# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1302

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1303

---

## [Elasticsearch modules' releases and repositories](https://discuss.elastic.co/t/elasticsearch-modules-releases-and-repositories/294601)

<div class="topic-metadata">

**Author:** [@bamthomas](https://discuss.elastic.co/u/bamthomas)\
**Replies:** 7\
**Last updated:** [January 19, 2022, 10:57am UTC](https://discuss.elastic.co/t/elasticsearch-modules-releases-and-repositories/294601 "2022-01-19T10:57:54Z")

</div>

Hello, We have an embedded node in our java app and 5 modules that are loaded : Netty4 ParentJoin CommonAnalysis Painless Reindex Lately we wanted to upgrade the ES libraries from 7.10 to 7.16. We found the main Elas…

---

## [Error: Invalid string. Length must be a multiple of 4](https://discuss.elastic.co/t/error-invalid-string-length-must-be-a-multiple-of-4/293201)

<div class="topic-metadata">

**Author:** [@mohantychandra](https://discuss.elastic.co/u/mohantychandra)\
**Replies:** 13\
**Last updated:** [January 19, 2022, 10:56am UTC](https://discuss.elastic.co/t/error-invalid-string-length-must-be-a-multiple-of-4/293201 "2022-01-19T10:56:11Z")

</div>

Hi Can anyone help to resolve the issue, Any comment is much appreciated. The issue and log is given below. Invalid string. Length must be a multiple of 4 Error: Invalid string. Length must be a multiple of 4

---

## [Old Kibana indices](https://discuss.elastic.co/t/old-kibana-indices/294785)

<div class="topic-metadata">

**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\
**Replies:** 1\
**Last updated:** [January 19, 2022, 10:56am UTC](https://discuss.elastic.co/t/old-kibana-indices/294785 "2022-01-19T10:56:01Z")

</div>

Is that safe to delete old Kibana indices? there are lots of them. (They should probably cleaned up during an upgrade)

---

## [Elasticsearchkeystore](https://discuss.elastic.co/t/elasticsearchkeystore/294797)

<div class="topic-metadata">

**Author:** [@harsh19](https://discuss.elastic.co/u/harsh19)\
**Replies:** 0\
**Last updated:** [January 19, 2022, 10:49am UTC](https://discuss.elastic.co/t/elasticsearchkeystore/294797 "2022-01-19T10:49:09Z")

</div>

whenever i type ./Elasticsearch-setup-passwords auto then it gives me an error like this Enter password for the elasticsearch keystore : Failed to authenticate user 'elastic' against http://127.0.0.1:9200/\_security/\_…

---

## [Nested time ranges and term in one filter](https://discuss.elastic.co/t/nested-time-ranges-and-term-in-one-filter/294392)

<div class="topic-metadata">

**Author:** [@D1sturbance](https://discuss.elastic.co/u/D1sturbance)\
**Replies:** 9\
**Last updated:** [January 19, 2022, 9:42am UTC](https://discuss.elastic.co/t/nested-time-ranges-and-term-in-one-filter/294392 "2022-01-19T09:42:20Z")

</div>

Hello :slight\_smile: My data: shops working hours shops with each of their working hours I have a query which returns shops from first day of the month to last day of the month including working hours. For example: …

---

## [Filebeat.inputs journald: Multiline not working](https://discuss.elastic.co/t/filebeat-inputs-journald-multiline-not-working/294422)

<div class="topic-metadata">

**Author:** [@agallardo](https://discuss.elastic.co/u/agallardo)\
**Replies:** 3\
**Last updated:** [January 19, 2022, 9:22am UTC](https://discuss.elastic.co/t/filebeat-inputs-journald-multiline-not-working/294422 "2022-01-19T09:22:06Z")

</div>

According to \[Journalbeat\] Still no multiline support after 3 years · Issue #27578 · elastic/beats · GitHub, because filebeat can now read the journal and it should support multiline. In the documentation Journald input …

---

## [Inserting data in Elasticsearch 8.0.0 preview](https://discuss.elastic.co/t/inserting-data-in-elasticsearch-8-0-0-preview/294477)

<div class="topic-metadata">

**Author:** [@Abhishek\_Gautam](https://discuss.elastic.co/u/Abhishek_Gautam)\
**Replies:** 4\
**Last updated:** [January 19, 2022, 9:12am UTC](https://discuss.elastic.co/t/inserting-data-in-elasticsearch-8-0-0-preview/294477 "2022-01-19T09:12:37Z")

</div>

Hi team, is there any way to insert bulk data into Elasticsearch 8.0.0 alpha 1, as there isnt any Logstash version compatible with this version.

