# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=523 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 524 --- ## [Get role mapping created with configmaps](https://discuss.elastic.co/t/get-role-mapping-created-with-configmaps/292097)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 7:39am UTC](https://discuss.elastic.co/t/get-role-mapping-created-with-configmaps/292097 "2021-12-16T07:39:25Z")
We are deploying Elasticsearch 7.15.2 on kubernetes. To configuring roles\_mappings, we configure configmaps with a "role-mapping.yml" file with the rights, and seem working fine. The problem is: we cant check if some rig… --- ## [Limit "Watcher" user roles rights by workspace?](https://discuss.elastic.co/t/limit-watcher-user-roles-rights-by-workspace/292100)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 7:52am UTC](https://discuss.elastic.co/t/limit-watcher-user-roles-rights-by-workspace/292100 "2021-12-16T07:52:55Z")
Hi all, there're some way to configure "watcher" rights (manage\_watcher) by workspace? because an user that only have rights into some namespace should not edit alerts from others workspaces... Thanks! --- ## [Manage error when indexing documents](https://discuss.elastic.co/t/manage-error-when-indexing-documents/292168)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 1:04am UTC](https://discuss.elastic.co/t/manage-error-when-indexing-documents/292168 "2021-12-20T01:04:46Z")
Hello, I want to know when a document is dismiss by Elasticsearch in case the mapping is configured with "dynamic : strict". So, when i send a document who got an "unknow fields" in the mapping, Elasticsearch will dism… --- ## [Calculate sum of run\_time without runtime fields?](https://discuss.elastic.co/t/calculate-sum-of-run-time-without-runtime-fields/292267)
**Author:** [@afkbrb](https://discuss.elastic.co/u/afkbrb)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 6:56am UTC](https://discuss.elastic.co/t/calculate-sum-of-run-time-without-runtime-fields/292267 "2021-12-17T06:56:28Z")
I want to get the sum of run\_time variant, by using runtime\_mapping I got mistakes. I know that it'a new feature in ES 7.12, but I can't upgrade it because it's not depend on me. So how could I get the answer without … --- ## [How to reset elasticsearch inbuilt users](https://discuss.elastic.co/t/how-to-reset-elasticsearch-inbuilt-users/292351)
**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 5:36pm UTC](https://discuss.elastic.co/t/how-to-reset-elasticsearch-inbuilt-users/292351 "2021-12-17T17:36:15Z")
I have set the Elasticsearch inbuilt users using interactive method. Now i missed the password of kibana\_system user. Is there a way to reset that particular user alone? I tried with bin/elasticsearch-reset-password -u … --- ## [Elastic search docker image upgrade not working from elasticsearch:7.1.1 to elasticsearch:7.16.1](https://discuss.elastic.co/t/elastic-search-docker-image-upgrade-not-working-from-elasticsearch-7-1-1-to-elasticsearch-7-16-1/292380)
**Author:** [@Vivek\_Karthik](https://discuss.elastic.co/u/Vivek_Karthik)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:46am UTC](https://discuss.elastic.co/t/elastic-search-docker-image-upgrade-not-working-from-elasticsearch-7-1-1-to-elasticsearch-7-16-1/292380 "2021-12-20T00:46:55Z")
docker logs elk \[0.001s\]\[warning\]\[os,container\] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /usr/share/Elasticsearch/data/docker/overlay2/d2423a7f9ac4e46ec2d069481b10def8db07a9b348a078… --- ## [Elasticsearch-oss:6.6.2 Java Security Manager enabled by default?](https://discuss.elastic.co/t/elasticsearch-oss-6-6-2-java-security-manager-enabled-by-default/292364)
**Author:** [@tjemmettal](https://discuss.elastic.co/u/tjemmettal)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:40am UTC](https://discuss.elastic.co/t/elasticsearch-oss-6-6-2-java-security-manager-enabled-by-default/292364 "2021-12-20T00:40:22Z")
Hello, I'm trying to verify that Java Security Manager is enabled by default in oss images, particularly in: docker.elastic.co/elasticsearch/elasticsearch-oss:6.6.2 and docker.elastic.co/elasticsearch/elasticsearch-oss… --- ## [DockerHub showing Log4Shell vulnerability on supported version](https://discuss.elastic.co/t/dockerhub-showing-log4shell-vulnerability-on-supported-version/292202)
