# Latest **URL:** https://discuss.elastic.co/latest.md?page=1805 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1806 --- ## [Adding a new numeric field based on addition of different fields from same index (using scripting fields)](https://discuss.elastic.co/t/adding-a-new-numeric-field-based-on-addition-of-different-fields-from-same-index-using-scripting-fields/265862)
**Author:** [@prasad-jagtap](https://discuss.elastic.co/u/prasad-jagtap)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 11:13am UTC](https://discuss.elastic.co/t/adding-a-new-numeric-field-based-on-addition-of-different-fields-from-same-index-using-scripting-fields/265862 "2021-03-03T11:13:50Z")
I'm trying to create a new column in my existing index with a number type based on doc\[''\].value addition of total 4 columns, however, I'm not able to create a number based addition and create that new column using scrip… --- ## [Kibana search filter showing parser errors on date filter. Error:failed to create query: failed to parse date field \[2021-02-04T00:00:00.000Z\] with format \[yyyyMMdd\]: \[failed to parse date field \[2021-02-04T00:00:00.000Z\] with format \[yyyyMMdd\]\]](https://discuss.elastic.co/t/kibana-search-filter-showing-parser-errors-on-date-filter-error-failed-to-create-query-failed-to-parse-date-field-2021-02-04t0000-000z-with-format-yyyymmdd-failed-to-parse-date-field-2021-02-04t0000-000z-with-format-yyyymmdd/265868)
**Author:** [@gbandasha](https://discuss.elastic.co/u/gbandasha)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 11:04am UTC](https://discuss.elastic.co/t/kibana-search-filter-showing-parser-errors-on-date-filter-error-failed-to-create-query-failed-to-parse-date-field-2021-02-04t0000-000z-with-format-yyyymmdd-failed-to-parse-date-field-2021-02-04t0000-000z-with-format-yyyymmdd/265868 "2021-03-03T11:04:53Z")
I have set up my Index template in elastic and the transaction\_date column is carrying the format as 'yyyyMMDD' but when I try to add the filter on that filter by click on the plus icon next to the column name it throws … --- ## [KIBANA : xpack.security.audit issue](https://discuss.elastic.co/t/kibana-xpack-security-audit-issue/265347)
**Author:** [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\ **Replies:** 15\ **Last updated:** [March 3, 2021, 10:41am UTC](https://discuss.elastic.co/t/kibana-xpack-security-audit-issue/265347 "2021-03-03T10:41:59Z")
hello, I'm trying to make audit for kibana like this doc : https://www.elastic.co/guide/en/kibana/7.11/security-settings-kb.html#audit-logging-settings Here's my kib.yml : --------------------------------- Audit ----… --- ## [Filebeat HAProxy fields mapping not clear, what is the total active time for the HTTP request?](https://discuss.elastic.co/t/filebeat-haproxy-fields-mapping-not-clear-what-is-the-total-active-time-for-the-http-request/266088)
**Author:** [@bluepuma77](https://discuss.elastic.co/u/bluepuma77)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 10:34am UTC](https://discuss.elastic.co/t/filebeat-haproxy-fields-mapping-not-clear-what-is-the-total-active-time-for-the-http-request/266088 "2021-03-03T10:34:56Z")
I am currently looking into the haproxy log files to find out how long requests take. Elastic Filebeat has a detailed page about HAProxy fields. haproxy.total\_waiting\_time\_ms Total time in milliseconds spent waiting i… --- ## ["Authentication using apikey failed - invalid ApiKey value"](https://discuss.elastic.co/t/authentication-using-apikey-failed-invalid-apikey-value/266083)
**Author:** [@freddux](https://discuss.elastic.co/u/freddux)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 10:14am UTC](https://discuss.elastic.co/t/authentication-using-apikey-failed-invalid-apikey-value/266083 "2021-03-03T10:14:51Z")
Hi guys! New user here, I'm currently finding a tonne of this in my elasticsearch\_server.json log, and I can't find out where it is: {"type": "server", "timestamp": "2021-03-03T11:10:08,518+01:00", "level": "WARN", "co… --- ## [Douments structure](https://discuss.elastic.co/t/douments-structure/265938)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 9:48am UTC](https://discuss.elastic.co/t/douments-structure/265938 "2021-03-03T09:48:22Z")
Hi there, we're planning to ingest large xml payloads in our ES cluster and we'll have to do full text query on it. This payload can be split in more documents if nedeed but we wonder if a full text query is more perf… --- ## [Run Kibana as a Windows service without using nssm tool](https://discuss.elastic.co/t/run-kibana-as-a-windows-service-without-using-nssm-tool/265808)
