# Latest **URL:** https://discuss.elastic.co/latest.md?page=1338 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1339 --- ## [Elastic search query behind appsearch query](https://discuss.elastic.co/t/elastic-search-query-behind-appsearch-query/292468)
**Author:** [@ammarhaider](https://discuss.elastic.co/u/ammarhaider)\ **Replies:** 0\ **Last updated:** [December 20, 2021, 1:51pm UTC](https://discuss.elastic.co/t/elastic-search-query-behind-appsearch-query/292468 "2021-12-20T13:51:17Z")
I am using Appsearch/Enterprise search at the frontend, but I need some heavy processing / complex queries to be made at the backend for which I need more control. And as per my understanding appsearch is basically a wra… --- ## [Different sizes of nodes Shard /0 with segment files \`\_\_\*\*\*\`](https://discuss.elastic.co/t/different-sizes-of-nodes-shard-0-with-segment-files/292326)
**Author:** [@christians](https://discuss.elastic.co/u/christians)\ **Replies:** 3\ **Last updated:** [December 20, 2021, 1:24pm UTC](https://discuss.elastic.co/t/different-sizes-of-nodes-shard-0-with-segment-files/292326 "2021-12-20T13:24:55Z")
Hello, Hope this letter finds you well. Could you please help me with a question that i have. My question is about the generation of several segment files are incremented on a Node. I used elastic 6.8.12 and I have th… --- ## [Is there any way to display base64 image data on dashboard?](https://discuss.elastic.co/t/is-there-any-way-to-display-base64-image-data-on-dashboard/292461)
**Author:** [@elastik](https://discuss.elastic.co/u/elastik)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 1:20pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-display-base64-image-data-on-dashboard/292461 "2021-12-20T13:20:17Z")
I found the way to display image url using markdown card !\[image\](https://www.google.com/logos/doodles/2021/seasonal-holidays-2021-6753651837109324-6752733080595603-cst.gif) but i don't know how to display base64 image… --- ## [How to delete all content related to a specific domain?](https://discuss.elastic.co/t/how-to-delete-all-content-related-to-a-specific-domain/292463)
**Author:** [@mbil](https://discuss.elastic.co/u/mbil)\ **Replies:** 0\ **Last updated:** [December 20, 2021, 1:07pm UTC](https://discuss.elastic.co/t/how-to-delete-all-content-related-to-a-specific-domain/292463 "2021-12-20T13:07:23Z")
I would like to delete all content related to a specific domain. Crawler has run on some domains with incorrect configuration and I would like to delete the content and run it again with correct configuration. --- ## [Strigo account SSL issue for mysql](https://discuss.elastic.co/t/strigo-account-ssl-issue-for-mysql/292371)
**Author:** [@kapilsapra](https://discuss.elastic.co/u/kapilsapra)\ **Replies:** 5\ **Last updated:** [December 20, 2021, 12:02pm UTC](https://discuss.elastic.co/t/strigo-account-ssl-issue-for-mysql/292371 "2021-12-20T12:02:33Z")
I am trying to configure and run filebeat on the mysql server in strigo environment. when i run filebeat i am getting SSL error that certificate signed by some different authority. 2021-12-18T05:35:20.274Z INFO … --- ## [Elastic Inconsistent log rotation(log4j2)](https://discuss.elastic.co/t/elastic-inconsistent-log-rotation-log4j2/292459)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 0\ **Last updated:** [December 20, 2021, 11:55am UTC](https://discuss.elastic.co/t/elastic-inconsistent-log-rotation-log4j2/292459 "2021-12-20T11:55:36Z")
Problem Statement - Elastic log rotation(rolling.old & rolling) is inconsistent and displays random behavior across different nodes. We have noticed 3 main issues - log rotation doesn't happen daily as configured via … --- ## [Sudden unexplained increase in system load and read operations resulting in very slow indexing](https://discuss.elastic.co/t/sudden-unexplained-increase-in-system-load-and-read-operations-resulting-in-very-slow-indexing/292456)
**Author:** [@dd76](https://discuss.elastic.co/u/dd76)\ **Replies:** 0\ **Last updated:** [December 20, 2021, 11:40am UTC](https://discuss.elastic.co/t/sudden-unexplained-increase-in-system-load-and-read-operations-resulting-in-very-slow-indexing/292456 "2021-12-20T11:40:23Z")
We are running Elasticsearch 7.12.0 and have recently seen system load and read operations suddenly increase significantly on one data node despite there being no change to the number of query/index operations being exec… --- ## [エンドポイントエージェントの問題](https://discuss.elastic.co/t/topic/292452)
