# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1528 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1529 --- ## [How to do time math in script field](https://discuss.elastic.co/t/how-to-do-time-math-in-script-field/226886)
**Author:** [@Echo\_yu](https://discuss.elastic.co/u/Echo_yu)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 12:40pm UTC](https://discuss.elastic.co/t/how-to-do-time-math-in-script-field/226886 "2020-04-07T12:40:34Z")
Hi, I want to do some time math in script field of Kibana. Now I have a field called startdatetime with the data type of date, and a field called runtime with the data type of number, how can i sum them up and return a n… --- ## [Beats index management](https://discuss.elastic.co/t/beats-index-management/226894)
**Author:** [@michielM](https://discuss.elastic.co/u/michielM)\ **Replies:** 0\ **Last updated:** [April 7, 2020, 12:40pm UTC](https://discuss.elastic.co/t/beats-index-management/226894 "2020-04-07T12:40:29Z")
Hi all, Currently, I,m trying to change the index name in a way that every server I connect is a prefix of the index. For example: currently, I just have auditbeat-7.6.1-2020.03.27-000001 as index name, but I want to ha… --- ## [ES can't get btrfs filesystem stats](https://discuss.elastic.co/t/es-cant-get-btrfs-filesystem-stats/226858)
**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\ **Replies:** 6\ **Last updated:** [April 7, 2020, 12:35pm UTC](https://discuss.elastic.co/t/es-cant-get-btrfs-filesystem-stats/226858 "2020-04-07T12:35:52Z")
if ES data store in btrfs filesystem partition, then GET \_nodes/stats/fs will return empty io\_stats field. such as : "fs" : { "timestamp" : 1586250875508, "total" : { "total\_in\_bytes" : 4000225… --- ## [Syslogs sent to wrong index](https://discuss.elastic.co/t/syslogs-sent-to-wrong-index/226734)
**Author:** [@Roger\_Westgren](https://discuss.elastic.co/u/Roger_Westgren)\ **Replies:** 5\ **Last updated:** [April 7, 2020, 12:27pm UTC](https://discuss.elastic.co/t/syslogs-sent-to-wrong-index/226734 "2020-04-07T12:27:06Z")
Hi! I have a weird problem with my Logstash configuration. There are 2 .conf files in /etc/logstash/conf.d (beats.conf and syslog.conf). All the Beats agents get sent to port 5043 (beats.conf), and that's working f… --- ## [Multiple http filters at the same time](https://discuss.elastic.co/t/multiple-http-filters-at-the-same-time/226839)
**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\ **Replies:** 8\ **Last updated:** [April 7, 2020, 11:54am UTC](https://discuss.elastic.co/t/multiple-http-filters-at-the-same-time/226839 "2020-04-07T11:54:29Z")
Hi Team, Does Logstash support multiple http filters at the same time? Please confirm. --- ## [Http\_poller\_plugin: Index document issue](https://discuss.elastic.co/t/http-poller-plugin-index-document-issue/226884)
**Author:** [@manojkrishna561994](https://discuss.elastic.co/u/manojkrishna561994)\ **Replies:** 0\ **Last updated:** [April 7, 2020, 11:47am UTC](https://discuss.elastic.co/t/http-poller-plugin-index-document-issue/226884 "2020-04-07T11:47:45Z")
I'm using http\_poller\_plugin in order to fetch the logs for every 2 mins. Index is getting created and the data is also seen when the visualization is created, however, after completing every 1.30 mins (or so..) the da… --- ## [What are the downfalls of using elasticsearch as a primary database](https://discuss.elastic.co/t/what-are-the-downfalls-of-using-elasticsearch-as-a-primary-database/226815)
**Author:** [@chawki](https://discuss.elastic.co/u/chawki)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 11:09am UTC](https://discuss.elastic.co/t/what-are-the-downfalls-of-using-elasticsearch-as-a-primary-database/226815 "2020-04-07T11:09:48Z")
Please point out the downfalls. Thank you --- ## [Filebeat stop after sometimes while reading yarn logs](https://discuss.elastic.co/t/filebeat-stop-after-sometimes-while-reading-yarn-logs/226702)
**Author:** [@ucguy4u](https://discuss.elastic.co/u/ucguy4u)\ **Replies:** 5\ **Last updated:** [April 7, 2020, 10:47am UTC](https://discuss.elastic.co/t/filebeat-stop-after-sometimes-while-reading-yarn-logs/226702 "2020-04-07T10:47:31Z")
I am using filebeat to ship data of yarn logs of hadoop. I am using is filebeat-7.5.1 \` filebeat.inputs: type: log enabled: true paths: /root/hadoop/userlogs/\*\*/stderr /root/ingest-logs/ingest.log /root/root-log… --- ## [Logstash filter on number](https://discuss.elastic.co/t/logstash-filter-on-number/223474)
