# Latest **URL:** https://discuss.elastic.co/latest.md?page=1616 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1617 --- ## [Kibana essql query date diff](https://discuss.elastic.co/t/kibana-essql-query-date-diff/271483)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 21\ **Last updated:** [June 17, 2021, 3:07pm UTC](https://discuss.elastic.co/t/kibana-essql-query-date-diff/271483 "2021-06-17T15:07:43Z")
Hi, I have a series of such data in Kibana: "deviceID" "date" 35001 27-04-21 13:20:00 35002 27-04-21 15:21:00 35001 27-04-21 18:22:00 35002 27-04… --- ## [Elastic solution on multiple vlan network](https://discuss.elastic.co/t/elastic-solution-on-multiple-vlan-network/276283)
**Author:** [@Polo](https://discuss.elastic.co/u/Polo)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 3:05pm UTC](https://discuss.elastic.co/t/elastic-solution-on-multiple-vlan-network/276283 "2021-06-17T15:05:22Z")
Hi all, i would like to deploy elastic solution, search, beats... in a network with multiple vlan. My network is a aggregation of many customer newtwork, each on different vlan and only accessible via dedicated "jump ho… --- ## [Logstash ElasticSearch Output not using special characters (!)](https://discuss.elastic.co/t/logstash-elasticsearch-output-not-using-special-characters/276282)
**Author:** [@Mahdj](https://discuss.elastic.co/u/Mahdj)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 3:01pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-not-using-special-characters/276282 "2021-06-17T15:01:45Z")
Hello everyone, I have my logstash and want to connect to my ElasticSearch instance with OpenDistro installed. I've created an user logstash with password "logstash!" but logstash have an error saying "Got response cod… --- ## [Http output plugin is not working in logstash, Please help](https://discuss.elastic.co/t/http-output-plugin-is-not-working-in-logstash-please-help/275889)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 7\ **Last updated:** [June 17, 2021, 2:53pm UTC](https://discuss.elastic.co/t/http-output-plugin-is-not-working-in-logstash-please-help/275889 "2021-06-17T14:53:17Z")
Hi, I am trying to send json message to kibana api using http plugin, I found the below error, Please help and appreciated. \[2021-06-14T14:45:26,361\]\[ERROR\]\[logstash.outputs.http \] \[HTTP Output Failure\] Encountered n… --- ## [Problem with "Last Value"](https://discuss.elastic.co/t/problem-with-last-value/276268)
**Author:** [@LL\_FED](https://discuss.elastic.co/u/LL_FED)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 2:25pm UTC](https://discuss.elastic.co/t/problem-with-last-value/276268 "2021-06-17T14:25:56Z")
Hi, for example: i want to show the last value of my Data: State in a metric aggregation. I receive the documents in Kibana like this: Doc 1: { "timestamp": ..., "state": 1 } Doc2: { "timestamp": ..., "room\_t… --- ## [Kibana KQL: how to search for fields with special characters (eg $)](https://discuss.elastic.co/t/kibana-kql-how-to-search-for-fields-with-special-characters-eg/274598)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 2:16pm UTC](https://discuss.elastic.co/t/kibana-kql-how-to-search-for-fields-with-special-characters-eg/274598 "2021-06-17T14:16:28Z")
I've a search to look for Account names ending with $ (as they are computer generated names). Below is my simple search in KQL, but it provides both type of accounts (i.e with and without $ at the end). Escaping $ brings… --- ## [Kibana not started after activated xpack.security](https://discuss.elastic.co/t/kibana-not-started-after-activated-xpack-security/275710)
**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\ **Replies:** 6\ **Last updated:** [June 17, 2021, 2:12pm UTC](https://discuss.elastic.co/t/kibana-not-started-after-activated-xpack-security/275710 "2021-06-17T14:12:52Z")
After activated xpack.security in elastic.yml kibana crash Logs: {"type":"log","@timestamp":"2021-06-11T21:28:44+03:00","tags":\["debug","plugins-discovery"\],"pid":7360,"message":"Successfully discovered plugin \\"consol… --- ## [Entities architecture with custom fields and Upsert script issue](https://discuss.elastic.co/t/entities-architecture-with-custom-fields-and-upsert-script-issue/276267)
