# Latest **URL:** https://discuss.elastic.co/latest.md?page=1339 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1340 --- ## [Oracle DB performance monitoring with ELK (MetricBeat)](https://discuss.elastic.co/t/oracle-db-performance-monitoring-with-elk-metricbeat/292000)
**Author:** [@tonypro](https://discuss.elastic.co/u/tonypro)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 1:14am UTC](https://discuss.elastic.co/t/oracle-db-performance-monitoring-with-elk-metricbeat/292000 "2021-12-20T01:14:48Z")
Greetings buddy! Please, I have been struggle on how to monitored an oracle DB instance, using the ELK stack. I read that you can use the metric beat's oracle module to ship data to the Elasticsearch engine. But I am st… --- ## [Elasti search reindexing indexes only few 1000 or more documents but not to the original count of orginal index](https://discuss.elastic.co/t/elasti-search-reindexing-indexes-only-few-1000-or-more-documents-but-not-to-the-original-count-of-orginal-index/292044)
**Author:** [@Darshan\_R](https://discuss.elastic.co/u/Darshan_R)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 1:12am UTC](https://discuss.elastic.co/t/elasti-search-reindexing-indexes-only-few-1000-or-more-documents-but-not-to-the-original-count-of-orginal-index/292044 "2021-12-20T01:12:40Z")
Elasti csearch reindexing indexes only few 1000 or more documents but not to the original count of orginal index I am using using AWS step functions with lambda to run reindexing for all 33 index paralley out of 33 onl… --- ## [Adds a new field inside in the existing index](https://discuss.elastic.co/t/adds-a-new-field-inside-in-the-existing-index/292030)
**Author:** [@rav3n](https://discuss.elastic.co/u/rav3n)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 1:12am UTC](https://discuss.elastic.co/t/adds-a-new-field-inside-in-the-existing-index/292030 "2021-12-20T01:12:16Z")
Hey there, I'm trying to add a new field to the already existing index but every time I get this error : { "error" : { "root\_cause" : \[ { "type" : "mapper\_exception", "reason" : "the \[includ… --- ## [Get role mapping created with configmaps](https://discuss.elastic.co/t/get-role-mapping-created-with-configmaps/292097)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 7:39am UTC](https://discuss.elastic.co/t/get-role-mapping-created-with-configmaps/292097 "2021-12-16T07:39:25Z")
We are deploying Elasticsearch 7.15.2 on kubernetes. To configuring roles\_mappings, we configure configmaps with a "role-mapping.yml" file with the rights, and seem working fine. The problem is: we cant check if some rig… --- ## [Limit "Watcher" user roles rights by workspace?](https://discuss.elastic.co/t/limit-watcher-user-roles-rights-by-workspace/292100)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 7:52am UTC](https://discuss.elastic.co/t/limit-watcher-user-roles-rights-by-workspace/292100 "2021-12-16T07:52:55Z")
Hi all, there're some way to configure "watcher" rights (manage\_watcher) by workspace? because an user that only have rights into some namespace should not edit alerts from others workspaces... Thanks! --- ## [Manage error when indexing documents](https://discuss.elastic.co/t/manage-error-when-indexing-documents/292168)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 1:04am UTC](https://discuss.elastic.co/t/manage-error-when-indexing-documents/292168 "2021-12-20T01:04:46Z")
Hello, I want to know when a document is dismiss by Elasticsearch in case the mapping is configured with "dynamic : strict". So, when i send a document who got an "unknow fields" in the mapping, Elasticsearch will dism… --- ## [Calculate sum of run\_time without runtime fields?](https://discuss.elastic.co/t/calculate-sum-of-run-time-without-runtime-fields/292267)
**Author:** [@afkbrb](https://discuss.elastic.co/u/afkbrb)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 6:56am UTC](https://discuss.elastic.co/t/calculate-sum-of-run-time-without-runtime-fields/292267 "2021-12-17T06:56:28Z")
I want to get the sum of run\_time variant, by using runtime\_mapping I got mistakes. I know that it'a new feature in ES 7.12, but I can't upgrade it because it's not depend on me. So how could I get the answer without … --- ## [Where to check where the data from generated reports are saved](https://discuss.elastic.co/t/where-to-check-where-the-data-from-generated-reports-are-saved/292287)