**Author:** [@kamandohl](https://discuss.elastic.co/u/kamandohl)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 10:42am UTC](https://discuss.elastic.co/t/logstash-filter-on-number/223474 "2020-04-07T10:42:30Z")
Trying to filter on an number, in this case 4624, in Logstash. But unable to get it to work. I was able to key off of event.kind, but that is a word and all events have that, so not an option. I have looked for days a… --- ## [Kibana (selector control)](https://discuss.elastic.co/t/kibana-selector-control/226742)
**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 10:32am UTC](https://discuss.elastic.co/t/kibana-selector-control/226742 "2020-04-07T10:32:13Z")
i applied a parent control between two selectors in kibana but i loose the ability to use only the child . it's only possible to use the couple ( parent,child) and the child selector is locked when i dont choose an … --- ## [Filter Documents based on data of other documents](https://discuss.elastic.co/t/filter-documents-based-on-data-of-other-documents/226843)
**Author:** [@dgurusam](https://discuss.elastic.co/u/dgurusam)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 9:14am UTC](https://discuss.elastic.co/t/filter-documents-based-on-data-of-other-documents/226843 "2020-04-07T09:14:16Z")
I have an index where documents will be of two types such as Type1 and Type2 { { "id":1, "SourceType": "Type1", "ItemNumber": "AS5888", "AgreementNumber": null } { "id":2, "SourceType": "Type2", "ItemNumbe… --- ## [Pattern in scroll\_id](https://discuss.elastic.co/t/pattern-in-scroll-id/226693)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 3\ **Last updated:** [April 7, 2020, 9:02am UTC](https://discuss.elastic.co/t/pattern-in-scroll-id/226693 "2020-04-07T09:02:28Z")
Hi all, I would like to know if we can figure out the page number ( result set number) by using the scroll\_id that Elasticsearch provides. I use Elasticsearch-7.4. Regards, Mohan --- ## [Is wildcard queries not supporting in kibana discovery search ? want to search the all pods/container names in particular namespace](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847)
**Author:** [@vikas4cloud](https://discuss.elastic.co/u/vikas4cloud)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 9:00am UTC](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847 "2020-04-07T09:00:01Z")
Want to search the all pods/container names in particular namespace in kibana discovery search expection :- should display all available resources as per query/wildcard Search qurie :- kubernetes.namespace\_name.key… --- ## [Increased docs.count and store.size after Elasticsearch upgrade](https://discuss.elastic.co/t/increased-docs-count-and-store-size-after-elasticsearch-upgrade/226670)
**Author:** [@SerjGAmoVeR](https://discuss.elastic.co/u/SerjGAmoVeR)\ **Replies:** 3\ **Last updated:** [April 7, 2020, 8:37am UTC](https://discuss.elastic.co/t/increased-docs-count-and-store-size-after-elasticsearch-upgrade/226670 "2020-04-07T08:37:04Z")
We have existing Elasticsearch 5.5 cluster and want to migrate to another one Elasticsearch 7+ Mapping is same for both Elasticsearch 5 and Elasticsearch 7 indices "mappings": { "properties": { "\_… --- ## [How do I created a scripted field from a message field that I already have](https://discuss.elastic.co/t/how-do-i-created-a-scripted-field-from-a-message-field-that-i-already-have/226846)
**Author:** [@bharati](https://discuss.elastic.co/u/bharati)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 8:36am UTC](https://discuss.elastic.co/t/how-do-i-created-a-scripted-field-from-a-message-field-that-i-already-have/226846 "2020-04-07T08:36:06Z")
Hello, I am new to scripted fields . I have a field "message" in my logs. I am trying to create scripted fields/customized fields for the content inside the message field. Can anyone please tell me how to create custo… --- ## [Cancel restore snapshot](https://discuss.elastic.co/t/cancel-restore-snapshot/225190)
