# Latest **URL:** https://discuss.elastic.co/latest.md?page=1340 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1341 --- ## [Where to check where the data from generated reports are saved](https://discuss.elastic.co/t/where-to-check-where-the-data-from-generated-reports-are-saved/292287)
**Author:** [@Zarzaparro](https://discuss.elastic.co/u/Zarzaparro)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:59am UTC](https://discuss.elastic.co/t/where-to-check-where-the-data-from-generated-reports-are-saved/292287 "2021-12-20T00:59:43Z")
Good Morning. I have a question. I can search and see how big are the index pattern logs that I'm receiving from ELK in Kabana and delete them if they are too big. But I have automated reports from a dashboard that giv… --- ## [Metricbeat Elasticsearch module unexpected memory usage on master](https://discuss.elastic.co/t/metricbeat-elasticsearch-module-unexpected-memory-usage-on-master/292361)
**Author:** [@Charles\_Ferguson](https://discuss.elastic.co/u/Charles_Ferguson)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 9:57pm UTC](https://discuss.elastic.co/t/metricbeat-elasticsearch-module-unexpected-memory-usage-on-master/292361 "2021-12-17T21:57:02Z")
Hello, I am having an issue with trying to configure metricbeats Elasticsearch module. The specific issue I am seeing is that I have configured a daemonset of metricbeats to collect node and nodes\_stats metrics from all … --- ## [How to reset elasticsearch inbuilt users](https://discuss.elastic.co/t/how-to-reset-elasticsearch-inbuilt-users/292351)
**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 5:36pm UTC](https://discuss.elastic.co/t/how-to-reset-elasticsearch-inbuilt-users/292351 "2021-12-17T17:36:15Z")
I have set the Elasticsearch inbuilt users using interactive method. Now i missed the password of kibana\_system user. Is there a way to reset that particular user alone? I tried with bin/elasticsearch-reset-password -u … --- ## [Interesting Use Case - Down Stream Alerting](https://discuss.elastic.co/t/interesting-use-case-down-stream-alerting/292360)
**Author:** [@tthiry](https://discuss.elastic.co/u/tthiry)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 8:26pm UTC](https://discuss.elastic.co/t/interesting-use-case-down-stream-alerting/292360 "2021-12-17T20:26:35Z")
Hello, I am relatively new to Elasticsearch and I have an interesting alerting use case. Assume I have a router with a layer of switches behind it. That layer of switches has a layer behind it and so on until we get to … --- ## [Elastic search docker image upgrade not working from elasticsearch:7.1.1 to elasticsearch:7.16.1](https://discuss.elastic.co/t/elastic-search-docker-image-upgrade-not-working-from-elasticsearch-7-1-1-to-elasticsearch-7-16-1/292380)
**Author:** [@Vivek\_Karthik](https://discuss.elastic.co/u/Vivek_Karthik)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:46am UTC](https://discuss.elastic.co/t/elastic-search-docker-image-upgrade-not-working-from-elasticsearch-7-1-1-to-elasticsearch-7-16-1/292380 "2021-12-20T00:46:55Z")
docker logs elk \[0.001s\]\[warning\]\[os,container\] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /usr/share/Elasticsearch/data/docker/overlay2/d2423a7f9ac4e46ec2d069481b10def8db07a9b348a078… --- ## [Elasticsearch-oss:6.6.2 Java Security Manager enabled by default?](https://discuss.elastic.co/t/elasticsearch-oss-6-6-2-java-security-manager-enabled-by-default/292364)
**Author:** [@tjemmettal](https://discuss.elastic.co/u/tjemmettal)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:40am UTC](https://discuss.elastic.co/t/elasticsearch-oss-6-6-2-java-security-manager-enabled-by-default/292364 "2021-12-20T00:40:22Z")
Hello, I'm trying to verify that Java Security Manager is enabled by default in oss images, particularly in: docker.elastic.co/elasticsearch/elasticsearch-oss:6.6.2 and docker.elastic.co/elasticsearch/elasticsearch-oss… --- ## [DockerHub showing Log4Shell vulnerability on supported version](https://discuss.elastic.co/t/dockerhub-showing-log4shell-vulnerability-on-supported-version/292202)
**Author:** [@cruizba](https://discuss.elastic.co/u/cruizba)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:25am UTC](https://discuss.elastic.co/t/dockerhub-showing-log4shell-vulnerability-on-supported-version/292202 "2021-12-20T00:25:21Z")
Despite official announcement saying that supported versions of Elasticsearch (6.8.9+, 7.8+) can not be exploited because of Elasticsearch’s usage of the Java Security Manager, dockerhub is showing images as "Log4Shell"… --- ## [JMSAppender used on Logstash 2.3.4 and Elasticsearch 2.3.4](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/jmsappender-used-on-logstash-2-3-4-and-elasticsearch-2-3-4/292127 "2021-12-19T23:12:02Z")
