div class="topic-metadata">

**Author:** [@xennn](https://discuss.elastic.co/u/xennn)\
**Replies:** 2\
**Last updated:** [August 19, 2021, 10:37am UTC](https://discuss.elastic.co/t/watcher-if-log-occours/281928 "2021-08-19T10:37:19Z")

</div>

Hello, I would like to build a watcher that sends me an alarm if a log message no longer occurs every 1 minute. How can this best be done?

---

## [Search query does not return expected records](https://discuss.elastic.co/t/search-query-does-not-return-expected-records/281941)

<div class="topic-metadata">

**Author:** [@Rammi22](https://discuss.elastic.co/u/Rammi22)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 9:56am UTC](https://discuss.elastic.co/t/search-query-does-not-return-expected-records/281941 "2021-08-19T09:56:15Z")

</div>

Hello, i have documents with following structure: ... // doc 1 "\_source": { ..., "data": { "main": { ... "refAccount1": 1, "refAccount2": 1, "refAccount3": 1 "refType": 1, }, …

---

## [Can I pass two sets of values to the reduce script?](https://discuss.elastic.co/t/can-i-pass-two-sets-of-values-to-the-reduce-script/281665)

<div class="topic-metadata">

**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 10:13am UTC](https://discuss.elastic.co/t/can-i-pass-two-sets-of-values-to-the-reduce-script/281665 "2021-08-19T10:13:06Z")

</div>

Hi all, I'm preparing an scripted metric in order to perform the division of two sums and display it in a Scripted Metric in Kibana (average viewing hours per user). The problem I'm facing is that I need to perform the…

---

## [How to disable the login page of opendistro kibana 7.10.2 version in Windows](https://discuss.elastic.co/t/how-to-disable-the-login-page-of-opendistro-kibana-7-10-2-version-in-windows/281938)

<div class="topic-metadata">

**Author:** [@sai2](https://discuss.elastic.co/u/sai2)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 9:54am UTC](https://discuss.elastic.co/t/how-to-disable-the-login-page-of-opendistro-kibana-7-10-2-version-in-windows/281938 "2021-08-19T09:54:46Z")

</div>

How to disable the login page of opendistro kibana 7.10.2 version in Windows Can any know this, Could you please help me on that ASAP

---

## [Logstash systemd service restarts itself](https://discuss.elastic.co/t/logstash-systemd-service-restarts-itself/279941)

<div class="topic-metadata">

**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\
**Replies:** 2\
**Last updated:** [August 19, 2021, 8:53am UTC](https://discuss.elastic.co/t/logstash-systemd-service-restarts-itself/279941 "2021-08-19T08:53:15Z")

</div>

Hello community, I'm running a logstash instance with the following config via a systemd service for minute-wise updates of an ES index: input { jdbc { jdbc\_driver\_class =\> "Java::oracle.jdbc.dr…

---

## [Starting separate logstash pipeline incorrectly starts Logstash Service](https://discuss.elastic.co/t/starting-separate-logstash-pipeline-incorrectly-starts-logstash-service/281933)

<div class="topic-metadata">

**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 9:19am UTC](https://discuss.elastic.co/t/starting-separate-logstash-pipeline-incorrectly-starts-logstash-service/281933 "2021-08-19T09:19:18Z")

</div>

Hi all, I've noticed recently that my Logstash service sometimes gets started for an unknown reason when I start a separate Logstash pipeline. The expected behavior is that this single Logstash instance is started and …

---

## [Not Able to connect my apm-agent to my apm -server hosted on different aws servers](https://discuss.elastic.co/t/not-able-to-connect-my-apm-agent-to-my-apm-server-hosted-on-different-aws-servers/281873)

<div class="topic-metadata">

**Author:** [@Harshil\_Narielwala](https://discuss.elastic.co/u/Harshil_Narielwala)\
**Replies:** 2\
**Last updated:** [August 19, 2021, 9:14am UTC](https://discuss.elastic.co/t/not-able-to-connect-my-apm-agent-to-my-apm-server-hosted-on-different-aws-servers/281873 "2021-08-19T09:14:53Z")

</div>

Hi Team, I have hosted an apm-server on one of my servers with host as localhost:8200. I am using a java application via tomcat and I have provided -Delastic.apm.server\_url=http://apm-server-ip:8200 But the java appli…

---

## [Filebeat multiline pattern for PHP stack trace](https://discuss.elastic.co/t/filebeat-multiline-pattern-for-php-stack-trace/281003)

<div class="topic-metadata">

**Author:** [@Thessis940](https://discuss.elastic.co/u/Thessis940)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 8:38am UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-for-php-stack-trace/281003 "2021-08-19T08:38:06Z")

</div>

I am trying to import the PHP FPM logs into an ELK stack. For this I use the filebeat to read the files. Before sending this data to logstash, the multiline log entries should be merged. For this I built this filebeat c…

