# Latest **URL:** https://discuss.elastic.co/latest.md?page=1742 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1743 --- ## [Elasticsearch query time range issue](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 50\ **Last updated:** [April 8, 2021, 12:41pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672 "2021-04-08T12:41:54Z")
Hello Experts, I am not able to retrieve all the status\_code values with below query. It has given only less value than actual values. \*\*My query\*\* "\_source": \[ "status\_code", "referrer", "timestamp" \], "query":… --- ## [I want to input row of csv file](https://discuss.elastic.co/t/i-want-to-input-row-of-csv-file/269538)
**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 12:12pm UTC](https://discuss.elastic.co/t/i-want-to-input-row-of-csv-file/269538 "2021-04-08T12:12:44Z")
I want to input per one row and csv file haven't column name. Please teach me how to set for logstash. Data flow is filebeat → logstash → elasticsearch. I attached sample image of csv file. --- ## [Kibana service is not running it's waiting with “loading elastic”](https://discuss.elastic.co/t/kibana-service-is-not-running-its-waiting-with-loading-elastic/269550)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 8\ **Last updated:** [April 8, 2021, 12:04pm UTC](https://discuss.elastic.co/t/kibana-service-is-not-running-its-waiting-with-loading-elastic/269550 "2021-04-08T12:04:16Z")
When I try to run bin/kibana. I get the below message. When I check the localhost:5601. Kibana is waiting "loading elastic" message. How can i solve this problem ? log \[16:25:00.767\] \[info\]\[plugins-service\] Plugi… --- ## [Actual values in ML single metric viewer doesnt match the raw data](https://discuss.elastic.co/t/actual-values-in-ml-single-metric-viewer-doesnt-match-the-raw-data/269539)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 11:20am UTC](https://discuss.elastic.co/t/actual-values-in-ml-single-metric-viewer-doesnt-match-the-raw-data/269539 "2021-04-08T11:20:27Z")
In th first image the actual is 2.987, but the values displayed in the Y axis, and the value displayed in the second image, that is next to this anomaly , aren't near the value of the actual, and it seems the typical is … --- ## [Customize kibana 7.11](https://discuss.elastic.co/t/customize-kibana-7-11/269584)
**Author:** [@Chaimaa\_ABD](https://discuss.elastic.co/u/Chaimaa_ABD)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 11:45am UTC](https://discuss.elastic.co/t/customize-kibana-7-11/269584 "2021-04-08T11:45:59Z")
Im trying to make the kibana dashbord more functional, so im wondering if i can customize kibana 7.11 dashbord Add a company logo instead of elastic logo Delete dashbord edit bar Define lucence search and delete the w… --- ## [Users and Rolesnot available in 7.11 version](https://discuss.elastic.co/t/users-and-rolesnot-available-in-7-11-version/268953)
**Author:** [@pooja1](https://discuss.elastic.co/u/pooja1)\ **Replies:** 4\ **Last updated:** [April 8, 2021, 11:34am UTC](https://discuss.elastic.co/t/users-and-rolesnot-available-in-7-11-version/268953 "2021-04-08T11:34:34Z")
I am not able to see Users and Roles options to share the dashboard --- ## [Unable to use SIEM module](https://discuss.elastic.co/t/unable-to-use-siem-module/268033)
**Author:** [@new2\_elk](https://discuss.elastic.co/u/new2_elk)\ **Replies:** 10\ **Last updated:** [April 8, 2021, 11:33am UTC](https://discuss.elastic.co/t/unable-to-use-siem-module/268033 "2021-04-08T11:33:26Z")
Hi All, I have setup a lab environment with below configuration: Lab firewall sending log -\> (Filebeat -\> Logstash -\> Elasticsearch) which Fliebeat, logstash, Elasticsearch is on Alibaba Cloud. When I try to use the S… --- ## [Generate Customized Report from Data in Kibana](https://discuss.elastic.co/t/generate-customized-report-from-data-in-kibana/268901)
**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\ **Replies:** 5\ **Last updated:** [April 8, 2021, 11:33am UTC](https://discuss.elastic.co/t/generate-customized-report-from-data-in-kibana/268901 "2021-04-08T11:33:24Z")
My dataset contains data of various batches and each batch record is distributed in number of rows. Using Kibana dashboard, I want to enable the end user to filter the data with respect to batch ID (which is easy) and th… --- ## [Dropdown custom field aggregation](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269527)
