# Need help to have space on elasticsearch **URL:** \ **Category:** Kibana\ **Created:** [August 23, 2021, 12:31pm UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220 "2021-08-23T12:31:59Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![Pacous](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pacous/32/86117_2.png) [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Post date:** [August 23, 2021, 12:31pm UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/1 "2021-08-23T12:31:59Z")
When I replay the logs from logstash to elasticsearch, I no longer see them on kibana. I think there is no more storage space. So I go to Stack Management -\> Index Management to delete Indices. But, that does not solve my problem. I need your help. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [August 23, 2021, 10:55pm UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/2 "2021-08-23T22:55:50Z")
> [@Pacous](#): > > I think there is no more storage space. Is your system showing there is no disk space left? > [@Pacous](#): > > When I replay the logs from logstash to elasticsearch, I no longer see them on kibana. What do you mean by this? ---
**Author:** ![Pacous](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pacous/32/86117_2.png) [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Post date:** [August 30, 2021, 11:16am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/3 "2021-08-30T11:16:17Z")
No. But, my large compressed files are no longer imported into elasticsearch. So I deleted the 3 month indexes. And there are still 12 months of index left. I don't know if this is related to indexes. Or how do I free up space to import my compressed files. For your second question, I meant that the logs are not imported, in order to view them in Kibana. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [August 30, 2021, 10:24pm UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/4 "2021-08-30T22:24:43Z")
What is the output from the `_cat/allocation?v` API in Elasticsearch? ---
**Author:** ![Pacous](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pacous/32/86117_2.png) [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Post date:** [August 31, 2021, 11:33am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/5 "2021-08-31T11:33:22Z")
This is the output from from the `_cat/allocation?v`API in Elasticsearch: ![a](https://us1.discourse-cdn.com/elastic/original/3X/8/9/89461f7c00b784b5de02f388b701350f399b724e.png) ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [August 31, 2021, 10:01pm UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/6 "2021-08-31T22:01:17Z")
(In future, please don't post pictures of text or code. They are difficult to read, impossible to search and replicate (if it's code), and some people may not be even able to see them 😃) So you've got heaps of space on the nodes by the looks of it. ---
**Author:** ![Pacous](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pacous/32/86117_2.png) [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Post date:** [September 1, 2021, 2:33pm UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/7 "2021-09-01T14:33:27Z")
> [@warkolm](#): > > (In future, please don't post pictures of text or code. They are difficult to read, impossible to search and replicate (if it's code), and some people may not be even able to see them 😃) > > So you've got heaps of space on the nodes by the looks of it. But what causes all of my files to stop pushing to Elasticsearch? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 1, 2021, 9:55pm UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/8 "2021-09-01T21:55:38Z")
You'd need to check your Beats logs. ---
**Author:** ![Pacous](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pacous/32/86117_2.png) [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Post date:** [September 8, 2021, 9:51am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/9 "2021-09-08T09:51:07Z")
> [@warkolm](#): > > You'd need to check your Beats logs. I looked at the logs. Below are some logs: [2021-07-09T15:40:40,085][INFO][filewatch.observingread][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] QUIT - closing all files and shutting down. [2021-07-09T15:40:40,088][INFO][filewatch.observingread][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] START, creating Discoverer, Watch with file and sincedb collections [2021-07-09T15:40:40,091][ERROR][logstash.javapipeline][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:cpe\_b2b Plugin: \"read", path=\>["/data/logstash/cpe/b2b-tacacs-\*"], add\_field=\>{"[event][module]"=\>"cpe", "[event][dataset]"=\>"tacacs", "[@metadata][idx]"=\>"CPE\_B2B", "[@metadata][vendor]"=\>"tac\_plus"}, id=\>"25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f", sincedb\_path=\>"/dev/null", file\_sort\_by=\>"path", enable\_metric=\>true, codec=\>\"plain\_6b387e0b-12f8-4cfd-8ae3-7c5186a1c13c", enable\_metric=\>true, charset=\>"UTF-8"\>, stat\_interval=\>1.0, discover\_interval=\>15, sincedb\_write\_interval=\>15.0, start\_position=\>"end", delimiter=\>"\n", close\_older=\>3600.0, file\_completed\_action=\>"delete", sincedb\_clean\_after=\>1209600.0, file\_chunk\_size=\>32768, file\_chunk\_count=\>140737488355327, file\_sort\_direction=\>"asc", exit\_after\_read=\>false, check\_archive\_validity=\>false\> Error: Exception: Java::JavaIo::EOFException Stack: java.util.zip.GZIPInputStream.readUByte(java/util/zip/GZIPInputStream.java:269) java.util.zip.GZIPInputStream.readUShort(java/util/zip/GZIPInputStream.java:259) java.util.zip.GZIPInputStream.readHeader(java/util/zip/GZIPInputStream.java:165) java.util.zip.GZIPInputStream.(java/util/zip/GZIPInputStream.java:80) java.util.zip.GZIPInputStream.(java/util/zip/GZIPInputStream.java:92) jdk.internal.reflect.GeneratedConstructorAccessor91.newInstance(jdk/internal/reflect/GeneratedConstructorAccessor91) jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(jdk/internal/reflect/DelegatingConstructorAccessorImpl.java:45) java.lang.reflect.Constructor.newInstance(java/lang/reflect/Constructor.java:490) org.jruby.javasupport.JavaConstructor.newInstanceDirect(org/jruby/javasupport/JavaConstructor.java:285) org.jruby.RubyClass.newInstance(org/jruby/RubyClass.java:918) org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen) This error comes up every time. How do you interpret it? What solution do you offer me? Regards, ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 8, 2021, 10:42pm UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/10 "2021-09-08T22:42:59Z")
