# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1397 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1398 --- ## [Custom date format to show microsecond](https://discuss.elastic.co/t/custom-date-format-to-show-microsecond/236470)
**Author:** [@dotan2401](https://discuss.elastic.co/u/dotan2401)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 9:15am UTC](https://discuss.elastic.co/t/custom-date-format-to-show-microsecond/236470 "2020-06-10T09:15:28Z")
Is there any example of how to create a custom "date type" that can show microseconds in elastic search? In c# with Nest. Thanks. --- ## [Join two log files using aggregate filter of logstash](https://discuss.elastic.co/t/join-two-log-files-using-aggregate-filter-of-logstash/236468)
**Author:** [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 9:06am UTC](https://discuss.elastic.co/t/join-two-log-files-using-aggregate-filter-of-logstash/236468 "2020-06-10T09:06:09Z")
I have used the below aggregate plugin for logstash to join two log files: Log1: PAGE,PAGEDESCRIPTION Log 2: PAGE,HTTPAGENT I WANT THE FINAL OUTPUT in kibana as: PAGE,PAGEDESCRIPTION,HTTPAGENT. The aggregate plugin sni… --- ## [Elasticsearch 7.7.1 RPM fresh install keystore permission issues](https://discuss.elastic.co/t/elasticsearch-7-7-1-rpm-fresh-install-keystore-permission-issues/236434)
**Author:** [@undelete](https://discuss.elastic.co/u/undelete)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 8:25am UTC](https://discuss.elastic.co/t/elasticsearch-7-7-1-rpm-fresh-install-keystore-permission-issues/236434 "2020-06-10T08:25:55Z")
Hi, I have a fresh install of Elasticsearch. Whenever I try to add or change password of the keystore I get this error: ERROR: unable to create temporary keystore at \[/etc/elasticsearch/elasticsearch.keystore.tmp\], write… --- ## [Extract a subset of an big Index](https://discuss.elastic.co/t/extract-a-subset-of-an-big-index/236360)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 4\ **Last updated:** [June 10, 2020, 8:24am UTC](https://discuss.elastic.co/t/extract-a-subset-of-an-big-index/236360 "2020-06-10T08:24:51Z")
Hi I have a bit index journalbeat-\*... we would like to have an extract of it which we would like to keep for months with only a few fields... what i the best way to achieve this? --- ## [How to get unique values from loop function for watcher subject](https://discuss.elastic.co/t/how-to-get-unique-values-from-loop-function-for-watcher-subject/235712)
**Author:** [@muralia](https://discuss.elastic.co/u/muralia)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 8:22am UTC](https://discuss.elastic.co/t/how-to-get-unique-values-from-loop-function-for-watcher-subject/235712 "2020-06-10T08:22:08Z")
I have used {{#ctx.payload.hits.hits}} {{\_source.name}} {{/ctx.payload.hits.hits}} function in the subject of the watcher. Its printing all values with duplicates, can someone please help me how to get Unique values fro… --- ## [Flooded /var/log/messages](https://discuss.elastic.co/t/flooded-var-log-messages/236442)
**Author:** [@zeleznypa](https://discuss.elastic.co/u/zeleznypa)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 6:26am UTC](https://discuss.elastic.co/t/flooded-var-log-messages/236442 "2020-06-10T06:26:04Z")
On our servers, the /var/log/messages file is flooded with messages like this: Jun 10 08:16:46 SERVER logstash: 2020-06-10 08:16:42,551 Converge PipelineAction::Create\ WARN The Logger slowlog.logstas… --- ## [Elastic operator : custom resource fo elastic cluster](https://discuss.elastic.co/t/elastic-operator-custom-resource-fo-elastic-cluster/236418)
**Author:** [@Brijrajsinh\_Jhala](https://discuss.elastic.co/u/Brijrajsinh_Jhala)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 7:37am UTC](https://discuss.elastic.co/t/elastic-operator-custom-resource-fo-elastic-cluster/236418 "2020-06-10T07:37:50Z")
Hello, Greetings ! I have looked the custom resource of elastic search instance creation using operator CRD however I dont see any discovery type defined. I just saw no of nodes count to configure. so in order to defin… --- ## [Customizing cluster settings for ESClientYamlSuiteTestCase](https://discuss.elastic.co/t/customizing-cluster-settings-for-esclientyamlsuitetestcase/236450)
