# Latest **URL:** https://discuss.elastic.co/latest.md?page=1875 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1876 --- ## [Is there any Latency module/merticset available across beats family](https://discuss.elastic.co/t/is-there-any-latency-module-merticset-available-across-beats-family/261804)
**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\ **Replies:** 10\ **Last updated:** [January 25, 2021, 10:14pm UTC](https://discuss.elastic.co/t/is-there-any-latency-module-merticset-available-across-beats-family/261804 "2021-01-25T22:14:30Z")
Hello, I would like to know if there is any Latency module/metricset available across beats family to pull latency data from the different OS platforms? Thanks --- ## [Can't change timestamp of logstash to timestamp of log](https://discuss.elastic.co/t/cant-change-timestamp-of-logstash-to-timestamp-of-log/262134)
**Author:** [@vladik22](https://discuss.elastic.co/u/vladik22)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 9:20pm UTC](https://discuss.elastic.co/t/cant-change-timestamp-of-logstash-to-timestamp-of-log/262134 "2021-01-25T21:20:33Z")
Can't replace timestamp of logstash with timestamp of log file csv and send to elasticsearch. in debugger all work. When I change output to elasticsearch it's write that is work but after I create index patern in kiban… --- ## [Поля в Kibana](https://discuss.elastic.co/t/kibana/262170)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 8:58pm UTC](https://discuss.elastic.co/t/kibana/262170 "2021-01-25T20:58:02Z")
Привет, я новичок в ELK, вопрос такой: я создал конфиг logstash который выводит скан nmap-ом сначала в файл XML, а затем в LS,ES,и kibana, так вот, в разделе Discover-\> available fields мне нужно добавить фильтр по порту… --- ## [Combine multiple views into one graph](https://discuss.elastic.co/t/combine-multiple-views-into-one-graph/262127)
**Author:** [@morbidel](https://discuss.elastic.co/u/morbidel)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 8:50pm UTC](https://discuss.elastic.co/t/combine-multiple-views-into-one-graph/262127 "2021-01-25T20:50:10Z")
Hello, I'm using Kibana & Elastic search (version 7.0) for a while now, for various reports. For some reason, I'm unable to combine some charts which should obviously and easily be possible to combine as they share the… --- ## [Kibana визуализация суммы часов](https://discuss.elastic.co/t/kibana/262041)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 19\ **Last updated:** [January 25, 2021, 8:19pm UTC](https://discuss.elastic.co/t/kibana/262041 "2021-01-25T20:19:19Z")
Всем привет! Есть задача, считать сумму времени. Например, есть поле содержащее время, изначально время в формате UNIX. Нужно чтобы была визуализация, на которой будет показанна сумма времени полей за определённое врем… --- ## [Path config for custom log integration?](https://discuss.elastic.co/t/path-config-for-custom-log-integration/262158)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 4\ **Last updated:** [January 25, 2021, 8:16pm UTC](https://discuss.elastic.co/t/path-config-for-custom-log-integration/262158 "2021-01-25T20:16:53Z")
Hello, I'm trying out the elastic agent feature in a test cluster but I haven't been able to figure out how to ship custom logs to it. In the integration, I've specified the log path to be path/to/my/logs: I was abl… --- ## [Viewing EPS graph in Kibana](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 10\ **Last updated:** [January 25, 2021, 8:09pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665 "2021-01-25T20:09:04Z")
I want to display a graph of the EPS in kibana. But, it displays a graph every 30 seconds over 1 hour that I defined. While I have set by second. Is there a possibility for it to display per second? Thanks for your h… --- ## [Help in visualizing custom query/aggregation](https://discuss.elastic.co/t/help-in-visualizing-custom-query-aggregation/261881)
**Author:** [@Christoph\_Quadt](https://discuss.elastic.co/u/Christoph_Quadt)\ **Replies:** 7\ **Last updated:** [January 25, 2021, 7:41pm UTC](https://discuss.elastic.co/t/help-in-visualizing-custom-query-aggregation/261881 "2021-01-25T19:41:18Z")
Hi there, I am having trouble in visualizing the following elasticsearch query: { "query": { "exists": { "field": "log\_transaction\_status" } }, "size": 0, "aggs": {… --- ## [Difference between nested in bool and bool in nested](https://discuss.elastic.co/t/difference-between-nested-in-bool-and-bool-in-nested/262161)
