# Latest **URL:** https://discuss.elastic.co/latest.md?page=1890 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1891 --- ## [Need different time stamp other than default @timestamp from the indexed log](https://discuss.elastic.co/t/need-different-time-stamp-other-than-default-timestamp-from-the-indexed-log/261313)
**Author:** [@Aryaman\_Gupta](https://discuss.elastic.co/u/Aryaman_Gupta)\ **Replies:** 0\ **Last updated:** [January 16, 2021, 6:20am UTC](https://discuss.elastic.co/t/need-different-time-stamp-other-than-default-timestamp-from-the-indexed-log/261313 "2021-01-16T06:20:01Z")
Hi, My log looks like this 2021-01-13 15:30:12.543723914 node0:app:4786 APP\_ERR\_NUM Function = "DumpSample", Msg = "internal\_stats: Wed 2021-01-13 15:15:45 UTC", Val = 0 On visualising the data in the kibana dashboard… --- ## [How to delete a write index that had no allocated shards](https://discuss.elastic.co/t/how-to-delete-a-write-index-that-had-no-allocated-shards/261304)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 0\ **Last updated:** [January 16, 2021, 2:51am UTC](https://discuss.elastic.co/t/how-to-delete-a-write-index-that-had-no-allocated-shards/261304 "2021-01-16T02:51:26Z")
ES 7.10 original title: how can I delete a write index which has no allocated shards. I started the post after struggling with this for a day but, as is often the case, the action of documenting the problem and and dou… --- ## [How to search parent document without children?](https://discuss.elastic.co/t/how-to-search-parent-document-without-children/261239)
**Author:** [@J\_Kit](https://discuss.elastic.co/u/J_Kit)\ **Replies:** 4\ **Last updated:** [January 16, 2021, 3:16am UTC](https://discuss.elastic.co/t/how-to-search-parent-document-without-children/261239 "2021-01-16T03:16:20Z")
I created parent-child relationship. "my\_join\_field": { "type": "join", "relations": { "parent": "child" } } I tried to search for all parent document with… --- ## [Configuring ILM hot cold delete policy on ES Cluster](https://discuss.elastic.co/t/configuring-ilm-hot-cold-delete-policy-on-es-cluster/259509)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 5\ **Last updated:** [January 16, 2021, 3:21am UTC](https://discuss.elastic.co/t/configuring-ilm-hot-cold-delete-policy-on-es-cluster/259509 "2021-01-16T03:21:56Z")
I'm thinking to apply ILM policies on my ES cluster containing historical data that needs to be preserved for legal purposes with retention period being 7 years (85 months). This cluster used to have day-wise indices. I… --- ## [Plainless Query Cannot invoke \\"Object.getClass()\\" because \\"callArgs\[0\]\\" is null](https://discuss.elastic.co/t/plainless-query-cannot-invoke-object-getclass-because-callargs-0-is-null/261305)
**Author:** [@carpeDiem](https://discuss.elastic.co/u/carpeDiem)\ **Replies:** 0\ **Last updated:** [January 16, 2021, 3:16am UTC](https://discuss.elastic.co/t/plainless-query-cannot-invoke-object-getclass-because-callargs-0-is-null/261305 "2021-01-16T03:16:36Z")
Hello, I am using a painless scripting language to query,but the hit of result is empty. This is my query body POST test\_script-0/\_search { "\_source":true, "aggs":{}, "from":0, "highlig… --- ## [Python: Method to get connection pool details](https://discuss.elastic.co/t/python-method-to-get-connection-pool-details/261301)
**Author:** [@rpotnuru](https://discuss.elastic.co/u/rpotnuru)\ **Replies:** 0\ **Last updated:** [January 16, 2021, 12:00am UTC](https://discuss.elastic.co/t/python-method-to-get-connection-pool-details/261301 "2021-01-16T00:00:41Z")
Hello Team, We are using ElasticSearch Python client for talking to ES, Is there any api/method to get the following when using the ES client. total number of connections (active,closed, stale etc). total number of c… --- ## [Is there a simple way to get the execution times of Transport.perform\_request() method](https://discuss.elastic.co/t/is-there-a-simple-way-to-get-the-execution-times-of-transport-perform-request-method/261300)
