# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1056

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1057

---

## [SecurityNetty4HttpServerTransport received plaintext http traffic on an https channel](https://discuss.elastic.co/t/securitynetty4httpservertransport-received-plaintext-http-traffic-on-an-https-channel/309137)

<div class="topic-metadata">

**Author:** [@Sameer\_Malik](https://discuss.elastic.co/u/Sameer_Malik)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 6:11pm UTC](https://discuss.elastic.co/t/securitynetty4httpservertransport-received-plaintext-http-traffic-on-an-https-channel/309137 "2022-07-07T18:11:30Z")

</div>

Hello everyone! I'm quite new to Elasticsearch and networks. I just managed to install elasticsearch on an external disk, and it seemed to install just fine ✅ Elasticsearch security features have been automatically co…

---

## [Dropped unsampled transactions in \>= 8.x poses a problem](https://discuss.elastic.co/t/dropped-unsampled-transactions-in-8-x-poses-a-problem/308930)

<div class="topic-metadata">

**Author:** [@Pawel\_Bakiewicz](https://discuss.elastic.co/u/Pawel_Bakiewicz)\
**Replies:** 3\
**Last updated:** [July 7, 2022, 6:08pm UTC](https://discuss.elastic.co/t/dropped-unsampled-transactions-in-8-x-poses-a-problem/308930 "2022-07-07T18:08:49Z")

</div>

Hi, If I'm not mistaken, since version 8.0 we cannot collect unsampled transactions. (PR: Remove \`apm-server.sampling.keep\_unsampled\` config by axw · Pull Request #6514 · elastic/apm-server · GitHub). No option can tur…

---

## [Unable to Configure SLM](https://discuss.elastic.co/t/unable-to-configure-slm/309132)

<div class="topic-metadata">

**Author:** [@Mnchstrcityblues79](https://discuss.elastic.co/u/Mnchstrcityblues79)\
**Replies:** 4\
**Last updated:** [July 7, 2022, 6:05pm UTC](https://discuss.elastic.co/t/unable-to-configure-slm/309132 "2022-07-07T18:05:38Z")

</div>

Greetings. I run the Graylog Open edition that uses ElasticSearch under the hood. Unfortunately, the archive feature is behind a paywall. Nonetheless, I need to backup my data and snapshots are the best way. I have be…

---

## [Heartbeat Expression Body Content](https://discuss.elastic.co/t/heartbeat-expression-body-content/309134)

<div class="topic-metadata">

**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 5:41pm UTC](https://discuss.elastic.co/t/heartbeat-expression-body-content/309134 "2022-07-07T17:41:12Z")

</div>

Hi, I am trying to monitor an endpoint but I need check if in the json response body exists this expression: "status":"Success" or only the word "Success" at least. This is my test: Json Response: { "latest\_run":…

---

## [Changing ownership of filebeat installtion from root](https://discuss.elastic.co/t/changing-ownership-of-filebeat-installtion-from-root/307521)

<div class="topic-metadata">

**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\
**Replies:** 5\
**Last updated:** [July 7, 2022, 4:19pm UTC](https://discuss.elastic.co/t/changing-ownership-of-filebeat-installtion-from-root/307521 "2022-07-07T16:19:34Z")

</div>

Hi experts, I installed filebeat as root in my RedHat. We did using yum install filebeat-version.rpm. Now what happened is, when install, we did it as root user. I believe there is security risk by installing as root u…

---

## [Snapshot deletion is in-progress](https://discuss.elastic.co/t/snapshot-deletion-is-in-progress/309122)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 1:52pm UTC](https://discuss.elastic.co/t/snapshot-deletion-is-in-progress/309122 "2022-07-07T13:52:14Z")

</div>

Hello World! I'm trying to delete-snapshot by following: Create a snapshot | Elasticsearch Guide \[7.17\] | Elastic, yet per GET /\_cat/tasks, this task is STILL running (it's been over 18+ hours now) GET /\_tasks/mUxakOw…