**Author:** [@Anton\_Shuvaev](https://discuss.elastic.co/u/Anton_Shuvaev)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 7:14pm UTC](https://discuss.elastic.co/t/difference-between-nested-in-bool-and-bool-in-nested/262161 "2021-01-25T19:14:26Z")
Is there a difference in terms of performance and cache between nested query inside bool query and vice versa? For example, { "query": { "bool": { "filter": \[ { "nested": { "pa… --- ## [How to get elastic search \_score in the response without script\_score being applied](https://discuss.elastic.co/t/how-to-get-elastic-search-score-in-the-response-without-script-score-being-applied/262085)
**Author:** [@oo7\_manju](https://discuss.elastic.co/u/oo7_manju)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 11:20am UTC](https://discuss.elastic.co/t/how-to-get-elastic-search-score-in-the-response-without-script-score-being-applied/262085 "2021-01-25T11:20:59Z")
Hi, We are looking for fetching \_score value from elastic search response., but looks like \_score value always includes the applied script\_score. We have script\_score to boost the relevancy in the query, and the requi… --- ## [Kibana saved objects create api is taking for ever, cluster tasks pending for a long time](https://discuss.elastic.co/t/kibana-saved-objects-create-api-is-taking-for-ever-cluster-tasks-pending-for-a-long-time/261710)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 6:25pm UTC](https://discuss.elastic.co/t/kibana-saved-objects-create-api-is-taking-for-ever-cluster-tasks-pending-for-a-long-time/261710 "2021-01-25T18:25:59Z")
Hi Team, Kibana saved objects create api is taking forever, cluster tasks are pending for a long time. I am trying to create search, visualization, dashboards using kibana saved objects api. observed that it is dead s… --- ## [Elastic Search Aggregations](https://discuss.elastic.co/t/elastic-search-aggregations/262009)
**Author:** [@Srini12](https://discuss.elastic.co/u/Srini12)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 6:01pm UTC](https://discuss.elastic.co/t/elastic-search-aggregations/262009 "2021-01-25T18:01:20Z")
Hi I am trying to build small app with facets, I am using NEST to get aggregations. When I execute the aggregations query using cURL iam getting expected results: my cURL is POST product/\_search { "aggs": { "g… --- ## [Fixing Legacy 'Self Monitoring' for Docker containers](https://discuss.elastic.co/t/fixing-legacy-self-monitoring-for-docker-containers/262151)
**Author:** [@doyelese](https://discuss.elastic.co/u/doyelese)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 5:56pm UTC](https://discuss.elastic.co/t/fixing-legacy-self-monitoring-for-docker-containers/262151 "2021-01-25T17:56:29Z")
I am getting the warning that Self Monitoring will not be supported in 8.0. My elastic environment is configured via 5 ElasticSearch container nodes and 1 Kibana container. How do I migrate away from self monitoring the… --- ## [Elasticsearch moving a replica shard between nodes](https://discuss.elastic.co/t/elasticsearch-moving-a-replica-shard-between-nodes/262042)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 6\ **Last updated:** [January 25, 2021, 5:10pm UTC](https://discuss.elastic.co/t/elasticsearch-moving-a-replica-shard-between-nodes/262042 "2021-01-25T17:10:24Z")
Hi, I have a cluster with almost all nodes 111 shards and only 2 nodes 108. I understand that ES balance the cluster with shard count. cluster has around 19 nodes, 3 master eligible of them 2 data as well and 16 data… --- ## [Kibana string manipulation](https://discuss.elastic.co/t/kibana-string-manipulation/262132)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 5:08pm UTC](https://discuss.elastic.co/t/kibana-string-manipulation/262132 "2021-01-25T17:08:04Z")
Hello. We are using ELK 7.6.2 stack. Fields from a particular log file gets displayed nice and proper in Kibana. One of the fields is "message" which in itself contains lot of information. Example from the log is as b… --- ## [Does the PIT API allow scrolling backward?](https://discuss.elastic.co/t/does-the-pit-api-allow-scrolling-backward/260129)
