# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1529 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1530 --- ## [Deleting ElasticSearch Data Directory](https://discuss.elastic.co/t/deleting-elasticsearch-data-directory/265820)
**Author:** [@Andrew\_Tillotson](https://discuss.elastic.co/u/Andrew_Tillotson)\ **Replies:** 6\ **Last updated:** [March 2, 2021, 3:04am UTC](https://discuss.elastic.co/t/deleting-elasticsearch-data-directory/265820 "2021-03-02T03:04:16Z")
If I just delete the directory in which the data is stored, restart Elasticsearch, it should recreate that directory and populate it with new data according to the config, correct? I have unassigned shards, but would ju… --- ## [Working with logs](https://discuss.elastic.co/t/working-with-logs/265764)
**Author:** [@duck](https://discuss.elastic.co/u/duck)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 2:19am UTC](https://discuss.elastic.co/t/working-with-logs/265764 "2021-03-02T02:19:04Z")
We're building a logging system for our project. We want to see almost everything as a log like Docker, application console etc. Since we're growing up, we do not want to make mistake about logs(wrong scheme, indexing, q… --- ## [Elasticsearch service wont stop when OIDC is enabled](https://discuss.elastic.co/t/elasticsearch-service-wont-stop-when-oidc-is-enabled/265864)
**Author:** [@froxxen](https://discuss.elastic.co/u/froxxen)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 8:23pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-stop-when-oidc-is-enabled/265864 "2021-03-01T20:23:25Z")
I'm running the entire stack on Windows and will integrate SSO into the environment. It works as expected except one thing, when the Elasticsearch service needs to be stopped it hangs for some reason. If I remove below… --- ## [Exception: java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/exception-java-lang-outofmemoryerror-java-heap-space/265880)
**Author:** [@ifernand](https://discuss.elastic.co/u/ifernand)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 2:03am UTC](https://discuss.elastic.co/t/exception-java-lang-outofmemoryerror-java-heap-space/265880 "2021-03-02T02:03:57Z")
Hi. I am running ElasticSearch 6.1.3 in a Liferay Installation and I am facing an Exception "java.lang.OutOfMemoryError: Java heap space" that is causing malfunction in Liferay portal. That's the information I have col… --- ## [Extract multiline log with not id field present](https://discuss.elastic.co/t/extract-multiline-log-with-not-id-field-present/265848)
**Author:** [@E\_T\_N](https://discuss.elastic.co/u/E_T_N)\ **Replies:** 5\ **Last updated:** [March 2, 2021, 12:11am UTC](https://discuss.elastic.co/t/extract-multiline-log-with-not-id-field-present/265848 "2021-03-02T00:11:17Z")
Hello. I need to build a record composed of multiple lines where there is no clear identifier There is a word that tells me where the task starts in this case "select" There is a word that tells me where the task ends… --- ## [Bad Request when using scroll API](https://discuss.elastic.co/t/bad-request-when-using-scroll-api/265702)
**Author:** [@nara1](https://discuss.elastic.co/u/nara1)\ **Replies:** 6\ **Last updated:** [March 1, 2021, 10:19pm UTC](https://discuss.elastic.co/t/bad-request-when-using-scroll-api/265702 "2021-03-01T22:19:33Z")
I'm using JestClient to execute scrolling in my service (I know JestClient is outdated but for various reasons we are stuck with it for now). In my initial request, I do receive a scroll ID and my results successfully. … --- ## [Can I use SQL EXCEPT to compare fields present in two indexes?](https://discuss.elastic.co/t/can-i-use-sql-except-to-compare-fields-present-in-two-indexes/265245)
**Author:** [@CoffeeRecon](https://discuss.elastic.co/u/CoffeeRecon)\ **Replies:** 4\ **Last updated:** [March 1, 2021, 9:31pm UTC](https://discuss.elastic.co/t/can-i-use-sql-except-to-compare-fields-present-in-two-indexes/265245 "2021-03-01T21:31:42Z")
Hello! I have two indexes that I'd like to compare: winlogbeat-\* winlogbeat\_rollup winlogbeat\_rollup is the rollup of winlogbeat-\* and contains its historical data. What I'm looking to do is to compare these two inde… --- ## [Kibana 7.11.1 - ie11 - bootstrap error (html5)](https://discuss.elastic.co/t/kibana-7-11-1-ie11-bootstrap-error-html5/265856)