**Author:** [@rahulkarajgikar](https://discuss.elastic.co/u/rahulkarajgikar)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 7:26am UTC](https://discuss.elastic.co/t/customizing-cluster-settings-for-esclientyamlsuitetestcase/236450 "2020-06-10T07:26:01Z")
Hi everyone. I'm writing a rest test case for a plugin I've created, using ESClientYamlSuiteTestCase. I understand that this class starts up a cluster for testing. However, I also want to be able to customize the clust… --- ## [Recovery multiple Snapshots for one Index](https://discuss.elastic.co/t/recovery-multiple-snapshots-for-one-index/236447)
**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 7:11am UTC](https://discuss.elastic.co/t/recovery-multiple-snapshots-for-one-index/236447 "2020-06-10T07:11:15Z")
Hi there We've got the following (not very optimal) situation: 1 Node with 6 Indices on this Node Snapshots are done every 3-4 Month All data older than 2 Month is deleted from all indices What we would like to do i… --- ## [Helm 3 Migration Roadmap](https://discuss.elastic.co/t/helm-3-migration-roadmap/235965)
**Author:** [@Alex\_Gordon](https://discuss.elastic.co/u/Alex_Gordon)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 7:02am UTC](https://discuss.elastic.co/t/helm-3-migration-roadmap/235965 "2020-06-10T07:02:57Z")
Currently the required version to use the Elastic Stack Helm charts are \>=2.8.0 and \<3.0.0. Is there a plan in your roadmap to migrate to Helm 3? If so what is the time period where this will be available? --- ## [Help with this query (combine term and range)](https://discuss.elastic.co/t/help-with-this-query-combine-term-and-range/236431)
**Author:** [@justaniceguy](https://discuss.elastic.co/u/justaniceguy)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 6:48am UTC](https://discuss.elastic.co/t/help-with-this-query-combine-term-and-range/236431 "2020-06-10T06:48:55Z")
When I run this query with range I get results: { "query":{ "range":{ "crawled":{ "lt":1591666432 } }, }, "from":0, "size":1 … --- ## [Too many if else if in output](https://discuss.elastic.co/t/too-many-if-else-if-in-output/236441)
**Author:** [@cling1988](https://discuss.elastic.co/u/cling1988)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 6:21am UTC](https://discuss.elastic.co/t/too-many-if-else-if-in-output/236441 "2020-06-10T06:21:32Z")
Hi All I am currently using Logstash version 7.4 My Logstash output is to Kusto. And it has the if-else condition on the output, for the different condition will output to different Kusto database. The if-else checki… --- ## [Elastic 7.7.1 compatibility with FScrawler](https://discuss.elastic.co/t/elastic-7-7-1-compatibility-with-fscrawler/236438)
**Author:** [@Yamini\_Shashank](https://discuss.elastic.co/u/Yamini_Shashank)\ **Replies:** 0\ **Last updated:** [June 10, 2020, 5:49am UTC](https://discuss.elastic.co/t/elastic-7-7-1-compatibility-with-fscrawler/236438 "2020-06-10T05:49:49Z")
Hi @dadoonet, We have been using ES 7.5.0 successfully with FS Crawler. Now we wish to upgrade to 7.7.1. I could not find the compatibility details of this version with FSCrawler. Can you confirm on this please? Many… --- ## [Enable HTTPS in kibana: Something went wrong](https://discuss.elastic.co/t/enable-https-in-kibana-something-went-wrong/236352)
**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\ **Replies:** 2\ **Last updated:** [June 10, 2020, 5:03am UTC](https://discuss.elastic.co/t/enable-https-in-kibana-something-went-wrong/236352 "2020-06-10T05:03:42Z")
Hi! I have enabled HTTPS in kibana, but when I connect to the url https://ip:5601 I get an indication that the connection to the site is not secure. Pls see the image. Why does this happen? What can I do to resolve it… --- ## [Elasticsearch 7.6.0 - Security index is unavailable](https://discuss.elastic.co/t/elasticsearch-7-6-0-security-index-is-unavailable/236422)
**Author:** [@phaze-debug](https://discuss.elastic.co/u/phaze-debug)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-0-security-index-is-unavailable/236422 "2020-06-09T22:11:42Z")
We are using elastic search 7.6.0 as a package from the DCOS universe (3 master nodes, 6 data nodes, 1 ingest and 1 coordinator node) with xpack enabled (using native realm). We ran into an issue when the DCOS cluster wa… --- ## [Is not support reindex from es6 to es7](https://discuss.elastic.co/t/is-not-support-reindex-from-es6-to-es7/236295)
