# Latest **URL:** https://discuss.elastic.co/latest.md?page=1135 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1136 --- ## [Date processor ingest pipeline failed to parse](https://discuss.elastic.co/t/date-processor-ingest-pipeline-failed-to-parse/304515)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 4\ **Last updated:** [May 12, 2022, 3:45am UTC](https://discuss.elastic.co/t/date-processor-ingest-pipeline-failed-to-parse/304515 "2022-05-12T03:45:41Z")
Hello, I'm using date processor on ingest pipeline, I've seen the documentation about the date processor, the syntax I wrote seems right, but the result is not. here's my date example 05/11/2022, 7:03:52 AM and here'… --- ## [ES有request时间99分位监控吗?](https://discuss.elastic.co/t/es-request-99/302700)
**Author:** [@gaojiabao1991](https://discuss.elastic.co/u/gaojiabao1991)\ **Replies:** 1\ **Last updated:** [May 12, 2022, 2:58am UTC](https://discuss.elastic.co/t/es-request-99/302700 "2022-05-12T02:58:40Z")
Hello大家好, 我是最近刚开始接触ES, 之前用过Lucene和Solr, 最近在把公司的Solr替换为ES. 我们现在的监控是用prometheus社区提供的elasticsearch-exporter将ES的admin/metrics接口提供的系统运行信息记录到prometheus里. 然后我发现貌似ES的admin/metrics接口并没有提供查询的99分位时间信息. 之所以问这个问题是因为我知道Solr是有这个指标的. … --- ## [Elasticsearch-analysis-icu是否有词库热刷新机制？](https://discuss.elastic.co/t/elasticsearch-analysis-icu/304230)
**Author:** [@YanoDorian](https://discuss.elastic.co/u/YanoDorian)\ **Replies:** 1\ **Last updated:** [May 12, 2022, 2:55am UTC](https://discuss.elastic.co/t/elasticsearch-analysis-icu/304230 "2022-05-12T02:55:01Z")
你好，Elasticsearch-analysis-icu分词器是否支持类似IK分词器词库热刷新机制？ --- ## [Renewing Let's Encrypt Certification - Kibana](https://discuss.elastic.co/t/renewing-lets-encrypt-certification-kibana/304390)
**Author:** [@Hunter\_Goncalves](https://discuss.elastic.co/u/Hunter_Goncalves)\ **Replies:** 2\ **Last updated:** [May 12, 2022, 1:57am UTC](https://discuss.elastic.co/t/renewing-lets-encrypt-certification-kibana/304390 "2022-05-12T01:57:56Z")
I'm stumped on renewing these lets encrypt certifications for kibana. There seems to be a permissions error but i'm not sure where. Screenshots show error message and permissions for lets encrypt files and kibana ssl sym… --- ## [Is elasticsearch, logstash impacted by opendJDK Vulnerability](https://discuss.elastic.co/t/is-elasticsearch-logstash-impacted-by-opendjdk-vulnerability/304423)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 11:30pm UTC](https://discuss.elastic.co/t/is-elasticsearch-logstash-impacted-by-opendjdk-vulnerability/304423 "2022-05-11T23:30:06Z")
is Elasticsearch and logstash got impacted by opendJDK vulnerability? CVE's The versions impacted are: OpenJDK 7 \<= 7u331 OpenJDK 8 \<= 8u322 OpenJDK 11.0.0 \<= 11.0.14 OpenJDK 13.0.0 \<= 13.0.10 OpenJDK 15.0.0 \<= … --- ## [Data stream, ILM and refresh\_interval](https://discuss.elastic.co/t/data-stream-ilm-and-refresh-interval/304456)
**Author:** [@Valentin\_Pletzer](https://discuss.elastic.co/u/Valentin_Pletzer)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 11:22pm UTC](https://discuss.elastic.co/t/data-stream-ilm-and-refresh-interval/304456 "2022-05-11T23:22:08Z")
Hi, I am using Elasticsearch for a really long time now, mostly for logging data and aggregating. One pattern I am using successfully is the rolling daily indices. Write to the current one and set the older ones to "ref… --- ## [Data Archival in Elastic Search](https://discuss.elastic.co/t/data-archival-in-elastic-search/304442)
**Author:** [@Nikhil\_Ray5](https://discuss.elastic.co/u/Nikhil_Ray5)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 11:18pm UTC](https://discuss.elastic.co/t/data-archival-in-elastic-search/304442 "2022-05-11T23:18:28Z")
Can you help me with how to archive data in Elasticsearch. that I don't know what is curator and data shrink. I am fresher to Elasticsearch. from where I have to start studying and what all things I have to do? --- ## [Kibana Error - \`/app/management/data/index\_management/indices\`](https://discuss.elastic.co/t/kibana-error-app-management-data-index-management-indices/304475)
**Author:** [@JGreene](https://discuss.elastic.co/u/JGreene)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 2:20pm UTC](https://discuss.elastic.co/t/kibana-error-app-management-data-index-management-indices/304475 "2022-05-11T14:20:32Z")
Elastic version; 7.16.2 When attempting to load indices under /app/management/data/index\_management/indices, we receive the following error: Kibana error logs: {"type":"error","@timestamp":"2022-05-11T07:16:42-07:0… --- ## [Purging the index using curator script](https://discuss.elastic.co/t/purging-the-index-using-curator-script/304478)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 2:58pm UTC](https://discuss.elastic.co/t/purging-the-index-using-curator-script/304478 "2022-05-11T14:58:21Z")