**Author:** [@Spyros\_Giannopoulos](https://discuss.elastic.co/u/Spyros_Giannopoulos)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 2:08pm UTC](https://discuss.elastic.co/t/entities-architecture-with-custom-fields-and-upsert-script-issue/276267 "2021-06-17T14:08:15Z")
Hello, I'm building an application in ES that needs to contain information about lists of members. The members in a list have a name, surname, etc.. but also contain some custom fields which are different for each list.… --- ## [Logstash Helm deploy pattern error](https://discuss.elastic.co/t/logstash-helm-deploy-pattern-error/276276)
**Author:** [@emergrin](https://discuss.elastic.co/u/emergrin)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 2:04pm UTC](https://discuss.elastic.co/t/logstash-helm-deploy-pattern-error/276276 "2021-06-17T14:04:21Z")
Hi all, I have some problems with my value.yaml from my helm deploy of logstash 7.9 and I need some help. This it's an example of my file: logstashPipeline: logstash.conf: | input { beats { port =\> … --- ## [Logstash file input performance](https://discuss.elastic.co/t/logstash-file-input-performance/276050)
**Author:** [@seadub](https://discuss.elastic.co/u/seadub)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 2:03pm UTC](https://discuss.elastic.co/t/logstash-file-input-performance/276050 "2021-06-17T14:03:55Z")
Continuing the discussion from Tuning to handle extreme initial ingestion conditions (with logstash): @Christian\_Dahlqvist - I know I'm resurrecting an old thread here but I'd love to confirm a point you'd raised. I hop… --- ## [Elastic-Agent stand alone host only sends very few events](https://discuss.elastic.co/t/elastic-agent-stand-alone-host-only-sends-very-few-events/276164)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 2:03pm UTC](https://discuss.elastic.co/t/elastic-agent-stand-alone-host-only-sends-very-few-events/276164 "2021-06-17T14:03:54Z")
Hello, because the new fleet stuff doesn't work for me (see here), I tried setting up an elastic agent in "stand alone" mode. In Kibana\>Fleet\>Agents I clicked on "Add agent", downloaded the EA files and extracted them … --- ## [Filebeat with event-hub-kafka output, pulish fails: client has run out of available brokers to talk to](https://discuss.elastic.co/t/filebeat-with-event-hub-kafka-output-pulish-fails-client-has-run-out-of-available-brokers-to-talk-to/276263)
**Author:** [@Klaus\_zhong](https://discuss.elastic.co/u/Klaus_zhong)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 11:54am UTC](https://discuss.elastic.co/t/filebeat-with-event-hub-kafka-output-pulish-fails-client-has-run-out-of-available-brokers-to-talk-to/276263 "2021-06-17T11:54:34Z")
Description I am using Filebeat to stream my log file to azure event hub and with the configuration as kafka output, the connection to host ip can be established (read from the log below), but when it try to publish topi… --- ## [Kibana API Reference](https://discuss.elastic.co/t/kibana-api-reference/276153)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [June 17, 2021, 1:34pm UTC](https://discuss.elastic.co/t/kibana-api-reference/276153 "2021-06-17T13:34:28Z")
Hi, Can someone point me to the reference that documents all of the api settings mentioned on this page please? Thx D --- ## [Implementing DocViewer](https://discuss.elastic.co/t/implementing-docviewer/273486)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 12:53pm UTC](https://discuss.elastic.co/t/implementing-docviewer/273486 "2021-06-17T12:53:32Z")
Hi team, is it posible to implement DocViewer component from Discover app to my custom plugin? Kibana 7.10.0 --- ## [Index Date Math with seconds](https://discuss.elastic.co/t/index-date-math-with-seconds/276161)