**Author:** [@cruizba](https://discuss.elastic.co/u/cruizba)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:25am UTC](https://discuss.elastic.co/t/dockerhub-showing-log4shell-vulnerability-on-supported-version/292202 "2021-12-20T00:25:21Z")
Despite official announcement saying that supported versions of Elasticsearch (6.8.9+, 7.8+) can not be exploited because of Elasticsearch’s usage of the Java Security Manager, dockerhub is showing images as "Log4Shell"… --- ## [JMSAppender used on Logstash 2.3.4 and Elasticsearch 2.3.4](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127 "2021-12-19T23:12:02Z")
Can anyone confirm whether JMSAppender is used in Logstash 2.3.4 and Elasticsearch 2.3.4 ? --- ## [Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140 "2021-12-19T23:12:53Z")
Can anyone please confirm whether Elasticsearch and Logstash versions below 5 are also impacted with Log4j vulnerability threat ? --- ## [Does Log4j vulnerability (CVE-2021-44228) is impacted for ES v7.5.2?](https://discuss.elastic.co/t/does-log4j-vulnerability-cve-2021-44228-is-impacted-for-es-v7-5-2/292128)
**Author:** [@Anuroop1](https://discuss.elastic.co/u/Anuroop1)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:17am UTC](https://discuss.elastic.co/t/does-log4j-vulnerability-cve-2021-44228-is-impacted-for-es-v7-5-2/292128 "2021-12-20T00:17:51Z")
We are using Elasticsearch v7.5.2 along with OpenJDK 11.0.11 in on-premise servers and I just need to know from Elasticsearch Team support if this version is impacted by Log4j vulnerability (CVE-2021-44228) or not. The … --- ## [Log4j in Elasticsearch prerequisites in Azure DevOps environment](https://discuss.elastic.co/t/log4j-in-elasticsearch-prerequisites-in-azure-devops-environment/292158)
**Author:** [@RJ96](https://discuss.elastic.co/u/RJ96)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:17am UTC](https://discuss.elastic.co/t/log4j-in-elasticsearch-prerequisites-in-azure-devops-environment/292158 "2021-12-20T00:17:25Z")
Hello, i am very new to the Elastic world, in fact i've started working with Elastic after the log4j security alert had happened so i am a beginner. i have a azure devops environment where i have Elasticsearch installed… --- ## [Log4Shell comprehensive fix for Elastic Search](https://discuss.elastic.co/t/log4shell-comprehensive-fix-for-elastic-search/292106)
**Author:** [@rencytl](https://discuss.elastic.co/u/rencytl)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:06am UTC](https://discuss.elastic.co/t/log4shell-comprehensive-fix-for-elastic-search/292106 "2021-12-20T00:06:38Z")
Appreciate the efforts having Log4Shell mitigated in versions 7.16.1 and 6.8.21. Is the team working towards providing a comprehensive fix for this upgrading the Log4j library to 2.16.0 version? If yes, knowing the ETA w… --- ## [How to add "index.mapping.total\_fields.limit" in command prompt](https://discuss.elastic.co/t/how-to-add-index-mapping-total-fields-limit-in-command-prompt/292415)
**Author:** [@Suparna\_Shankar](https://discuss.elastic.co/u/Suparna_Shankar)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 8:51pm UTC](https://discuss.elastic.co/t/how-to-add-index-mapping-total-fields-limit-in-command-prompt/292415 "2021-12-19T20:51:29Z")
HI, am trying to add "index.mapping.total\_fields.limit" to 2000 using cmdline but getting below exception "curl -XPUT http://127.0.0.1:9200/log4j-2021.12.19/\_settings -H 'Content-Type: application/json' -d '{ "index.map… --- ## [Is elasticsearch verison 7.16.2 released?](https://discuss.elastic.co/t/is-elasticsearch-verison-7-16-2-released/292390)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 2:14pm UTC](https://discuss.elastic.co/t/is-elasticsearch-verison-7-16-2-released/292390 "2021-12-19T14:14:41Z")
is version 7.16.2 released? release notes have information about version 7.16.2 but unable to find the version for download --- ## [No results when searching by a null value](https://discuss.elastic.co/t/no-results-when-searching-by-a-null-value/292385)
**Author:** [@AlexBulls20](https://discuss.elastic.co/u/AlexBulls20)\ **Replies:** 1\ **Last updated:** [December 18, 2021, 3:23pm UTC](https://discuss.elastic.co/t/no-results-when-searching-by-a-null-value/292385 "2021-12-18T15:23:15Z")
I'm trying to fill some value for an autocomplete search box and I had this old code (from Elasticsearch 1.5) and I want to implement it into Elasticsearch 7.16 When I use this sentence curl -H 'Content-Type: applicati… --- ## [Is index\_prefixes intended to be used with text fields only?](https://discuss.elastic.co/t/is-index-prefixes-intended-to-be-used-with-text-fields-only/292366)