**Author:** [@rpotnuru](https://discuss.elastic.co/u/rpotnuru)\ **Replies:** 0\ **Last updated:** [January 15, 2021, 11:58pm UTC](https://discuss.elastic.co/t/is-there-a-simple-way-to-get-the-execution-times-of-transport-perform-request-method/261300 "2021-01-15T23:58:14Z")
Hello Team, We are using ElasticSearch Python module in our application and would like to see if there is a way to capture execution times of Transport.perform\_request() method along with with some useful metadata of th… --- ## [ALgorithm in ElasticSearch for similarity distances between 2 floating vectors](https://discuss.elastic.co/t/algorithm-in-elasticsearch-for-similarity-distances-between-2-floating-vectors/259859)
**Author:** [@deshwal.mahesh](https://discuss.elastic.co/u/deshwal.mahesh)\ **Replies:** 1\ **Last updated:** [January 15, 2021, 11:52pm UTC](https://discuss.elastic.co/t/algorithm-in-elasticsearch-for-similarity-distances-between-2-floating-vectors/259859 "2021-01-15T23:52:10Z")
Before I start, I seriously have no idea what Elastic is and How it works. I am ML Engineer and has recently been assigned the task for Image - Image similarity. I developed a model which will compare the distances betwe… --- ## [How to create users in WorkplacSearch for giving them differents roles](https://discuss.elastic.co/t/how-to-create-users-in-workplacsearch-for-giving-them-differents-roles/258509)
**Author:** [@JorgeL-TI](https://discuss.elastic.co/u/JorgeL-TI)\ **Replies:** 2\ **Last updated:** [January 15, 2021, 10:55pm UTC](https://discuss.elastic.co/t/how-to-create-users-in-workplacsearch-for-giving-them-differents-roles/258509 "2021-01-15T22:55:26Z")
Hello, I am using Elastic Enterprise search, and I want to create some users besides the default one, and give them different roles. Thank you very much --- ## [Transform aggregation is not keeping up](https://discuss.elastic.co/t/transform-aggregation-is-not-keeping-up/261176)
**Author:** [@Mike\_Connor](https://discuss.elastic.co/u/Mike_Connor)\ **Replies:** 6\ **Last updated:** [January 15, 2021, 9:27pm UTC](https://discuss.elastic.co/t/transform-aggregation-is-not-keeping-up/261176 "2021-01-15T21:27:36Z")
Hello, I am struggling with a transform that when originally deployed was performing, but after a seemingly minor change has now become slow and not able to keep up. The transform queries an index for the past 3 hours, … --- ## [Install on air gap system](https://discuss.elastic.co/t/install-on-air-gap-system/261291)
**Author:** [@Andrew\_McDonald](https://discuss.elastic.co/u/Andrew_McDonald)\ **Replies:** 2\ **Last updated:** [January 15, 2021, 8:32pm UTC](https://discuss.elastic.co/t/install-on-air-gap-system/261291 "2021-01-15T20:32:01Z")
I work in an air gap aws system and we use puppet for deployment. So usually we make or grab an rpm and install it to the local repo and puppet takes care of the rest. Unfortunately, after adding the filebeats-oss rpm … --- ## [Unable to connect to Elasticsearch. Error: Request Timeout](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-request-timeout/261276)
