# Latest **URL:** https://discuss.elastic.co/latest.md?page=1580 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1581 --- ## [Scripted field calculation with division](https://discuss.elastic.co/t/scripted-field-calculation-with-division/278284)
**Author:** [@jogabonito](https://discuss.elastic.co/u/jogabonito)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 2:34pm UTC](https://discuss.elastic.co/t/scripted-field-calculation-with-division/278284 "2021-07-09T14:34:38Z")
Hi I want to make a scripted field using a simple calculation by using summation and dividing, but I just keep getting 0 and the error-message: "Unable to write index pattern! Refresh the page to get the most up to dat… --- ## [Pipeline continues when stopping Logstash service](https://discuss.elastic.co/t/pipeline-continues-when-stopping-logstash-service/277936)
**Author:** [@chris\_ts24](https://discuss.elastic.co/u/chris_ts24)\ **Replies:** 2\ **Last updated:** [July 9, 2021, 1:58pm UTC](https://discuss.elastic.co/t/pipeline-continues-when-stopping-logstash-service/277936 "2021-07-09T13:58:26Z")
Logstash v.7.13.2 Hi all, I'm successfully running 3 logstash instances via the following pipelines.yml file to keep an elasticsearch index up-to-date with changes to Oracle database records and windows logs: - pipeli… --- ## [Misleading Sum Date Histogram chart with Split Series](https://discuss.elastic.co/t/misleading-sum-date-histogram-chart-with-split-series/278264)
**Author:** [@Quim\_Fornaguera](https://discuss.elastic.co/u/Quim_Fornaguera)\ **Replies:** 6\ **Last updated:** [July 9, 2021, 1:40pm UTC](https://discuss.elastic.co/t/misleading-sum-date-histogram-chart-with-split-series/278264 "2021-07-09T13:40:55Z")
Hello y'all! When I Create a Sum chart with date histogram and Split Series by Significant Terms (where should be no specific order), I get the series sorted anyway independently of the value of the SUM calculation. … --- ## [SSL Handshake error while adding node to elasticsearch](https://discuss.elastic.co/t/ssl-handshake-error-while-adding-node-to-elasticsearch/278283)
**Author:** [@rohan0018](https://discuss.elastic.co/u/rohan0018)\ **Replies:** 0\ **Last updated:** [July 9, 2021, 1:18pm UTC](https://discuss.elastic.co/t/ssl-handshake-error-while-adding-node-to-elasticsearch/278283 "2021-07-09T13:18:26Z")
Hello I am trying to add node in elasticsearch cluster, when I restart elasticsearch service on data node it give below error. "\[2021-07-09T18:14:25,561\]\[WARN \]\[o.e.t.TcpTransport \] \[NODE2\] exception caught on transpor… --- ## [Illegal\_argument\_exception error](https://discuss.elastic.co/t/illegal-argument-exception-error/277816)
**Author:** [@keyofstarrysky973](https://discuss.elastic.co/u/keyofstarrysky973)\ **Replies:** 2\ **Last updated:** [July 9, 2021, 1:15pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-error/277816 "2021-07-09T13:15:40Z")
Hello Team. I'm trying to implement a basic lifecycle policy, in order to delete an index after X hours (this lifecycle policy is just for testing). In my setup, I'm using to beats agents (Winlogbeat and Metricbeat). I … --- ## [From Splunk to ELK: how to perform statistic searches?](https://discuss.elastic.co/t/from-splunk-to-elk-how-to-perform-statistic-searches/277644)
**Author:** [@Wooden\_tree](https://discuss.elastic.co/u/Wooden_tree)\ **Replies:** 2\ **Last updated:** [July 9, 2021, 1:13pm UTC](https://discuss.elastic.co/t/from-splunk-to-elk-how-to-perform-statistic-searches/277644 "2021-07-09T13:13:59Z")
Hi, I spent last few years with Splunk and now I’m an ELK user. I’d like to know if there is a way to perform a statistical search in ELK. Let’s say, I have some firewall logs and I’d like to use it to detect a port sc… --- ## [APM ApiKey Failing with Unauthorized (Wrong permissions documented?)](https://discuss.elastic.co/t/apm-apikey-failing-with-unauthorized-wrong-permissions-documented/277663)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 10\ **Last updated:** [July 9, 2021, 12:31pm UTC](https://discuss.elastic.co/t/apm-apikey-failing-with-unauthorized-wrong-permissions-documented/277663 "2021-07-09T12:31:57Z")
Kibana version: 7.13.2 Elasticsearch version: 7.13.2 APM Server version: 7.13.2 APM Agent language and version: N/A Browser version: N/A Original install method (e.g. download page, yum, deb, from source, etc.)… --- ## [Automate export of Kibana dashboard CSV](https://discuss.elastic.co/t/automate-export-of-kibana-dashboard-csv/278260)