HI, I'm using curator script to purge our data in production. Currently we are having 2 type of format in ES once is for Production index and another one is pre-prod index. Basically we keep last 5 week records of pro… --- ## [SearchRequest source timeout not working for Java HighLevelRESTClient](https://discuss.elastic.co/t/searchrequest-source-timeout-not-working-for-java-highlevelrestclient/304507)
**Author:** [@Constantine\_Cheng](https://discuss.elastic.co/u/Constantine_Cheng)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 9:39pm UTC](https://discuss.elastic.co/t/searchrequest-source-timeout-not-working-for-java-highlevelrestclient/304507 "2022-05-11T21:39:01Z")
Hello, I am trying to parse a timeout parameter to searchRequest.source().timeout() in Kotlin and run HighLevelRestClient.search(searchRequest). The timeout interval in my case is set to be 1 ms for testing if the timeo… --- ## [Delete\_by\_query not deleting the indices](https://discuss.elastic.co/t/delete-by-query-not-deleting-the-indices/304500)
**Author:** [@Sam1231](https://discuss.elastic.co/u/Sam1231)\ **Replies:** 5\ **Last updated:** [May 11, 2022, 11:07pm UTC](https://discuss.elastic.co/t/delete-by-query-not-deleting-the-indices/304500 "2022-05-11T23:07:58Z")
hi, i have a python program which needs to delete the indices after 20 days of creation. i have used delete\_by\_query but when i run the program, there is no error but also the indices are not getting deleted. can some… --- ## [Ambiguous documentation for audit logs](https://discuss.elastic.co/t/ambiguous-documentation-for-audit-logs/304505)
**Author:** [@cmendez92](https://discuss.elastic.co/u/cmendez92)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 9:14pm UTC](https://discuss.elastic.co/t/ambiguous-documentation-for-audit-logs/304505 "2022-05-11T21:14:20Z")
Elasticsearch documentation is ambiguous in audit logs section. Literally says: If configured, auditing settings must be set on every node in the cluster. Is that correct? I think with only 1 node we can get all audi… --- ## [Queue Size and Threadpools](https://discuss.elastic.co/t/queue-size-and-threadpools/304414)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 3\ **Last updated:** [May 11, 2022, 10:21pm UTC](https://discuss.elastic.co/t/queue-size-and-threadpools/304414 "2022-05-11T22:21:51Z")
Hello, I was wondering something about the relation between queue sizes and threadpool sizes. For example, as of the most recent version I think write thread pool has 10000 default queue. Is this queue size for each al… --- ## [Drop agent / ecs fields from filebeat (previous solves here only partially work)](https://discuss.elastic.co/t/drop-agent-ecs-fields-from-filebeat-previous-solves-here-only-partially-work/304508)
**Author:** [@elk-user-99](https://discuss.elastic.co/u/elk-user-99)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 9:44pm UTC](https://discuss.elastic.co/t/drop-agent-ecs-fields-from-filebeat-previous-solves-here-only-partially-work/304508 "2022-05-11T21:44:37Z")
Hey all, I'm attempting to use filebeat to send documents into ES, however even though I've got a processor set up to drop fields, some are still stubbornly getting sent. in my filebeat.yml file: - drop\_fields: … --- ## [Lost all Fleet agent policies and Security Rules after upgrade to 8.2](https://discuss.elastic.co/t/lost-all-fleet-agent-policies-and-security-rules-after-upgrade-to-8-2/304389)
**Author:** [@robhep](https://discuss.elastic.co/u/robhep)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 9:00pm UTC](https://discuss.elastic.co/t/lost-all-fleet-agent-policies-and-security-rules-after-upgrade-to-8-2/304389 "2022-05-11T21:00:45Z")
I have a cluster running in a lab that I use to test out things before we do them in production. This cluster started out on version 7.14.x roughly. Fleet and agents have been installed and upgraded several times, thro… --- ## [Monitoring people watching dashboards](https://discuss.elastic.co/t/monitoring-people-watching-dashboards/304499)