**Author:** [@Vivi](https://discuss.elastic.co/u/Vivi)\ **Replies:** 0\ **Last updated:** [December 20, 2021, 11:17am UTC](https://discuss.elastic.co/t/topic/292452 "2021-12-20T11:17:02Z")
"Artifacts.cpp:2850 Failed to download artifact diagnostic-configuration-v1 - Invalid url. " Elastic CloudのEndpoint SecurityでランサムウエアをONにして評価中。 Fleet機能で2台のAgentを追加。どちらもWin10。１台目は会社内の端末。２台目は自宅の個人PC。 会社内の端末はFleet Statusが… --- ## [Kibana timestamp shows incorrect time](https://discuss.elastic.co/t/kibana-timestamp-shows-incorrect-time/292193)
**Author:** [@peterreji94](https://discuss.elastic.co/u/peterreji94)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 10:58am UTC](https://discuss.elastic.co/t/kibana-timestamp-shows-incorrect-time/292193 "2021-12-20T10:58:19Z")
The kibana is not showing the actual time of log. It's delayed by a few milliseconds (at least 500ms) when compared to the actual timestamp of the log on the server. One of the discussions mentioned the use of @logtimest… --- ## [Query index patterns using ES nodejs client lib](https://discuss.elastic.co/t/query-index-patterns-using-es-nodejs-client-lib/292282)
**Author:** [@hamzahda](https://discuss.elastic.co/u/hamzahda)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 10:54am UTC](https://discuss.elastic.co/t/query-index-patterns-using-es-nodejs-client-lib/292282 "2021-12-20T10:54:13Z")
Hi, I wanted to know know if it's also possible to do this query GET \:\/api/index\_patterns/index\_pattern/\ in a script using the es client lib and thanks --- ## [Logstash CSV Timestamp extract](https://discuss.elastic.co/t/logstash-csv-timestamp-extract/292188)
**Author:** [@Robsen\_Inc](https://discuss.elastic.co/u/Robsen_Inc)\ **Replies:** 5\ **Last updated:** [December 20, 2021, 9:38am UTC](https://discuss.elastic.co/t/logstash-csv-timestamp-extract/292188 "2021-12-20T09:38:42Z")
Hello everyone, I have a problem with my log data. After hours of try-and-error I am now looking for help from you. An exemplary line looks like this: 09/04/2021 11:30:53 0 0 0 0 0 0 0 0 false false false false false … --- ## [Need help to evaluate Logstash for syncing Oracle data into Elasticsearch (combining multiple 25+ table records into single nested document)](https://discuss.elastic.co/t/need-help-to-evaluate-logstash-for-syncing-oracle-data-into-elasticsearch-combining-multiple-25-table-records-into-single-nested-document/292430)
**Author:** [@Tejas\_Damle](https://discuss.elastic.co/u/Tejas_Damle)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 9:38am UTC](https://discuss.elastic.co/t/need-help-to-evaluate-logstash-for-syncing-oracle-data-into-elasticsearch-combining-multiple-25-table-records-into-single-nested-document/292430 "2021-12-20T09:38:25Z")
Requirement: We are planning to use Logstash to sync data from Oracle to Elasticsearch. There are around 25+ tables in Oracle. Plan is to to have single index in Elasticsearch with nested/flattened documents which will… --- ## [CSV Reporting Truncating Results in 7.15.x](https://discuss.elastic.co/t/csv-reporting-truncating-results-in-7-15-x/288142)
**Author:** [@skoldrh](https://discuss.elastic.co/u/skoldrh)\ **Replies:** 5\ **Last updated:** [December 20, 2021, 8:13am UTC](https://discuss.elastic.co/t/csv-reporting-truncating-results-in-7-15-x/288142 "2021-12-20T08:13:27Z")
Using Elastic Kibana 7.13.3 (and previous versions) I was able to Save and Share/CSV reports with a maximum size of around 500 MBs (We have a Security requirement to archive off logs from Windows (WinLogBeat), Linux (Fil… --- ## [Dec 20th, 2021: \[de\] Runtime Fields — neue Möglichkeiten für Daten in Elasticsearch](https://discuss.elastic.co/t/dec-20th-2021-de-runtime-fields-neue-moglichkeiten-fur-daten-in-elasticsearch/292073)
**Author:** [@xeraa](https://discuss.elastic.co/u/xeraa)\ **Replies:** 0\ **Last updated:** [December 20, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2021-de-runtime-fields-neue-moglichkeiten-fur-daten-in-elasticsearch/292073 "2021-12-20T08:00:27Z")
Datenspeicher haben zwei Möglichkeiten, wie sie Informationen für Abfragen vorbereiten können — beispielsweise ein Muster durch eine Regular Expression zu extrahieren: Entweder bei der Indizierung / Speicherung ("Schema … --- ## [No monitoring data found version 7.16.1](https://discuss.elastic.co/t/no-monitoring-data-found-version-7-16-1/292113)