**Author:** [@Zarzaparro](https://discuss.elastic.co/u/Zarzaparro)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:59am UTC](https://discuss.elastic.co/t/where-to-check-where-the-data-from-generated-reports-are-saved/292287 "2021-12-20T00:59:43Z")
Good Morning. I have a question. I can search and see how big are the index pattern logs that I'm receiving from ELK in Kabana and delete them if they are too big. But I have automated reports from a dashboard that giv… --- ## [Metricbeat Elasticsearch module unexpected memory usage on master](https://discuss.elastic.co/t/metricbeat-elasticsearch-module-unexpected-memory-usage-on-master/292361)
**Author:** [@Charles\_Ferguson](https://discuss.elastic.co/u/Charles_Ferguson)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 9:57pm UTC](https://discuss.elastic.co/t/metricbeat-elasticsearch-module-unexpected-memory-usage-on-master/292361 "2021-12-17T21:57:02Z")
Hello, I am having an issue with trying to configure metricbeats Elasticsearch module. The specific issue I am seeing is that I have configured a daemonset of metricbeats to collect node and nodes\_stats metrics from all … --- ## [How to reset elasticsearch inbuilt users](https://discuss.elastic.co/t/how-to-reset-elasticsearch-inbuilt-users/292351)
**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 5:36pm UTC](https://discuss.elastic.co/t/how-to-reset-elasticsearch-inbuilt-users/292351 "2021-12-17T17:36:15Z")
I have set the Elasticsearch inbuilt users using interactive method. Now i missed the password of kibana\_system user. Is there a way to reset that particular user alone? I tried with bin/elasticsearch-reset-password -u … --- ## [Interesting Use Case - Down Stream Alerting](https://discuss.elastic.co/t/interesting-use-case-down-stream-alerting/292360)
**Author:** [@tthiry](https://discuss.elastic.co/u/tthiry)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 8:26pm UTC](https://discuss.elastic.co/t/interesting-use-case-down-stream-alerting/292360 "2021-12-17T20:26:35Z")
Hello, I am relatively new to Elasticsearch and I have an interesting alerting use case. Assume I have a router with a layer of switches behind it. That layer of switches has a layer behind it and so on until we get to … --- ## [Elastic search docker image upgrade not working from elasticsearch:7.1.1 to elasticsearch:7.16.1](https://discuss.elastic.co/t/elastic-search-docker-image-upgrade-not-working-from-elasticsearch-7-1-1-to-elasticsearch-7-16-1/292380)
**Author:** [@Vivek\_Karthik](https://discuss.elastic.co/u/Vivek_Karthik)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:46am UTC](https://discuss.elastic.co/t/elastic-search-docker-image-upgrade-not-working-from-elasticsearch-7-1-1-to-elasticsearch-7-16-1/292380 "2021-12-20T00:46:55Z")
docker logs elk \[0.001s\]\[warning\]\[os,container\] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /usr/share/Elasticsearch/data/docker/overlay2/d2423a7f9ac4e46ec2d069481b10def8db07a9b348a078… --- ## [Elasticsearch-oss:6.6.2 Java Security Manager enabled by default?](https://discuss.elastic.co/t/elasticsearch-oss-6-6-2-java-security-manager-enabled-by-default/292364)
**Author:** [@tjemmettal](https://discuss.elastic.co/u/tjemmettal)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:40am UTC](https://discuss.elastic.co/t/elasticsearch-oss-6-6-2-java-security-manager-enabled-by-default/292364 "2021-12-20T00:40:22Z")
Hello, I'm trying to verify that Java Security Manager is enabled by default in oss images, particularly in: docker.elastic.co/elasticsearch/elasticsearch-oss:6.6.2 and docker.elastic.co/elasticsearch/elasticsearch-oss… --- ## [DockerHub showing Log4Shell vulnerability on supported version](https://discuss.elastic.co/t/dockerhub-showing-log4shell-vulnerability-on-supported-version/292202)
**Author:** [@cruizba](https://discuss.elastic.co/u/cruizba)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:25am UTC](https://discuss.elastic.co/t/dockerhub-showing-log4shell-vulnerability-on-supported-version/292202 "2021-12-20T00:25:21Z")
Despite official announcement saying that supported versions of Elasticsearch (6.8.9+, 7.8+) can not be exploited because of Elasticsearch’s usage of the Java Security Manager, dockerhub is showing images as "Log4Shell"… --- ## [JMSAppender used on Logstash 2.3.4 and Elasticsearch 2.3.4](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127 "2021-12-19T23:12:02Z")