**Author:** [@ARoy](https://discuss.elastic.co/u/ARoy)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 9:35am UTC](https://discuss.elastic.co/t/run-kibana-as-a-windows-service-without-using-nssm-tool/265808 "2021-03-03T09:35:01Z")
Hi, I am using Kibana v 7.10.1, and need to run Kibana without using nssm tool. I tried to install using power shell script as follows : sc.exe create "ElasticSearch Kibana 4.0.1" binPath= "binpath" depend= "elasticsea… --- ## [Column with all field](https://discuss.elastic.co/t/column-with-all-field/265783)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 9:22am UTC](https://discuss.elastic.co/t/column-with-all-field/265783 "2021-03-03T09:22:59Z")
It is possible to get a table with one column in kibana contained all the field name like the follow pictures show. how can i do it in kibana. thank for help --- ## [Logstash-\* in Alert/Action section](https://discuss.elastic.co/t/logstash-in-alert-action-section/266070)
**Author:** [@MABN](https://discuss.elastic.co/u/MABN)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 8:37am UTC](https://discuss.elastic.co/t/logstash-in-alert-action-section/266070 "2021-03-03T08:37:37Z")
Hi I used rsyslog to send log to ELK, like this guide https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04 Then I used grok to pars log's messages in logstash.conf … --- ## [KIBANA : can't install 7.11.1](https://discuss.elastic.co/t/kibana-cant-install-7-11-1/265578)
**Author:** [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 7:46am UTC](https://discuss.elastic.co/t/kibana-cant-install-7-11-1/265578 "2021-03-03T07:46:17Z")
Hello, I 'm trying to install kibana latest 7.11.1 from sources and i get those errors : tar: kibana-7.11.1-linux-x86\_64/x-pack/plugins/xpack\_legacy/common/index.js: Cannot open: Operation not permitted kibana-7.11.1… --- ## [Error: Resource is under maintenance / recovery](https://discuss.elastic.co/t/error-resource-is-under-maintenance-recovery/266056)
**Author:** [@Arjun\_S](https://discuss.elastic.co/u/Arjun_S)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 7:32am UTC](https://discuss.elastic.co/t/error-resource-is-under-maintenance-recovery/266056 "2021-03-03T07:32:25Z")
We have hosted the ES in the ES cloud, and we got this error multiple times while doing a write operation request(POST) to one of our indices. Elasticsearch\\Common\\Exceptions\\ServerErrorResponseException: {"ok":false,"m… --- ## [Logstash Helm Deployment](https://discuss.elastic.co/t/logstash-helm-deployment/266060)
**Author:** [@Karl\_Ofeiche](https://discuss.elastic.co/u/Karl_Ofeiche)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 7:14am UTC](https://discuss.elastic.co/t/logstash-helm-deployment/266060 "2021-03-03T07:14:59Z")
Hey everyone. I've been trying to send logs from an untangle firewall device to my ELK SIEM on Kubernetes. To do so I created a pipeline that I deployed as a ConfigMap and from here I'm stuck. Here's a part of the Helm… --- ## [Metricbeat - error getting group status: open /proc/\/cgroup](https://discuss.elastic.co/t/metricbeat-error-getting-group-status-open-proc-pid-cgroup/264355)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 6:34am UTC](https://discuss.elastic.co/t/metricbeat-error-getting-group-status-open-proc-pid-cgroup/264355 "2021-03-03T06:34:21Z")
I have an ELK stack setup in a K8s cluster with security enabled. All components are working fine Installed metricbeat and kube-state-metrics using helm charts, and the containers are not starting, and i see the follow… --- ## [Logstash- Unable to retrieve license information from license server](https://discuss.elastic.co/t/logstash-unable-to-retrieve-license-information-from-license-server/264979)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 6:29am UTC](https://discuss.elastic.co/t/logstash-unable-to-retrieve-license-information-from-license-server/264979 "2021-03-03T06:29:36Z")
Trying to setup ELK stack on my on-premise K8S cluster using helm charts. Have enabled x-pack security and both Elasticsearch and kibana are working fine after enabling transport, http security I have used elasticsearch… --- ## [Kubernetes ingress for elasticsearch not working after enabling security](https://discuss.elastic.co/t/kubernetes-ingress-for-elasticsearch-not-working-after-enabling-security/262814)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 6:26am UTC](https://discuss.elastic.co/t/kubernetes-ingress-for-elasticsearch-not-working-after-enabling-security/262814 "2021-03-03T06:26:17Z")