**Author:** [@bilel\_meddeb](https://discuss.elastic.co/u/bilel_meddeb)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 11:27am UTC](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269527 "2021-04-08T11:27:52Z")
HELLO, i'm new in ELK i have table id | f1 | f2 | f3 0 | 10| 15| 2 1 | 30| 5 | 9 2 | 1 | 75| 6 i want to create a dropdown list. that list contain a multi choice (x1 x2 x3) if i choice x1 so the result shoul… --- ## [How to delete specific indexes from snapshot?](https://discuss.elastic.co/t/how-to-delete-specific-indexes-from-snapshot/269581)
**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-to-delete-specific-indexes-from-snapshot/269581 "2021-04-08T11:24:43Z")
Hi Team, We use daily indices in elasticsearch and each day we take the snapshot of previous day in our snapshot repository. We want to delete specific indexes matching some pattern from the snapshots. Is it possible … --- ## [Kibana dashboard as Apm agent](https://discuss.elastic.co/t/kibana-dashboard-as-apm-agent/269582)
**Author:** [@gulshann](https://discuss.elastic.co/u/gulshann)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 11:15am UTC](https://discuss.elastic.co/t/kibana-dashboard-as-apm-agent/269582 "2021-04-08T11:15:12Z")
How to add/configure kibana dashboard in apm or how to install rum in kibana? version using - v7.10 --- ## [How to change moment.js in Kibana?](https://discuss.elastic.co/t/how-to-change-moment-js-in-kibana/269289)
**Author:** [@eniserkaya](https://discuss.elastic.co/u/eniserkaya)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 11:21am UTC](https://discuss.elastic.co/t/how-to-change-moment-js-in-kibana/269289 "2021-04-08T11:21:29Z")
I would like to change language for Duration in readable format. I have scripted fields. The scripted fields calculate duration. When i show the duration to clients, appear the label to screen 10 hours ago, 15 hours ago… --- ## [How to sort primarily on one score, and secondarily on another score](https://discuss.elastic.co/t/how-to-sort-primarily-on-one-score-and-secondarily-on-another-score/269564)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 10:19am UTC](https://discuss.elastic.co/t/how-to-sort-primarily-on-one-score-and-secondarily-on-another-score/269564 "2021-04-08T10:19:11Z")
Hi I have n terms ie: "Cheese","Robot" and "Cake" I wish to do a primary sorting strictly on number of these terms matched, and secondarily on the total score of the three terms. I know a way to sort by number of hit… --- ## [\[ERROR\]\[logstash.filters.ruby \] Ruby exception occurred: undefined method \`\[\]' for #\](https://discuss.elastic.co/t/error-logstash-filters-ruby-ruby-exception-occurred-undefined-method-for-logstash-0x9a18b32/269301)
**Author:** [@rumala](https://discuss.elastic.co/u/rumala)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 9:57am UTC](https://discuss.elastic.co/t/error-logstash-filters-ruby-ruby-exception-occurred-undefined-method-for-logstash-0x9a18b32/269301 "2021-04-08T09:57:12Z")
Hello experts, I'm still learning about ELK. last week i set up my ELK lab. And I got error in my Logstash. I'm using logstash 7.5.1. I would like to parse through all fields of my Logstash and convert field starting wi… --- ## [Security\_exception in logstash log: indices:admin/auto\_create is unauthorized for user](https://discuss.elastic.co/t/security-exception-in-logstash-log-indices-admin-auto-create-is-unauthorized-for-user/269523)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 9:56am UTC](https://discuss.elastic.co/t/security-exception-in-logstash-log-indices-admin-auto-create-is-unauthorized-for-user/269523 "2021-04-08T09:56:08Z")
Hello, I configured fluentd to forward logs to Logstash (7.10) and the Elasticsearch output throws the following error: \[2021-04-07T17:17:11,390\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\]\[2662b9682e97be5de9346f00d19… --- ## [Logstash unable to connect ssl enabled elasticsearch](https://discuss.elastic.co/t/logstash-unable-to-connect-ssl-enabled-elasticsearch/269570)