**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 12:48pm UTC](https://discuss.elastic.co/t/index-date-math-with-seconds/276161 "2021-06-17T12:48:59Z")
Hi All, When I try to create an index using date math expression PUT /%3Cdata-index-%7Bnow%2Fm%7Byyyy-MM-dd-HH-mm-ss%7D%7D%3E which produces an index as data-index-2021-06-16-12-41-00 Why seconds are always 00 (if yo… --- ## [IIS Dashboard for metricbeat](https://discuss.elastic.co/t/iis-dashboard-for-metricbeat/276247)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 6\ **Last updated:** [June 17, 2021, 12:33pm UTC](https://discuss.elastic.co/t/iis-dashboard-for-metricbeat/276247 "2021-06-17T12:33:12Z")
Dear all, I have a problem with data visualization dashboard exactly with metricbeat IIS dashboard. The problem is that I have filter "locked" on metricbeat-\* index pattern there is a way to show data that are stor… --- ## [New data source mysql](https://discuss.elastic.co/t/new-data-source-mysql/276261)
**Author:** [@alexkr](https://discuss.elastic.co/u/alexkr)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 12:29pm UTC](https://discuss.elastic.co/t/new-data-source-mysql/276261 "2021-06-17T12:29:41Z")
Hey I need your help please I try to connect new data source mysql The DB is also local in the same server How I can do it? --- ## [Field search using Logstash configuration](https://discuss.elastic.co/t/field-search-using-logstash-configuration/276259)
**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 11:41am UTC](https://discuss.elastic.co/t/field-search-using-logstash-configuration/276259 "2021-06-17T11:41:10Z")
Hi , Below is my requirement. I have two indexes Index : Client\_one \[fields : employee\_no1,salary, exp\] Index: client\_two. \[fields " employee\_no2, total\_exp\] Both index have one common field employee\_no. I want to … --- ## [How to Query the data between 2 different timestamp](https://discuss.elastic.co/t/how-to-query-the-data-between-2-different-timestamp/276150)
**Author:** [@Kannan\_V](https://discuss.elastic.co/u/Kannan_V)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 11:40am UTC](https://discuss.elastic.co/t/how-to-query-the-data-between-2-different-timestamp/276150 "2021-06-17T11:40:49Z")
Hi, How to query the data between 2 different timestamps? We have a data. I am able to query through Kibana Discover tab. But i am not able to query through devTools or Curl command. Following is my devtool command G… --- ## [Two or more policies have the same schedule](https://discuss.elastic.co/t/two-or-more-policies-have-the-same-schedule/275980)
**Author:** [@Rinku\_Gulia](https://discuss.elastic.co/u/Rinku_Gulia)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 11:16am UTC](https://discuss.elastic.co/t/two-or-more-policies-have-the-same-schedule/275980 "2021-06-17T11:16:02Z")
Cannot we schedule 2 policies of the same schedule in 2 different repositories?. Kibana adds them and executing them as well on that schedule. What problems can be faced if we schedule 2 policies at the same interval?… --- ## [Unable to find the cluster in the selected time range](https://discuss.elastic.co/t/unable-to-find-the-cluster-in-the-selected-time-range/275874)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 11:11am UTC](https://discuss.elastic.co/t/unable-to-find-the-cluster-in-the-selected-time-range/275874 "2021-06-17T11:11:35Z")
I have EBK setup, but when I try to setup monitoring in /app/monitoring with Set up monitoring with Metricbeat I get Monitoring Request Failed Unable to find the cluster in the selected time range. UUID: iKsZ1PfnTfWth… --- ## [Adding a new node to a cluster with passwords already set](https://discuss.elastic.co/t/adding-a-new-node-to-a-cluster-with-passwords-already-set/276237)
**Author:** [@Timm\_Lehmberg](https://discuss.elastic.co/u/Timm_Lehmberg)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 10:55am UTC](https://discuss.elastic.co/t/adding-a-new-node-to-a-cluster-with-passwords-already-set/276237 "2021-06-17T10:55:56Z")
Apologies if my approach in the described in the following is stupid. set up elasticsearch 7.13 on node-1 as a single node cluster, enabled TLS and ran bin/elasticsearch-setup-passwords interactive set up elasticsear… --- ## [Transform API](https://discuss.elastic.co/t/transform-api/276256)
