# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1808

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1809

---

## [Transport response handler not found of id \[1\]](https://discuss.elastic.co/t/transport-response-handler-not-found-of-id-1/264418)

<div class="topic-metadata">

**Author:** [@admin\_labs](https://discuss.elastic.co/u/admin_labs)\
**Replies:** 2\
**Last updated:** [March 2, 2021, 7:26am UTC](https://discuss.elastic.co/t/transport-response-handler-not-found-of-id-1/264418 "2021-03-02T07:26:20Z")

</div>

Hey there, We are being haunted by this Warning/error " Transport response handler not found of id \[1\]" from the past week., can someone please help us explain and resolve this issue. we are running elasticsearch as a …

---

## [Blocked in Pushing flush onto pipeline](https://discuss.elastic.co/t/blocked-in-pushing-flush-onto-pipeline/265911)

<div class="topic-metadata">

**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\
**Replies:** 0\
**Last updated:** [March 2, 2021, 7:25am UTC](https://discuss.elastic.co/t/blocked-in-pushing-flush-onto-pipeline/265911 "2021-03-02T07:25:58Z")

</div>

this my logstash.conf i want to drop all lines that begin with "(" into message but logstash is not showing the data in the console and is not sending it to logstash. input { beats { port =\> …

---

## [Disable logging and metrics in elastic cloud](https://discuss.elastic.co/t/disable-logging-and-metrics-in-elastic-cloud/265906)

<div class="topic-metadata">

**Author:** [@cbernet](https://discuss.elastic.co/u/cbernet)\
**Replies:** 1\
**Last updated:** [March 2, 2021, 7:17am UTC](https://discuss.elastic.co/t/disable-logging-and-metrics-in-elastic-cloud/265906 "2021-03-02T07:17:11Z")

</div>

Hello, I've enabled logging and metrics on elastic cloud, and now I would like to disable it entirely. But I can't find a way to do this. If I uncheck the shipment of both logs and metrics, the save button gets greyed ou…

---

## [Rally does not finish a race (only prepare)](https://discuss.elastic.co/t/rally-does-not-finish-a-race-only-prepare/265530)

<div class="topic-metadata">

**Author:** [@LuisSchaefer](https://discuss.elastic.co/u/LuisSchaefer)\
**Replies:** 6\
**Last updated:** [March 2, 2021, 6:47am UTC](https://discuss.elastic.co/t/rally-does-not-finish-a-race-only-prepare/265530 "2021-03-02T06:47:16Z")

</div>

Hi guys, I am using Rally 1.4.1, Linux RHEL 7.9, offline. If I start a race it prepares the race and that is it. My Input: esrally --target-hosts=localhost:9200 --client-options="basic\_auth\_user:'elastic',basic\_auth\_p…

---

## [Building Elasticsearch Project](https://discuss.elastic.co/t/building-elasticsearch-project/265794)

<div class="topic-metadata">

**Author:** [@duck](https://discuss.elastic.co/u/duck)\
**Replies:** 3\
**Last updated:** [March 2, 2021, 6:42am UTC](https://discuss.elastic.co/t/building-elasticsearch-project/265794 "2021-03-02T06:42:29Z")

</div>

Hi, I'm building a metrics and logging user actions system for my project(an online game). I've just started to learning Elasticsearch. Therefore, there are some questions in my mind. I'm planning to use logging almost e…

---

## [Search a string using logstash](https://discuss.elastic.co/t/search-a-string-using-logstash/265607)

<div class="topic-metadata">

**Author:** [@Rabin\_Bhattacharya](https://discuss.elastic.co/u/Rabin_Bhattacharya)\
**Replies:** 9\
**Last updated:** [March 2, 2021, 6:29am UTC](https://discuss.elastic.co/t/search-a-string-using-logstash/265607 "2021-03-02T06:29:04Z")

</div>

Hi, We have a requirement to parse a XML ( XML2) which is available as a string within a XML( XML1) document. I was able to parse the XML1 using xml filter in logstash. Please help to parse /search a particular string w…

---

## [Curator not deleting indices with multiple domain](https://discuss.elastic.co/t/curator-not-deleting-indices-with-multiple-domain/264295)