**Author:** [@ldibello](https://discuss.elastic.co/u/ldibello)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 7:41pm UTC](https://discuss.elastic.co/t/monitoring-people-watching-dashboards/304499 "2022-05-11T19:41:00Z")
Hi, in our company we have several users consuming different dashboards, is there a way, plugin, GTM or other solution, that I can watch how many users are watching dashboards? Hope I was clear... --- ## [Kibana Batch Reindex API - How to cancel un-started queued tasks?](https://discuss.elastic.co/t/kibana-batch-reindex-api-how-to-cancel-un-started-queued-tasks/304270)
**Author:** [@mscully](https://discuss.elastic.co/u/mscully)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 7:34pm UTC](https://discuss.elastic.co/t/kibana-batch-reindex-api-how-to-cancel-un-started-queued-tasks/304270 "2022-05-11T19:34:08Z")
I am running Elastic/Kibana 7.17.3. I am using the Upgrade Assistant APIs in Kibana to reindex indices from v6 to v7 in preparation for upgrading to v8. I am able to start the batch reindex process which enqueues tasks… --- ## [Anyone out there keeping a fork of ansible-elasticsearch alive?](https://discuss.elastic.co/t/anyone-out-there-keeping-a-fork-of-ansible-elasticsearch-alive/304498)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 6:54pm UTC](https://discuss.elastic.co/t/anyone-out-there-keeping-a-fork-of-ansible-elasticsearch-alive/304498 "2022-05-11T18:54:56Z")
I just got back from a leave of absence and found that Elastic is no longer supporting GitHub - elastic/ansible-elasticsearch: Ansible playbook for Elasticsearch. Since I rely on that role for upgrades I thought I'd ask … --- ## [It would be awesome if we could integrate Jupyter Notebooks with Kibana (more seamlessly, like a dashboard)](https://discuss.elastic.co/t/it-would-be-awesome-if-we-could-integrate-jupyter-notebooks-with-kibana-more-seamlessly-like-a-dashboard/304494)
**Author:** [@J\_Todd](https://discuss.elastic.co/u/J_Todd)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 6:18pm UTC](https://discuss.elastic.co/t/it-would-be-awesome-if-we-could-integrate-jupyter-notebooks-with-kibana-more-seamlessly-like-a-dashboard/304494 "2022-05-11T18:18:22Z")
TlDr: We think, since Kibana is, after all, a web app, that it might be feasible to have Kibana support Jupyter Notebooks and use via Voila to host them as a kind of Dashboard like Canvas. Eland is proof that Elastic un… --- ## [64 fields limitation in 7.16.3](https://discuss.elastic.co/t/64-fields-limitation-in-7-16-3/304322)
**Author:** [@leosyedali](https://discuss.elastic.co/u/leosyedali)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 5:51pm UTC](https://discuss.elastic.co/t/64-fields-limitation-in-7-16-3/304322 "2022-05-11T17:51:25Z")
Hello, How can we increase the Schema Fields limit in 7.16.3 release? Thank You. --- ## [Moving Cloud Instances - Elastic Agent](https://discuss.elastic.co/t/moving-cloud-instances-elastic-agent/304492)
**Author:** [@notladr](https://discuss.elastic.co/u/notladr)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 5:03pm UTC](https://discuss.elastic.co/t/moving-cloud-instances-elastic-agent/304492 "2022-05-11T17:03:45Z")
Firstly, I apologize if this is an elementary question, but didn't see anything with search results. I have Elastic Cloud deployed in my lab - not any production environments. When deploying the Windows Elastic Agent, … --- ## [ECE Fundamentals : Lesson 4 (Features) Proxy issue](https://discuss.elastic.co/t/ece-fundamentals-lesson-4-features-proxy-issue/303430)
**Author:** [@alombard](https://discuss.elastic.co/u/alombard)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 4:41pm UTC](https://discuss.elastic.co/t/ece-fundamentals-lesson-4-features-proxy-issue/303430 "2022-05-11T16:41:17Z")
Hello, I'm currently training through Elasticsearch learning center but I'm having trouble at the Lesson 4's lab. I was required to update my cluster from v7.17.1 to v8.1.0, this part went fine, but after that, everytim… --- ## [How to obtain socket information for particular applications/processes using metricbeat?](https://discuss.elastic.co/t/how-to-obtain-socket-information-for-particular-applications-processes-using-metricbeat/304484)