**Author:** [@F\_eq\_kx](https://discuss.elastic.co/u/F_eq_kx)\ **Replies:** 4\ **Last updated:** [January 25, 2021, 5:05pm UTC](https://discuss.elastic.co/t/does-the-pit-api-allow-scrolling-backward/260129 "2021-01-25T17:05:02Z")
The deprecated Scroll API didn't allow scrolling backward. Now that it is being replaced, is there a way to do that with PIT? --- ## [Logstash: Persistent Queue Behaviour](https://discuss.elastic.co/t/logstash-persistent-queue-behaviour/262141)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 5:03pm UTC](https://discuss.elastic.co/t/logstash-persistent-queue-behaviour/262141 "2021-01-25T17:03:15Z")
Hi, I've seen some behaviour with persistent queues that surprises me.I noticed this when throughput was capped on a logstash node when the EBS Burst Balance was exceeded for the volume of the logstash node in question.… --- ## [Ingest the same file multiple times](https://discuss.elastic.co/t/ingest-the-same-file-multiple-times/262142)
**Author:** [@Emiliano\_De\_Angelis](https://discuss.elastic.co/u/Emiliano_De_Angelis)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 4:42pm UTC](https://discuss.elastic.co/t/ingest-the-same-file-multiple-times/262142 "2021-01-25T16:42:33Z")
hello, I would need to read and forward the same file to elastic twice, duplicating the information within elastic but on which to add a different field. how can i parse the same file twice? thanks --- ## [Elastic does not perform rollover automatically](https://discuss.elastic.co/t/elastic-does-not-perform-rollover-automatically/261395)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 13\ **Last updated:** [January 25, 2021, 4:34pm UTC](https://discuss.elastic.co/t/elastic-does-not-perform-rollover-automatically/261395 "2021-01-25T16:34:08Z")
Hi folks I have following setup: filebeat sends logs from kubernetes cluster to logstash. Logstash sends them to elastic. These are the configurations of important components: Index template: "filebeat-k8s-logs" : { … --- ## [Does dissect processor in beats support greedy/lazy match?](https://discuss.elastic.co/t/does-dissect-processor-in-beats-support-greedy-lazy-match/261616)
**Author:** [@cy-zheng](https://discuss.elastic.co/u/cy-zheng)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 4:33pm UTC](https://discuss.elastic.co/t/does-dissect-processor-in-beats-support-greedy-lazy-match/261616 "2021-01-25T16:33:17Z")
I'm using dissect processor to parse a value like /var/log/containers/calico-node-ltx4t\_kube-system\_calico-node-21e03abb29adcec39f69e3f76c16eb2b3ed4dd1a51675279de5cedc59bdce56b.log using tokenizer:/var/log/containers/%… --- ## [Moving my first logs to ECS](https://discuss.elastic.co/t/moving-my-first-logs-to-ecs/261567)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 5\ **Last updated:** [January 25, 2021, 4:29pm UTC](https://discuss.elastic.co/t/moving-my-first-logs-to-ecs/261567 "2021-01-25T16:29:41Z")
Hi friends. After succesing submiting my custom events into elk and visalize ok kibana, I would like to improve my event login format. After googlin about creating custom ecs index and indexing its documents , I did no… --- ## [Debuging a watcher](https://discuss.elastic.co/t/debuging-a-watcher/262138)
**Author:** [@Bastien\_SANDER](https://discuss.elastic.co/u/Bastien_SANDER)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 4:23pm UTC](https://discuss.elastic.co/t/debuging-a-watcher/262138 "2021-01-25T16:23:31Z")
I want to update all document of a collection, and setting a boolean to false if the documents are returned by a query. I would like to create the following watcher : { "trigger": { "schedule": { … --- ## [Logstash throws \[message=\>“undefined method \`update' for nil:NilClass”\] when Elasticsearch index template defined in logstash](https://discuss.elastic.co/t/logstash-throws-message-undefined-method-update-for-nil-nilclass-when-elasticsearch-index-template-defined-in-logstash/262135)