---

## [Kibana logs is full](https://discuss.elastic.co/t/kibana-logs-is-full/307903)

<div class="topic-metadata">

**Author:** [@ptang](https://discuss.elastic.co/u/ptang)\
**Replies:** 3\
**Last updated:** [July 7, 2022, 2:55pm UTC](https://discuss.elastic.co/t/kibana-logs-is-full/307903 "2022-07-07T14:55:47Z")

</div>

can anyone help me how to cleanup the kibana.log files under /var/log/kibana directory. kibana.log filled my diskspace and no space to write the logs. Thanks, pradeep

---

## [Discuss UI issue. "Recommended for you"](https://discuss.elastic.co/t/discuss-ui-issue-recommended-for-you/309102)

<div class="topic-metadata">

**Author:** [@ruant](https://discuss.elastic.co/u/ruant)\
**Replies:** 1\
**Last updated:** [July 7, 2022, 2:38pm UTC](https://discuss.elastic.co/t/discuss-ui-issue-recommended-for-you/309102 "2022-07-07T14:38:51Z")

</div>

The "Recommended for you" is taking up a lot of space and is making the threads very hard to read... Tested on both Chrome (Version 103.0.5060.114 (Official Build) (64-bit)) and Firefox (102.0.1 (64-bit))

---

## [How to implement export functionality inside custom plugin](https://discuss.elastic.co/t/how-to-implement-export-functionality-inside-custom-plugin/308893)

<div class="topic-metadata">

**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\
**Replies:** 3\
**Last updated:** [July 7, 2022, 2:26pm UTC](https://discuss.elastic.co/t/how-to-implement-export-functionality-inside-custom-plugin/308893 "2022-07-07T14:26:03Z")

</div>

how can I export data which I rendered in a dataGrid inside of a custom plugin using data plugin How did I render the data inside a plugin? follow -\> Git app.tsx I want to export this data using the kibana plugin …

---

## [Conexión SharePoint a logstash](https://discuss.elastic.co/t/conexion-sharepoint-a-logstash/309047)

<div class="topic-metadata">

**Author:** [@arley\_nova\_salgado](https://discuss.elastic.co/u/arley_nova_salgado)\
**Replies:** 2\
**Last updated:** [July 7, 2022, 2:18pm UTC](https://discuss.elastic.co/t/conexion-sharepoint-a-logstash/309047 "2022-07-07T14:18:36Z")

</div>

I'm trying to create an input that receives data from sharepoint, but I can't find any information on this topic. Can you help me, please.

---

## [Change existing field to nested field in index mappinfg](https://discuss.elastic.co/t/change-existing-field-to-nested-field-in-index-mappinfg/309090)

<div class="topic-metadata">

**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\
**Replies:** 1\
**Last updated:** [July 7, 2022, 2:10pm UTC](https://discuss.elastic.co/t/change-existing-field-to-nested-field-in-index-mappinfg/309090 "2022-07-07T14:10:30Z")

</div>

Hi Everyone, I have an existing index with the mapping below { "family": { "mappings": { "properties": { "@timestamp": { "type": "date" }, "@version": { "type": "…

---

## [Multiline events not parsed correctly](https://discuss.elastic.co/t/multiline-events-not-parsed-correctly/309123)

<div class="topic-metadata">

**Author:** [@DLP\_Admin](https://discuss.elastic.co/u/DLP_Admin)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 1:57pm UTC](https://discuss.elastic.co/t/multiline-events-not-parsed-correctly/309123 "2022-07-07T13:57:36Z")

</div>

We are trying to replace custom log parsing performed via Filebeat + Logstash by using the Elastic Agent + Fleet. We built and tested the Ingest Pipeline successfully, and set up the Fleet infrastructure. Reading the log…

---

## [Duvida filtros kibana](https://discuss.elastic.co/t/duvida-filtros-kibana/308829)

<div class="topic-metadata">

**Author:** [@danielbsilva2](https://discuss.elastic.co/u/danielbsilva2)\
**Replies:** 1\
**Last updated:** [July 7, 2022, 1:35pm UTC](https://discuss.elastic.co/t/duvida-filtros-kibana/308829 "2022-07-07T13:35:56Z")