**Author:** [@sangameshcs](https://discuss.elastic.co/u/sangameshcs)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 3:55pm UTC](https://discuss.elastic.co/t/how-to-obtain-socket-information-for-particular-applications-processes-using-metricbeat/304484 "2022-05-11T15:55:04Z")
Hi, I am using metric-beat to collect information about processes running on remote hosts which use sockets, and I am able to collect the metrics/information about the processes and socket data is one of them but I am no… --- ## [How to remove additional comma in part of message](https://discuss.elastic.co/t/how-to-remove-additional-comma-in-part-of-message/304472)
**Author:** [@royalE](https://discuss.elastic.co/u/royalE)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 3:36pm UTC](https://discuss.elastic.co/t/how-to-remove-additional-comma-in-part-of-message/304472 "2022-05-11T15:36:38Z")
I have string between quotation marks that is separated by comma example :"hello ,world" logstash separate them in different column which is not the output that I want I would like to remove the quotation and remove t… --- ## [Geoip pipeline setting for Netflow (Map on Geo Location Dashboard)](https://discuss.elastic.co/t/geoip-pipeline-setting-for-netflow-map-on-geo-location-dashboard/304454)
**Author:** [@IMagalashvili](https://discuss.elastic.co/u/IMagalashvili)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 2:30pm UTC](https://discuss.elastic.co/t/geoip-pipeline-setting-for-netflow-map-on-geo-location-dashboard/304454 "2022-05-11T14:30:46Z")
Hi, we had added Netflow module to analyze traffic with Filebeat netflow module. Everything works but cant activate Map settings. As i found, we have to add new pipeline ( "geoip-info", for example) ad add "final\_pipel… --- ## [Monitoring/Alerting a windows service by Elastic Agent and Fleet](https://discuss.elastic.co/t/monitoring-alerting-a-windows-service-by-elastic-agent-and-fleet/304275)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 2:26pm UTC](https://discuss.elastic.co/t/monitoring-alerting-a-windows-service-by-elastic-agent-and-fleet/304275 "2022-05-11T14:26:31Z")
This topic will be regarding the post I made few days ago on monitoring a windows service, this time in the Elastic Cloud. Not really a problem but a new solution I found while exploring the things arround Elastic-Agent … --- ## [Query cache vs search rate](https://discuss.elastic.co/t/query-cache-vs-search-rate/304468)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 2:25pm UTC](https://discuss.elastic.co/t/query-cache-vs-search-rate/304468 "2022-05-11T14:25:32Z")
We had a search spike in our cluster, the search rate almost tripled. But when checking the metrics it shows that query cache increased almost tenfold. What's the explanation for this? --- ## [Cisco FTD Integration Dashboard Missing](https://discuss.elastic.co/t/cisco-ftd-integration-dashboard-missing/304151)
**Author:** [@cmenuey](https://discuss.elastic.co/u/cmenuey)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 2:16pm UTC](https://discuss.elastic.co/t/cisco-ftd-integration-dashboard-missing/304151 "2022-05-11T14:16:43Z")
Hi all, I've setup a fleet server and elastic agent to pull logs in with the Cisco FTD integration, and I can see the logs growing in my fleet datastreams. When I try to view the dashboard it's not there. I can't see th… --- ## [Filebeat SSL connection to logstash](https://discuss.elastic.co/t/filebeat-ssl-connection-to-logstash/303186)
**Author:** [@ruchil](https://discuss.elastic.co/u/ruchil)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 2:13pm UTC](https://discuss.elastic.co/t/filebeat-ssl-connection-to-logstash/303186 "2022-05-11T14:13:34Z")
Hi All, Appreciate any help in configuring SSL connection from Filebeat to logstash on ECK. Openshift 4.8.x ECK 2.1.0 ELKF stack 8.1.0 I am using to certs from Elasticsearch-es-http-certs-internal. Created pkcs8.key… --- ## [Kibana high values with short interval as explicit growing line](https://discuss.elastic.co/t/kibana-high-values-with-short-interval-as-explicit-growing-line/304130)
**Author:** [@Radoslaw\_Sieprawski](https://discuss.elastic.co/u/Radoslaw_Sieprawski)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 2:02pm UTC](https://discuss.elastic.co/t/kibana-high-values-with-short-interval-as-explicit-growing-line/304130 "2022-05-11T14:02:36Z")
Hi guys, I'm looking for solution how to present in Kibana constantly growing high values as growing line graph. This what I have now is completely flat line especialy when choosen time span is low, eg 1h. I'll apprecia… [Previous page](https://discuss.elastic.co/latest.md?page=1134) [Next page](https://discuss.elastic.co/latest.md?page=1136)