Can anyone confirm whether JMSAppender is used in Logstash 2.3.4 and Elasticsearch 2.3.4 ? --- ## [Log4j vulnerability threat impact on Elasticsearch and Logstash versions below 5](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:12pm UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-and-logstash-versions-below-5/292140 "2021-12-19T23:12:53Z")
Can anyone please confirm whether Elasticsearch and Logstash versions below 5 are also impacted with Log4j vulnerability threat ? --- ## [Does Log4j vulnerability (CVE-2021-44228) is impacted for ES v7.5.2?](https://discuss.elastic.co/t/does-log4j-vulnerability-cve-2021-44228-is-impacted-for-es-v7-5-2/292128)
**Author:** [@Anuroop1](https://discuss.elastic.co/u/Anuroop1)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:17am UTC](https://discuss.elastic.co/t/does-log4j-vulnerability-cve-2021-44228-is-impacted-for-es-v7-5-2/292128 "2021-12-20T00:17:51Z")
We are using Elasticsearch v7.5.2 along with OpenJDK 11.0.11 in on-premise servers and I just need to know from Elasticsearch Team support if this version is impacted by Log4j vulnerability (CVE-2021-44228) or not. The … --- ## [Log4j in Elasticsearch prerequisites in Azure DevOps environment](https://discuss.elastic.co/t/log4j-in-elasticsearch-prerequisites-in-azure-devops-environment/292158)
**Author:** [@RJ96](https://discuss.elastic.co/u/RJ96)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:17am UTC](https://discuss.elastic.co/t/log4j-in-elasticsearch-prerequisites-in-azure-devops-environment/292158 "2021-12-20T00:17:25Z")
Hello, i am very new to the Elastic world, in fact i've started working with Elastic after the log4j security alert had happened so i am a beginner. i have a azure devops environment where i have Elasticsearch installed… --- ## [Log4Shell comprehensive fix for Elastic Search](https://discuss.elastic.co/t/log4shell-comprehensive-fix-for-elastic-search/292106)
**Author:** [@rencytl](https://discuss.elastic.co/u/rencytl)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:06am UTC](https://discuss.elastic.co/t/log4shell-comprehensive-fix-for-elastic-search/292106 "2021-12-20T00:06:38Z")
Appreciate the efforts having Log4Shell mitigated in versions 7.16.1 and 6.8.21. Is the team working towards providing a comprehensive fix for this upgrading the Log4j library to 2.16.0 version? If yes, knowing the ETA w… --- ## [Log4j vulnerability threat impact on Elasticsearch 2.3.4 and Logstash 2.3.4](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110)
**Author:** [@angshuman.ray](https://discuss.elastic.co/u/angshuman.ray)\ **Replies:** 1\ **Last updated:** [December 20, 2021, 12:06am UTC](https://discuss.elastic.co/t/log4j-vulnerability-threat-impact-on-elasticsearch-2-3-4-and-logstash-2-3-4/292110 "2021-12-20T00:06:02Z")
Can any one please provide information on Log4j vulnerability threat impact on Elasticsearch 2.3.4 and Logstash 2.3.4. These are very old versions. If any resolution possible without upgrading the stack. --- ## [Kibana is not ready yet](https://discuss.elastic.co/t/kibana-is-not-ready-yet/292404)
**Author:** [@nNeroche](https://discuss.elastic.co/u/nNeroche)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 11:52pm UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet/292404 "2021-12-19T23:52:07Z")
Hi everyone, I just installed wazuh-manager on a vm, Ubuntu LTS 20.04. The problem is when I try to connect to the web page, I am getting "Kibana is not ready yet" text. I checked IP addresses on both Elasticsearch.yml… --- ## [Setup elastic-apm-agent for kafka](https://discuss.elastic.co/t/setup-elastic-apm-agent-for-kafka/291674)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 2\ **Last updated:** [December 19, 2021, 11:01pm UTC](https://discuss.elastic.co/t/setup-elastic-apm-agent-for-kafka/291674 "2021-12-19T23:01:59Z")
Hey guys, I am playing around with elastic-apm-agent. The goal is to monitor kafka. I am using the agent config given to me in Kibana: java -javaagent:/root/kafka/elastic-apm-agent-1.28.1.jar \\ -Delastic.apm.service\_n… --- ## [How to add "index.mapping.total\_fields.limit" in command prompt](https://discuss.elastic.co/t/how-to-add-index-mapping-total-fields-limit-in-command-prompt/292415)