</div>

boa tarde pessoal sou iniciante ainda nesse mundo de elastic e tenho a seguinte duvida como crio um filtro de busca no meu kibana no discovery (no caso é o que estou usando no momento não sei se é o certo pra isso) do …

---

## [What exactly does "size" mean for a data stream in Kibana](https://discuss.elastic.co/t/what-exactly-does-size-mean-for-a-data-stream-in-kibana/308982)

<div class="topic-metadata">

**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\
**Replies:** 4\
**Last updated:** [July 7, 2022, 1:28pm UTC](https://discuss.elastic.co/t/what-exactly-does-size-mean-for-a-data-stream-in-kibana/308982 "2022-07-07T13:28:13Z")

</div>

Hey all. I've got a fleet managed agent which is, via the kubernetes integration (and others), creating data streams. I'm trying to understand what the size column is telling me and I don't seem to be able to find any do…

---

## [Akamai \<\> Elasticsearch integration](https://discuss.elastic.co/t/akamai-elasticsearch-integration/308795)

<div class="topic-metadata">

**Author:** [@hlopotun](https://discuss.elastic.co/u/hlopotun)\
**Replies:** 1\
**Last updated:** [July 7, 2022, 1:17pm UTC](https://discuss.elastic.co/t/akamai-elasticsearch-integration/308795 "2022-07-07T13:17:00Z")

</div>

Hello everyone! Hope someone could clarify the following for me. We have a self-hosted Elasticsearch cluster, no Fleet server yet. Recently we added the Akamai integration, provided all the necessary information (API H…

---

## [Which prometheus metric will give information about snapshot backups](https://discuss.elastic.co/t/which-prometheus-metric-will-give-information-about-snapshot-backups/309117)

<div class="topic-metadata">

**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 1:07pm UTC](https://discuss.elastic.co/t/which-prometheus-metric-will-give-information-about-snapshot-backups/309117 "2022-07-07T13:07:24Z")

</div>

Hi Team, Could some help me is there any promethesu metric which will give information about elastic snapshot backups. As i am using elasticsearch exporter and sending the data to prometheus Thanks,

---

## [Sizing JVM Heap - Container scenario](https://discuss.elastic.co/t/sizing-jvm-heap-container-scenario/309115)

<div class="topic-metadata">

**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 12:37pm UTC](https://discuss.elastic.co/t/sizing-jvm-heap-container-scenario/309115 "2022-07-07T12:37:47Z")

</div>

Hi to all, I have a doubt on how sizing JVM Heap. According varius documentation: When running in a container, such as Docker, total memory is defined as the amount of memory visible to the container, not the total s…

---

## [How to resolve "Can not decode an entire message...." error in logstash while usingImap plugin?](https://discuss.elastic.co/t/how-to-resolve-can-not-decode-an-entire-message-error-in-logstash-while-usingimap-plugin/309114)

<div class="topic-metadata">

**Author:** [@Ayush\_Gupta](https://discuss.elastic.co/u/Ayush_Gupta)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 12:32pm UTC](https://discuss.elastic.co/t/how-to-resolve-can-not-decode-an-entire-message-error-in-logstash-while-usingimap-plugin/309114 "2022-07-07T12:32:19Z")

</div>

Hi, I am new to Elasticsearch and logstash when I use imap plugin "Can not decode an entire message...." error appears. I have read many posts, understood a few but still unable to get what to do to resolve these errors …

---

## [Lofg file not getting picked up from filebeat](https://discuss.elastic.co/t/lofg-file-not-getting-picked-up-from-filebeat/309105)

<div class="topic-metadata">

**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\
**Replies:** 1\
**Last updated:** [July 7, 2022, 12:26pm UTC](https://discuss.elastic.co/t/lofg-file-not-getting-picked-up-from-filebeat/309105 "2022-07-07T12:26:54Z")

</div>

Hello, Facing issue where log files are not getting picked up from filebeat in same dir. files - files1.log (this is not getting picked up) files-access.log (this file gets picked up) filebeat config filebeat.input…