Can anyone confirm whether JMSAppender is used in Logstash 2.3.4 and Elasticsearch 2.3.4 ? --- ## [Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140 "2021-12-19T23:12:53Z")
Can anyone please confirm whether Elasticsearch and Logstash versions below 5 are also impacted with Log4j vulnerability threat ? --- ## [Does Log4j vulnerability (CVE-2021-44228) is impacted for ES v7.5.2?](https://discuss.elastic.co/t/does-log4j-vulnerability-cve-2021-44228-is-impacted-for-es-v7-5-2/292128)
**Author:** [@Anuroop1](https://discuss.elastic.co/u/Anuroop1)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:17am UTC](https://discuss.elastic.co/t/does-log4j-vulnerability-cve-2021-44228-is-impacted-for-es-v7-5-2/292128 "2021-12-20T00:17:51Z")
We are using Elasticsearch v7.5.2 along with OpenJDK 11.0.11 in on-premise servers and I just need to know from Elasticsearch Team support if this version is impacted by Log4j vulnerability (CVE-2021-44228) or not. The … --- ## [Log4j in Elasticsearch prerequisites in Azure DevOps environment](https://discuss.elastic.co/t/log4j-in-elasticsearch-prerequisites-in-azure-devops-environment/292158)
**Author:** [@RJ96](https://discuss.elastic.co/u/RJ96)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:17am UTC](https://discuss.elastic.co/t/log4j-in-elasticsearch-prerequisites-in-azure-devops-environment/292158 "2021-12-20T00:17:25Z")
Hello, i am very new to the Elastic world, in fact i've started working with Elastic after the log4j security alert had happened so i am a beginner. i have a azure devops environment where i have Elasticsearch installed… --- ## [Log4Shell comprehensive fix for Elastic Search](https://discuss.elastic.co/t/log4shell-comprehensive-fix-for-elastic-search/292106)
**Author:** [@rencytl](https://discuss.elastic.co/u/rencytl)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:06am UTC](https://discuss.elastic.co/t/log4shell-comprehensive-fix-for-elastic-search/292106 "2021-12-20T00:06:38Z")
Appreciate the efforts having Log4Shell mitigated in versions 7.16.1 and 6.8.21. Is the team working towards providing a comprehensive fix for this upgrading the Log4j library to 2.16.0 version? If yes, knowing the ETA w… --- ## [Log4j vulnerability threat impact on Elasticsearch 2.3.4 and Logstash 2.3.4](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:06am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110 "2021-12-20T00:06:02Z")
Can any one please provide information on Log4j vulnerability threat impact on Elasticsearch 2.3.4 and Logstash 2.3.4. These are very old versions. If any resolution possible without upgrading the stack. --- ## [Kibana is not ready yet](https://discuss.elastic.co/t/kibana-is-not-ready-yet/292404)
**Author:** [@nNeroche](https://discuss.elastic.co/u/nNeroche)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:52pm UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet/292404 "2021-12-19T23:52:07Z")
Hi everyone, I just installed wazuh-manager on a vm, Ubuntu LTS 20.04. The problem is when I try to connect to the web page, I am getting "Kibana is not ready yet" text. I checked IP addresses on both Elasticsearch.yml… --- ## [Setup elastic-apm-agent for kafka](https://discuss.elastic.co/t/setup-elastic-apm-agent-for-kafka/291674)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 2\ **Last updated:** [December 19, 2021, 11:01pm UTC](https://discuss.elastic.co/t/setup-elastic-apm-agent-for-kafka/291674 "2021-12-19T23:01:59Z")
Hey guys, I am playing around with elastic-apm-agent. The goal is to monitor kafka. I am using the agent config given to me in Kibana: java -javaagent:/root/kafka/elastic-apm-agent-1.28.1.jar \\ -Delastic.apm.service\_n… --- ## [How to add "index.mapping.total\_fields.limit" in command prompt](https://discuss.elastic.co/t/how-to-add-index-mapping-total-fields-limit-in-command-prompt/292415)
**Author:** [@Suparna\_Shankar](https://discuss.elastic.co/u/Suparna_Shankar)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 8:51pm UTC](https://discuss.elastic.co/t/how-to-add-index-mapping-total-fields-limit-in-command-prompt/292415 "2021-12-19T20:51:29Z")
HI, am trying to add "index.mapping.total\_fields.limit" to 2000 using cmdline but getting below exception "curl -XPUT http://127.0.0.1:9200/log4j-2021.12.19/\_settings -H 'Content-Type: application/json' -d '{ "index.map… --- ## [Grok to multiline ingestion does not handle rows](https://discuss.elastic.co/t/grok-to-multiline-ingestion-does-not-handle-rows/292412)