**Author:** [@marek.vesely](https://discuss.elastic.co/u/marek.vesely)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 7:58am UTC](https://discuss.elastic.co/t/no-monitoring-data-found-version-7-16-1/292113 "2021-12-20T07:58:08Z")
Hello, today i updated to latest version of ELK stack because of log4j... I updated from version 7.15.0 which works perfect, but no i don't see monitoring data. In metricbeat logs i see this error: (status=400): {"type… --- ## [Elastic Search, logstash and filebeat OSS 7.10.2 - Log4j Patch](https://discuss.elastic.co/t/elastic-search-logstash-and-filebeat-oss-7-10-2-log4j-patch/292425)
**Author:** [@marisubu](https://discuss.elastic.co/u/marisubu)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 7:48am UTC](https://discuss.elastic.co/t/elastic-search-logstash-and-filebeat-oss-7-10-2-log4j-patch/292425 "2021-12-20T07:48:56Z")
Hi We are currently using the OSS 7.10.2 version elastic stack in our product. Will there be any Patch(log4j upgrade to latest version) for this version for elastic stack? Thanks --- ## [Filter by score in app search is necessary](https://discuss.elastic.co/t/filter-by-score-in-app-search-is-necessary/292260)
**Author:** [@Diluka](https://discuss.elastic.co/u/Diluka)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 7:48am UTC](https://discuss.elastic.co/t/filter-by-score-in-app-search-is-necessary/292260 "2021-12-20T07:48:00Z")
here is an example of low relevance recalls search options: { precision: 7, page: { size: 2 }, search\_fields: { description: {}, }, result\_fie… --- ## [Elastic Agent Minimum System Requirements](https://discuss.elastic.co/t/elastic-agent-minimum-system-requirements/292340)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 7:39am UTC](https://discuss.elastic.co/t/elastic-agent-minimum-system-requirements/292340 "2021-12-20T07:39:58Z")
Does anyone know what the minimum system requirements (CPU/RAM/Disk) are for Elastic Agent to properly function? I'm running into some issues with some of the smaller systems I manage, and suspect the issues are caused … --- ## [Apm missing error span](https://discuss.elastic.co/t/apm-missing-error-span/292367)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 6:42am UTC](https://discuss.elastic.co/t/apm-missing-error-span/292367 "2021-12-20T06:42:10Z")
I saw an http500 error on the transaction page, but I didn’t see it on the error page. Why? elastic stack ver：7.12.0 We just initialized the apm in the code without customizing any apm features. --- ## [Logstash настроить фильтр по шаблону](https://discuss.elastic.co/t/logstash/292414)
**Author:** [@cva](https://discuss.elastic.co/u/cva)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 6:11am UTC](https://discuss.elastic.co/t/logstash/292414 "2021-12-20T06:11:15Z")
Подскажите пожалуйста как в logstash настроить фильтр таким образом, чтобы он по шаблону извлекал из пути лога имя файла и вставлял его в новое поле или как другой вариант убирал путь оставляя только имя файла? Например: … --- ## [Help me! Search kanji and hikarana (kuromoji and Fuzziness)](https://discuss.elastic.co/t/help-me-search-kanji-and-hikarana-kuromoji-and-fuzziness/292272)
**Author:** [@mai\_quoc\_son](https://discuss.elastic.co/u/mai_quoc_son)\ **Replies:** 2\ **Last updated:** [December 20, 2021, 6:05am UTC](https://discuss.elastic.co/t/help-me-search-kanji-and-hikarana-kuromoji-and-fuzziness/292272 "2021-12-20T06:05:50Z")
I setting Index : mapping : Data : Create Index: Query search : Result : Please help me , i want result 3 row by query. Thanks I read info and demo in --- ## [Mirgation guide from 6.2.3 to 6.8.21?](https://discuss.elastic.co/t/mirgation-guide-from-6-2-3-to-6-8-21/291990)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [December 20, 2021, 6:02am UTC](https://discuss.elastic.co/t/mirgation-guide-from-6-2-3-to-6-8-21/291990 "2021-12-20T06:02:37Z")
Hi, we have one instance of elk stack of version 6.2.3. All components are running as docker images. To get rid of log4j CVEs we need to upgrade to latest 6.x version. Can I upgrade to latest 6.x. directly or do I nee… --- ## [How can we delete an index based on a scheduler using JAVA API's?](https://discuss.elastic.co/t/how-can-we-delete-an-index-based-on-a-scheduler-using-java-apis/292396)