---

## [Request to close index fails due to socket timeout](https://discuss.elastic.co/t/request-to-close-index-fails-due-to-socket-timeout/294687)

<div class="topic-metadata">

**Author:** [@Shubham\_M](https://discuss.elastic.co/u/Shubham_M)\
**Replies:** 13\
**Last updated:** [January 19, 2022, 9:08am UTC](https://discuss.elastic.co/t/request-to-close-index-fails-due-to-socket-timeout/294687 "2022-01-19T09:08:42Z")

</div>

Scenario: We create new index on daily basis so as to keep the data in the index updated.After creation of new index when close request is made,it times out with Socket failure execption. { class: "org.quartz.simpl.Sim…

---

## [Argument \`path\` of the module file\_integrity enhancement?](https://discuss.elastic.co/t/argument-path-of-the-module-file-integrity-enhancement/293668)

<div class="topic-metadata">

**Author:** [@krakz](https://discuss.elastic.co/u/krakz)\
**Replies:** 1\
**Last updated:** [January 19, 2022, 9:05am UTC](https://discuss.elastic.co/t/argument-path-of-the-module-file-integrity-enhancement/293668 "2022-01-19T09:05:33Z")

</div>

Hi, The module file\_integrity takes a list of file path, which is useful for binary and configuration file monitoring, but generic users file cannot be monitored otherwise than with the option recursive enable. Is ther…

---

## [Custom transactions not showing in dashboard](https://discuss.elastic.co/t/custom-transactions-not-showing-in-dashboard/294637)

<div class="topic-metadata">

**Author:** [@covid19](https://discuss.elastic.co/u/covid19)\
**Replies:** 8\
**Last updated:** [January 19, 2022, 8:57am UTC](https://discuss.elastic.co/t/custom-transactions-not-showing-in-dashboard/294637 "2022-01-19T08:57:24Z")

</div>

Hello, I am trying to implement RUM APM in our frontend application. We use React SPA and first thing I noticed is that only initial page load is being recorded. To overcome that I added request interceptor to axios con…

---

## [How to determine the correct size for terms aggregation, which will produce accurate aggregation results?](https://discuss.elastic.co/t/how-to-determine-the-correct-size-for-terms-aggregation-which-will-produce-accurate-aggregation-results/294771)

<div class="topic-metadata">

**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\
**Replies:** 3\
**Last updated:** [January 19, 2022, 8:27am UTC](https://discuss.elastic.co/t/how-to-determine-the-correct-size-for-terms-aggregation-which-will-produce-accurate-aggregation-results/294771 "2022-01-19T08:27:13Z")

</div>

As I read through document for Terms Aggregation, I came across the fact that the results from Term Aggregation are not always accurate, but we can increase the size to get the accurate results. I know : - How Query-T…

---

## [CVE-2021-45105 and CVE-2020-9488 vulnerabilities with java apm agent 1.28.4](https://discuss.elastic.co/t/cve-2021-45105-and-cve-2020-9488-vulnerabilities-with-java-apm-agent-1-28-4/294766)

<div class="topic-metadata">

**Author:** [@vin89](https://discuss.elastic.co/u/vin89)\
**Replies:** 3\
**Last updated:** [January 19, 2022, 7:53am UTC](https://discuss.elastic.co/t/cve-2021-45105-and-cve-2020-9488-vulnerabilities-with-java-apm-agent-1-28-4/294766 "2022-01-19T07:53:23Z")

