# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=987 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 988 --- ## [Docker Compose file with 3 ES nodes Logstash and Kibana -updated 2022](https://discuss.elastic.co/t/docker-compose-file-with-3-es-nodes-logstash-and-kibana-updated-2022/301527)
**Author:** [@Lupul\_Dacic](https://discuss.elastic.co/u/Lupul_Dacic)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 2:34pm UTC](https://discuss.elastic.co/t/docker-compose-file-with-3-es-nodes-logstash-and-kibana-updated-2022/301527 "2022-04-04T14:34:54Z")
Hi team, Could you please provide me an example of a docker-compose.yml file with an updated version without certs? I was able to find only obsolete version that in reality do not work correctly. In my case neither th… --- ## [Heartbeat subcommands unable to run on 7.17.x and 8.0.x docker images](https://discuss.elastic.co/t/heartbeat-subcommands-unable-to-run-on-7-17-x-and-8-0-x-docker-images/299630)
**Author:** [@cdavid15](https://discuss.elastic.co/u/cdavid15)\ **Replies:** 7\ **Last updated:** [April 4, 2022, 1:45pm UTC](https://discuss.elastic.co/t/heartbeat-subcommands-unable-to-run-on-7-17-x-and-8-0-x-docker-images/299630 "2022-04-04T13:45:17Z")
Hi all, I am trying to run the heartbeat setup but I am getting the following error only on the 7.17.0, 7.17.1 and 8.0.0 docker images: /usr/local/bin/docker-entrypoint: line 25: exec: setup: not found It appears the … --- ## [FIlebeat modules proxy](https://discuss.elastic.co/t/filebeat-modules-proxy/301506)
**Author:** [@grumo35](https://discuss.elastic.co/u/grumo35)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-modules-proxy/301506 "2022-04-04T13:14:01Z")
Hey, I was wondering if it was possible to include proxy settings for o365 module or any other module that need to perform requests online ? looks like envars and proxy\_url are not working. Is it possible to implement… --- ## [How to calculate variance in a data table visualization](https://discuss.elastic.co/t/how-to-calculate-variance-in-a-data-table-visualization/301501)
**Author:** [@AICHP](https://discuss.elastic.co/u/AICHP)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 11:37am UTC](https://discuss.elastic.co/t/how-to-calculate-variance-in-a-data-table-visualization/301501 "2022-04-04T11:37:26Z")
Hi All, This is prosenjit . I am a new to Kibana. I am trying to develope dashboards and visualization in Kibana hosted in Peoplesoft 9.2 FSCM suite. Version :- 7.10 In my current requirement I need to calulate a vari… --- ## [Mapping\_data with 2 index](https://discuss.elastic.co/t/mapping-data-with-2-index/300495)
**Author:** [@wdffw](https://discuss.elastic.co/u/wdffw)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 11:41am UTC](https://discuss.elastic.co/t/mapping-data-with-2-index/300495 "2022-04-04T11:41:10Z")
Hello, I have a question about kibana and any help is welcome, I'm stuck on this for a week. I have two indexes (index1 and index2 let's say) and I want to create a mapping in index1 which has as name change and whose … --- ## [Metricbeat jolokia module jmx.application|instance](https://discuss.elastic.co/t/metricbeat-jolokia-module-jmx-application-instance/301500)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 11:24am UTC](https://discuss.elastic.co/t/metricbeat-jolokia-module-jmx-application-instance/301500 "2022-04-04T11:24:40Z")
The metricbeat v.8.1 module jolokia speaks not much about these: jmx.application: jmx.instance: what are they meant for? --- ## [Elastic Cloud - Too many shards - Help to fix it](https://discuss.elastic.co/t/elastic-cloud-too-many-shards-help-to-fix-it/301419)
**Author:** [@mgfeal](https://discuss.elastic.co/u/mgfeal)\ **Replies:** 4\ **Last updated:** [April 4, 2022, 11:20am UTC](https://discuss.elastic.co/t/elastic-cloud-too-many-shards-help-to-fix-it/301419 "2022-04-04T11:20:09Z")
Hello, We have definitely contracted Elastic Cloud. And we've started building integrations for IIS, which collect access and error logs, and IIS metrics as well. When we had added about 5 such integrations, Elastic st… --- ## [Query using NEST API if a point (Lat/lng) falls within a Polygon](https://discuss.elastic.co/t/query-using-nest-api-if-a-point-lat-lng-falls-within-a-polygon/301498)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 11:10am UTC](https://discuss.elastic.co/t/query-using-nest-api-if-a-point-lat-lng-falls-within-a-polygon/301498 "2022-04-04T11:10:53Z")
Say we have an index that has a field of geo\_shape and in it are the co-ordinates of a polygon. How do I query to return all documents that have the point described by a lat/lng(not a field value but just a pair of valu… --- ## [8.1.1 Cannot display Logstash pipeline in monitoring UI](https://discuss.elastic.co/t/8-1-1-cannot-display-logstash-pipeline-in-monitoring-ui/300554)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 17\ **Last updated:** [April 4, 2022, 10:54am UTC](https://discuss.elastic.co/t/8-1-1-cannot-display-logstash-pipeline-in-monitoring-ui/300554 "2022-04-04T10:54:29Z")