**Author:** [@first100](https://discuss.elastic.co/u/first100)\ **Replies:** 2\ **Last updated:** [January 15, 2021, 8:28pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-request-timeout/261276 "2021-01-15T20:28:11Z")
I tried to delete kibana\_1 index as stated in the previuos elastic log: (Cluster health status changed from \[RED\] to \[YELLOW\] (reason: \[shards started \[\[.kibana\_1\] ) : so i ran: DELETE /.kibana\_1 and i received a suc… --- ## [Kibana watcher alert when error log rate exceeds 1 per min for 1 hour](https://discuss.elastic.co/t/kibana-watcher-alert-when-error-log-rate-exceeds-1-per-min-for-1-hour/261197)
**Author:** [@Chenyang\_Liu](https://discuss.elastic.co/u/Chenyang_Liu)\ **Replies:** 1\ **Last updated:** [January 15, 2021, 6:11pm UTC](https://discuss.elastic.co/t/kibana-watcher-alert-when-error-log-rate-exceeds-1-per-min-for-1-hour/261197 "2021-01-15T18:11:53Z")
I would like to setup a Kibana watcher to send alert when error log rate is over 1 per minute for one hour. So I set a scheduler interval to 1m, then query log.level: ERROR to get the error count for 1 min But after th… --- ## [Errors in Logstash after \`bundle install \` in plugin](https://discuss.elastic.co/t/errors-in-logstash-after-bundle-install-in-plugin/261286)
**Author:** [@a\_sharafan](https://discuss.elastic.co/u/a_sharafan)\ **Replies:** 0\ **Last updated:** [January 15, 2021, 5:26pm UTC](https://discuss.elastic.co/t/errors-in-logstash-after-bundle-install-in-plugin/261286 "2021-01-15T17:26:31Z")
I created my own filter plugin and did bundle install under directory of plugin. Also created .gem file, but after this bin/logstash doesn't work because of that problem: "No such file to load -- bundler " in ruby-kernel… --- ## [Searching for case insensitive fuzzy query in kanji, katakana and latin](https://discuss.elastic.co/t/searching-for-case-insensitive-fuzzy-query-in-kanji-katakana-and-latin/261249)
**Author:** [@markuso](https://discuss.elastic.co/u/markuso)\ **Replies:** 1\ **Last updated:** [January 15, 2021, 5:25pm UTC](https://discuss.elastic.co/t/searching-for-case-insensitive-fuzzy-query-in-kanji-katakana-and-latin/261249 "2021-01-15T17:25:55Z")
So I have a field - it is a firstName - as such it is mapped as a keyword. This name can be in kanji, katakana or just latin characters. So to give an example: my name is "Markus" - mapped as a keyword I want to find… --- ## [APM java agent ver 1.20.0 - no such method issue](https://discuss.elastic.co/t/apm-java-agent-ver-1-20-0-no-such-method-issue/261275)
**Author:** [@tmihaldinec](https://discuss.elastic.co/u/tmihaldinec)\ **Replies:** 9\ **Last updated:** [January 15, 2021, 5:17pm UTC](https://discuss.elastic.co/t/apm-java-agent-ver-1-20-0-no-such-method-issue/261275 "2021-01-15T17:17:40Z")
Hi, We have the problem with latest version of APM Java agent ver 1.20.0 which is also registered in ver 1.18 ERROR: INFO | jvm 5 | 2021/01/15 11:51:45 | 11:51:45.428 \[AD Agent init\] ERROR co.elastic.apm.agent.b… --- ## [Output Event Rates are showing gaps in APM Stack Monitoring page](https://discuss.elastic.co/t/output-event-rates-are-showing-gaps-in-apm-stack-monitoring-page/259572)
**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\ **Replies:** 1\ **Last updated:** [January 15, 2021, 5:15pm UTC](https://discuss.elastic.co/t/output-event-rates-are-showing-gaps-in-apm-stack-monitoring-page/259572 "2021-01-15T17:15:14Z")
Hi, I am using On premise elastic stack 7.9.0. And recently we are facing outofmemory issue on one of the java agents. The APM CallTrace objects are taking more than 2GB which is causing the issue. Also, we are seeing … --- ## [Cluster nodes didn't recognize each others (ES-7.7.1)](https://discuss.elastic.co/t/cluster-nodes-didnt-recognize-each-others-es-7-7-1/260839)