---

## [Date field is not Parsing](https://discuss.elastic.co/t/date-field-is-not-parsing/309006)

<div class="topic-metadata">

**Author:** [@Muhammed\_Ashique](https://discuss.elastic.co/u/Muhammed_Ashique)\
**Replies:** 3\
**Last updated:** [July 7, 2022, 12:14pm UTC](https://discuss.elastic.co/t/date-field-is-not-parsing/309006 "2022-07-07T12:14:43Z")

</div>

Hello Team, i have some data carrying date and this data is tagged with date data type. but sometime this filed is carrying empty body (without Date String) How can i parse for both conditions ? In the Time of Date is i…

---

## [Error while installing index templates](https://discuss.elastic.co/t/error-while-installing-index-templates/309110)

<div class="topic-metadata">

**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 12:11pm UTC](https://discuss.elastic.co/t/error-while-installing-index-templates/309110 "2022-07-07T12:11:30Z")

</div>

Hi guys, I am having a problem across some pipelines on logstash. Everytime i restart or start logstash i can see that it outputs an error line for some of the pipelines configured. The error is the following: Failed …

---

## [Help with logstash output](https://discuss.elastic.co/t/help-with-logstash-output/309011)

<div class="topic-metadata">

**Author:** [@PJss](https://discuss.elastic.co/u/PJss)\
**Replies:** 3\
**Last updated:** [July 7, 2022, 12:03pm UTC](https://discuss.elastic.co/t/help-with-logstash-output/309011 "2022-07-07T12:03:55Z")

</div>

Hello I'm getting ELK running node in command, that i don't configure, and this string below goes to arcsight: 2022-07-04T12:50:30.046Z {name=TST-FT13} Jul 4 15:50:29 TST-FT13 sshd\[1872\]: Accepted keyboard-interactive/p…

---

## [How to integrate AWS Lambda with plugin Elastic](https://discuss.elastic.co/t/how-to-integrate-aws-lambda-with-plugin-elastic/306506)

<div class="topic-metadata">

**Author:** [@Renato\_Souza](https://discuss.elastic.co/u/Renato_Souza)\
**Replies:** 33\
**Last updated:** [July 7, 2022, 11:57am UTC](https://discuss.elastic.co/t/how-to-integrate-aws-lambda-with-plugin-elastic/306506 "2022-07-07T11:57:37Z")

</div>

I am using functions beat to get logs from aws lambda (cloudwatch). But, i know exists an integration ready for AWS Lambda at Browse all integrations in cloud Elastic. I don't find documentation how to use this integrati…

---

## [How to get values from a bucket using the key(s) of that bucket instead of the index - elasticsearch bucket aggregation - watcher?](https://discuss.elastic.co/t/how-to-get-values-from-a-bucket-using-the-key-s-of-that-bucket-instead-of-the-index-elasticsearch-bucket-aggregation-watcher/309107)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 11:54am UTC](https://discuss.elastic.co/t/how-to-get-values-from-a-bucket-using-the-key-s-of-that-bucket-instead-of-the-index-elasticsearch-bucket-aggregation-watcher/309107 "2022-07-07T11:54:19Z")

</div>

Hi team, I have the below aggregation search query. "aggregations" : { "test\_groups" : { "doc\_count\_error\_upper\_bound" : 0, "sum\_other\_doc\_count" : 0, "buckets" : \[ { "key" : "…

---

## [Kibana index .kibana\_task\_manager goes unassigned after few days and cause Red cluster health on ECK](https://discuss.elastic.co/t/kibana-index-kibana-task-manager-goes-unassigned-after-few-days-and-cause-red-cluster-health-on-eck/309104)

<div class="topic-metadata">

**Author:** [@AaronSarkissian](https://discuss.elastic.co/u/AaronSarkissian)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 11:40am UTC](https://discuss.elastic.co/t/kibana-index-kibana-task-manager-goes-unassigned-after-few-days-and-cause-red-cluster-health-on-eck/309104 "2022-07-07T11:40:08Z")