**Author:** [@innze](https://discuss.elastic.co/u/innze)\ **Replies:** 3\ **Last updated:** [June 9, 2020, 11:23pm UTC](https://discuss.elastic.co/t/is-not-support-reindex-from-es6-to-es7/236295 "2020-06-09T23:23:56Z")
The following error is occurring when reindexing from remote es to es. Request POST \_reindex { "source": { "remote": { "host": "http://remote\_es\_url:9200" }, "index": "source… --- ## [FileBeat + Rails Log](https://discuss.elastic.co/t/filebeat-rails-log/236420)
**Author:** [@Andres\_Barcenas](https://discuss.elastic.co/u/Andres_Barcenas)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 9:47pm UTC](https://discuss.elastic.co/t/filebeat-rails-log/236420 "2020-06-09T21:47:46Z")
I have a very custom rails log with contains some text and a JSON string at the end. Can I use filebeat to dissect/process the file so I can send a proper message to elastic cloud? Here is an example of the message and w… --- ## [HTTP poller SSL cert issue](https://discuss.elastic.co/t/http-poller-ssl-cert-issue/236064)
**Author:** [@jb789](https://discuss.elastic.co/u/jb789)\ **Replies:** 1\ **Last updated:** [June 9, 2020, 8:17pm UTC](https://discuss.elastic.co/t/http-poller-ssl-cert-issue/236064 "2020-06-09T20:17:42Z")
Could not get http poller to work in pulling a public API data input { http\_poller { urls =\> { urlname =\> "https://pricing.us-east-1.amazonaws.com/offers/v1.0/aws/AmazonRedshif… --- ## [Lots of byte\[\] in meory](https://discuss.elastic.co/t/lots-of-byte-in-meory/236406)
**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 6:20pm UTC](https://discuss.elastic.co/t/lots-of-byte-in-meory/236406 "2020-06-09T18:20:19Z")
Hi I am using elasticsearch java client 6.6.0 I do index lot of documents ~10K per second, almost 5MB per second i am using async api as below, i dont do any action.get, i dont want to check the response, its okay if … --- ## [ElasticCloud Standard - Kibana and ElasticSearch: How to configure custom TLS certificate?](https://discuss.elastic.co/t/elasticcloud-standard-kibana-and-elasticsearch-how-to-configure-custom-tls-certificate/236401)
**Author:** [@elvis.hsu](https://discuss.elastic.co/u/elvis.hsu)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 5:36pm UTC](https://discuss.elastic.co/t/elasticcloud-standard-kibana-and-elasticsearch-how-to-configure-custom-tls-certificate/236401 "2020-06-09T17:36:23Z")
Hi, When I signup the ElasticCloud Standard and created a deployment. The system gives me a default endpoint ie. https://xxxxxxxx.region.cloud-provider.elastic-cloud.com:9243/. I've configured CNAME from our DNS server… --- ## [Difference between two aggregations in Kibana. Error](https://discuss.elastic.co/t/difference-between-two-aggregations-in-kibana-error/234988)
**Author:** [@vdalvi](https://discuss.elastic.co/u/vdalvi)\ **Replies:** 3\ **Last updated:** [June 9, 2020, 5:35pm UTC](https://discuss.elastic.co/t/difference-between-two-aggregations-in-kibana-error/234988 "2020-06-09T17:35:28Z")
Hi, I am trying to perform simple difference between the values in two aggregations but unable to do so... Kibana Query { "\_source": false, "query": { "range": { "timestamp": { "gte": "now-90m/m"… --- ## [Line Chart Visualization for Nginx Request and Response Time](https://discuss.elastic.co/t/line-chart-visualization-for-nginx-request-and-response-time/234921)
**Author:** [@prasanna2104](https://discuss.elastic.co/u/prasanna2104)\ **Replies:** 3\ **Last updated:** [June 9, 2020, 5:34pm UTC](https://discuss.elastic.co/t/line-chart-visualization-for-nginx-request-and-response-time/234921 "2020-06-09T17:34:04Z")
Hi Team, I have nginx log which contains request time and response time. I have configured Filebeat which sends the nginx logs to logstash and logstash parse the log and stores in Elasticsearch, I want to create a Line… --- ## [Logstash date filter issue with kibana/elasticsearch](https://discuss.elastic.co/t/logstash-date-filter-issue-with-kibana-elasticsearch/236383)
**Author:** [@damasu](https://discuss.elastic.co/u/damasu)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 4:03pm UTC](https://discuss.elastic.co/t/logstash-date-filter-issue-with-kibana-elasticsearch/236383 "2020-06-09T16:03:22Z")
Hi, I am having a very strange issue here. For instance, when i include the date filter in my code if \[fields\]\[document\_type\] == "mvpep" { grok { match =\> { "message" =\> "(%{TIMESTAMP\_ISO8601:timestamp… --- ## [Kibana discover page and dashboard are not refreshing automatically](https://discuss.elastic.co/t/kibana-discover-page-and-dashboard-are-not-refreshing-automatically/234895)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 3\ **Last updated:** [June 9, 2020, 5:31pm UTC](https://discuss.elastic.co/t/kibana-discover-page-and-dashboard-are-not-refreshing-automatically/234895 "2020-06-09T17:31:18Z")