**Author:** [@Guillaume\_Tiberi](https://discuss.elastic.co/u/Guillaume_Tiberi)\ **Replies:** 6\ **Last updated:** [January 15, 2021, 5:05pm UTC](https://discuss.elastic.co/t/cluster-nodes-didnt-recognize-each-others-es-7-7-1/260839 "2021-01-15T17:05:25Z")
Hi I want to build a 5 nodes ES cluster but nodes didn't recognized each others. Could you help me to well config this cluster ? It's like node didn't recognize themself to be the master-node (node-3 looking for master… --- ## [Puting multiple if conditionals into loop](https://discuss.elastic.co/t/puting-multiple-if-conditionals-into-loop/261226)
**Author:** [@woolfik](https://discuss.elastic.co/u/woolfik)\ **Replies:** 1\ **Last updated:** [January 15, 2021, 4:33pm UTC](https://discuss.elastic.co/t/puting-multiple-if-conditionals-into-loop/261226 "2021-01-15T16:33:24Z")
Good morning. So I'm into logstash filters code which contains tens of similar if conditionals like following: if ("123456" == \[ID\]) { mutate { add\_field =\> { "\[fields\]\[key1\]" =\> "value1" "\[fields\]\[ke… --- ## [Installing new version of custom plugin Kibana 7.10](https://discuss.elastic.co/t/installing-new-version-of-custom-plugin-kibana-7-10/260565)
**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\ **Replies:** 5\ **Last updated:** [January 15, 2021, 3:51pm UTC](https://discuss.elastic.co/t/installing-new-version-of-custom-plugin-kibana-7-10/260565 "2021-01-15T15:51:34Z")
I'm writing a custom plugin in Kiabana 7.10. I've got it running on my local copy of Kibana. I then do a yarn build command and copy the zip file to our dev server. I then install the plugin using the kibana/bin/kibana-p… --- ## [Date math rounding error](https://discuss.elastic.co/t/date-math-rounding-error/261116)
**Author:** [@bbailey](https://discuss.elastic.co/u/bbailey)\ **Replies:** 3\ **Last updated:** [January 15, 2021, 3:38pm UTC](https://discuss.elastic.co/t/date-math-rounding-error/261116 "2021-01-15T15:38:44Z")
I've come across a strange issue which I think is a bug in the date math I create a daily snapshot of data once it is 10 days old using curator and the name of the snapshot is set to "name: \<{now/d-10d{YYYY-MM-dd}}\>" T… --- ## [ECK Operator Deployment and maintenance using helm](https://discuss.elastic.co/t/eck-operator-deployment-and-maintenance-using-helm/231608)
**Author:** [@singharunk](https://discuss.elastic.co/u/singharunk)\ **Replies:** 1\ **Last updated:** [January 15, 2021, 3:38pm UTC](https://discuss.elastic.co/t/eck-operator-deployment-and-maintenance-using-helm/231608 "2021-01-15T15:38:05Z")
Hi Team, I am planning to deploy ECK operator and manage Elasticsearch/Kibana deployment using Helm. Is it a good idea ? Any OOTB repository for ECK helm is available ? Regards Ak --- ## [No way to link back to original indexed file?](https://discuss.elastic.co/t/no-way-to-link-back-to-original-indexed-file/261042)
**Author:** [@bebbd](https://discuss.elastic.co/u/bebbd)\ **Replies:** 4\ **Last updated:** [January 15, 2021, 3:08pm UTC](https://discuss.elastic.co/t/no-way-to-link-back-to-original-indexed-file/261042 "2021-01-15T15:08:28Z")
Hi I am wondering if I have chosen the wrong tool for my needs. My original goal was to index a folder of 20 GB of files, around 65,000 files. In the search results I would like to link to the found fie, so the user ca… --- ## [Kibana Discover & Dashboards showing 15 minutes delay](https://discuss.elastic.co/t/kibana-discover-dashboards-showing-15-minutes-delay/256899)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 8\ **Last updated:** [January 15, 2021, 3:00pm UTC](https://discuss.elastic.co/t/kibana-discover-dashboards-showing-15-minutes-delay/256899 "2021-01-15T15:00:49Z")
I have 2 kibana spaces. One is working fine. But in another space data in Discovery and Dashboards showing delay 15 minutes. But data is continuously updating. What will be the issue ? --- ## [Not enough master nodes/failed to retrieve user](https://discuss.elastic.co/t/not-enough-master-nodes-failed-to-retrieve-user/261165)