**Author:** [@Suparna\_Shankar](https://discuss.elastic.co/u/Suparna_Shankar)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 8:51pm UTC](https://discuss.elastic.co/t/how-to-add-index-mapping-total-fields-limit-in-command-prompt/292415 "2021-12-19T20:51:29Z")
HI, am trying to add "index.mapping.total\_fields.limit" to 2000 using cmdline but getting below exception "curl -XPUT http://127.0.0.1:9200/log4j-2021.12.19/\_settings -H 'Content-Type: application/json' -d '{ "index.map… --- ## [Grok to multiline ingestion does not handle rows](https://discuss.elastic.co/t/grok-to-multiline-ingestion-does-not-handle-rows/292412)
**Author:** [@tjswe](https://discuss.elastic.co/u/tjswe)\ **Replies:** 2\ **Last updated:** [December 19, 2021, 8:17pm UTC](https://discuss.elastic.co/t/grok-to-multiline-ingestion-does-not-handle-rows/292412 "2021-12-19T20:17:56Z")
Hi! Im ingesting .txt-files containing navtex-messages (see example below). Each message comes in a separate .txt-file appearing continuously over 24h landning in a sub-directory with the current date. input { file… --- ## [Monitor if a process is running or stopped](https://discuss.elastic.co/t/monitor-if-a-process-is-running-or-stopped/292411)
**Author:** [@Kevin\_Brunette](https://discuss.elastic.co/u/Kevin_Brunette)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 6:40pm UTC](https://discuss.elastic.co/t/monitor-if-a-process-is-running-or-stopped/292411 "2021-12-19T18:40:41Z")
Hi! I'm trying to do a seemingly simple task of monitoring whether a process is running or stopped on an Ubuntu host. For example I want to know if a Java and Python based app are running or down. I'm aware there are so… --- ## [Is elasticsearch verison 7.16.2 released?](https://discuss.elastic.co/t/is-elasticsearch-verison-7-16-2-released/292390)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [December 19, 2021, 2:14pm UTC](https://discuss.elastic.co/t/is-elasticsearch-verison-7-16-2-released/292390 "2021-12-19T14:14:41Z")
is version 7.16.2 released? release notes have information about version 7.16.2 but unable to find the version for download --- ## [Logstash filter CSV inside email content](https://discuss.elastic.co/t/logstash-filter-csv-inside-email-content/292244)
**Author:** [@pcpdoc02](https://discuss.elastic.co/u/pcpdoc02)\ **Replies:** 2\ **Last updated:** [December 19, 2021, 8:08am UTC](https://discuss.elastic.co/t/logstash-filter-csv-inside-email-content/292244 "2021-12-19T08:08:13Z")
I would like to use Logstash to stream CSV data in email to Elasticsearch. IMAP and CSV filter seems suitable to extract email content and parse the CSV contents respectively. How can I use both filter together to output… --- ## [Dec 19th, 2021: \[en\] Explore field level data in-depth in Discover](https://discuss.elastic.co/t/dec-19th-2021-en-explore-field-level-data-in-depth-in-discover/290507)
**Author:** [@Quynh\_Nguyen](https://discuss.elastic.co/u/Quynh_Nguyen)\ **Replies:** 0\ **Last updated:** [December 19, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-19th-2021-en-explore-field-level-data-in-depth-in-discover/290507 "2021-12-19T08:00:44Z")
Exploring and understanding your data with Kibana Discover is an important first step to taking insightful, relevant actions. The Data Visualizer inside the Machine Learning app enables you to analyze the shape of the fi… --- ## [How to make Dev tools request automatic using the Pipeline?](https://discuss.elastic.co/t/how-to-make-dev-tools-request-automatic-using-the-pipeline/292377)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [December 18, 2021, 6:14pm UTC](https://discuss.elastic.co/t/how-to-make-dev-tools-request-automatic-using-the-pipeline/292377 "2021-12-18T18:14:39Z")
Hi, I tried to create an ingest pipeline to run every time new data is ingested but unfortunately it still does not work. Here is what I have done: The create pipeline method: PUT \_ingest/pipeline/set\_place { "descri… --- ## [Escaping special characters to search for latest log4j exploit payload](https://discuss.elastic.co/t/escaping-special-characters-to-search-for-latest-log4j-exploit-payload/292369)
**Author:** [@RedInDisguise](https://discuss.elastic.co/u/RedInDisguise)\ **Replies:** 1\ **Last updated:** [December 18, 2021, 3:50pm UTC](https://discuss.elastic.co/t/escaping-special-characters-to-search-for-latest-log4j-exploit-payload/292369 "2021-12-18T15:50:37Z")
Hi all, Would anyone have ideas how to search for the latest log4j DOS exploit, example payload: "${${::-${::-$${::-j}}}}"? We are having trouble escaping the characters in a KQL search however open to a EQL search acro… --- ## [No results when searching by a null value](https://discuss.elastic.co/t/no-results-when-searching-by-a-null-value/292385)