<div class="topic-metadata">

**Author:** [@Pawan](https://discuss.elastic.co/u/Pawan)\
**Replies:** 2\
**Last updated:** [March 2, 2021, 5:06am UTC](https://discuss.elastic.co/t/curator-not-deleting-indices-with-multiple-domain/264295 "2021-03-02T05:06:22Z")

</div>

Hi, I have created curator and deleting indices on multi-domain but it getting failed. Error: curator --config curator.yml delete\_indices.yml 2021-02-15 15:41:16,450 INFO Preparing Action ID: 1, "delete\_indic…

---

## [Query specific fields and field value must contains a value in nodejs](https://discuss.elastic.co/t/query-specific-fields-and-field-value-must-contains-a-value-in-nodejs/265896)

<div class="topic-metadata">

**Author:** [@pakwai122](https://discuss.elastic.co/u/pakwai122)\
**Replies:** 0\
**Last updated:** [March 2, 2021, 4:16am UTC](https://discuss.elastic.co/t/query-specific-fields-and-field-value-must-contains-a-value-in-nodejs/265896 "2021-03-02T04:16:42Z")

</div>

I'm using nodejs as the client slide to build a simple search engine with Elasticsearch my index has the following fields "id": "75199", "FoodID": "123", "FoodCode": "F123", "FoodNumber": "F567", "DisplayName": "food f…

---

## [Issue while restoring elasticsearch data](https://discuss.elastic.co/t/issue-while-restoring-elasticsearch-data/265780)

<div class="topic-metadata">

**Author:** [@tiwariak1992](https://discuss.elastic.co/u/tiwariak1992)\
**Replies:** 10\
**Last updated:** [March 2, 2021, 4:32am UTC](https://discuss.elastic.co/t/issue-while-restoring-elasticsearch-data/265780 "2021-03-02T04:32:29Z")

</div>

Hi Everyone, I am having issue while restoring the ES snapshot. I am facing snapshot restore exception error. But I have my snapshots while I do the backup. Not able to find out why it is happening. I am using ES 6.8. …

---

## [Limit the max document size after ingest pipeline](https://discuss.elastic.co/t/limit-the-max-document-size-after-ingest-pipeline/265892)

<div class="topic-metadata">

**Author:** [@Crazedpeanut](https://discuss.elastic.co/u/Crazedpeanut)\
**Replies:** 6\
**Last updated:** [March 2, 2021, 4:32am UTC](https://discuss.elastic.co/t/limit-the-max-document-size-after-ingest-pipeline/265892 "2021-03-02T04:32:05Z")

</div>

Is there way way to limit the size of a document after an ingest pipeline has processed it? For example, I want to limit the size of indexed documents to 1mb. A 4mb PDF might be uploaded, the attachment processor extrac…

---

## [How to parse fields from multiline text log file?](https://discuss.elastic.co/t/how-to-parse-fields-from-multiline-text-log-file/265752)

<div class="topic-metadata">

**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\
**Replies:** 4\
**Last updated:** [March 2, 2021, 4:27am UTC](https://discuss.elastic.co/t/how-to-parse-fields-from-multiline-text-log-file/265752 "2021-03-02T04:27:45Z")

</div>

Dears, I need your advise in case of parsing fields from text log file. This is sample of text file: ---- got a mess at: 11:21:51 ctrl\_mess\_handler::control\_message\_handler @333.333 got new timer id: 11111, to be fired…

---

## [Kibana OAuth 2 flow](https://discuss.elastic.co/t/kibana-oauth-2-flow/265697)

<div class="topic-metadata">

**Author:** [@horatiu](https://discuss.elastic.co/u/horatiu)\
**Replies:** 10\
**Last updated:** [March 2, 2021, 4:16am UTC](https://discuss.elastic.co/t/kibana-oauth-2-flow/265697 "2021-03-02T04:16:23Z")

</div>

Hello, I'm trying to figure out if my understanding of the implementation of OAuth2 in Kibana is correct. I've got an ES domain deployed on AWS with Cognito authentication via "Authorization code grant" flow. My unders…

---

## [Index is getting deleted automatically with-out deletion policy or command](https://discuss.elastic.co/t/index-is-getting-deleted-automatically-with-out-deletion-policy-or-command/264988)