</div>

After we upgraded to java apm agent version to 1.28.4 from 1.23.0 there were 2 vulnerabilities newly added And as I see in 1.28.4 version i could see log4j version being used is 2.12.4, so is there any plan to upgrad…

---

## [Circular data overwriting](https://discuss.elastic.co/t/circular-data-overwriting/294768)

<div class="topic-metadata">

**Author:** [@jelns](https://discuss.elastic.co/u/jelns)\
**Replies:** 2\
**Last updated:** [January 19, 2022, 7:51am UTC](https://discuss.elastic.co/t/circular-data-overwriting/294768 "2022-01-19T07:51:38Z")

</div>

Hi. Is it possible to cyclically overwrite data in Elasticsearch storage (as Round-robin databases do)? For instance, when the storage is full, new data will overwrite the oldest. Maybe there are some way to organize th…

---

## [Discover Can't Show data (Panw Module Filebeat)](https://discuss.elastic.co/t/discover-cant-show-data-panw-module-filebeat/294435)

<div class="topic-metadata">

**Author:** [@Xenial](https://discuss.elastic.co/u/Xenial)\
**Replies:** 4\
**Last updated:** [January 19, 2022, 6:49am UTC](https://discuss.elastic.co/t/discover-cant-show-data-panw-module-filebeat/294435 "2022-01-19T06:49:33Z")

</div>

Hi All, I've configured the ELK system for monitoring Palo Alto Log using Filebeats Modules PANW. i check the data index management is real time counting and grow, but when i go to Discover not showing any data. In…

---

## [Elasticsearch plugin turned red](https://discuss.elastic.co/t/elasticsearch-plugin-turned-red/294503)

<div class="topic-metadata">

**Author:** [@Mohammad\_Ramadan\_Abd](https://discuss.elastic.co/u/Mohammad_Ramadan_Abd)\
**Replies:** 3\
**Last updated:** [January 19, 2022, 6:48am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-turned-red/294503 "2022-01-19T06:48:09Z")

</div>

Hello Bros' In my setup here i suddenly found my setup stoped working with Elasticsearch plugin is red "Chaeck attachments", I have restarted the server several times but still not working. Any help to have it back wor…

---

## [Import from mongodb using logstash](https://discuss.elastic.co/t/import-from-mongodb-using-logstash/294770)

<div class="topic-metadata">

**Author:** [@saeed](https://discuss.elastic.co/u/saeed)\
**Replies:** 0\
**Last updated:** [January 19, 2022, 6:29am UTC](https://discuss.elastic.co/t/import-from-mongodb-using-logstash/294770 "2022-01-19T06:29:49Z")

</div>

Hi I need to import my documents from mongodb to Elasticsearch and I used logstash. This is my output in CMD when I run this command: C:\\logstash-7.16.3\\bin\\logstash -f c:\\logstash-7.16.3\\bin\\mongo2.conf "Using bundl…

---

## [Doc\_values: false Not effective?](https://discuss.elastic.co/t/doc-values-false-not-effective/294760)

<div class="topic-metadata">

**Author:** [@S-Dragon0302](https://discuss.elastic.co/u/S-Dragon0302)\
**Replies:** 1\
**Last updated:** [January 19, 2022, 4:00am UTC](https://discuss.elastic.co/t/doc-values-false-not-effective/294760 "2022-01-19T04:00:22Z")

</div>

Elasticsearch version:7.15.1 { - "contentindex\_2m\_20211109\_1412": { - "mappings": { - "dynamic": "false", "\_source": { - "enabled": false }, "properties": { - "ContentHtml": { - "type": "keyword", "doc\_values"…

---

## [New autoresponder bot enabled](https://discuss.elastic.co/t/new-autoresponder-bot-enabled/294761)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [January 19, 2022, 3:52am UTC](https://discuss.elastic.co/t/new-autoresponder-bot-enabled/294761 "2022-01-19T03:52:35Z")

</div>

Thanks to the awesome team at Discourse, we've enabled a new autoresponder bot to trial. The idea is to flag any EOL versions of the stack that users may have deployed and post an automated response recommending an upgr…