I am using Official helm chart to install ELK stack on my on-premise VMWare hanzu k8s cluster. An Ingress controller to the cluster is already created by k8s admin using Contour Following this instruction of creating s… --- ## [One of the master pod is going to crashloop backoff](https://discuss.elastic.co/t/one-of-the-master-pod-is-going-to-crashloop-backoff/265977)
**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 6:08am UTC](https://discuss.elastic.co/t/one-of-the-master-pod-is-going-to-crashloop-backoff/265977 "2021-03-03T06:08:35Z")
We have deployed Elasticsearch cluster with 7.4.0 and operator version 1.1.0 in GKE .One of the master pod is going to crashloop backoff without doing any changes. I can see below error when I checked the logs "org.elas… --- ## [How to use \_sql (SQL queries) to access Elasticsearch indexes in Logstash input plugin](https://discuss.elastic.co/t/how-to-use-sql-sql-queries-to-access-elasticsearch-indexes-in-logstash-input-plugin/265327)
**Author:** [@Amit\_Singh4](https://discuss.elastic.co/u/Amit_Singh4)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 6:08am UTC](https://discuss.elastic.co/t/how-to-use-sql-sql-queries-to-access-elasticsearch-indexes-in-logstash-input-plugin/265327 "2021-03-03T06:08:07Z")
Hi I want to use \_sql (SQL queries) to access Elasticsearch indexes in Logstash input plugin. Find my logstash config as below: input { http\_poller { urls =\> { test1 =\> { method =\> "POST" user =\> "abc" password =\>… --- ## [Elasticdump doesn't work on https self signed certificate links](https://discuss.elastic.co/t/elasticdump-doesnt-work-on-https-self-signed-certificate-links/266049)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 6:06am UTC](https://discuss.elastic.co/t/elasticdump-doesnt-work-on-https-self-signed-certificate-links/266049 "2021-03-03T06:06:34Z")
Hi all, I'm trying to import an index data using elasticdump tool from an elasticsearch server which has self signed certificates. NODE\_TLS\_REJECT\_UNAUTHORIZED=0 elasticdump \\ --input=https://elastic:\*\*\*\*\*\*\*\*\*\*\*\*@mysec… --- ## [RestHighLevelClient get api hangs forever](https://discuss.elastic.co/t/resthighlevelclient-get-api-hangs-forever/265756)
**Author:** [@pavanpatel20](https://discuss.elastic.co/u/pavanpatel20)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 5:36am UTC](https://discuss.elastic.co/t/resthighlevelclient-get-api-hangs-forever/265756 "2021-03-03T05:36:14Z")
I am using elasticsearch-rest-client 7.6.2 in my project and we saw that in one of the get call the get hangs forever and never returns. We got the thread dump and see that the thread is blocked on org.apache.http.concu… --- ## [Is it possible to write the index under restoring?](https://discuss.elastic.co/t/is-it-possible-to-write-the-index-under-restoring/266035)
**Author:** [@math\_u](https://discuss.elastic.co/u/math_u)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 1:31am UTC](https://discuss.elastic.co/t/is-it-possible-to-write-the-index-under-restoring/266035 "2021-03-03T01:31:27Z")
I'm now using ES version 7.10.0. I suppose the indices under restoring are forbidden to write then, how is the documents of the indices which is occured while restoring dealt with? --- ## [How to remove some items in the header](https://discuss.elastic.co/t/how-to-remove-some-items-in-the-header/264932)
**Author:** [@hayzjd836](https://discuss.elastic.co/u/hayzjd836)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 4:12am UTC](https://discuss.elastic.co/t/how-to-remove-some-items-in-the-header/264932 "2021-03-03T04:12:02Z")
Hi As shown in the picture below, I want to remove some items in the red box on the top header. My kibana version is 7.9.2 What I have done so far is modifying the seemingly relevant items in the path below ~/kiban… --- ## [Updating documents - immutability](https://discuss.elastic.co/t/updating-documents-immutability/266041)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 2:33am UTC](https://discuss.elastic.co/t/updating-documents-immutability/266041 "2021-03-03T02:33:45Z")
