# Latest **URL:** https://discuss.elastic.co/latest.md?page=1555 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1556 --- ## [Manual delete of indices on elastic search not freeing up space](https://discuss.elastic.co/t/manual-delete-of-indices-on-elastic-search-not-freeing-up-space/279686)
**Author:** [@save4elastic](https://discuss.elastic.co/u/save4elastic)\ **Replies:** 2\ **Last updated:** [July 27, 2021, 5:47am UTC](https://discuss.elastic.co/t/manual-delete-of-indices-on-elastic-search-not-freeing-up-space/279686 "2021-07-27T05:47:37Z")
I have 2TB of indices. It just hit the flood stage watermark. I resolved this via CURL and now it allows manually deleting some indices. It removes them from Kibana, etc. I can delete it via curl or Kibana and it is ackn… --- ## [Database query time in span is calculated incorrectly](https://discuss.elastic.co/t/database-query-time-in-span-is-calculated-incorrectly/279260)
**Author:** [@kbalys](https://discuss.elastic.co/u/kbalys)\ **Replies:** 1\ **Last updated:** [July 27, 2021, 4:54am UTC](https://discuss.elastic.co/t/database-query-time-in-span-is-calculated-incorrectly/279260 "2021-07-27T04:54:40Z")
Hi, when I am using APM agent with Dapper I think the execution time for sql query is calculated incorrectly. APM Server version: 7.13.3 APM Agent language and version: dotnet core 1.7.1 Description of the problem in… --- ## [External SSL for inter-node communication](https://discuss.elastic.co/t/external-ssl-for-inter-node-communication/279662)
**Author:** [@mesudip](https://discuss.elastic.co/u/mesudip)\ **Replies:** 1\ **Last updated:** [July 27, 2021, 3:29am UTC](https://discuss.elastic.co/t/external-ssl-for-inter-node-communication/279662 "2021-07-27T03:29:23Z")
Hi, I am on elasticsearch-7.13, and for rules section I am getting message " You must enable Transport Layer Security between Elasticsearch and kibana". I've enabled SSL with let'sencrypt certificate on a nginx revers… --- ## [Palo Alto (a.k.a. panos or panw) Filebeat Compatibility with Palo Alto Version 10.1?](https://discuss.elastic.co/t/palo-alto-a-k-a-panos-or-panw-filebeat-compatibility-with-palo-alto-version-10-1/279661)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 2\ **Last updated:** [July 27, 2021, 1:28am UTC](https://discuss.elastic.co/t/palo-alto-a-k-a-panos-or-panw-filebeat-compatibility-with-palo-alto-version-10-1/279661 "2021-07-27T01:28:21Z")
Hi, I was tasked with ingesting logs from Palo Alto 10.1. In my testbed, everything worked great when using the sample logs (beats/x-pack/filebeat/module/panw/panos/test at 877d8bcd176b2f5d4efd2a81846a481b94798b49 · elas… --- ## [Split string by newline to Logstash](https://discuss.elastic.co/t/split-string-by-newline-to-logstash/279620)
**Author:** [@esther90](https://discuss.elastic.co/u/esther90)\ **Replies:** 2\ **Last updated:** [July 27, 2021, 1:23am UTC](https://discuss.elastic.co/t/split-string-by-newline-to-logstash/279620 "2021-07-27T01:23:27Z")
\[2021-07-26 12:09:19.877 +08\] \[pgAdmin 4 - DB:testdatabase\] \[postgres\]-\[testdatabase\]-\[::1(57223)\] \[\] \[00000\]LOG: disconnection: session time: 0:00:00.218 user=postgres database=testdatabase host=::1 port=57223 \[2021-07… --- ## [Securing connection between Beats and Elastic Cloud](https://discuss.elastic.co/t/securing-connection-between-beats-and-elastic-cloud/279274)
**Author:** [@mi\_uber\_alles](https://discuss.elastic.co/u/mi_uber_alles)\ **Replies:** 4\ **Last updated:** [July 27, 2021, 1:25am UTC](https://discuss.elastic.co/t/securing-connection-between-beats-and-elastic-cloud/279274 "2021-07-27T01:25:48Z")
Hi All, Recently started using Elastic Cloud and it works fine. I have a Filebeat instance in a private network and it sends data to my deployment through the Internet. My question is, is there any way to make this data… --- ## [プロセス毎のCPU/メモリ使用率でのjavaプロセスの詳細化](https://discuss.elastic.co/t/cpu-java/279679)
**Author:** [@K.taka99](https://discuss.elastic.co/u/K.taka99)\ **Replies:** 0\ **Last updated:** [July 27, 2021, 1:18am UTC](https://discuss.elastic.co/t/cpu-java/279679 "2021-07-27T01:18:05Z")
表題の通り、プロセス毎のCPU/メモリ使用率をグラフ化しているのですが、 javaプロセスに関しては「java」としか表示されなく悩んでいます。 JVM名で表示させる方法をご存じの方はいらっしゃいませんか？ 現状の設定は以下の通りです。 Index：metricbeatｰ\* Data Metrics Y-axis Aggregation：Max Field：system.process.cpu.total.pct B… --- ## [Change index name in winlogbeat](https://discuss.elastic.co/t/change-index-name-in-winlogbeat/279625)