**Author:** [@Iliya\_Zukerman](https://discuss.elastic.co/u/Iliya_Zukerman)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 10:54am UTC](https://discuss.elastic.co/t/transform-api/276256 "2021-06-17T10:54:01Z")
hI I am able to create Transform but after it has been created and started there is no corresponding IndexPattern so I can't see it in Kiban when I create the same transform from UI the indexpattern is created automatic… --- ## [Network in bout traffic rollup](https://discuss.elastic.co/t/network-in-bout-traffic-rollup/276244)
**Author:** [@ghaithTK](https://discuss.elastic.co/u/ghaithTK)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 9:36am UTC](https://discuss.elastic.co/t/network-in-bout-traffic-rollup/276244 "2021-06-17T09:36:56Z")
Hi I am trying to rollup (daily) network inbound traffic using field system.network.in.bytes. but when i use inbound visualization with rollup index i got this(image) what the problem and is there another way to ro… --- ## [Fetch list in dropdown from newest in index](https://discuss.elastic.co/t/fetch-list-in-dropdown-from-newest-in-index/276009)
**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\ **Replies:** 2\ **Last updated:** [June 17, 2021, 10:38am UTC](https://discuss.elastic.co/t/fetch-list-in-dropdown-from-newest-in-index/276009 "2021-06-17T10:38:58Z")
I made a drop down for the filter with the Controls type in kibana visualizations. however it seem like this is starting the fetch from the beginning of the index, and if a keyword/value is indexed for the first time ye… --- ## [Refreshing Indices](https://discuss.elastic.co/t/refreshing-indices/274252)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 3\ **Last updated:** [June 17, 2021, 10:29am UTC](https://discuss.elastic.co/t/refreshing-indices/274252 "2021-06-17T10:29:28Z")
Hi All, Is there a way I could refresh indices (field list) by not relying on doing it manually through Kibana? Can a curl command be used instead? I have ELK 7.6.2 stack. Thanks --- ## [ダッシュボードで直近1日、1週間、1ヶ月の情報を一度に表示する方法について](https://discuss.elastic.co/t/1-1-1/276207)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 1\ **Last updated:** [June 17, 2021, 10:23am UTC](https://discuss.elastic.co/t/1-1-1/276207 "2021-06-17T10:23:52Z")
ダッシュボード上で、表示対象のドキュメント件数を表示したいです。その際、直近1日分、1週間分、1ヶ月分のデータ件数を1枚のダッシュボードで出力したいのですが、出力する時間の範囲は画面右上のボックスで指定するので、実現方法が分からずにおります。 そもそもこうしたことは実現可能でしょうか？可能であれば、方法をご教示頂けないでしょうか。 ダッシュボードのイメージを添付します --- ## [Podman support?](https://discuss.elastic.co/t/podman-support/276252)
**Author:** [@Mats](https://discuss.elastic.co/u/Mats)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 10:22am UTC](https://discuss.elastic.co/t/podman-support/276252 "2021-06-17T10:22:00Z")
I'm new. Really new to ECE so this might be answered somewhere I haven't found yet but ... I would like to run ECE on RHEL8 but since RHEL8 comes with podman and not Docker I'm trying to find out if podman can be us… --- ## [My Elastic Stack Observability Wishlist](https://discuss.elastic.co/t/my-elastic-stack-observability-wishlist/276168)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 10:14am UTC](https://discuss.elastic.co/t/my-elastic-stack-observability-wishlist/276168 "2021-06-17T10:14:52Z")
(Note, these are my personal wishes, not my workplace's.) Since we started a trial at my workplace, I've been digging into everything the Elastic Stack has to offer. Mostly focused on Observability. Here are some ideas… --- ## [How to use cutom geoip database in cloud elastic?](https://discuss.elastic.co/t/how-to-use-cutom-geoip-database-in-cloud-elastic/276249)
**Author:** [@tonik](https://discuss.elastic.co/u/tonik)\ **Replies:** 0\ **Last updated:** [June 17, 2021, 10:13am UTC](https://discuss.elastic.co/t/how-to-use-cutom-geoip-database-in-cloud-elastic/276249 "2021-06-17T10:13:34Z")
Hi. I'm trying to convert ipv4 into geo location and I want to change database, coz it's setting incorrect location now. I cannot understand how to use/upload custom geoip database in cloud elastic cluster. Because docu… [Previous page](https://discuss.elastic.co/latest.md?page=1615) [Next page](https://discuss.elastic.co/latest.md?page=1617)