---

## [既存のインデックスのマッピング定義を変更する際のデータ移行方法について](https://discuss.elastic.co/t/topic/294668)

<div class="topic-metadata">

**Author:** [@Naoki\_Yoshida](https://discuss.elastic.co/u/Naoki_Yoshida)\
**Replies:** 2\
**Last updated:** [January 19, 2022, 1:08am UTC](https://discuss.elastic.co/t/topic/294668 "2022-01-19T01:08:00Z")

</div>

既にデータが登録されているインデックスで、とあるフィールドのマッピング定義を変更する場合には、 既存インデックス削除→新規インデックスを作成して新しいマッピング定義を登録しデータを投入 という方法しかないのでしょうか。 現在運用しているシステムでは上記のような方法を取っておりまして、 マッピング定義の更新に非常に時間がかかっています。 何かいい方法等ありましたら教えていただけますと幸いです。

---

## [Filebeat Non-Root User Permissions](https://discuss.elastic.co/t/filebeat-non-root-user-permissions/294743)

<div class="topic-metadata">

**Author:** [@harry\_cook](https://discuss.elastic.co/u/harry_cook)\
**Replies:** 1\
**Last updated:** [January 19, 2022, 12:37am UTC](https://discuss.elastic.co/t/filebeat-non-root-user-permissions/294743 "2022-01-19T00:37:32Z")

</div>

Can I Install filebeat as a non-root user on on-prem servers ? If yes what/where all permissions do I need to run it as non-root user ?

---

## [Visualize all APM spans instead of samples](https://discuss.elastic.co/t/visualize-all-apm-spans-instead-of-samples/294303)

<div class="topic-metadata">

**Author:** [@joao-subtil](https://discuss.elastic.co/u/joao-subtil)\
**Replies:** 1\
**Last updated:** [January 18, 2022, 10:56pm UTC](https://discuss.elastic.co/t/visualize-all-apm-spans-instead-of-samples/294303 "2022-01-18T22:56:49Z")

</div>

Hi, I am investigating a move from Jaeger UI to Kibana. I already have a POC setup. However i got a few questions regarding the visualization of individual spans. Our devs are used to Jaeger UI and they want a vertical …

---

## [Custom Interactive Filters in Kibana](https://discuss.elastic.co/t/custom-interactive-filters-in-kibana/294216)

<div class="topic-metadata">

**Author:** [@Jason2073](https://discuss.elastic.co/u/Jason2073)\
**Replies:** 3\
**Last updated:** [January 18, 2022, 10:30pm UTC](https://discuss.elastic.co/t/custom-interactive-filters-in-kibana/294216 "2022-01-18T22:30:46Z")

</div>

Hello! I have been working to make a kibana dashboard more interactive for a very picky client that wants a way of interacting with filters that I can't seem to find a way of doing with the features I have seen in kibana…

---

## [Kibana 7.6.2 URL drill down dashboard](https://discuss.elastic.co/t/kibana-7-6-2-url-drill-down-dashboard/294705)

<div class="topic-metadata">

**Author:** [@gaetano](https://discuss.elastic.co/u/gaetano)\
**Replies:** 2\
**Last updated:** [January 18, 2022, 9:47pm UTC](https://discuss.elastic.co/t/kibana-7-6-2-url-drill-down-dashboard/294705 "2022-01-18T21:47:05Z")

</div>

In Kibana 7.6.2 Is it possible to create interactive dashboards where you can drill down to a specific url from a visualization that belongs to the dashboard?

---

## [Setting up basic security plus secured HTTP Traffic](https://discuss.elastic.co/t/setting-up-basic-security-plus-secured-http-traffic/294735)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 0\
**Last updated:** [January 18, 2022, 8:43pm UTC](https://discuss.elastic.co/t/setting-up-basic-security-plus-secured-http-traffic/294735 "2022-01-18T20:43:19Z")

</div>

Hello all, I have a three node implementation cluster for Elastic stack on three different VMs and I am using version 7.16.2 with basic license. I have set up two layers of security and working on the last one which is …

---

## [Switching from index names to alias - performance impact?](https://discuss.elastic.co/t/switching-from-index-names-to-alias-performance-impact/294633)