**Author:** [@snorlax](https://discuss.elastic.co/u/snorlax)\ **Replies:** 5\ **Last updated:** [March 1, 2021, 8:48pm UTC](https://discuss.elastic.co/t/kibana-7-11-1-ie11-bootstrap-error-html5/265856 "2021-03-01T20:48:06Z")
Hello, We have upgraded kibana/elasticsearch/logstash to version 7.11.1. Everything works fine on chrome and we get errors on ie11. SCRIPT1003: Expected ':' File: bootstrap.js, Line: 18, Column: 20 When I check line 1… --- ## [How do I enable TLS1.2 only and disable weak ssl ciphers in Kibana 7.0?](https://discuss.elastic.co/t/how-do-i-enable-tls1-2-only-and-disable-weak-ssl-ciphers-in-kibana-7-0/265845)
**Author:** [@rahulj](https://discuss.elastic.co/u/rahulj)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 8:08pm UTC](https://discuss.elastic.co/t/how-do-i-enable-tls1-2-only-and-disable-weak-ssl-ciphers-in-kibana-7-0/265845 "2021-03-01T20:08:37Z")
Our InfoSec scans report that Kibana 7.0 service is supporting weak protocols and weak cipher suites. I am trying to find how to disable TLS 1.1 and below protocols and remove specific ciphers from Kibana service. Any h… --- ## [How to get data from elastic using the Collpase method in fluent in C#?](https://discuss.elastic.co/t/how-to-get-data-from-elastic-using-the-collpase-method-in-fluent-in-c/265857)
**Author:** [@Casrlos1815](https://discuss.elastic.co/u/Casrlos1815)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 7:53pm UTC](https://discuss.elastic.co/t/how-to-get-data-from-elastic-using-the-collpase-method-in-fluent-in-c/265857 "2021-03-01T19:53:44Z")
I'm hoping to find the answer to this. I have a C# application that bulk downloads elastic data according to user parameters. Some of the requests can be for all data that don't require parameters. In elastic I have an i… --- ## [Spontaneously duplicated logs - need advice - thanks](https://discuss.elastic.co/t/spontaneously-duplicated-logs-need-advice-thanks/265731)
**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\ **Replies:** 3\ **Last updated:** [March 1, 2021, 7:42pm UTC](https://discuss.elastic.co/t/spontaneously-duplicated-logs-need-advice-thanks/265731 "2021-03-01T19:42:15Z")
Hi there, I have following setup: version 7.3.1 A Live System logs into a csv With xcopy.bat I copy this csv every 5 Minutes to my ES Server to a specific folder. Beats is whatching to that csv file in that specific … --- ## [Is Kibana supported on GKE through default google ingress ? doesn't seem so](https://discuss.elastic.co/t/is-kibana-supported-on-gke-through-default-google-ingress-doesnt-seem-so/264067)
**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\ **Replies:** 14\ **Last updated:** [March 1, 2021, 7:21pm UTC](https://discuss.elastic.co/t/is-kibana-supported-on-gke-through-default-google-ingress-doesnt-seem-so/264067 "2021-03-01T19:21:45Z")
I have deployed Elastic Search and Kibana on GKE. However unable to get ingress working as it seems to report Kibana service as unhealthy. I assume this is due to the root url redirecting with http 302 and GKE LB L7 ex… --- ## [New to Ingest Pipeline](https://discuss.elastic.co/t/new-to-ingest-pipeline/265643)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 3\ **Last updated:** [March 1, 2021, 6:46pm UTC](https://discuss.elastic.co/t/new-to-ingest-pipeline/265643 "2021-03-01T18:46:28Z")
Hi: I have an index intune-\* where I need to modify some fields. Once I create the index pipeline how do I tag it to the appropriate Index ? I have a rolling index I read this documentation but wasnt clear on step-9 ..… --- ## [Resizing of visualization whenever size of visualization is changed in dashboard](https://discuss.elastic.co/t/resizing-of-visualization-whenever-size-of-visualization-is-changed-in-dashboard/263594)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 4\ **Last updated:** [March 1, 2021, 5:36pm UTC](https://discuss.elastic.co/t/resizing-of-visualization-whenever-size-of-visualization-is-changed-in-dashboard/263594 "2021-03-01T17:36:13Z")
{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "data": {"url": "https://vega.github.io/vega-lite/data/barley.json"}, "width": 300, "height":300, "mark": "bar", "encoding": { "column": {"fi… --- ## [Search Error Unexpected token ' in JSON at position N](https://discuss.elastic.co/t/search-error-unexpected-token-in-json-at-position-n/265692)
**Author:** [@chatim](https://discuss.elastic.co/u/chatim)\ **Replies:** 6\ **Last updated:** [March 1, 2021, 5:24pm UTC](https://discuss.elastic.co/t/search-error-unexpected-token-in-json-at-position-n/265692 "2021-03-01T17:24:00Z")
Hello I'm running an elasticsearch cluster with kibana in docker. when i'm trying to create a pie chart and use Terms aggregation i got this error : Search Error Unexpected token ' in JSON at position 433 same thing … --- ## [TSVB Drill Down using Item URL](https://discuss.elastic.co/t/tsvb-drill-down-using-item-url/265744)