Hi, I have a use case where a document can be updated or nested entries added to it over time. I get that documents are technically immutable and a new version is created, with the older one being soft deleted. Will this… --- ## [New cluster - every host an eligible master?](https://discuss.elastic.co/t/new-cluster-every-host-an-eligible-master/266040)
**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 2:24am UTC](https://discuss.elastic.co/t/new-cluster-every-host-an-eligible-master/266040 "2021-03-03T02:24:01Z")
I setting up a new 5 host 7.x cluster to deal with audit and logging and such. Data should come to roughly 10T. How terrible an idea would it be to make every host an eligible master node (and data and ingest)? I can al… --- ## [Heartbeat and Elastic Agent](https://discuss.elastic.co/t/heartbeat-and-elastic-agent/266001)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 12:20am UTC](https://discuss.elastic.co/t/heartbeat-and-elastic-agent/266001 "2021-03-03T00:20:33Z")
Hello, If I install Elastic Agent on a Windows 10 machine, and then I want to see the machine in Uptime, why do I need to ping it using Heartbeat? Should not the agent know already it's uptime? Will not this make sense … --- ## [Change in logstash configuration](https://discuss.elastic.co/t/change-in-logstash-configuration/266011)
**Author:** [@sandeep3](https://discuss.elastic.co/u/sandeep3)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 12:14am UTC](https://discuss.elastic.co/t/change-in-logstash-configuration/266011 "2021-03-03T00:14:07Z")
Hi, Here In our ELK. log stash have the sql query. Suppose if i want to add extra column in the sql query. Is it will impact the index like data lost any. Please help me in this context. --- ## [Kibana Pie Charts with Unique Count](https://discuss.elastic.co/t/kibana-pie-charts-with-unique-count/265725)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 11:47pm UTC](https://discuss.elastic.co/t/kibana-pie-charts-with-unique-count/265725 "2021-03-02T23:47:34Z")
Here is my data set { ticket\_id: 1, status: Open, timestamp: 2019-02-10 } { ticket\_id: 2, status: Open, timestamp: 2019-02-10 } { ticket\_id: 1; status: Closed, timestamp: 2019-02-14 } { ticket\_id: 3; status: Open, ti… --- ## [Bar chart - Aggregate by Field1 or Field2](https://discuss.elastic.co/t/bar-chart-aggregate-by-field1-or-field2/264379)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [March 2, 2021, 11:36pm UTC](https://discuss.elastic.co/t/bar-chart-aggregate-by-field1-or-field2/264379 "2021-03-02T23:36:44Z")
Hello, I have documents with 2 fields that I would like to use for aggregation. The document will look something like "\_source" : { "name" : "name\_value", "id" : "id\_value", ... ... … --- ## [Return JSON array of objects via webhook and script transform](https://discuss.elastic.co/t/return-json-array-of-objects-via-webhook-and-script-transform/266030)
**Author:** [@gabriel.ratcliff](https://discuss.elastic.co/u/gabriel.ratcliff)\ **Replies:** 0\ **Last updated:** [March 2, 2021, 11:18pm UTC](https://discuss.elastic.co/t/return-json-array-of-objects-via-webhook-and-script-transform/266030 "2021-03-02T23:18:05Z")
Hi there, I'm attempting to POST to an external webhook that takes an array of objects as a request body. So far, all I've been able to output is a JSON object with a \_value key that contains the array I'm looking for. … --- ## [About Snapshot Compatibility](https://discuss.elastic.co/t/about-snapshot-compatibility/266027)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 10:55pm UTC](https://discuss.elastic.co/t/about-snapshot-compatibility/266027 "2021-03-02T22:55:44Z")
I have a new 7.11 cluster which has access to a snapshot repo used by another 7.x cluster. How can I kick off a restore of one of the old snapshots into the new cluster? Thx D --- ## [Export visualization datawith Kiabana API (data table)](https://discuss.elastic.co/t/export-visualization-datawith-kiabana-api-data-table/264451)
**Author:** [@kibana069](https://discuss.elastic.co/u/kibana069)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 10:24pm UTC](https://discuss.elastic.co/t/export-visualization-datawith-kiabana-api-data-table/264451 "2021-03-02T22:24:40Z")
Hi, is it possible to export the results of a visualization with the Kibana API? I tried to use the saved objects API, but this only exports the visualization itself, but not the data of the visualization. Thanks in ad… [Previous page](https://discuss.elastic.co/latest.md?page=1804) [Next page](https://discuss.elastic.co/latest.md?page=1806)