**Author:** [@yash\_196](https://discuss.elastic.co/u/yash_196)\ **Replies:** 4\ **Last updated:** [December 20, 2021, 5:54am UTC](https://discuss.elastic.co/t/how-can-we-delete-an-index-based-on-a-scheduler-using-java-apis/292396 "2021-12-20T05:54:17Z")
Can anyone help me with a java code that can delete index based on a schedule? --- ## [CVE-2021-45046 : Incomplete fix for Apache Log4j vulnerability](https://discuss.elastic.co/t/cve-2021-45046-incomplete-fix-for-apache-log4j-vulnerability/291925)
**Author:** [@Ravi\_GH](https://discuss.elastic.co/u/Ravi_GH)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 9:13pm UTC](https://discuss.elastic.co/t/cve-2021-45046-incomplete-fix-for-apache-log4j-vulnerability/291925 "2021-12-15T21:13:46Z")
With respect to "Incomplete fix for Apache Log4j vulnerability" @ Incomplete fix for Apache Log4j vulnerability · CVE-2021-45046 · GitHub Advisory Database · GitHub I have two questions: Q1) is JndiLookup class remova… --- ## [Logstash update log4j version](https://discuss.elastic.co/t/logstash-update-log4j-version/291946)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 9:43pm UTC](https://discuss.elastic.co/t/logstash-update-log4j-version/291946 "2021-12-15T21:43:02Z")
I have to change log4j 2.11 to 2.16 so I have replaced all jars. now its saying Problems loading a plugin with {:type=\>"input", :name=\>"beats", :path=\>"logstash/inputs/beats", :error\_message=\>"\\n\\n\\tyou might need to r… --- ## [Filebeat service not starting with nginx, elasticsearch and kibana on aws ec2 instance](https://discuss.elastic.co/t/filebeat-service-not-starting-with-nginx-elasticsearch-and-kibana-on-aws-ec2-instance/292384)
**Author:** [@deepak.tripathi.259](https://discuss.elastic.co/u/deepak.tripathi.259)\ **Replies:** 2\ **Last updated:** [December 20, 2021, 5:10am UTC](https://discuss.elastic.co/t/filebeat-service-not-starting-with-nginx-elasticsearch-and-kibana-on-aws-ec2-instance/292384 "2021-12-20T05:10:20Z")
I want to display nginx logs on kibana. Elasticsearch and kibana are running fine. Nginx logs are stored in /var/log/nginx/\*.log I installed filebeat and enbled the nginx service with it. filebeat.yml #############… --- ## [CVE-2021-45105 for ELK 7.10.2](https://discuss.elastic.co/t/cve-2021-45105-for-elk-7-10-2/292420)
**Author:** [@Ram\_N](https://discuss.elastic.co/u/Ram_N)\ **Replies:** 3\ **Last updated:** [December 20, 2021, 3:51am UTC](https://discuss.elastic.co/t/cve-2021-45105-for-elk-7-10-2/292420 "2021-12-20T03:51:35Z")
Hi Pertaining to 44228, we have deleted the vulnerable class as per ELK suggestion. For this new 45105, do we need to take any action ? I read default Elasticsearch, logstash, Kibana 7.10.2 are not vulnerable. Is that f… --- ## [When will the next patch be released for Elasticsearch](https://discuss.elastic.co/t/when-will-the-next-patch-be-released-for-elasticsearch/292066)
**Author:** [@Aydan](https://discuss.elastic.co/u/Aydan)\ **Replies:** 7\ **Last updated:** [December 20, 2021, 3:41am UTC](https://discuss.elastic.co/t/when-will-the-next-patch-be-released-for-elasticsearch/292066 "2021-12-20T03:41:03Z")
When will be the next patch for Elasticsearch? --- ## [Shard Siem cause cluster red](https://discuss.elastic.co/t/shard-siem-cause-cluster-red/292107)
**Author:** [@labate](https://discuss.elastic.co/u/labate)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 1:17am UTC](https://discuss.elastic.co/t/shard-siem-cause-cluster-red/292107 "2021-12-20T01:17:36Z")
Hello everyone, I have a problem with my .siem-signals-default index. The shard goes to red status and I can't reallocate the shard to another node. Because the shard seems to not be in my cluster and I can't get it bac… --- ## [Elastic SearchResponse - How to get raw response result](https://discuss.elastic.co/t/elastic-searchresponse-how-to-get-raw-response-result/291999)
**Author:** [@thadc](https://discuss.elastic.co/u/thadc)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 2:56pm UTC](https://discuss.elastic.co/t/elastic-searchresponse-how-to-get-raw-response-result/291999 "2021-12-15T14:56:19Z")
I have a need to get the raw response from the Elasticsearch SearchResponse object. We have situations where navigating the hits/aggregations-based structure is too rigid for our formatting the response back to user. Gra… [Previous page](https://discuss.elastic.co/latest.md?page=1337) [Next page](https://discuss.elastic.co/latest.md?page=1339)