**Author:** [@Jesse-ECS](https://discuss.elastic.co/u/Jesse-ECS)\ **Replies:** 2\ **Last updated:** [March 1, 2021, 4:38pm UTC](https://discuss.elastic.co/t/tsvb-drill-down-using-item-url/265744 "2021-03-01T16:38:34Z")
Is it possible to access the event context from the "Item URL" optional parameter in the Panel Options screen of TSVB? I need to send the index pattern id from the current context with the resulting URL I am building. … --- ## [Mikrotik sending IPFIX to Logstarsh](https://discuss.elastic.co/t/mikrotik-sending-ipfix-to-logstarsh/265830)
**Author:** [@Roberto\_Williams\_Bat](https://discuss.elastic.co/u/Roberto_Williams_Bat)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 4:13pm UTC](https://discuss.elastic.co/t/mikrotik-sending-ipfix-to-logstarsh/265830 "2021-03-01T16:13:26Z")
Hello, I need to ingest IPFIX data from Mikrotik, which arrives in my ELK server in port 9880. How should I configure the Logstash to receive it and have elastcsearching ingesting it? Note: I can change IPFIX to NetFlo… --- ## [I deleted the indices and tried to restart kibana but it failed with this error](https://discuss.elastic.co/t/i-deleted-the-indices-and-tried-to-restart-kibana-but-it-failed-with-this-error/265807)
**Author:** [@ajeetsingh193](https://discuss.elastic.co/u/ajeetsingh193)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 4:13pm UTC](https://discuss.elastic.co/t/i-deleted-the-indices-and-tried-to-restart-kibana-but-it-failed-with-this-error/265807 "2021-03-01T16:13:09Z")
{"type":"log","@timestamp":"2021-03-01T13:34:37Z","tags":\["fatal","root"\],"pid":56422,"message":"Error: Unable to write Kibana UUID file, please check the uuid.server configuration value in kibana.yml and ensure Kibana h… --- ## [What happens when winlogbeat cant ship?](https://discuss.elastic.co/t/what-happens-when-winlogbeat-cant-ship/265828)
**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 4:01pm UTC](https://discuss.elastic.co/t/what-happens-when-winlogbeat-cant-ship/265828 "2021-03-01T16:01:42Z")
Hey folks, I was curious about what happens when winlogbeat cant communicate with logstash or elastic from the client impact side of things. I haven't seen any impact or issues occur but was curious what events occur. F… --- ## [Kibana Alerts issue](https://discuss.elastic.co/t/kibana-alerts-issue/265784)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 3:56pm UTC](https://discuss.elastic.co/t/kibana-alerts-issue/265784 "2021-03-01T15:56:57Z")
Hi all, I'm trying to configure Kibana Alerts in one of the kibana servers. The issue is that server is configured with Kibana 7.4.1 which doesn't have alerts feature. We are not allowed to upgrade the Kibana version … --- ## [\_update\_by\_query "lenient" flag not recognized](https://discuss.elastic.co/t/update-by-query-lenient-flag-not-recognized/265639)
**Author:** [@dan3](https://discuss.elastic.co/u/dan3)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 3:30pm UTC](https://discuss.elastic.co/t/update-by-query-lenient-flag-not-recognized/265639 "2021-03-01T15:30:36Z")
I'm having an issue with updating an index via \_update\_by\_query. I have certain fields that are causing format errors so I'm trying to skip them using the "lenient" flag outlined in the documentation. I'm using elasticse… --- ## [Audit beat warning](https://discuss.elastic.co/t/audit-beat-warning/265730)
**Author:** [@Paul\_Fleming](https://discuss.elastic.co/u/Paul_Fleming)\ **Replies:** 3\ **Last updated:** [March 1, 2021, 3:24pm UTC](https://discuss.elastic.co/t/audit-beat-warning/265730 "2021-03-01T15:24:01Z")
Hi Im seeing the following warning when I started auditbeat can someone please help me resolve the following issue thanks. ' feb 28 15:45:11 virtual-machine auditbeat\[4659\]: 2021-02-28T15:45:11.932Z WARN \[… --- ## [Dynamic Templates on Documents with Inner Objects](https://discuss.elastic.co/t/dynamic-templates-on-documents-with-inner-objects/265821)