<div class="topic-metadata">

**Author:** [@Rinku\_Gulia](https://discuss.elastic.co/u/Rinku_Gulia)\
**Replies:** 15\
**Last updated:** [March 2, 2021, 3:30am UTC](https://discuss.elastic.co/t/index-is-getting-deleted-automatically-with-out-deletion-policy-or-command/264988 "2021-03-02T03:30:48Z")

</div>

We are adding data to our 2 indexes( interaction-open\_read\_model\_12 and interaction-closed\_read\_model\_12) with aliases(list\_open\_interactions\_12 && list\_closed\_interactions\_1). we have 3 node system. Almost in one day,…

---

## [Deleting ElasticSearch Data Directory](https://discuss.elastic.co/t/deleting-elasticsearch-data-directory/265820)

<div class="topic-metadata">

**Author:** [@Andrew\_Tillotson](https://discuss.elastic.co/u/Andrew_Tillotson)\
**Replies:** 6\
**Last updated:** [March 2, 2021, 3:04am UTC](https://discuss.elastic.co/t/deleting-elasticsearch-data-directory/265820 "2021-03-02T03:04:16Z")

</div>

If I just delete the directory in which the data is stored, restart Elasticsearch, it should recreate that directory and populate it with new data according to the config, correct? I have unassigned shards, but would ju…

---

## [Working with logs](https://discuss.elastic.co/t/working-with-logs/265764)

<div class="topic-metadata">

**Author:** [@duck](https://discuss.elastic.co/u/duck)\
**Replies:** 1\
**Last updated:** [March 2, 2021, 2:19am UTC](https://discuss.elastic.co/t/working-with-logs/265764 "2021-03-02T02:19:04Z")

</div>

We're building a logging system for our project. We want to see almost everything as a log like Docker, application console etc. Since we're growing up, we do not want to make mistake about logs(wrong scheme, indexing, q…

---

## [Elasticsearch service wont stop when OIDC is enabled](https://discuss.elastic.co/t/elasticsearch-service-wont-stop-when-oidc-is-enabled/265864)

<div class="topic-metadata">

**Author:** [@froxxen](https://discuss.elastic.co/u/froxxen)\
**Replies:** 0\
**Last updated:** [March 1, 2021, 8:23pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-stop-when-oidc-is-enabled/265864 "2021-03-01T20:23:25Z")

</div>

I'm running the entire stack on Windows and will integrate SSO into the environment. It works as expected except one thing, when the Elasticsearch service needs to be stopped it hangs for some reason. If I remove below…

---

## [Exception: java.lang.OutOfMemoryError: Java heap space](https://discuss.elastic.co/t/exception-java-lang-outofmemoryerror-java-heap-space/265880)

<div class="topic-metadata">

**Author:** [@ifernand](https://discuss.elastic.co/u/ifernand)\
**Replies:** 1\
**Last updated:** [March 2, 2021, 2:03am UTC](https://discuss.elastic.co/t/exception-java-lang-outofmemoryerror-java-heap-space/265880 "2021-03-02T02:03:57Z")

</div>

Hi. I am running ElasticSearch 6.1.3 in a Liferay Installation and I am facing an Exception "java.lang.OutOfMemoryError: Java heap space" that is causing malfunction in Liferay portal. That's the information I have col…

---

## [Extract multiline log with not id field present](https://discuss.elastic.co/t/extract-multiline-log-with-not-id-field-present/265848)

<div class="topic-metadata">

**Author:** [@E\_T\_N](https://discuss.elastic.co/u/E_T_N)\
**Replies:** 5\
**Last updated:** [March 2, 2021, 12:11am UTC](https://discuss.elastic.co/t/extract-multiline-log-with-not-id-field-present/265848 "2021-03-02T00:11:17Z")

</div>

Hello. I need to build a record composed of multiple lines where there is no clear identifier There is a word that tells me where the task starts in this case "select" There is a word that tells me where the task ends…