**Author:** [@Core\_Sec](https://discuss.elastic.co/u/Core_Sec)\ **Replies:** 3\ **Last updated:** [July 9, 2021, 12:21pm UTC](https://discuss.elastic.co/t/automate-export-of-kibana-dashboard-csv/278260 "2021-07-09T12:21:05Z")
Hi All, I need to download the CSV data that generated by Kibana dashboard. I'm struggling with selenium to automate the manual download without much luck But it seems like very not generic and robust way to do that… --- ## [Getting Error in kibana while using xpach](https://discuss.elastic.co/t/getting-error-in-kibana-while-using-xpach/278245)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 4\ **Last updated:** [July 9, 2021, 12:14pm UTC](https://discuss.elastic.co/t/getting-error-in-kibana-while-using-xpach/278245 "2021-07-09T12:14:57Z")
Hi experts, I am using ELK version 7.12.0. I have secure my Elasticsearch With Xpack. so that i created http.p12 and elasticsearch-ca.pem certificates . And I configured it. In that Elasticsearch is working fine. But … --- ## [Ensuring master election in elastic search cluster is among desired nodes](https://discuss.elastic.co/t/ensuring-master-election-in-elastic-search-cluster-is-among-desired-nodes/277664)
**Author:** [@mahudees](https://discuss.elastic.co/u/mahudees)\ **Replies:** 3\ **Last updated:** [July 9, 2021, 12:00pm UTC](https://discuss.elastic.co/t/ensuring-master-election-in-elastic-search-cluster-is-among-desired-nodes/277664 "2021-07-09T12:00:25Z")
Hi, We have a 3 node elastic cluster running as part of our application. All the 3 are master eligible nodes. We also have mongodb cluster and our application cluster also running in the same node. Design is, master of… --- ## [Filebeat: Incorrect HTTP method after upgrade to 7.13](https://discuss.elastic.co/t/filebeat-incorrect-http-method-after-upgrade-to-7-13/277964)
**Author:** [@PascalTurbo](https://discuss.elastic.co/u/PascalTurbo)\ **Replies:** 3\ **Last updated:** [July 9, 2021, 11:52am UTC](https://discuss.elastic.co/t/filebeat-incorrect-http-method-after-upgrade-to-7-13/277964 "2021-07-09T11:52:07Z")
Hi There, I'm using filebeat on a windows server with iis module enabled. After upgrading from 7.10 to 7.13 it starts writing this error. I don't understand why, because the documentation lists PUT method and I don't th… --- ## [Install pulgin in kibana](https://discuss.elastic.co/t/install-pulgin-in-kibana/278165)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 3\ **Last updated:** [July 9, 2021, 11:47am UTC](https://discuss.elastic.co/t/install-pulgin-in-kibana/278165 "2021-07-09T11:47:42Z")
Hi, I am trying to install plugin on centos 7.x in kibana 7.12.0 by command sudo bin/kibana-plugin install file:///home/mykibanaplugin/ai\_analyst-7.12.0.zip It is giving error Plugin installation was unsuccessful du… --- ## [Keystore Issue on Suse and windows](https://discuss.elastic.co/t/keystore-issue-on-suse-and-windows/278275)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 0\ **Last updated:** [July 9, 2021, 11:21am UTC](https://discuss.elastic.co/t/keystore-issue-on-suse-and-windows/278275 "2021-07-09T11:21:55Z")
I am trying to create logstash keystore and winlogbeat keystore, but I am getting the below error. However I was able to create filebeat keystore. Below is the error for logstash on Suse linux, localhost:/usr/share/lo… --- ## [Filebeat stops working with error message UDP Package size to large](https://discuss.elastic.co/t/filebeat-stops-working-with-error-message-udp-package-size-to-large/278151)
**Author:** [@rolandmueller](https://discuss.elastic.co/u/rolandmueller)\ **Replies:** 2\ **Last updated:** [July 9, 2021, 11:21am UTC](https://discuss.elastic.co/t/filebeat-stops-working-with-error-message-udp-package-size-to-large/278151 "2021-07-09T11:21:17Z")
Hello As in the log files it's recommeded to report this I would like todo so. I have Filebeat installed (7.13.2) on Windows Server 2019 (1809). We have Air Watch Cloud Connector (19.12) configured for sending Syslog da… --- ## [Desired fields did get create after modifying logstash config](https://discuss.elastic.co/t/desired-fields-did-get-create-after-modifying-logstash-config/278039)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 6\ **Last updated:** [July 9, 2021, 10:28am UTC](https://discuss.elastic.co/t/desired-fields-did-get-create-after-modifying-logstash-config/278039 "2021-07-09T10:28:12Z")