**Author:** [@mp3000](https://discuss.elastic.co/u/mp3000)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 11:07pm UTC](https://discuss.elastic.co/t/is-index-prefixes-intended-to-be-used-with-text-fields-only/292366 "2021-12-17T23:07:31Z")
Hello, It seems index\_prefixes mapping parameter is only available for text fields but it is not really obvious in the doc. Why this parameter is not available for keyword fields ? Is it because the performance on sma… --- ## [Can elasticsearch incorrectly show search threadpool rejected count](https://discuss.elastic.co/t/can-elasticsearch-incorrectly-show-search-threadpool-rejected-count/291343)
**Author:** [@taugusti](https://discuss.elastic.co/u/taugusti)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 7:04pm UTC](https://discuss.elastic.co/t/can-elasticsearch-incorrectly-show-search-threadpool-rejected-count/291343 "2021-12-17T19:04:39Z")
I have been load testing my elastic cluster by sending a large number of search requests. I see a lot of "rejected" when I do GET /\_cat/thread\_pool/search in kibana. However, I see that all the queries got successful re… --- ## [Tried "mutate" convert", logstash getting error from elasticsearch: "type \[float\] to \[long\]"](https://discuss.elastic.co/t/tried-mutate-convert-logstash-getting-error-from-elasticsearch-type-float-to-long/292356)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 6:25pm UTC](https://discuss.elastic.co/t/tried-mutate-convert-logstash-getting-error-from-elasticsearch-type-float-to-long/292356 "2021-12-17T18:25:32Z")
My expectation is that adding the 'convert' would insure that all data for that field will be of type "float", but I guess I did it wrong? relevant part of data: "metrics"=\>\[ { "Unit"=\>"Count", "MetricName"=\>"Res… --- ## [Time elapsed between two events with EQL (and then use that in a visualization)](https://discuss.elastic.co/t/time-elapsed-between-two-events-with-eql-and-then-use-that-in-a-visualization/292355)
**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 6:09pm UTC](https://discuss.elastic.co/t/time-elapsed-between-two-events-with-eql-and-then-use-that-in-a-visualization/292355 "2021-12-17T18:09:32Z")
I have this log that has three relevant fields: @timestamp EVENTNO (Event number) DEVICEID (Device ID) I want to know how much time happens between the start and the end of something specific (start of that something… --- ## [Not able to read indices](https://discuss.elastic.co/t/not-able-to-read-indices/292302)
**Author:** [@AnkitaPujare](https://discuss.elastic.co/u/AnkitaPujare)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 5:58pm UTC](https://discuss.elastic.co/t/not-able-to-read-indices/292302 "2021-12-17T17:58:36Z")
Dear Team, I have ELK stack installed (ELK version-7.8.0) on one Linux server(say host1). Due to high severity vulnerability of apache log4j2, I have tried to install updated ELK stack (ELK version-7.16.1) on new server… --- ## [Why does elasticsearch return inconsistent result on version 7.8.1 and return correct result on 5.6.7 for the same match\_phrase\_prefix query? How can i get consistent result on elasticsearch 7.8.1?](https://discuss.elastic.co/t/why-does-elasticsearch-return-inconsistent-result-on-version-7-8-1-and-return-correct-result-on-5-6-7-for-the-same-match-phrase-prefix-query-how-can-i-get-consistent-result-on-elasticsearch-7-8-1/290722)
**Author:** [@animesh\_dhokare](https://discuss.elastic.co/u/animesh_dhokare)\ **Replies:** 7\ **Last updated:** [December 17, 2021, 1:02pm UTC](https://discuss.elastic.co/t/why-does-elasticsearch-return-inconsistent-result-on-version-7-8-1-and-return-correct-result-on-5-6-7-for-the-same-match-phrase-prefix-query-how-can-i-get-consistent-result-on-elasticsearch-7-8-1/290722 "2021-12-17T13:02:11Z")
Hi there, I have observed inconsistency in the result for the below match\_phrase\_prefix query on elasticsearch 7.8.1. QUERY: { "sort": \[{ "created": { "order": "desc" } … --- ## [Logstash fails to parse valid json, I need a "split" but I get "Only String and Array types are splittable."](https://discuss.elastic.co/t/logstash-fails-to-parse-valid-json-i-need-a-split-but-i-get-only-string-and-array-types-are-splittable/292228)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 4\ **Last updated:** [December 17, 2021, 5:19pm UTC](https://discuss.elastic.co/t/logstash-fails-to-parse-valid-json-i-need-a-split-but-i-get-only-string-and-array-types-are-splittable/292228 "2021-12-17T17:19:37Z")