<div class="topic-metadata">

**Author:** [@sale](https://discuss.elastic.co/u/sale)\
**Replies:** 4\
**Last updated:** [January 18, 2022, 8:50pm UTC](https://discuss.elastic.co/t/switching-from-index-names-to-alias-performance-impact/294633 "2022-01-18T20:50:53Z")

</div>

We use Elasticsearch for time series data with indices created every day. We perform all operations (ingest, search etc) using the REST APIs. We keep 60-days worth of data available to query. Currently, when we do searc…

---

## [Disk usage exceed in Elastic search after logstash upgrade](https://discuss.elastic.co/t/disk-usage-exceed-in-elastic-search-after-logstash-upgrade/294577)

<div class="topic-metadata">

**Author:** [@abkonr](https://discuss.elastic.co/u/abkonr)\
**Replies:** 2\
**Last updated:** [January 18, 2022, 8:47pm UTC](https://discuss.elastic.co/t/disk-usage-exceed-in-elastic-search-after-logstash-upgrade/294577 "2022-01-18T20:47:43Z")

</div>

Hi Elastic Team, kindly help with below issue. FYI we have seen this error after logstash upgrade. i.e 7.16.2 and upgrade has been perfomed to fix the log4j vulnerability. please suggest us to fix this problem. error=\>{…

---

## [Logstash hanged, cant be even restarted, Elastic output plugin might be the rascal?](https://discuss.elastic.co/t/logstash-hanged-cant-be-even-restarted-elastic-output-plugin-might-be-the-rascal/294732)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 1\
**Last updated:** [January 18, 2022, 7:26pm UTC](https://discuss.elastic.co/t/logstash-hanged-cant-be-even-restarted-elastic-output-plugin-might-be-the-rascal/294732 "2022-01-18T19:26:22Z")

</div>

Hi, I've a configuration that reads from a file and gets its content to a data stream in Elastic. My setup is like that: I have a conf file under /etc/logstash/conf.d/ that listens on a port to get the logs and writes…

---

## [Docker-Compose and ELK, inaccessable from web](https://discuss.elastic.co/t/docker-compose-and-elk-inaccessable-from-web/294728)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 0\
**Last updated:** [January 18, 2022, 7:01pm UTC](https://discuss.elastic.co/t/docker-compose-and-elk-inaccessable-from-web/294728 "2022-01-18T19:01:39Z")

</div>

Below is my Docker-Compose file, I can't seem to access it when I type in the port and IP. version: '2.2' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:7.16.2 container\_name: el…

---

## [Exclude master node from query user operations - how?](https://discuss.elastic.co/t/exclude-master-node-from-query-user-operations-how/294636)

<div class="topic-metadata">

**Author:** [@sale](https://discuss.elastic.co/u/sale)\
**Replies:** 6\
**Last updated:** [January 18, 2022, 6:25pm UTC](https://discuss.elastic.co/t/exclude-master-node-from-query-user-operations-how/294636 "2022-01-18T18:25:25Z")

</div>

We have a 11 node Elasticsearch cluster (3 master-eligible node + 8 data nodes). We perform all operations (ingesting, search etc) using REST calls. The master nodes are lightweight as compared to data nodes. For the sa…

---

## ["operation primary term \[1\] is too old (current \[2\])"](https://discuss.elastic.co/t/operation-primary-term-1-is-too-old-current-2/294459)

<div class="topic-metadata">

**Author:** [@noactivation](https://discuss.elastic.co/u/noactivation)\
**Replies:** 2\
**Last updated:** [January 18, 2022, 6:14pm UTC](https://discuss.elastic.co/t/operation-primary-term-1-is-too-old-current-2/294459 "2022-01-18T18:14:27Z")

</div>

I'm novice with Elasticsearch, looking at some issues today. The company subject matter expert is in a different timezone where it is well-past business hours on a Friday night. This doesn't seem critical, so I'm not goi…

[Previous page](https://discuss.elastic.co/latest.md?page=1301)

[Next page](https://discuss.elastic.co/latest.md?page=1303)