</div>

I'm setting up a cluster on Azure using ECK. The specifications are following: ECK version: 2.2, 2.3 (tried both) Elastic version: 8.0, 8.1.0, 8.2.0, 8.3.1 (tried all versions) K8s version: 1.23.5 Node size: Standard…

---

## [ElasticSearch Grok Filter](https://discuss.elastic.co/t/elasticsearch-grok-filter/308295)

<div class="topic-metadata">

**Author:** [@HKN\_MZ](https://discuss.elastic.co/u/HKN_MZ)\
**Replies:** 4\
**Last updated:** [July 7, 2022, 11:10am UTC](https://discuss.elastic.co/t/elasticsearch-grok-filter/308295 "2022-07-07T11:10:03Z")

</div>

Hi Everyone, I try to apply grok filter for my logs. As you see I am getting some of them. But I don't get first.jobId=0 or first.applicationname=POLY2 How can I get these fields?

---

## [Issue in extracting all available data in index in elastic using python library elasticsearch](https://discuss.elastic.co/t/issue-in-extracting-all-available-data-in-index-in-elastic-using-python-library-elasticsearch/308470)

<div class="topic-metadata">

**Author:** [@aniketdatir](https://discuss.elastic.co/u/aniketdatir)\
**Replies:** 5\
**Last updated:** [July 7, 2022, 10:56am UTC](https://discuss.elastic.co/t/issue-in-extracting-all-available-data-in-index-in-elastic-using-python-library-elasticsearch/308470 "2022-07-07T10:56:10Z")

</div>

Hi, I am facing below issue. I want to extract full dump that is all available documents from index "X" using python code and save it to json file. But currently M able to extract few documents only using below command.…

---

## [Zabbix + Logstash = Field referenced by ... is missing](https://discuss.elastic.co/t/zabbix-logstash-field-referenced-by-is-missing/309100)

<div class="topic-metadata">

**Author:** [@voidx](https://discuss.elastic.co/u/voidx)\
**Replies:** 0\
**Last updated:** [July 7, 2022, 10:50am UTC](https://discuss.elastic.co/t/zabbix-logstash-field-referenced-by-is-missing/309100 "2022-07-07T10:50:29Z")

</div>

I'm trying to configure sending messages from the log to Zabbix, I ran into this problem. When running Logstash, there are a bunch of errors of this type in the log \[logstash.outputs.zabbix\]\[main\]\[2ef3e6f6411863c21dc15…

---

## [Index Rollover not working after reaching maxday](https://discuss.elastic.co/t/index-rollover-not-working-after-reaching-maxday/309066)

<div class="topic-metadata">

**Author:** [@jacky7788](https://discuss.elastic.co/u/jacky7788)\
**Replies:** 7\
**Last updated:** [July 7, 2022, 10:22am UTC](https://discuss.elastic.co/t/index-rollover-not-working-after-reaching-maxday/309066 "2022-07-07T10:22:18Z")

</div>

Not able to rollover after 1 day I have set parse\_origination\_date to true the index is like access-log-appname-2022.07.06-000001 { "policy":{ "phases":{ "hot":{ "min\_age":"0ms", "actions…

---

## [Logstash filter is not working ...kindly help](https://discuss.elastic.co/t/logstash-filter-is-not-working-kindly-help/306306)

<div class="topic-metadata">

**Author:** [@aniketdatir](https://discuss.elastic.co/u/aniketdatir)\
**Replies:** 11\
**Last updated:** [July 7, 2022, 10:20am UTC](https://discuss.elastic.co/t/logstash-filter-is-not-working-kindly-help/306306 "2022-07-07T10:20:18Z")

</div>

Hi, Need your help I've bunch of messages if kafka. few samples are given below. {"processId":40,"parentProcessId":40,"type":"Info","service":"a-b-c","object":"common\_factory","method":"listUsers","log":"Start listUs…

[Previous page](https://discuss.elastic.co/latest.md?page=1055)

[Next page](https://discuss.elastic.co/latest.md?page=1057)