**Author:** [@witkacy](https://discuss.elastic.co/u/witkacy)\ **Replies:** 3\ **Last updated:** [July 27, 2021, 1:03am UTC](https://discuss.elastic.co/t/change-index-name-in-winlogbeat/279625 "2021-07-27T01:03:06Z")
Hello, How can I change default name of Elasticsearch index in winlogbeat configuration? I tried this but with no success: winlogbeat.event\_logs: - name: MY-Log ignore\_older: 1h processors: - decode\_xm… --- ## [Index value to be used across different index patterns](https://discuss.elastic.co/t/index-value-to-be-used-across-different-index-patterns/279676)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 1\ **Last updated:** [July 27, 2021, 12:39am UTC](https://discuss.elastic.co/t/index-value-to-be-used-across-different-index-patterns/279676 "2021-07-27T00:39:39Z")
Hi, I understand that if you have a dashboard with multiple index patterns. If you use the search field and apply filter to any of the fields; if that field exists in other indices too it will apply that filter i.e. se… --- ## [Mssql all requests](https://discuss.elastic.co/t/mssql-all-requests/279648)
**Author:** [@Sergey\_Zaguba](https://discuss.elastic.co/u/Sergey_Zaguba)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 11:41pm UTC](https://discuss.elastic.co/t/mssql-all-requests/279648 "2021-07-26T23:41:38Z")
I have a Windows server with MsSQL + filebeat. I want to see in ELK all requests that are sent to all databases. Please tell me how best to do this. I have activated the mssql module in filebeat, but I still only get the… --- ## [Error](https://discuss.elastic.co/t/error/279225)
**Author:** [@TusharGarg](https://discuss.elastic.co/u/TusharGarg)\ **Replies:** 7\ **Last updated:** [July 26, 2021, 11:12pm UTC](https://discuss.elastic.co/t/error/279225 "2021-07-26T23:12:09Z")
C:\\Program Files\\Filebeat\> .\\filebeat.exe setup Start-Service filebeat Index setup finished. Loading dashboards (Kibana must be running and reachable) Exiting: error connecting to Kibana: fail to get the Kibana ver… --- ## [Cannot update parameter analyzer from autocomplete to default](https://discuss.elastic.co/t/cannot-update-parameter-analyzer-from-autocomplete-to-default/277257)
**Author:** [@Luiz\_Firmino](https://discuss.elastic.co/u/Luiz_Firmino)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 11:04pm UTC](https://discuss.elastic.co/t/cannot-update-parameter-analyzer-from-autocomplete-to-default/277257 "2021-07-26T23:04:21Z")
Hello all, I have no prior knowledge on ES and I'm trying to make an old code written for elasticsearch 6.5 to work on the 7.3 version. So far I got the code updated and running however I can't understand why during re-… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/279624)
**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 11:03pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/279624 "2021-07-26T23:03:46Z")
Hi all. I have been running ELK for a few months now version 7.12.0. I tried to log on today with username elastic and my browser saved password and it would not let me. I restarted the server but I cannot get to the log… --- ## [Kibana Scripted field : Not able to parse the String to Double/Int](https://discuss.elastic.co/t/kibana-scripted-field-not-able-to-parse-the-string-to-double-int/279590)
**Author:** [@Rohit\_Dwivedi](https://discuss.elastic.co/u/Rohit_Dwivedi)\ **Replies:** 0\ **Last updated:** [July 26, 2021, 5:24am UTC](https://discuss.elastic.co/t/kibana-scripted-field-not-able-to-parse-the-string-to-double-int/279590 "2021-07-26T05:24:44Z")
I am getting one weired error. I have field called no\_of\_scanned value which is String in Kibana The data look like 1234 4567 etc I cant do some aggregation so trying to convert this into int/double . SO I created a s… --- ## [Possible to have a health check url without authentication](https://discuss.elastic.co/t/possible-to-have-a-health-check-url-without-authentication/279564)