**Author:** [@Eduardo\_Iglesias](https://discuss.elastic.co/u/Eduardo_Iglesias)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 2:50pm UTC](https://discuss.elastic.co/t/dynamic-templates-on-documents-with-inner-objects/265821 "2021-03-01T14:50:57Z")
Hello community, I'm trying to apply a dynamic template to my index, even though the console doesn't gives me any error when creating the dynamic template, my documents are still taking the default elasticsearch mappings… --- ## [Kibana Discover and Visualization screen is not showing correct results for the values provided via filters](https://discuss.elastic.co/t/kibana-discover-and-visualization-screen-is-not-showing-correct-results-for-the-values-provided-via-filters/265806)
**Author:** [@Mohitj252](https://discuss.elastic.co/u/Mohitj252)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 2:33pm UTC](https://discuss.elastic.co/t/kibana-discover-and-visualization-screen-is-not-showing-correct-results-for-the-values-provided-via-filters/265806 "2021-03-01T14:33:30Z")
Hi, I have few queries related to discover page and visualization page. I am trying to explain the different scenarios which I observed. Scenario 1. In the discover screen, there are counter values (counter\_value is a… --- ## [NLP - Typehead](https://discuss.elastic.co/t/nlp-typehead/265818)
**Author:** [@Chirasmita\_Mallick](https://discuss.elastic.co/u/Chirasmita_Mallick)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 2:28pm UTC](https://discuss.elastic.co/t/nlp-typehead/265818 "2021-03-01T14:28:41Z")
Hi, I am pretty new to Elastic Search and work primarily on the NLP aspects of improving Search on Elastic Search. I wanted to understand if there is any value if the ordered element was selected from the typeahead in t… --- ## [Index names are getting generated as 2021.53](https://discuss.elastic.co/t/index-names-are-getting-generated-as-2021-53/265763)
**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\ **Replies:** 4\ **Last updated:** [March 1, 2021, 2:18pm UTC](https://discuss.elastic.co/t/index-names-are-getting-generated-as-2021-53/265763 "2021-03-01T14:18:28Z")
Hi All.. The syntax for naming our indices for different applications is "application-YYYY-ww". But we are having some indices that are getting generated as application-2021.53. And they have significant sizes too, the… --- ## [Kibana\_system user management](https://discuss.elastic.co/t/kibana-system-user-management/265793)
**Author:** [@dimm](https://discuss.elastic.co/u/dimm)\ **Replies:** 2\ **Last updated:** [March 1, 2021, 1:58pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793 "2021-03-01T13:58:52Z")
Hi, I'm faced with strange situation while trying to change password for reserved kibana\_system user: This is looks like vicious circle, when I'm trying to update password I'm getting: "roles are missing" when I'm tr… --- ## [Limit size of a data field in kibana](https://discuss.elastic.co/t/limit-size-of-a-data-field-in-kibana/265804)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 1, 2021, 1:33pm UTC](https://discuss.elastic.co/t/limit-size-of-a-data-field-in-kibana/265804 "2021-03-01T13:33:04Z")
Hi all, I'm trying to restrict value of data entry(value) of my field to 30 characters in my kibana visualizations I think there is some advanced json method by painless to do this,but i'm unable to figure out command. … --- ## [Perform division of two fields in a Kibana visualisation](https://discuss.elastic.co/t/perform-division-of-two-fields-in-a-kibana-visualisation/265772)
**Author:** [@2f404140b7ab0f69189f](https://discuss.elastic.co/u/2f404140b7ab0f69189f)\ **Replies:** 5\ **Last updated:** [March 1, 2021, 1:19pm UTC](https://discuss.elastic.co/t/perform-division-of-two-fields-in-a-kibana-visualisation/265772 "2021-03-01T13:19:54Z")
I'm unable to perform a basic division of two fields on Kibana. First, I tried to do so in a Line Chart bu using the Advanced Json Input section with this script: {"script": "if(doc\['kpi.abc'\].value \> 0) then {(doc\['kpi… --- ## [Understanding fielddata mapping parameter](https://discuss.elastic.co/t/understanding-fielddata-mapping-parameter/265798)
**Author:** [@stravag](https://discuss.elastic.co/u/stravag)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 12:58pm UTC](https://discuss.elastic.co/t/understanding-fielddata-mapping-parameter/265798 "2021-03-01T12:58:54Z")
I'm attempting to build a kind of "next word prediction" using elasticsearch. The goal is to have suggest search terms based on different fields of the index. I found a solution based on the work done here https://bilya… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1528) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1530)