Hi All, I have created two different elastic search clusters. In first cluster (created newly) ,(v 7.13.2), I have created below config in pipeline.conf under conf.d for logstash and it worked as I see expected fields … --- ## [ElasticSearch: Order top-level aggregation buckets based on reverse\_nested doc\_count](https://discuss.elastic.co/t/elasticsearch-order-top-level-aggregation-buckets-based-on-reverse-nested-doc-count/278250)
**Author:** [@afasias](https://discuss.elastic.co/u/afasias)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-order-top-level-aggregation-buckets-based-on-reverse-nested-doc-count/278250 "2021-07-09T10:23:58Z")
Hi. My Elasticsearch info: { "version": { "number": "6.3.1", "build\_flavor": "oss", "build\_type": "zip", "build\_hash": "9d3e794", "build\_date": "2020-06-09T23:40:32.185794Z",… --- ## [Kibana launch failed](https://discuss.elastic.co/t/kibana-launch-failed/277629)
**Author:** [@EpLiar](https://discuss.elastic.co/u/EpLiar)\ **Replies:** 18\ **Last updated:** [July 9, 2021, 9:34am UTC](https://discuss.elastic.co/t/kibana-launch-failed/277629 "2021-07-09T09:34:44Z")
I deploy elasticsearch on 192.168.50.216 and 192.168.50.69. Both are working. \[epi@localhost ~\]$ curl 192.168.50.69:9200 { "name" : "EpCent-1", "cluster\_name" : "EpCluster", "cluster\_uuid" : "XuZIcIMhR46iStO7LJIdN… --- ## [How to connect prometheus metrics with openTelemtry report trace data](https://discuss.elastic.co/t/how-to-connect-prometheus-metrics-with-opentelemtry-report-trace-data/278259)
**Author:** [@lisiyu](https://discuss.elastic.co/u/lisiyu)\ **Replies:** 0\ **Last updated:** [July 9, 2021, 9:16am UTC](https://discuss.elastic.co/t/how-to-connect-prometheus-metrics-with-opentelemtry-report-trace-data/278259 "2021-07-09T09:16:16Z")
Kibana version: 7.13.0 Elasticsearch version: 7.13.0 APM Server version: 7.13.0 \*\*Original install method : k8s Is there anything special in your setup? Using the kafka outputs. No changed index pattern,generated cu… --- ## [What is best practice for indexing for hot/warm/cold...daily indices?](https://discuss.elastic.co/t/what-is-best-practice-for-indexing-for-hot-warm-cold-daily-indices/278196)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 9:00am UTC](https://discuss.elastic.co/t/what-is-best-practice-for-indexing-for-hot-warm-cold-daily-indices/278196 "2021-07-09T09:00:58Z")
I have a ILM policy for 7 days in hot, 23 days in warm and the rest in cold. Should I have a new index created every day for this? --- ## [Crear nuevos valores dinamicos](https://discuss.elastic.co/t/crear-nuevos-valores-dinamicos/277962)
**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\ **Replies:** 6\ **Last updated:** [July 9, 2021, 8:40am UTC](https://discuss.elastic.co/t/crear-nuevos-valores-dinamicos/277962 "2021-07-09T08:40:00Z")
Hola a todos espero que me puedan ayudar, por el momento estoy entrando a este mundo, y me gustaría saber como se podría hacer lo siguiente: tengo eventos que llegan cada vez una máquina realiza un producto junto con s… --- ## [Daily index not created](https://discuss.elastic.co/t/daily-index-not-created/278215)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 6\ **Last updated:** [July 9, 2021, 8:39am UTC](https://discuss.elastic.co/t/daily-index-not-created/278215 "2021-07-09T08:39:39Z")
Hi, I see below indices getting created daily without an issue. yellow open access\_server-2021.07.06 HGHg9wiBTz-42qxzIAuV3A 1 1 203 0 341.5kb 341.5kb yellow open access\_serv… --- ## [Ilm is creating an infinite initial index of {index\_name}-000001](https://discuss.elastic.co/t/ilm-is-creating-an-infinite-initial-index-of-index-name-000001/278254)
**Author:** [@Stewart](https://discuss.elastic.co/u/Stewart)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 8:37am UTC](https://discuss.elastic.co/t/ilm-is-creating-an-infinite-initial-index-of-index-name-000001/278254 "2021-07-09T08:37:26Z")
I would like to ask an ILM related issue. The index is being deleted with ilm and it is working, but from a certain moment, the initial 0000001 index is created in the indices that are suddenly well rolled over, and th… --- ## [How to find relations between independent documents within an index](https://discuss.elastic.co/t/how-to-find-relations-between-independent-documents-within-an-index/278107)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 6\ **Last updated:** [July 9, 2021, 8:30am UTC](https://discuss.elastic.co/t/how-to-find-relations-between-independent-documents-within-an-index/278107 "2021-07-09T08:30:41Z")