**Author:** [@abhishek\_s1](https://discuss.elastic.co/u/abhishek_s1)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 9:37am UTC](https://discuss.elastic.co/t/logstash-unable-to-connect-ssl-enabled-elasticsearch/269570 "2021-04-08T09:37:23Z")
I was using logstash to ingest data into elasticearch. But now after enabling ssl to elasticsearch (using this) for using alerts & detections, Logstash is unable to connect elasticsearch. Browser or curl command works a… --- ## [Improve logstash performance](https://discuss.elastic.co/t/improve-logstash-performance/269569)
**Author:** [@Paresh\_Vaniya](https://discuss.elastic.co/u/Paresh_Vaniya)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 9:34am UTC](https://discuss.elastic.co/t/improve-logstash-performance/269569 "2021-04-08T09:34:33Z")
Hi All, We are using logstash for full data load from Azure SQL to Elasticsearch & that takes too much time. Currently its taking 12 hours to insert 16 million records(using Default configuration of logstash). I have c… --- ## [Watcher multiple condition script error](https://discuss.elastic.co/t/watcher-multiple-condition-script-error/269263)
**Author:** [@Smit108](https://discuss.elastic.co/u/Smit108)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 7:37pm UTC](https://discuss.elastic.co/t/watcher-multiple-condition-script-error/269263 "2021-04-05T19:37:33Z")
HI i'm trying to set cluster health with condition in script but getting error while i'm execute it. { “trigger”: { “schedule”: { “interval”: “10s” } }, “input”: { “http”: { “request… --- ## [What is the source of kubernetes.pod.memory.usage.bytes and kubernetes.pod.cpu.usage.nanocores metrics?](https://discuss.elastic.co/t/what-is-the-source-of-kubernetes-pod-memory-usage-bytes-and-kubernetes-pod-cpu-usage-nanocores-metrics/269053)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 9:27am UTC](https://discuss.elastic.co/t/what-is-the-source-of-kubernetes-pod-memory-usage-bytes-and-kubernetes-pod-cpu-usage-nanocores-metrics/269053 "2021-04-08T09:27:45Z")
I am wondering where the metrics kubernetes.pod.memory.usage.bytes and kubernetes.pod.cpu.usage.nanocores in metricbeat are obtained from? Are they OS statistics? If so, which statistic? I am trying to compare them again… --- ## [ELK rollover renamed indexes](https://discuss.elastic.co/t/elk-rollover-renamed-indexes/269426)
**Author:** [@arvanMalian](https://discuss.elastic.co/u/arvanMalian)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 9:19am UTC](https://discuss.elastic.co/t/elk-rollover-renamed-indexes/269426 "2021-04-08T09:19:26Z")
Hi, I'm using ELK stack version 7.10.1 ( elasticsearch, kibana, filebeat ) My goal is to apply lifecycle policy to my indexes with ILM. I remaned indexes, it's something like this: filebeat-7.10.1-2021.04.06-000001 (… --- ## [Line graph duplicating y-axes legend](https://discuss.elastic.co/t/line-graph-duplicating-y-axes-legend/269117)
**Author:** [@Jasper\_Tan](https://discuss.elastic.co/u/Jasper_Tan)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 9:06am UTC](https://discuss.elastic.co/t/line-graph-duplicating-y-axes-legend/269117 "2021-04-08T09:06:30Z")
I was trying to create a new visualization using the "Aggregation based \>\> Line Graph". However I encountered a bug where my y-axes legends seems to be duplicating (See axes "N6\_TEMP, N7\_TEMP and N8\_TEMP" in the image be… --- ## [Create kibana space in output elasticsearch section in logstash](https://discuss.elastic.co/t/create-kibana-space-in-output-elasticsearch-section-in-logstash/269351)
**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 8:48am UTC](https://discuss.elastic.co/t/create-kibana-space-in-output-elasticsearch-section-in-logstash/269351 "2021-04-08T08:48:57Z")
HI all I am using elastic cloud 7.12 with filebeat and logstash through helm. Now, filebeat send all the logs to logstash then logstash does some filters then output to elasticsearch. In the pipeline in output I have … --- ## [Fill an Elasticsearch index with data from another index on same cluster](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451)