**Author:** [@f1outsourcing](https://discuss.elastic.co/u/f1outsourcing)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 10:04pm UTC](https://discuss.elastic.co/t/possible-to-have-a-health-check-url-without-authentication/279564 "2021-07-26T22:04:50Z")
My container monitoring environment does not allow me to specify username and password for the health check url option. Is it possible to disable this for a specific url or 127.0.0.1 still having the xpack.security.enab… --- ## [What this query mean?](https://discuss.elastic.co/t/what-this-query-mean/279669)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 0\ **Last updated:** [July 26, 2021, 9:49pm UTC](https://discuss.elastic.co/t/what-this-query-mean/279669 "2021-07-26T21:49:20Z")
I've inherited a project with the following query: POST listings/\_search { "aggs": { "gridcells": { "aggs": { "latlons": { "aggs": { "latStats": { "stats": { … --- ## [Am I the only one who hates the Kibana 7 UX changes (date picker, filters)?](https://discuss.elastic.co/t/am-i-the-only-one-who-hates-the-kibana-7-ux-changes-date-picker-filters/279470)
**Author:** [@ThiefMaster](https://discuss.elastic.co/u/ThiefMaster)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 9:35pm UTC](https://discuss.elastic.co/t/am-i-the-only-one-who-hates-the-kibana-7-ux-changes-date-picker-filters/279470 "2021-07-26T21:35:56Z")
Am I the only one who hates the Kibana 7 UX changes (date picker, filters)? Filters In Kibana 6 the next field automatically focused, which made entering filters really quick - I could even press ENTER to confirm the fi… --- ## [Sound alert in kibana](https://discuss.elastic.co/t/sound-alert-in-kibana/279589)
**Author:** [@ranjan.regmi](https://discuss.elastic.co/u/ranjan.regmi)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 9:12pm UTC](https://discuss.elastic.co/t/sound-alert-in-kibana/279589 "2021-07-26T21:12:43Z")
Can we hvae any sound notification in kibana? --- ## [Kibana Unhealthy / Cannot terminate instance (Elastic Cloud)](https://discuss.elastic.co/t/kibana-unhealthy-cannot-terminate-instance-elastic-cloud/279619)
**Author:** [@MadMapMan](https://discuss.elastic.co/u/MadMapMan)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 8:53pm UTC](https://discuss.elastic.co/t/kibana-unhealthy-cannot-terminate-instance-elastic-cloud/279619 "2021-07-26T20:53:54Z")
Hi Community, I've logged the following as a (critical) support request, but perhaps someone can assist. I have an elastic.co hosted service where Kibana (v7.12.0) went unhealthy and will not restart. Even though I am… --- ## [Search data multiple ip address](https://discuss.elastic.co/t/search-data-multiple-ip-address/279640)
**Author:** [@ratheeshp](https://discuss.elastic.co/u/ratheeshp)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 8:48pm UTC](https://discuss.elastic.co/t/search-data-multiple-ip-address/279640 "2021-07-26T20:48:49Z")
Hi, I'm trying to get data based on my ip search 10.88.143/144/145/146/147/148.. is it possible search using regex like 10.88.14\[3-8\]. or what is the best of searching this. --- ## [How to replace objects in documents?](https://discuss.elastic.co/t/how-to-replace-objects-in-documents/279657)
**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 7:15pm UTC](https://discuss.elastic.co/t/how-to-replace-objects-in-documents/279657 "2021-07-26T19:15:32Z")
This may be a bug, but if not it's undocumented behavior (see Object field type). I accidentally created some objects with properties I don't want them to have, and I need to remove them. The object is dynamic and looks … --- ## [Log Rotate Elastic Endpoint Windows](https://discuss.elastic.co/t/log-rotate-elastic-endpoint-windows/279635)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 6:50pm UTC](https://discuss.elastic.co/t/log-rotate-elastic-endpoint-windows/279635 "2021-07-26T18:50:23Z")
Hello there, I would like to know if there´s any way to control the logs rotate using fleet admin page?? Or even throught the fleet policies??? I´m getting too many unexpected logs on the C:\\Program Files\\Elastic\\Endpoi… --- ## [Filebeat converting special character into unicode value when loading into kafka](https://discuss.elastic.co/t/filebeat-converting-special-character-into-unicode-value-when-loading-into-kafka/279548)
**Author:** [@venkataraman](https://discuss.elastic.co/u/venkataraman)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 5:26pm UTC](https://discuss.elastic.co/t/filebeat-converting-special-character-into-unicode-value-when-loading-into-kafka/279548 "2021-07-26T17:26:40Z")
Hello Everyone, I am trying to load data into kafka topic through filebeat. The major issue I am facing is, filebeat is converting special character (&) into Unicode value (\\u0026) when loading into kafka topic output. … --- ## [Migrate kibana 7.11.1 to 7.12.0](https://discuss.elastic.co/t/migrate-kibana-7-11-1-to-7-12-0/279484)