**Author:** [@pan\_e](https://discuss.elastic.co/u/pan_e)\ **Replies:** 3\ **Last updated:** [January 15, 2021, 2:55pm UTC](https://discuss.elastic.co/t/not-enough-master-nodes-failed-to-retrieve-user/261165 "2021-01-15T14:55:46Z")
I'm using ElasticSearch 6.8 with 3 Nodes. I have set discovery.zen.minimum\_master\_nodes: 2 I'm trying to test what happens when there is only 1 node online. I've shut down 2 nodes and I can see the 3rd node goes into: … --- ## [Apachelogs missing from Data Analysis with Kibana lab](https://discuss.elastic.co/t/apachelogs-missing-from-data-analysis-with-kibana-lab/261263)
**Author:** [@clark.r.lindstrom.ct](https://discuss.elastic.co/u/clark.r.lindstrom.ct)\ **Replies:** 3\ **Last updated:** [January 15, 2021, 2:41pm UTC](https://discuss.elastic.co/t/apachelogs-missing-from-data-analysis-with-kibana-lab/261263 "2021-01-15T14:41:33Z")
Currently taking the on-demand Data Analysis with Kibana. Started Lab 4.1: Introduction to TSVB and got down to step 3 to work through the display. Entered "apachelogs\*" in the index field along with all the other sett… --- ## [Create Visualization - Get Data for last month](https://discuss.elastic.co/t/create-visualization-get-data-for-last-month/261111)
**Author:** [@shubham184](https://discuss.elastic.co/u/shubham184)\ **Replies:** 3\ **Last updated:** [January 15, 2021, 2:37pm UTC](https://discuss.elastic.co/t/create-visualization-get-data-for-last-month/261111 "2021-01-15T14:37:49Z")
Dear, The purpose is to create a visualization Lets assume the following table. The Input table contains the user name and user login timestamp. The generated output should be only those users who have NOT logged i… --- ## [IncompatibleClassChangeError on Spring Boot app](https://discuss.elastic.co/t/incompatibleclasschangeerror-on-spring-boot-app/261252)
**Author:** [@zzzykf](https://discuss.elastic.co/u/zzzykf)\ **Replies:** 2\ **Last updated:** [January 15, 2021, 2:09pm UTC](https://discuss.elastic.co/t/incompatibleclasschangeerror-on-spring-boot-app/261252 "2021-01-15T14:09:32Z")
Hi, I'm currently using Java APM Agent v1.19.0 with my Spring Boot (v2.2.1) app. I encountered an issue where by my app couldn't startup and throws IncompatibleClassChangeError. I'm starting the app manually using java… --- ## [Created a rollup job with a space in the ID and now i cannot stop it](https://discuss.elastic.co/t/created-a-rollup-job-with-a-space-in-the-id-and-now-i-cannot-stop-it/261187)
**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Replies:** 2\ **Last updated:** [January 15, 2021, 2:02pm UTC](https://discuss.elastic.co/t/created-a-rollup-job-with-a-space-in-the-id-and-now-i-cannot-stop-it/261187 "2021-01-15T14:02:07Z")
Hello, fairly new to rollup jobs here and i have created one called "new rollup" to play around with now i want to delete it but i have to stop it first and when i try to stop it i get this error POST \_rollup/job/new r… --- ## [Check-rollover-ready explain](https://discuss.elastic.co/t/check-rollover-ready-explain/261260)
**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\ **Replies:** 2\ **Last updated:** [January 15, 2021, 1:40pm UTC](https://discuss.elastic.co/t/check-rollover-ready-explain/261260 "2021-01-15T13:40:20Z")
Hello guys, I have set up ILM policy on data stream and when I manually perform rollover trough rollover api, it's just a blink of an eye and new index is created. BUT, if I use ILM, there is some step called check-rol… [Previous page](https://discuss.elastic.co/latest.md?page=1889) [Next page](https://discuss.elastic.co/latest.md?page=1891)