---

## [Elastic Agents disappearing](https://discuss.elastic.co/t/elastic-agents-disappearing/280172)

<div class="topic-metadata">

**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\
**Replies:** 23\
**Last updated:** [August 19, 2021, 8:27am UTC](https://discuss.elastic.co/t/elastic-agents-disappearing/280172 "2021-08-19T08:27:36Z")

</div>

I'm on 7.13.4 using fleet server and my agents have disappeared overnight. I've tried restarting the entire cluster (in elastic cloud) and the agents all still show as offline in fleet. The cluster health is al good too…

---

## [How to use new elasticsearch typescript types](https://discuss.elastic.co/t/how-to-use-new-elasticsearch-typescript-types/281924)

<div class="topic-metadata">

**Author:** [@voldemort02](https://discuss.elastic.co/u/voldemort02)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 8:06am UTC](https://discuss.elastic.co/t/how-to-use-new-elasticsearch-typescript-types/281924 "2021-08-19T08:06:00Z")

</div>

I want to use new elastic search types as per this TypeScript support | Elasticsearch Node.js client \[7.x\] | Elastic document but if I do // try the new code completion when building a query! const response = await clie…

---

## [Webhdfs output writes not all fields](https://discuss.elastic.co/t/webhdfs-output-writes-not-all-fields/281919)

<div class="topic-metadata">

**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 7:54am UTC](https://discuss.elastic.co/t/webhdfs-output-writes-not-all-fields/281919 "2021-08-19T07:54:50Z")

</div>

Hi, community, I'm using webhdfs to write my logstash events to hdfs. But in hdfs I see only part of initial messages. In logstash: {"@timestamp":"2021-08-19T07:45:33.373Z","eventtype":"166","program":"Hostd","@version…

---

## [Dynamic height in vega visualizations](https://discuss.elastic.co/t/dynamic-height-in-vega-visualizations/281649)

<div class="topic-metadata">

**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 7:24am UTC](https://discuss.elastic.co/t/dynamic-height-in-vega-visualizations/281649 "2021-08-19T07:24:47Z")

</div>

Hi, This is related to Creating Vega visualization with Image in kibana v 7.13 - Elastic Stack / Kibana - Discuss the Elastic Stack I've created visualization on kibana, and its displaying accurate data. Whenever I ap…

---

## [Elastic Synthetics vs heartbeat](https://discuss.elastic.co/t/elastic-synthetics-vs-heartbeat/281660)

<div class="topic-metadata">

**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 7:19am UTC](https://discuss.elastic.co/t/elastic-synthetics-vs-heartbeat/281660 "2021-08-19T07:19:38Z")

</div>

Hello, Could somebody tell me what the differents are between Elastic Synthetics and Heartbeat? It looks the same for me. Regards, Robin

---

## [ILM Retry API not honoring timeouts](https://discuss.elastic.co/t/ilm-retry-api-not-honoring-timeouts/281772)

<div class="topic-metadata">

**Author:** [@Himanshu\_Mishra](https://discuss.elastic.co/u/Himanshu_Mishra)\
**Replies:** 5\
**Last updated:** [August 19, 2021, 7:10am UTC](https://discuss.elastic.co/t/ilm-retry-api-not-honoring-timeouts/281772 "2021-08-19T07:10:57Z")

</div>

I'm try to retry ILM steps for all indexes, using following command, however POST \*/\_ilm/retry { "timeout": "30m", "master\_timeout": "30m" } Still following error is thrown. Is there another param to override proce…

---

## [Logstash OData endpoint](https://discuss.elastic.co/t/logstash-odata-endpoint/281910)

<div class="topic-metadata">

**Author:** [@Jakub\_Kaczmarek](https://discuss.elastic.co/u/Jakub_Kaczmarek)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 6:57am UTC](https://discuss.elastic.co/t/logstash-odata-endpoint/281910 "2021-08-19T06:57:08Z")

</div>

Hi, I'm using http\_pooler in order to fetch data from OData endpoint. url =\> "https://odata-XXXXX.com/v2.0/Inputs?apikey=apikey" -\> works correct url =\> "https://odata-XXXXX.com/v2.0/Inputs?$orderby=timestamp desc&api…

---

## [Range Aggregation is not working properly for float fields](https://discuss.elastic.co/t/range-aggregation-is-not-working-properly-for-float-fields/281908)

<div class="topic-metadata">

**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 6:41am UTC](https://discuss.elastic.co/t/range-aggregation-is-not-working-properly-for-float-fields/281908 "2021-08-19T06:41:57Z")

</div>

Hi, According to the documentation range aggreagation creates buckets where from in inclusive and to is exclusive. when working with float fields Elasticsearch seem to work vise versa and classify to the wrong bucket. I…