So, I've been struggling for a while with a problem that looked simple but for which I just cannot find a solution. At this point I'm not sure if it's not possible to do this, or if I'm just unable to see it. Let's see i… --- ## [Index \[ilm-history -3-0001\] blocked by :\[TOO\_MANY\_REQUESTS/12/disk usage exceeded, index has read-only-allow-delete block\]](https://discuss.elastic.co/t/index-ilm-history-3-0001-blocked-by-too-many-requests-12-disk-usage-exceeded-index-has-read-only-allow-delete-block/278051)
**Author:** [@mba](https://discuss.elastic.co/u/mba)\ **Replies:** 5\ **Last updated:** [July 9, 2021, 8:27am UTC](https://discuss.elastic.co/t/index-ilm-history-3-0001-blocked-by-too-many-requests-12-disk-usage-exceeded-index-has-read-only-allow-delete-block/278051 "2021-07-09T08:27:41Z")
index \[ilm-history -3-0001\] blocked by :\[TOO\_MANY\_REQUESTS/12/disk usage exceeded, index has read-only-allow-delete block\] --- ## [Comparing Date Fields of Nested Objects](https://discuss.elastic.co/t/comparing-date-fields-of-nested-objects/278222)
**Author:** [@Fatih\_Kurnaz](https://discuss.elastic.co/u/Fatih_Kurnaz)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 8:27am UTC](https://discuss.elastic.co/t/comparing-date-fields-of-nested-objects/278222 "2021-07-09T08:27:13Z")
Hi Everyone; Here my painless script; "script\_fields": { "seen": { "script": { "source": """ for (view in params\['\_source'\]\['viewing\_appointments'\]) { if (new Date().getTime() - view.view… --- ## [Not able to connect to elastic host](https://discuss.elastic.co/t/not-able-to-connect-to-elastic-host/278247)
**Author:** [@mac2](https://discuss.elastic.co/u/mac2)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 8:23am UTC](https://discuss.elastic.co/t/not-able-to-connect-to-elastic-host/278247 "2021-07-09T08:23:31Z")
I am trying to connect to the elastic running on a linux box from my local windows azure machine using below in java Preformatted textTransportClient transportClient = (new PreBuiltTransportClient(Settings.EMPTY, new Cl… --- ## [Heatmap hide specific column](https://discuss.elastic.co/t/heatmap-hide-specific-column/278170)
**Author:** [@Celiken](https://discuss.elastic.co/u/Celiken)\ **Replies:** 2\ **Last updated:** [July 9, 2021, 7:50am UTC](https://discuss.elastic.co/t/heatmap-hide-specific-column/278170 "2021-07-09T07:50:45Z")
Hi, I'm trying to create a heatmap but I encounter some issues. This is how it looked at first: Here, the X axis is not sorted and miss values (going from 1 to 15). I found I can fix it by adding {"min\_doc\_count":… --- ## [Date Field with Millis stored as double leading to error](https://discuss.elastic.co/t/date-field-with-millis-stored-as-double-leading-to-error/277519)
**Author:** [@Bertram](https://discuss.elastic.co/u/Bertram)\ **Replies:** 4\ **Last updated:** [July 9, 2021, 7:25am UTC](https://discuss.elastic.co/t/date-field-with-millis-stored-as-double-leading-to-error/277519 "2021-07-09T07:25:40Z")
Hey there, I recently got this strange problem in a new index: Basic info: Elasticsearch Version: 7.13.2 Nodes: 1 Node (localhost in Dev-Env) Middleware: \[Elasticsearch-PHP\] API-Wrapper The index got a date field a… --- ## [I'm confused: Keyword Mapping and Multi-fields](https://discuss.elastic.co/t/im-confused-keyword-mapping-and-multi-fields/278237)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 3\ **Last updated:** [July 9, 2021, 7:11am UTC](https://discuss.elastic.co/t/im-confused-keyword-mapping-and-multi-fields/278237 "2021-07-09T07:11:03Z")
I'm trying to switch our logging data to ECS. So I've adapted our logstash config to use some new field names and created a static mapping in the destination index. But the data is not indexed as keyword as I would expec… --- ## [System requirements for ELK SIEM](https://discuss.elastic.co/t/system-requirements-for-elk-siem/278025)
**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\ **Replies:** 1\ **Last updated:** [July 9, 2021, 7:10am UTC](https://discuss.elastic.co/t/system-requirements-for-elk-siem/278025 "2021-07-09T07:10:16Z")
Hi! I need depoly ELK SIEM for analyze Windows, Linux, routers logs. Network consist of 300 Windows PC , 15 Linux servers and 3 routers. What do CPU, RAM, HDD need for stable working ELK SIEM on Docker? Where I can fi… [Previous page](https://discuss.elastic.co/latest.md?page=1579) [Next page](https://discuss.elastic.co/latest.md?page=1581)