---

## [Bad Request when using scroll API](https://discuss.elastic.co/t/bad-request-when-using-scroll-api/265702)

<div class="topic-metadata">

**Author:** [@nara1](https://discuss.elastic.co/u/nara1)\
**Replies:** 6\
**Last updated:** [March 1, 2021, 10:19pm UTC](https://discuss.elastic.co/t/bad-request-when-using-scroll-api/265702 "2021-03-01T22:19:33Z")

</div>

I'm using JestClient to execute scrolling in my service (I know JestClient is outdated but for various reasons we are stuck with it for now). In my initial request, I do receive a scroll ID and my results successfully. …

---

## [Can I use SQL EXCEPT to compare fields present in two indexes?](https://discuss.elastic.co/t/can-i-use-sql-except-to-compare-fields-present-in-two-indexes/265245)

<div class="topic-metadata">

**Author:** [@CoffeeRecon](https://discuss.elastic.co/u/CoffeeRecon)\
**Replies:** 4\
**Last updated:** [March 1, 2021, 9:31pm UTC](https://discuss.elastic.co/t/can-i-use-sql-except-to-compare-fields-present-in-two-indexes/265245 "2021-03-01T21:31:42Z")

</div>

Hello! I have two indexes that I'd like to compare: winlogbeat-\* winlogbeat\_rollup winlogbeat\_rollup is the rollup of winlogbeat-\* and contains its historical data. What I'm looking to do is to compare these two inde…

---

## [Kibana 7.11.1 - ie11 - bootstrap error (html5)](https://discuss.elastic.co/t/kibana-7-11-1-ie11-bootstrap-error-html5/265856)

<div class="topic-metadata">

**Author:** [@snorlax](https://discuss.elastic.co/u/snorlax)\
**Replies:** 5\
**Last updated:** [March 1, 2021, 8:48pm UTC](https://discuss.elastic.co/t/kibana-7-11-1-ie11-bootstrap-error-html5/265856 "2021-03-01T20:48:06Z")

</div>

Hello, We have upgraded kibana/elasticsearch/logstash to version 7.11.1. Everything works fine on chrome and we get errors on ie11. SCRIPT1003: Expected ':' File: bootstrap.js, Line: 18, Column: 20 When I check line 1…

---

## [How do I enable TLS1.2 only and disable weak ssl ciphers in Kibana 7.0?](https://discuss.elastic.co/t/how-do-i-enable-tls1-2-only-and-disable-weak-ssl-ciphers-in-kibana-7-0/265845)

<div class="topic-metadata">

**Author:** [@rahulj](https://discuss.elastic.co/u/rahulj)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 8:08pm UTC](https://discuss.elastic.co/t/how-do-i-enable-tls1-2-only-and-disable-weak-ssl-ciphers-in-kibana-7-0/265845 "2021-03-01T20:08:37Z")

</div>

Our InfoSec scans report that Kibana 7.0 service is supporting weak protocols and weak cipher suites. I am trying to find how to disable TLS 1.1 and below protocols and remove specific ciphers from Kibana service. Any h…

---

## [How to get data from elastic using the Collpase method in fluent in C#?](https://discuss.elastic.co/t/how-to-get-data-from-elastic-using-the-collpase-method-in-fluent-in-c/265857)

<div class="topic-metadata">

**Author:** [@Casrlos1815](https://discuss.elastic.co/u/Casrlos1815)\
**Replies:** 0\
**Last updated:** [March 1, 2021, 7:53pm UTC](https://discuss.elastic.co/t/how-to-get-data-from-elastic-using-the-collpase-method-in-fluent-in-c/265857 "2021-03-01T19:53:44Z")

</div>

I'm hoping to find the answer to this. I have a C# application that bulk downloads elastic data according to user parameters. Some of the requests can be for all data that don't require parameters. In elastic I have an i…

---

## [Spontaneously duplicated logs - need advice - thanks](https://discuss.elastic.co/t/spontaneously-duplicated-logs-need-advice-thanks/265731)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 3\
**Last updated:** [March 1, 2021, 7:42pm UTC](https://discuss.elastic.co/t/spontaneously-duplicated-logs-need-advice-thanks/265731 "2021-03-01T19:42:15Z")

</div>

Hi there, I have following setup: version 7.3.1 A Live System logs into a csv With xcopy.bat I copy this csv every 5 Minutes to my ES Server to a specific folder. Beats is whatching to that csv file in that specific …