**Author:** [@workaround](https://discuss.elastic.co/u/workaround)\ **Replies:** 6\ **Last updated:** [April 8, 2021, 8:30am UTC](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451 "2021-04-08T08:30:18Z")
This is kind of a noob question so please be kind. I have an elasticsearch cluster (v5) with 3 nodes and two indexes, lets say indexes X and Y(default). I would like to know if there is a way to write data to the index … --- ## [TSVB dates not lining up (1M offset, 1st MAR vs 1st FEB)](https://discuss.elastic.co/t/tsvb-dates-not-lining-up-1m-offset-1st-mar-vs-1st-feb/269327)
**Author:** [@Brendan\_Fisher](https://discuss.elastic.co/u/Brendan_Fisher)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 8:26am UTC](https://discuss.elastic.co/t/tsvb-dates-not-lining-up-1m-offset-1st-mar-vs-1st-feb/269327 "2021-04-08T08:26:03Z")
Hi, I've been trying to get a Month over Month comparison going using TSVB Time Series. I finalised this series last week and everything looked good. I've opened up the visualisation this morning and found that the date… --- ## [Bulk upsert of nested document without mapping](https://discuss.elastic.co/t/bulk-upsert-of-nested-document-without-mapping/269563)
**Author:** [@Omri](https://discuss.elastic.co/u/Omri)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 8:04am UTC](https://discuss.elastic.co/t/bulk-upsert-of-nested-document-without-mapping/269563 "2021-04-08T08:04:20Z")
Hello everyone, I'm using the dynamic mapping feature of ES while predefining the mapping of specific index which also contains a nested field and a mapping to the fields in this nested field. When I run a bulk upsert … --- ## [Elasticsearch warm phase on rollover](https://discuss.elastic.co/t/elasticsearch-warm-phase-on-rollover/269503)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-warm-phase-on-rollover/269503 "2021-04-08T07:59:43Z")
I created a simple policy for rollover using Kibana getting the following request: PUT \_ilm/policy/30d { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": … --- ## [Cryptogalaxy : An app to get crypto market data from multiple exchanges](https://discuss.elastic.co/t/cryptogalaxy-an-app-to-get-crypto-market-data-from-multiple-exchanges/269559)
**Author:** [@milkywaybrain](https://discuss.elastic.co/u/milkywaybrain)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 7:15am UTC](https://discuss.elastic.co/t/cryptogalaxy-an-app-to-get-crypto-market-data-from-multiple-exchanges/269559 "2021-04-08T07:15:29Z")
Hey, this is Pavan. I just created an open source project called Cryptogalaxy, by using which you can get any cryptocurrencies ticker and trade data from multiple exchanges through REST / websocket and save it into multi… --- ## [Using an array as parameter for update script](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/269562)
**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 7:45am UTC](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/269562 "2021-04-08T07:45:48Z")
I am using ElasticSearch 6.8, I want to update many documents at the same time. So I use update by query \` { "index": "index", "type": "type" "body": { "query" : { "bool" :{ "must" :{ … --- ## [Compare Two Indexes](https://discuss.elastic.co/t/compare-two-indexes/269254)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 16\ **Last updated:** [April 8, 2021, 7:31am UTC](https://discuss.elastic.co/t/compare-two-indexes/269254 "2021-04-08T07:31:12Z")
Hi, I have one document in one index and other document in other index. Now I want to compare the fields of these two documents of different indexes. Is it possible to do it, not sure did some couldn't find any satisfac… --- ## [Aggregation on substring of a specific field](https://discuss.elastic.co/t/aggregation-on-substring-of-a-specific-field/269412)
**Author:** [@111457](https://discuss.elastic.co/u/111457)\ **Replies:** 4\ **Last updated:** [April 8, 2021, 6:49am UTC](https://discuss.elastic.co/t/aggregation-on-substring-of-a-specific-field/269412 "2021-04-08T06:49:01Z")
Hi. I'm trying to aggregate on part of strings of a given field. For example, I have 5 documents in an index "Petroglyph". Each documents includes a field called "Site". In "Site", input values follow pattern like 'si… [Previous page](https://discuss.elastic.co/latest.md?page=1741) [Next page](https://discuss.elastic.co/latest.md?page=1743)