Hi, Kibana discover page and dashboard are not refreshing automatically in version 7.7 (current). --- ## [TASK doesn't support cancellation](https://discuss.elastic.co/t/task-doesnt-support-cancellation/234852)
**Author:** [@realyn\_elastic](https://discuss.elastic.co/u/realyn_elastic)\ **Replies:** 3\ **Last updated:** [June 9, 2020, 5:29pm UTC](https://discuss.elastic.co/t/task-doesnt-support-cancellation/234852 "2020-06-09T17:29:38Z")
Can help to enlighten why I cannot cancel this task { "completed" : false, "task" : { "node" : "Vzjnc-d2SuOZ07\_6LCyl2A", "id" : 4779394, "type" : "transport", "action" : "cluster:admin/xpack/monitoring/bulk", "de… --- ## [ElasticCloud Standard - Elasticsearch GeoIP proccessor: Inaccurae results](https://discuss.elastic.co/t/elasticcloud-standard-elasticsearch-geoip-proccessor-inaccurae-results/236400)
**Author:** [@elvis.hsu](https://discuss.elastic.co/u/elvis.hsu)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 5:26pm UTC](https://discuss.elastic.co/t/elasticcloud-standard-elasticsearch-geoip-proccessor-inaccurae-results/236400 "2020-06-09T17:26:55Z")
Hi, I have been using the GeoIp processer for a while on ECS (ElasticCloud Standard) and recently I found out that some results are inaccurate as I have compared with the demo from MaxMind. I just wonder how often do y… --- ## [Failed to connect to backoff(elasticsearch(http://es01:9200)): Connection marked as failed because the onConnect callback failed: resource 'apm-7.5.2-error' exists, but it is not an alias](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-es01-9200-connection-marked-as-failed-because-the-onconnect-callback-failed-resource-apm-7-5-2-error-exists-but-it-is-not-an-alias/236088)
**Author:** [@mac\_71128](https://discuss.elastic.co/u/mac_71128)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 5:16pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-http-es01-9200-connection-marked-as-failed-because-the-onconnect-callback-failed-resource-apm-7-5-2-error-exists-but-it-is-not-an-alias/236088 "2020-06-09T17:16:24Z")
Kibana version: 7.5.2 Elasticsearch version: 7.5.2 APM Server version: 7.5.2 APM Agent language and version: python elastic-apm 5.5.2 elasticsearch 7.5.1 I have two server machines. One of them is for elastic a… --- ## [Match\_bool\_prefix in Java High Level Rest Client](https://discuss.elastic.co/t/match-bool-prefix-in-java-high-level-rest-client/236395)
**Author:** [@Pilpin](https://discuss.elastic.co/u/Pilpin)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 4:42pm UTC](https://discuss.elastic.co/t/match-bool-prefix-in-java-high-level-rest-client/236395 "2020-06-09T16:42:20Z")
Hello, I'm using elasticsearch and the Java high level rest client in a project and I'd like to be able to make a match\_bool\_prefix query via the rest client but I noticed the static method is missing from the QueryBuil… --- ## [Ports used by Elasticsearch for communication](https://discuss.elastic.co/t/ports-used-by-elasticsearch-for-communication/233683)
**Author:** [@Arnab.g](https://discuss.elastic.co/u/Arnab.g)\ **Replies:** 6\ **Last updated:** [June 9, 2020, 4:24pm UTC](https://discuss.elastic.co/t/ports-used-by-elasticsearch-for-communication/233683 "2020-06-09T16:24:31Z")
Hello All - I have a completely locked down environment where we need to open ports for each communication between VMs. So while looking for all the ports used by elastisearch , though I know it is documented to be 9300… --- ## [ELK configure](https://discuss.elastic.co/t/elk-configure/236385)
**Author:** [@Andrew31](https://discuss.elastic.co/u/Andrew31)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 4:05pm UTC](https://discuss.elastic.co/t/elk-configure/236385 "2020-06-09T16:05:39Z")
Hi Elasticsearch, Kibana and Logstash and other with filebeat. I configured one VM with all ELK suite (Elastic, Kibana, logstash and filebeat) in same VM. No problem with my localhost configuration. the problem is when… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1396) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1398)