The logfile I need to ingest: { "policy": { "name": "account-cloudtrail-enabled", "resource": "account", "description": "Checks to make sure CloudTrail is enabled on the account\\nfor all regions.\\n", "… --- ## [List of doc ids in an index](https://discuss.elastic.co/t/list-of-doc-ids-in-an-index/292279)
**Author:** [@sunny3794.ad](https://discuss.elastic.co/u/sunny3794.ad)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 4:10pm UTC](https://discuss.elastic.co/t/list-of-doc-ids-in-an-index/292279 "2021-12-17T16:10:43Z")
Is there any way of retrieving a list of all the document ids that are present in an index? Just the ids and not the actual data inside the documents. --- ## [Ask for best practice how to add new plugin analyzer to existing index (new field)](https://discuss.elastic.co/t/ask-for-best-practice-how-to-add-new-plugin-analyzer-to-existing-index-new-field/291589)
**Author:** [@garyzjq](https://discuss.elastic.co/u/garyzjq)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 4:09pm UTC](https://discuss.elastic.co/t/ask-for-best-practice-how-to-add-new-plugin-analyzer-to-existing-index-new-field/291589 "2021-12-17T16:09:46Z")
(ES 7.15) Hi teams, For custom analyzer (defined in Index setting as json format) , I saw there were 2 best practices: If want to add a new custom analyzer to existing index, need to close/re-open this index. If ther… --- ## [Upload images to elastic search and display it in kibana](https://discuss.elastic.co/t/upload-images-to-elastic-search-and-display-it-in-kibana/292258)
**Author:** [@Raghupathy\_M](https://discuss.elastic.co/u/Raghupathy_M)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 3:31pm UTC](https://discuss.elastic.co/t/upload-images-to-elastic-search-and-display-it-in-kibana/292258 "2021-12-17T15:31:48Z")
How to Upload images to Elasticsearch and display it in kibana --- ## [Deploying Helm chart to local Kubernetes gives FileSystemException](https://discuss.elastic.co/t/deploying-helm-chart-to-local-kubernetes-gives-filesystemexception/291906)
**Author:** [@ngruson](https://discuss.elastic.co/u/ngruson)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 2:07pm UTC](https://discuss.elastic.co/t/deploying-helm-chart-to-local-kubernetes-gives-filesystemexception/291906 "2021-12-17T14:07:07Z")
I'm trying to deploy Elasticsearch 7.9.3 to my local Kubernetes cluster running in Docker Desktop. I cloned the helm charts for Elasticsearch from GitHub ( helm-charts/elasticsearch at main · elastic/helm-charts (github… --- ## [ES 6.7.1 "The system could not find the environment option that was entered" JDK 11.0.13](https://discuss.elastic.co/t/es-6-7-1-the-system-could-not-find-the-environment-option-that-was-entered-jdk-11-0-13/292315)
**Author:** [@angelo.pluskwa](https://discuss.elastic.co/u/angelo.pluskwa)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 1:48pm UTC](https://discuss.elastic.co/t/es-6-7-1-the-system-could-not-find-the-environment-option-that-was-entered-jdk-11-0-13/292315 "2021-12-17T13:48:20Z")
OS: Windows Server 2008 R2 ES: 6.7.1 Java: JDK Temurin-11.0.13+8 When Elasticsearch is installed as a service with "Elasticsearch-service.bat install" using the mentioned JDK, the Elasticsearch service will crash on s… --- ## [Search documents with apostrophes in fields](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162)
**Author:** [@Gabriel\_DE\_RAMECOURT](https://discuss.elastic.co/u/Gabriel_DE_RAMECOURT)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 1:47pm UTC](https://discuss.elastic.co/t/search-documents-with-apostrophes-in-fields/292162 "2021-12-17T13:47:00Z")
Hello, I am quite new to Elascticsearch and try to write and search documents. I have no problem writing documents, but I have one when I try searching for documents using a word that is stored in a field with an apost… --- ## [Missing logs due to kafka error](https://discuss.elastic.co/t/missing-logs-due-to-kafka-error/292307)
**Author:** [@1ac727ff300829bca0fa](https://discuss.elastic.co/u/1ac727ff300829bca0fa)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 12:36pm UTC](https://discuss.elastic.co/t/missing-logs-due-to-kafka-error/292307 "2021-12-17T12:36:54Z")
Hey guys, i have set up ELK with kafka where logs are sent to different kafka topics which then are sent to logstash indices. My problem is kafka went down for 2 days and i cannot see the logs for those two days in kiban… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=522) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=524)