**Author:** [@tjswe](https://discuss.elastic.co/u/tjswe)\ **Replies:** 2\ **Last updated:** [December 19, 2021, 8:17pm UTC](https://discuss.elastic.co/t/grok-to-multiline-ingestion-does-not-handle-rows/292412 "2021-12-19T20:17:56Z")
Hi! Im ingesting .txt-files containing navtex-messages (see example below). Each message comes in a separate .txt-file appearing continuously over 24h landning in a sub-directory with the current date. input { file… --- ## [Monitor if a process is running or stopped](https://discuss.elastic.co/t/monitor-if-a-process-is-running-or-stopped/292411)
**Author:** [@Kevin\_Brunette](https://discuss.elastic.co/u/Kevin_Brunette)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 6:40pm UTC](https://discuss.elastic.co/t/monitor-if-a-process-is-running-or-stopped/292411 "2021-12-19T18:40:41Z")
Hi! I'm trying to do a seemingly simple task of monitoring whether a process is running or stopped on an Ubuntu host. For example I want to know if a Java and Python based app are running or down. I'm aware there are so… --- ## [Is elasticsearch verison 7.16.2 released?](https://discuss.elastic.co/t/is-elasticsearch-verison-7-16-2-released/292390)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 2:14pm UTC](https://discuss.elastic.co/t/is-elasticsearch-verison-7-16-2-released/292390 "2021-12-19T14:14:41Z")
is version 7.16.2 released? release notes have information about version 7.16.2 but unable to find the version for download --- ## [Logstash filter CSV inside email content](https://discuss.elastic.co/t/logstash-filter-csv-inside-email-content/292244)
**Author:** [@pcpdoc02](https://discuss.elastic.co/u/pcpdoc02)\ **Replies:** 2\ **Last updated:** [December 19, 2021, 8:08am UTC](https://discuss.elastic.co/t/logstash-filter-csv-inside-email-content/292244 "2021-12-19T08:08:13Z")
I would like to use Logstash to stream CSV data in email to Elasticsearch. IMAP and CSV filter seems suitable to extract email content and parse the CSV contents respectively. How can I use both filter together to output… --- ## [Dec 19th, 2021: \[en\] Explore field level data in-depth in Discover](https://discuss.elastic.co/t/dec-19th-2021-en-explore-field-level-data-in-depth-in-discover/290507)
**Author:** [@Quynh\_Nguyen](https://discuss.elastic.co/u/Quynh_Nguyen)\ **Replies:** 0\ **Last updated:** [December 19, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2021-en-explore-field-level-data-in-depth-in-discover/290507 "2021-12-19T08:00:44Z")
Exploring and understanding your data with Kibana Discover is an important first step to taking insightful, relevant actions. The Data Visualizer inside the Machine Learning app enables you to analyze the shape of the fi… --- ## [How to make Dev tools request automatic using the Pipeline?](https://discuss.elastic.co/t/how-to-make-dev-tools-request-automatic-using-the-pipeline/292377)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [December 18, 2021, 6:14pm UTC](https://discuss.elastic.co/t/how-to-make-dev-tools-request-automatic-using-the-pipeline/292377 "2021-12-18T18:14:39Z")
Hi, I tried to create an ingest pipeline to run every time new data is ingested but unfortunately it still does not work. Here is what I have done: The create pipeline method: PUT \_ingest/pipeline/set\_place { "descri… --- ## [Escaping special characters to search for latest log4j exploit payload](https://discuss.elastic.co/t/escaping-special-characters-to-search-for-latest-log4j-exploit-payload/292369)
**Author:** [@RedInDisguise](https://discuss.elastic.co/u/RedInDisguise)\ **Replies:** 1\ **Last updated:** [December 18, 2021, 3:50pm UTC](https://discuss.elastic.co/t/escaping-special-characters-to-search-for-latest-log4j-exploit-payload/292369 "2021-12-18T15:50:37Z")
Hi all, Would anyone have ideas how to search for the latest log4j DOS exploit, example payload: "${${::-${::-$${::-j}}}}"? We are having trouble escaping the characters in a KQL search however open to a EQL search acro… [Previous page](https://discuss.elastic.co/latest.md?page=1338) [Next page](https://discuss.elastic.co/latest.md?page=1340)