**Author:** [@nadyahmed123](https://discuss.elastic.co/u/nadyahmed123)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 4:19pm UTC](https://discuss.elastic.co/t/logstash-throws-message-undefined-method-update-for-nil-nilclass-when-elasticsearch-index-template-defined-in-logstash/262135 "2021-01-25T16:19:52Z")
I am trying to load data from sql server to Elasticsearch using logstash. For index creation i am using index template that is specified in the config file of logstash. Output field of logstash.config : output{ st… --- ## [How to push a mobile logs to ELK](https://discuss.elastic.co/t/how-to-push-a-mobile-logs-to-elk/262130)
**Author:** [@fio](https://discuss.elastic.co/u/fio)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 3:59pm UTC](https://discuss.elastic.co/t/how-to-push-a-mobile-logs-to-elk/262130 "2021-01-25T15:59:33Z")
Hello, Is it possible to send the logs from my mobile app (Kotlin, Swift) to Kibana? How can I do it? There is an API or something like that --- ## [Monitor transforms](https://discuss.elastic.co/t/monitor-transforms/261538)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 3:50pm UTC](https://discuss.elastic.co/t/monitor-transforms/261538 "2021-01-25T15:50:05Z")
Hello, Any recommendation about monitoring transforms/ ML jobs performance ? I have lots of them, and I'm not sure which one is causing this issue every hour at about XX:35: I've tried the hot threads, but it's chang… --- ## [Install traffic light plugin on kibana 7.9 version](https://discuss.elastic.co/t/install-traffic-light-plugin-on-kibana-7-9-version/262061)
**Author:** [@Jordi](https://discuss.elastic.co/u/Jordi)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 3:24pm UTC](https://discuss.elastic.co/t/install-traffic-light-plugin-on-kibana-7-9-version/262061 "2021-01-25T15:24:52Z")
Hi, i've a problems to install \[TrafficLightVisKibana6\] or a official plugin on kibana plugin page "traffic" https://www.elastic.co/guide/en/kibana/7.9/kibana-plugins.html . Not recognize the plugin. I installed with a … --- ## [Memory metrics not correct](https://discuss.elastic.co/t/memory-metrics-not-correct/261688)
**Author:** [@jodinathan](https://discuss.elastic.co/u/jodinathan)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 3:22pm UTC](https://discuss.elastic.co/t/memory-metrics-not-correct/261688 "2021-01-25T15:22:07Z")
Hi, I am using Metrics with docker but the numbers seem to be incorrect. Docker stats: Memory in Metrics: My docker-compose: app: ... monitor: container\_name: monitor build: context: ../me… --- ## [Timestamp update](https://discuss.elastic.co/t/timestamp-update/262110)
**Author:** [@Makss39](https://discuss.elastic.co/u/Makss39)\ **Replies:** 2\ **Last updated:** [January 25, 2021, 3:21pm UTC](https://discuss.elastic.co/t/timestamp-update/262110 "2021-01-25T15:21:15Z")
Hello ! I would like to update my timestamp field, but all the info that i've found are not working... Probably a synthax error but i'm not able to figure out where it stucks... I already tried several option... POST … --- ## [Attempted to send event to pipeline](https://discuss.elastic.co/t/attempted-to-send-event-to-pipeline/262124)
**Author:** [@gose](https://discuss.elastic.co/u/gose)\ **Replies:** 0\ **Last updated:** [January 25, 2021, 3:13pm UTC](https://discuss.elastic.co/t/attempted-to-send-event-to-pipeline/262124 "2021-01-25T15:13:08Z")
I'm using Centralized Pipeline Management. I updated a pipeline (pipeline-1) that started sending events to another pipeline (pipeline-2). I didn't have pipeline-2 in my logstash.yml file, so Logstash didn't know about… --- ## [Usage of Cisco module's "asa" fileset usage in Logstash pipeline bypassing filebeat](https://discuss.elastic.co/t/usage-of-cisco-modules-asa-fileset-usage-in-logstash-pipeline-bypassing-filebeat/261945)
**Author:** [@mguttula](https://discuss.elastic.co/u/mguttula)\ **Replies:** 1\ **Last updated:** [January 25, 2021, 3:11pm UTC](https://discuss.elastic.co/t/usage-of-cisco-modules-asa-fileset-usage-in-logstash-pipeline-bypassing-filebeat/261945 "2021-01-25T15:11:59Z")
The current architecture of my set up is as follows: Cisco VPN --\> Logstash pipeline ---\> Elasticsearch I would like to use Cisco module asa fileset directly in the pipeline somehow so that I don't have to write the l… [Previous page](https://discuss.elastic.co/latest.md?page=1874) [Next page](https://discuss.elastic.co/latest.md?page=1876)