---

## [Is Kibana supported on GKE through default google ingress ? doesn't seem so](https://discuss.elastic.co/t/is-kibana-supported-on-gke-through-default-google-ingress-doesnt-seem-so/264067)

<div class="topic-metadata">

**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\
**Replies:** 14\
**Last updated:** [March 1, 2021, 7:21pm UTC](https://discuss.elastic.co/t/is-kibana-supported-on-gke-through-default-google-ingress-doesnt-seem-so/264067 "2021-03-01T19:21:45Z")

</div>

I have deployed Elastic Search and Kibana on GKE. However unable to get ingress working as it seems to report Kibana service as unhealthy. I assume this is due to the root url redirecting with http 302 and GKE LB L7 ex…

---

## [AppSearch Peformance - Out of the Box - SLOW](https://discuss.elastic.co/t/appsearch-peformance-out-of-the-box-slow/265801)

<div class="topic-metadata">

**Author:** [@gves](https://discuss.elastic.co/u/gves)\
**Replies:** 3\
**Last updated:** [March 1, 2021, 7:13pm UTC](https://discuss.elastic.co/t/appsearch-peformance-out-of-the-box-slow/265801 "2021-03-01T19:13:35Z")

</div>

I have been working to evaluate AppSearch -- even have Support Tickets out, but getting no response. VERY simple case -- i loaded only half of our available data set -- 2 Million simple documents that contain about 14 f…

---

## [New to Ingest Pipeline](https://discuss.elastic.co/t/new-to-ingest-pipeline/265643)

<div class="topic-metadata">

**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\
**Replies:** 3\
**Last updated:** [March 1, 2021, 6:46pm UTC](https://discuss.elastic.co/t/new-to-ingest-pipeline/265643 "2021-03-01T18:46:28Z")

</div>

Hi: I have an index intune-\* where I need to modify some fields. Once I create the index pipeline how do I tag it to the appropriate Index ? I have a rolling index I read this documentation but wasnt clear on step-9 ..…

---

## [Resizing of visualization whenever size of visualization is changed in dashboard](https://discuss.elastic.co/t/resizing-of-visualization-whenever-size-of-visualization-is-changed-in-dashboard/263594)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 4\
**Last updated:** [March 1, 2021, 5:36pm UTC](https://discuss.elastic.co/t/resizing-of-visualization-whenever-size-of-visualization-is-changed-in-dashboard/263594 "2021-03-01T17:36:13Z")

</div>

{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "data": {"url": "https://vega.github.io/vega-lite/data/barley.json"}, "width": 300, "height":300, "mark": "bar", "encoding": { "column": {"fi…

---

## [Search Error Unexpected token ' in JSON at position N](https://discuss.elastic.co/t/search-error-unexpected-token-in-json-at-position-n/265692)

<div class="topic-metadata">

**Author:** [@chatim](https://discuss.elastic.co/u/chatim)\
**Replies:** 6\
**Last updated:** [March 1, 2021, 5:24pm UTC](https://discuss.elastic.co/t/search-error-unexpected-token-in-json-at-position-n/265692 "2021-03-01T17:24:00Z")

</div>

Hello I'm running an elasticsearch cluster with kibana in docker. when i'm trying to create a pie chart and use Terms aggregation i got this error : Search Error Unexpected token ' in JSON at position 433 same thing …

---

## [Elastic Stack 7.11.0 Security Update](https://discuss.elastic.co/t/elastic-stack-7-11-0-security-update/265835)

<div class="topic-metadata">

**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\
**Replies:** 0\
**Last updated:** [March 1, 2021, 4:55pm UTC](https://discuss.elastic.co/t/elastic-stack-7-11-0-security-update/265835 "2021-03-01T16:55:42Z")

</div>

Elasticsearch field disclosure flaw (ESA-2021-05) A document disclosure flaw was found in Elasticsearch when Document or Field Level Security is used. Get requests do not properly apply security permissions when executi…

[Previous page](https://discuss.elastic.co/latest.md?page=1807)

[Next page](https://discuss.elastic.co/latest.md?page=1809)