It's a little hard to follow here as you're now dropping Logstash logs into the thread. Can you please provide a description of your setup, including versions. If Logstash is erroring, which it seems to be, please provide more of the log. Please also format your code/logs/config using the `` button, or markdown style back ticks. It helps to make things easy to read which helps us help you . ---
**Author:** ![Pacous](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pacous/32/86117_2.png) [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Post date:** [September 9, 2021, 7:35am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/11 "2021-09-09T07:35:35Z")
> [@warkolm](#): > > It's a little hard to follow here as you're now dropping Logstash logs into the thread. > > Can you please provide a description of your setup, including versions. > If Logstash is erroring, which it seems to be, please provide more of the log. > > Please also format your code/logs/config using the `` button, or markdown style back ticks. It helps to make things easy to read which helps us help you . Can I put it in a file, to send it as an attachment? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 9, 2021, 9:12am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/12 "2021-09-09T09:12:35Z")
No sorry. If it's too large then use gist/pastebin/etc. ---
**Author:** ![Pacous](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pacous/32/86117_2.png) [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Post date:** [September 9, 2021, 9:21am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/13 "2021-09-09T09:21:34Z")
> [@warkolm](#): > > No sorry. If it's too large then use gist/pastebin/etc. This is version 6 I will therefore provide more logs. Below are the logs: [2021-07-09T15:40:40,085][INFO][filewatch.observingread][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] QUIT - closing all files and shutting down. [2021-07-09T15:40:40,088][INFO][filewatch.observingread][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] START, creating Discoverer, Watch with file and sincedb collections [2021-07-09T15:40:40,091][ERROR][logstash.javapipeline][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:cpe\_b2b Plugin: \"read", path=\>["/data/logstash/cpe/b2b-tacacs-_"], add\_field=\>{"[event][module]"=\>"cpe", "[event][dataset]"=\>"tacacs", "[@metadata][idx]"=\>"CPE\_B2B", "[@metadata][vendor]"=\>"tac\_plus"}, id=\>"25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f", sincedb\_path=\>"/dev/null", file\_sort\_by=\>"path", enable\_metric=\>true, codec=\>\"plain\_6b387e0b-12f8-4cfd-8ae3-7c5186a1c13c", enable\_metric=\>true, charset=\>"UTF-8"\>, stat\_interval=\>1.0, discover\_interval=\>15, sincedb\_write\_interval=\>15.0, start\_position=\>"end", delimiter=\>"\n", close\_older=\>3600.0, file\_completed\_action=\>"delete", sincedb\_clean\_after=\>1209600.0, file\_chunk\_size=\>32768, file\_chunk\_count=\>140737488355327, file\_sort\_direction=\>"asc", exit\_after\_read=\>false, check\_archive\_validity=\>false\> Error: Exception: Java::JavaIo::EOFException Stack: java.util.zip.GZIPInputStream.readUByte(java/util/zip/GZIPInputStream.java:269) java.util.zip.GZIPInputStream.readUShort(java/util/zip/GZIPInputStream.java:259) java.util.zip.GZIPInputStream.readHeader(java/util/zip/GZIPInputStream.java:165) java.util.zip.GZIPInputStream.(java/util/zip/GZIPInputStream.java:80) java.util.zip.GZIPInputStream.(java/util/zip/GZIPInputStream.java:92) jdk.internal.reflect.GeneratedConstructorAccessor91.newInstance(jdk/internal/reflect/GeneratedConstructorAccessor91) jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(jdk/internal/reflect/DelegatingConstructorAccessorImpl.java:45) java.lang.reflect.Constructor.newInstance(java/lang/reflect/Constructor.java:490) org.jruby.javasupport.JavaConstructor.newInstanceDirect(org/jruby/javasupport/JavaConstructor.java:285) org.jruby.RubyClass.newInstance(org/jruby/RubyClass.java:918) org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.handlers.read\_zip\_file.handle\_specifically(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/handlers/read\_zip\_file.rb:27) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.handlers.base.handle(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/handlers/base.rb:26) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.processor.read\_zip\_file(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/processor.rb:39) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.processor.process\_active(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/processor.rb:102) org.jruby.RubyArray.each(org/jruby/RubyArray.java:1809) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.processor.process\_active(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/processor.rb:88) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.processor.process\_all\_states(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