**Author:** [@es1thelita](https://discuss.elastic.co/u/es1thelita)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 5:16pm UTC](https://discuss.elastic.co/t/migrate-kibana-7-11-1-to-7-12-0/279484 "2021-07-26T17:16:52Z")
I upgrade kibana from 7.11.1 to 7.12.0 the process has been finished the index has green status and I have access to kibana but I check .kibana\_task\_manager\_7.12.0\_001 index and looks like it still reindex health status… --- ## [Загрузка файлов с помощью Ingest attachment plugin](https://discuss.elastic.co/t/ingest-attachment-plugin/279297)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 9\ **Last updated:** [July 26, 2021, 5:11pm UTC](https://discuss.elastic.co/t/ingest-attachment-plugin/279297 "2021-07-26T17:11:53Z")
Доброго времени суток. Использую версию ES 7.13 на Centos 7 + Ingest attachment плагин. Вопрос такой: возможно ли используя данный плагин брать файлы с сетевой папки windows, вытягивать из них текст (файлы .doc, .do… --- ## [Benchmarking cluster with rally](https://discuss.elastic.co/t/benchmarking-cluster-with-rally/279475)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 5:09pm UTC](https://discuss.elastic.co/t/benchmarking-cluster-with-rally/279475 "2021-07-26T17:09:37Z")
Hello, I have set a development cluster with 3 master Nodes, 2 hot data nodes and 1 warm node, and I wanted to benchmark it to reproduce results which looks like the results got in here : Benchmarking and sizing your E… --- ## [Why is first index creation each day slower?](https://discuss.elastic.co/t/why-is-first-index-creation-each-day-slower/279096)
**Author:** [@lbarker\_q](https://discuss.elastic.co/u/lbarker_q)\ **Replies:** 6\ **Last updated:** [July 26, 2021, 4:54pm UTC](https://discuss.elastic.co/t/why-is-first-index-creation-each-day-slower/279096 "2021-07-26T16:54:19Z")
Hello On various Elasticsearch deployments I am finding that the first time I create a document in a new index each day (or at least in a long period of time) the response time is much higher. In these cases the total r… --- ## [Matching yyyy-MM-dd HH:mm:ss.SSSZ in a logstash filter](https://discuss.elastic.co/t/matching-yyyy-mm-dd-hhss-sssz-in-a-logstash-filter/279643)
**Author:** [@mshwf](https://discuss.elastic.co/u/mshwf)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 3:10pm UTC](https://discuss.elastic.co/t/matching-yyyy-mm-dd-hhss-sssz-in-a-logstash-filter/279643 "2021-07-26T15:10:26Z")
I'm trying to extract some fields from this log entry: 2021-07-26 16:45:59.4640|0|WARN|LoggerTestASP.Controllers.WeatherForecastController|NEW\_FROM\_NLOG: 67b9de16-47a1-4308-a163-263f5f06e841, Hola Pola, 11/26/2017 16:45… --- ## [How to read custom log files using filebeat](https://discuss.elastic.co/t/how-to-read-custom-log-files-using-filebeat/276386)
**Author:** [@robertashok](https://discuss.elastic.co/u/robertashok)\ **Replies:** 12\ **Last updated:** [July 26, 2021, 3:00pm UTC](https://discuss.elastic.co/t/how-to-read-custom-log-files-using-filebeat/276386 "2021-07-26T15:00:18Z")
I have following TCS.log in seperate folder 2021/06/13 17:58:42 : INFO | Stock = TCS.NS, Date = 2002-08-12 2021/06/13 17:58:42 : INFO | Volume=212976 2021/06/13 17:58:42 : INFO | Low=38.724998474121094 2021… --- ## [Kafka Input - avro https schema\_registry\_url: unable to find valid certification path to requested target](https://discuss.elastic.co/t/kafka-input-avro-https-schema-registry-url-unable-to-find-valid-certification-path-to-requested-target/278438)
**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\ **Replies:** 5\ **Last updated:** [July 26, 2021, 3:09pm UTC](https://discuss.elastic.co/t/kafka-input-avro-https-schema-registry-url-unable-to-find-valid-certification-path-to-requested-target/278438 "2021-07-26T15:09:48Z")
Hi friends, Logstash version is 7.11.1 I am having trouble consuming messages from a kafka that uses confluent avro. I can't seem to connect to an https schema registry. Here is my config : input { kafka { … [Previous page](https://discuss.elastic.co/latest.md?page=1554) [Next page](https://discuss.elastic.co/latest.md?page=1556)