**Author:** [@ELJIE](https://discuss.elastic.co/u/ELJIE)\ **Replies:** 6\ **Last updated:** [April 7, 2020, 8:26am UTC](https://discuss.elastic.co/t/cancel-restore-snapshot/225190 "2020-04-07T08:26:28Z")
hello, i am doing automation tests on snapshot restore. I wish I could stop a restoration that is underway. When I execute the following command: GET / \_tasks / taskID I have the return indicating the id and the act… --- ## [Kibana hangs at creating index pattern forever](https://discuss.elastic.co/t/kibana-hangs-at-creating-index-pattern-forever/226404)
**Author:** [@LucasTT](https://discuss.elastic.co/u/LucasTT)\ **Replies:** 6\ **Last updated:** [April 7, 2020, 7:51am UTC](https://discuss.elastic.co/t/kibana-hangs-at-creating-index-pattern-forever/226404 "2020-04-07T07:51:29Z")
Hi, I received the following error when trying to create an index pattern in Kibana. Kibana just keep showing "creating index pattern..." forever. Does anyone know how to fix it? Kibana settings: ".kibana\_1" : {… --- ## [Beats configuration: overlaping between output.elasticsearch and cloud.\*?](https://discuss.elastic.co/t/beats-configuration-overlaping-between-output-elasticsearch-and-cloud/226704)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 3\ **Last updated:** [April 7, 2020, 7:51am UTC](https://discuss.elastic.co/t/beats-configuration-overlaping-between-output-elasticsearch-and-cloud/226704 "2020-04-07T07:51:13Z")
Hi I'm just curious about the needed settings in a Beat file when the cluster is in the Elastic cloud. Currently my config files looks like this: output.elasticsearch: hosts: \["https://....us-east-1.aws.found.io:...… --- ## [Effective pagination over composite aggregation in Java](https://discuss.elastic.co/t/effective-pagination-over-composite-aggregation-in-java/226638)
**Author:** [@florinmoc](https://discuss.elastic.co/u/florinmoc)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 6:22am UTC](https://discuss.elastic.co/t/effective-pagination-over-composite-aggregation-in-java/226638 "2020-04-07T06:22:41Z")
Hi, I'm trying to paginate over composite aggregation in Java. I have some working code, but it doesn't seem to be very efficient, as it re-builds the query each time. Is there a way to re-use the query and just change … --- ## [Extract Metricbeat network traffic visualization DSL query](https://discuss.elastic.co/t/extract-metricbeat-network-traffic-visualization-dsl-query/226837)
**Author:** [@Mudboyzh](https://discuss.elastic.co/u/Mudboyzh)\ **Replies:** 0\ **Last updated:** [April 7, 2020, 7:13am UTC](https://discuss.elastic.co/t/extract-metricbeat-network-traffic-visualization-dsl-query/226837 "2020-04-07T07:13:10Z")
I want to understand how does the metricbeat's network traffic visualization DSL query. I had already used the Chrome Dev Tools to get the DSL query and the Kibana saved object, but the request payload and visState seem… --- ## [How to configure and enable elastic logging](https://discuss.elastic.co/t/how-to-configure-and-enable-elastic-logging/226828)
**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 6:42am UTC](https://discuss.elastic.co/t/how-to-configure-and-enable-elastic-logging/226828 "2020-04-07T06:42:17Z")
Hi Team, How to configure the elastic looging and how to enable the elastic logging in development environment . can you please provide the steps how to implement. Thanks in advance !! --- ## [Pipeline cannot ingest lines with the word "value" in them](https://discuss.elastic.co/t/pipeline-cannot-ingest-lines-with-the-word-value-in-them/226626)
**Author:** [@Stuart\_Stafford](https://discuss.elastic.co/u/Stuart_Stafford)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 6:21am UTC](https://discuss.elastic.co/t/pipeline-cannot-ingest-lines-with-the-word-value-in-them/226626 "2020-04-07T06:21:14Z")
I am trying to create a pipeline for a gitlab log. I run a simulate on the message in Dev Tools and it works fine:- POST \_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ { "gsub": { … --- ## [Hot-Warm-Cold - avoid duplicates](https://discuss.elastic.co/t/hot-warm-cold-avoid-duplicates/226829)
**Author:** [@Linuus](https://discuss.elastic.co/u/Linuus)\ **Replies:** 0\ **Last updated:** [April 7, 2020, 6:08am UTC](https://discuss.elastic.co/t/hot-warm-cold-avoid-duplicates/226829 "2020-04-07T06:08:22Z")
Hi! I'm moving to a new ES cluster which also uses the Hot-Warm-Cold architecture. Now, when we imported our old data (600 million documents) it took quite a long time and after a while we noticed that we have duplicate… --- ## [How timeout control work](https://discuss.elastic.co/t/how-timeout-control-work/226318)
