# Modify body of a forum message when it's closed

**URL:** <https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670>\
**Category:** Meta Elastic\
**Created:** [November 7, 2017, 10:39am UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670 "2017-11-07T10:39:03Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![alonsosanchezd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alonsosanchezd/32/19846_2.png) [@alonsosanchezd](https://discuss.elastic.co/u/alonsosanchezd)\
**Post date:** [November 7, 2017, 10:39am UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670/1 "2017-11-07T10:39:03Z")

</div>

Hi everybody. Firstly, thanks a lot for your support.

Some time ago I wrote a question in this thread:

> [@Indexes creation by date issue](https://discuss.elastic.co/t/indexes-creation-by-date-issue/92233):
>
> Hi all! Firstly, let me thank you all for your help! I have an strange behaviour of filebeat/logstash and elasticsearch. Let me explain: I have to index log files of last month and I'm forcing logstash to replace processing timestamp by event timestamp in this way: filter { if [type] == "sas" { grok { match =\> { "message" =\> "%{IP:client} - - \[%{HTTPDATE:timestamp}\] \"POST /RTDM/rest/decisions/%{GREEDYDATA:tarificacion} %{DATA:protocol}\" %{NUMBER:code} %{NUMBER:bytes}" } } …

The fact is that the security area at my company has asked me to modify the body of that post, because there are some machine addresses that should not be public.

Is there any way to modify a body message after closing the thread?

Thanks a lot in advance

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 7, 2017, 10:51am UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670/2 "2017-11-07T10:51:42Z")

</div>

I just reopened the thread. Could make your edits and tell me when done so I'll close it again?

---

<div class="post-metadata">

**Author:** ![alonsosanchezd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alonsosanchezd/32/19846_2.png) [@alonsosanchezd](https://discuss.elastic.co/u/alonsosanchezd)\
**Post date:** [November 7, 2017, 11:28am UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670/3 "2017-11-07T11:28:53Z")

</div>

Hi David,

Thank you so much for your help!!! unfortunately, the "pencil icon" does not appear below the message... Am I doing something wrong?

Thanks again!

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 7, 2017, 11:45am UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670/4 "2017-11-07T11:45:10Z")

</div>

Can you tell me exactly what you want to remove and I’ll do it

---

<div class="post-metadata">

**Author:** ![alonsosanchezd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alonsosanchezd/32/19846_2.png) [@alonsosanchezd](https://discuss.elastic.co/u/alonsosanchezd)\
**Post date:** [November 7, 2017, 11:49am UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670/5 "2017-11-07T11:49:29Z")

</div>

Thanks David!

This section:

```
output {
  stdout { codec => json_lines }
  elasticsearch {
    hosts => [
       "a.local:9200",
     "b.local:9200",
    "c.local:9200"  
 ]
}

```

Would you be so gentle to change machine names from the current values to:  
a:9200  
b:9200  
c:9200

if you please?

My deepest thanks

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 7, 2017, 1:04pm UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670/6 "2017-11-07T13:04:06Z")

</div>

Done.

Hope this helps.

---

<div class="post-metadata">

**Author:** ![alonsosanchezd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alonsosanchezd/32/19846_2.png) [@alonsosanchezd](https://discuss.elastic.co/u/alonsosanchezd)\
**Post date:** [November 7, 2017, 1:26pm UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670/7 "2017-11-07T13:26:10Z")

</div>

You rock It! Thanks you so mucho David!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 5:03am UTC](https://discuss.elastic.co/t/modify-body-of-a-forum-message-when-its-closed/106670/8 "2022-11-04T05:03:06Z")

</div>