---

## [Logstash Crashback](https://discuss.elastic.co/t/logstash-crashback/281909)

<div class="topic-metadata">

**Author:** [@Vincent\_Ngai](https://discuss.elastic.co/u/Vincent_Ngai)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 6:42am UTC](https://discuss.elastic.co/t/logstash-crashback/281909 "2021-08-19T06:42:27Z")

</div>

Here is background My logstash version : logstash\_oss 681 My logstash is a dockerversion (install into k8s) and my logstash docker file like this FROM docker.elastic.co/logstash/logstash-oss:6.8.1 RUN logstash-plugin …

---

## [Search-ui suggestions from different engine best practice](https://discuss.elastic.co/t/search-ui-suggestions-from-different-engine-best-practice/281468)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 5:39am UTC](https://discuss.elastic.co/t/search-ui-suggestions-from-different-engine-best-practice/281468 "2021-08-19T05:39:28Z")

</div>

Hello, I'm using search-ui and I was provided with a list of suggestions I have to add to the autocomplete. I want to know what's the best way to implement it on the search-ui app. I have this ideas: Ingest suggest…

---

## [How can I save AWS xray trace data to Elasticsearch via APM?](https://discuss.elastic.co/t/how-can-i-save-aws-xray-trace-data-to-elasticsearch-via-apm/281898)

<div class="topic-metadata">

**Author:** [@zhaoyi0113](https://discuss.elastic.co/u/zhaoyi0113)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 4:12am UTC](https://discuss.elastic.co/t/how-can-i-save-aws-xray-trace-data-to-elasticsearch-via-apm/281898 "2021-08-19T04:12:17Z")

</div>

I am using XRay in AWS service and I'd like to view these traces in Kibana. But I can't find a way to make APM support xray data. Is there a solution for me to use?

---

## [Dynamic index names](https://discuss.elastic.co/t/dynamic-index-names/281816)

<div class="topic-metadata">

**Author:** [@rudo1](https://discuss.elastic.co/u/rudo1)\
**Replies:** 5\
**Last updated:** [August 19, 2021, 4:32am UTC](https://discuss.elastic.co/t/dynamic-index-names/281816 "2021-08-19T04:32:20Z")

</div>

Hi. I'm facing a problem with creating dynamic index names. I have few if statemnts like shown below to add new fields, but I can't see anything in kibana when I try to name index dynamically based on its value. filte…

---

## [How can I view all AWS metrics namespace in Kibana?](https://discuss.elastic.co/t/how-can-i-view-all-aws-metrics-namespace-in-kibana/281895)

<div class="topic-metadata">

**Author:** [@zhaoyi0113](https://discuss.elastic.co/u/zhaoyi0113)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 3:15am UTC](https://discuss.elastic.co/t/how-can-i-view-all-aws-metrics-namespace-in-kibana/281895 "2021-08-19T03:15:56Z")

</div>

I am using Kibana to query metrics from AWS. When I open Metrics in Kibana, I can only see these 4 metrics. But I have configured many metrics set and namespace in metricbeat. Is there any reason it only shows 4? How can…

---

## [How to listen for index change events](https://discuss.elastic.co/t/how-to-listen-for-index-change-events/281893)

<div class="topic-metadata">

**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 2:47am UTC](https://discuss.elastic.co/t/how-to-listen-for-index-change-events/281893 "2021-08-19T02:47:59Z")

</div>

Hi My demand is real-time statistics. Can I listen for changes in an index? For example, if the value of a field changes, I can monitor it and make statistics again. :slightly\_smiling\_face:

---

## [Can a winlogbeats agent be used as a relay?](https://discuss.elastic.co/t/can-a-winlogbeats-agent-be-used-as-a-relay/281892)

<div class="topic-metadata">

**Author:** [@jeromeat](https://discuss.elastic.co/u/jeromeat)\
**Replies:** 1\
**Last updated:** [August 19, 2021, 12:53am UTC](https://discuss.elastic.co/t/can-a-winlogbeats-agent-be-used-as-a-relay/281892 "2021-08-19T00:53:46Z")

</div>

Is it possible for one Windows server running Winlogbeats to forward its windows event logs to another Windows server running Winlogbeats that can then forward/relay them to elastic? I'd prefer not to go through the com…

---

## [Elastic Cloud Enterprise 2.11.0 Released](https://discuss.elastic.co/t/elastic-cloud-enterprise-2-11-0-released/281890)

<div class="topic-metadata">

**Author:** [@Ryan\_Hass](https://discuss.elastic.co/u/Ryan_Hass)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 12:13am UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-2-11-0-released/281890 "2021-08-19T00:13:18Z")

</div>

We are excited to announce the release of ECE 2.11.0! Release Notes: Elastic Cloud Enterprise 2.11.0 | Elastic Cloud Enterprise Reference \[2.11\] | Elastic

[Previous page](https://discuss.elastic.co/latest.md?page=1517)

[Next page](https://discuss.elastic.co/latest.md?page=1519)