/processor.rb:45) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.watch.iterate\_on\_state(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/watch.rb:68) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.watch.subscribe(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/watch.rb:45) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.observing\_read.subscribe(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/observing\_read.rb:12) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.logstash.inputs.file.run(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/logstash/inputs/file.rb:363) usr.share.logstash.logstash\_minus\_core.lib.logstash.java\_pipeline.inputworker(/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:345) RUBY.start\_input(/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:336) org.jruby.RubyProc.call(org/jruby/RubyProc.java:318) java.lang.Thread.run(java/lang/Thread.java:834) [2021-07-09T15:40:41,094][INFO][filewatch.observingread][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] QUIT - closing all files and shutting down. [2021-07-09T15:40:41,095][INFO][filewatch.observingread][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] START, creating Discoverer, Watch with file and sincedb collections [2021-07-09T15:40:41,098][ERROR][logstash.javapipeline][cpe\_b2b][25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:cpe\_b2b Plugin: \"read", path=\>["/data/logstash/cpe/b2b-tacacs-_"], add\_field=\>{"[event][module]"=\>"cpe", "[event][dataset]"=\>"tacacs", "[@metadata][idx]"=\>"CPE\_B2B", "[@metadata][vendor]"=\>"tac\_plus"}, id=\>"25989e194c2b3b6fdaf9b77853519b22edf519002a5e5db6c31ac71b71740e5f", sincedb\_path=\>"/dev/null", file\_sort\_by=\>"path", enable\_metric=\>true, codec=\>\"plain\_6b387e0b-12f8-4cfd-8ae3-7c5186a1c13c", enable\_metric=\>true, charset=\>"UTF-8"\>, stat\_interval=\>1.0, discover\_interval=\>15, sincedb\_write\_interval=\>15.0, start\_position=\>"end", delimiter=\>"\n", close\_older=\>3600.0, file\_completed\_action=\>"delete", sincedb\_clean\_after=\>1209600.0, file\_chunk\_size=\>32768, file\_chunk\_count=\>140737488355327, file\_sort\_direction=\>"asc", exit\_after\_read=\>false, check\_archive\_validity=\>false\> Error: Exception: Java::JavaIo::EOFException Stack: java.util.zip.GZIPInputStream.readUByte(java/util/zip/GZIPInputStream.java:269) java.util.zip.GZIPInputStream.readUShort(java/util/zip/GZIPInputStream.java:259) java.util.zip.GZIPInputStream.readHeader(java/util/zip/GZIPInputStream.java:165) java.util.zip.GZIPInputStream.(java/util/zip/GZIPInputStream.java:80) java.util.zip.GZIPInputStream.(java/util/zip/GZIPInputStream.java:92) jdk.internal.reflect.GeneratedConstructorAccessor91.newInstance(jdk/internal/reflect/GeneratedConstructorAccessor91) jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(jdk/internal/reflect/DelegatingConstructorAccessorImpl.java:45) java.lang.reflect.Constructor.newInstance(java/lang/reflect/Constructor.java:490) org.jruby.javasupport.JavaConstructor.newInstanceDirect(org/jruby/javasupport/JavaConstructor.java:285) org.jruby.RubyClass.newInstance(org/jruby/RubyClass.java:918) org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.handlers.read\_zip\_file.handle\_specifically(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/handlers/read\_zip\_file.rb:27) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.handlers.base.handle(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/handlers/base.rb:26) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.processor.read\_zip\_file(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/processor.rb:39) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.processor.process\_active(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/processor.rb:102) org.jruby.RubyArray.each(org/jruby/RubyArray.java:1809) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.processor.process\_active(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/processor.rb:88) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.read\_mode.processor.process\_all\_states(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/read\_mode/processor.rb:45) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.watch.iterate\_on\_state(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/watch.rb:68) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.watch.subscribe(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/watch.rb:45) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.filewatch.observing\_read.subscribe(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/filewatch/observing\_read.rb:12) usr.share.logstash.vendor.bundle.jruby.$2\_dot\_5\_dot\_0.gems.logstash\_minus\_input\_minus\_file\_minus\_4\_dot\_1\_dot\_18.lib.logstash.inputs.file.run(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.1.18/lib/logstash/inputs/file.rb:363) usr.share.logstash.logstash\_minus\_core.lib.logstash.java\_pipeline.inputworker(/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:345) RUBY.start\_input(/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:336) org.jruby.RubyProc.call(org/jruby/RubyProc.java:318) java.lang.Thread.run(java/lang/Thread.java:834) ---
**Author:** ![Pacous](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pacous/32/86117_2.png) [@Pacous](https://discuss.elastic.co/u/Pacous)\ **Post date:** [September 9, 2021, 9:42am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/14 "2021-09-09T09:42:03Z")
> [@Pacous](#): > > This is version 6 The version is 7.8.0 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 7, 2021, 9:42am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220/15 "2021-10-07T09:42:05Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.