**Author:** [@NashMiao](https://discuss.elastic.co/u/NashMiao)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 5:52am UTC](https://discuss.elastic.co/t/how-timeout-control-work/226318 "2020-04-07T05:52:59Z")
I add timeout param in search body, then the response shows this query is timeout, took 233 ms. I'm wondering about whether the timeout control did work. I Javadoc, it describes this param as a time limiter in searchi… --- ## [What is the difference between CONTAINS and INTERSECTS?](https://discuss.elastic.co/t/what-is-the-difference-between-contains-and-intersects/226791)
**Author:** [@hariseldon3141](https://discuss.elastic.co/u/hariseldon3141)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 5:21am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-contains-and-intersects/226791 "2020-04-07T05:21:34Z")
Sorry for the newbie question, but these geo\_shape spatial relations seem to be very similar in the results that they produce. I believe that CONTAINS is relatively new in being supported, but what's even the point of it… --- ## [Snapshot repo.path deson't match. It recongized by settings api](https://discuss.elastic.co/t/snapshot-repo-path-desont-match-it-recongized-by-settings-api/226299)
**Author:** [@naoko](https://discuss.elastic.co/u/naoko)\ **Replies:** 3\ **Last updated:** [April 7, 2020, 4:04am UTC](https://discuss.elastic.co/t/snapshot-repo-path-desont-match-it-recongized-by-settings-api/226299 "2020-04-07T04:04:58Z")
I tried to create snapshot rep but failing with location \[/data/elasticsearch\_backups\] doesn't match any of the locations specified by path.repo config is there: cat /etc/elasticsearch/elasticsearch.yml | grep repo … --- ## [How to make this json array as csv data](https://discuss.elastic.co/t/how-to-make-this-json-array-as-csv-data/226775)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 3:42am UTC](https://discuss.elastic.co/t/how-to-make-this-json-array-as-csv-data/226775 "2020-04-07T03:42:45Z")
Hi All I have json data like this \[{ "jsondata": \["123456", "description1", "notes1", "information1", 9\] }, { "jsondata": \["44555", "description2", "notes2", "information2", 8\] } \] I need the output in csv forma… --- ## [Extracting the JSON fields from the message](https://discuss.elastic.co/t/extracting-the-json-fields-from-the-message/226590)
**Author:** [@Raed](https://discuss.elastic.co/u/Raed)\ **Replies:** 9\ **Last updated:** [April 7, 2020, 1:37am UTC](https://discuss.elastic.co/t/extracting-the-json-fields-from-the-message/226590 "2020-04-07T01:37:22Z")
I'm getting the below JSON as a message: { "requestUrl": "http://localhost:8080/frameworks/298", "requestUri": "/frameworks/298", "requestMethod": "PUT", "requestHeaders": { "authorization": "\*\*\*", "ac… --- ## [Question about the problem of “FileNotFoundException" while allocating replicas](https://discuss.elastic.co/t/question-about-the-problem-of-filenotfoundexception-while-allocating-replicas/226606)
**Author:** [@Hyunsoo\_Shim](https://discuss.elastic.co/u/Hyunsoo_Shim)\ **Replies:** 4\ **Last updated:** [April 7, 2020, 1:56am UTC](https://discuss.elastic.co/t/question-about-the-problem-of-filenotfoundexception-while-allocating-replicas/226606 "2020-04-07T01:56:40Z")
Dear All, I had posted the below issue while allocating replicas last week, and not got any reply for it yet. Maybe my questions were too convoluted or had a formatting issue to get an answer.. So I have arranged the… --- ## [SSL error in Kibana : error:1408F09C:SSL routines:ssl3\_get\_record:http request](https://discuss.elastic.co/t/ssl-error-in-kibana-errorssl-routineshttp-request/226454)
**Author:** [@Mastana\_Guru](https://discuss.elastic.co/u/Mastana_Guru)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 1:39am UTC](https://discuss.elastic.co/t/ssl-error-in-kibana-errorssl-routineshttp-request/226454 "2020-04-07T01:39:57Z")
Hi, I have ELK stack running in Openshift 3.11, now need to integrate Kibana with AD using openshift OAuth proxy. After adding the Oauth container with Kibana deployment was able to get the openshift login page, but onc… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1527) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1529)