**Author:** [@AlexBulls20](https://discuss.elastic.co/u/AlexBulls20)\ **Replies:** 1\ **Last updated:** [December 18, 2021, 3:23pm UTC](https://discuss.elastic.co/t/no-results-when-searching-by-a-null-value/292385 "2021-12-18T15:23:15Z")
I'm trying to fill some value for an autocomplete search box and I had this old code (from Elasticsearch 1.5) and I want to implement it into Elasticsearch 7.16 When I use this sentence curl -H 'Content-Type: applicati… --- ## [Dec 18th, 2021: \[en\] Crawling content from private network environments using a Crawler deployed on Elastic Cloud](https://discuss.elastic.co/t/dec-18th-2021-en-crawling-content-from-private-network-environments-using-a-crawler-deployed-on-elastic-cloud/290493)
**Author:** [@oleksiy-elastic](https://discuss.elastic.co/u/oleksiy-elastic)\ **Replies:** 0\ **Last updated:** [December 18, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-18th-2021-en-crawling-content-from-private-network-environments-using-a-crawler-deployed-on-elastic-cloud/290493 "2021-12-18T08:00:33Z")
Enterprise Search Crawler offers App Search users a powerful ingestion mechanism. Users can index any content available through an HTTP interface and build powerful search experiences without having to write any code to … --- ## [\#! Deprecation: \[types removal\] Specifying types in a watcher index action is deprecated](https://discuss.elastic.co/t/deprecation-types-removal-specifying-types-in-a-watcher-index-action-is-deprecated/291815)
**Author:** [@DoDuyen162000](https://discuss.elastic.co/u/DoDuyen162000)\ **Replies:** 2\ **Last updated:** [December 18, 2021, 4:47am UTC](https://discuss.elastic.co/t/deprecation-types-removal-specifying-types-in-a-watcher-index-action-is-deprecated/291815 "2021-12-18T04:47:22Z")
I'm having trouble creating a watcher. I don't know what I was wrong about? Here's my fault: --- ## [Issector mapping, pattern not found error in Logstash](https://discuss.elastic.co/t/issector-mapping-pattern-not-found-error-in-logstash/292226)
**Author:** [@arunpmohan](https://discuss.elastic.co/u/arunpmohan)\ **Replies:** 2\ **Last updated:** [December 18, 2021, 1:45am UTC](https://discuss.elastic.co/t/issector-mapping-pattern-not-found-error-in-logstash/292226 "2021-12-18T01:45:07Z")
I have an log message which I split using grok and then use an if conditional to parse a field using dissect filter. But it is giving me Dissector mapping, pattern not found error. I tried the dissect pattern with http… --- ## [Heartbeat Browser Monitor Zip URL: not a valid zip file](https://discuss.elastic.co/t/heartbeat-browser-monitor-zip-url-not-a-valid-zip-file/292222)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 9\ **Last updated:** [December 18, 2021, 12:23am UTC](https://discuss.elastic.co/t/heartbeat-browser-monitor-zip-url-not-a-valid-zip-file/292222 "2021-12-18T00:23:42Z")
Hi, I'm trying to use the Heartbeat Browser monitor with the Zip URL source, but am running into a weird issue. Has anyone gotten Zip URL to work with GitLab zip urls? I get the following error when Heartbeat tries to… --- ## [Is index\_prefixes intended to be used with text fields only?](https://discuss.elastic.co/t/is-index-prefixes-intended-to-be-used-with-text-fields-only/292366)
**Author:** [@mp3000](https://discuss.elastic.co/u/mp3000)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 11:07pm UTC](https://discuss.elastic.co/t/is-index-prefixes-intended-to-be-used-with-text-fields-only/292366 "2021-12-17T23:07:31Z")
Hello, It seems index\_prefixes mapping parameter is only available for text fields but it is not really obvious in the doc. Why this parameter is not available for keyword fields ? Is it because the performance on sma… --- ## [SearchBox AutoComplete throws unhandled rejection error](https://discuss.elastic.co/t/searchbox-autocomplete-throws-unhandled-rejection-error/291895)
**Author:** [@Mecadamia.nut](https://discuss.elastic.co/u/Mecadamia.nut)\ **Replies:** 3\ **Last updated:** [December 17, 2021, 9:23pm UTC](https://discuss.elastic.co/t/searchbox-autocomplete-throws-unhandled-rejection-error/291895 "2021-12-17T21:23:35Z")
I'm using the searchbox and i'm getting below error for the code below. what am i missing? Unhandled Rejection (TypeError): Cannot read properties of undefined (reading 'request\_id') (anonymous function) C:/workspaces… [Previous page](https://discuss.elastic.co/latest.md?page=1339) [Next page](https://discuss.elastic.co/latest.md?page=1341)