I have migrated the Elastic stack from 7.17.1 to 8.1.1. After the upgrade everything works fine, except the Kibana monitoring logstash pipeline viewer UI. stack monitoring \> logstash \> pipelines pipeline main points… --- ## [Elasticsearch API throws search\_phase\_execution\_exception error](https://discuss.elastic.co/t/elasticsearch-api-throws-search-phase-execution-exception-error/301495)
**Author:** [@itsakiridisfs](https://discuss.elastic.co/u/itsakiridisfs)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 10:42am UTC](https://discuss.elastic.co/t/elasticsearch-api-throws-search-phase-execution-exception-error/301495 "2022-04-04T10:42:52Z")
Hello, we are using the Elasticsearch API, to do an aggregation with two fields and we get the following error: Merging/Reducing the multi\_term aggregations failed when computing the aggregation GroupByLevel & GroupByPro… --- ## [Querying a field name across multiple indices for identical value](https://discuss.elastic.co/t/querying-a-field-name-across-multiple-indices-for-identical-value/301436)
**Author:** [@sectorx](https://discuss.elastic.co/u/sectorx)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 10:24am UTC](https://discuss.elastic.co/t/querying-a-field-name-across-multiple-indices-for-identical-value/301436 "2022-04-04T10:24:48Z")
I was hoping someone can offer a level of guidance. I have an Elasticsearch Enterprise cluster which is made up of three servers. My question is actually a basic one. There are two indices that I have - a) okta-ioc-i… --- ## [How to secure access to Kibana?](https://discuss.elastic.co/t/how-to-secure-access-to-kibana/301464)
**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 10:20am UTC](https://discuss.elastic.co/t/how-to-secure-access-to-kibana/301464 "2022-04-04T10:20:14Z")
Hi to everyone I have made an installation of ELK stack version 8.1 on three different servers (one for Kibana, one for Logstash and one for Elasticsearch) I have reviewed the documentation and I have seen that to inte… --- ## [How documents is retrieved if we are not using \_routing](https://discuss.elastic.co/t/how-documents-is-retrieved-if-we-are-not-using-routing/301479)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/how-documents-is-retrieved-if-we-are-not-using-routing/301479 "2022-04-04T10:03:23Z")
I have an index with 3 primary and 1 replicas,total 6 shards for an index. I sent 5 messages to Elasticsearch cluster and these messages is distributed among 5 different shards. As a client i am curious how a client ca… --- ## [Watcher keeps firing when created via watcher api](https://discuss.elastic.co/t/watcher-keeps-firing-when-created-via-watcher-api/300204)
**Author:** [@gerardpeters](https://discuss.elastic.co/u/gerardpeters)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 10:01am UTC](https://discuss.elastic.co/t/watcher-keeps-firing-when-created-via-watcher-api/300204 "2022-04-04T10:01:59Z")
Hi, I've got several watcher that watch the metrics of kafka. Now something strange happens. When I create the watch via de API the watch keeps firing. When I manually save the watcher the status becomes OK. I tried cop… --- ## [In which version was cluster.initial\_master\_nodes first introduced?](https://discuss.elastic.co/t/in-which-version-was-cluster-initial-master-nodes-first-introduced/301484)
**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 9:58am UTC](https://discuss.elastic.co/t/in-which-version-was-cluster-initial-master-nodes-first-introduced/301484 "2022-04-04T09:58:13Z")
Which version was the cluster.initial\_master\_nodes first introduced? --- ## [Too long search with sort inside query after migrate es6.8 to es7.16](https://discuss.elastic.co/t/too-long-search-with-sort-inside-query-after-migrate-es6-8-to-es7-16/301157)
**Author:** [@111338](https://discuss.elastic.co/u/111338)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 9:52am UTC](https://discuss.elastic.co/t/too-long-search-with-sort-inside-query-after-migrate-es6-8-to-es7-16/301157 "2022-04-04T09:52:54Z")
Several years we live with es68 and it works fine. But now we want to migrate to es716 and we got problem with queries which contains sort option inside. For example, we have simple query which returns only one record G… --- ## [Painless Scripting](https://discuss.elastic.co/t/painless-scripting/301043)
**Author:** [@chivas](https://discuss.elastic.co/u/chivas)\ **Replies:** 9\ **Last updated:** [April 4, 2022, 9:51am UTC](https://discuss.elastic.co/t/painless-scripting/301043 "2022-04-04T09:51:58Z")
Hi, I am trying to get a count of the requests hitting my server by time range, and have come up with below query: GET /logs-prod\*/\_search?pretty=true { "query": { "bool": { "filter": \[ { … --- ## [Rollover "action time" seems to increase 10m each day](https://discuss.elastic.co/t/rollover-action-time-seems-to-increase-10m-each-day/301483)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 9:46am UTC](https://discuss.elastic.co/t/rollover-action-time-seems-to-increase-10m-each-day/301483 "2022-04-04T09:46:41Z")
In my setup, the indices are created every day at midnight. I started to notice that "current action time" is increasing about 10m per day, which is starting to be a pattern. Here are the prints: 03-04-2022 04-04-20… --- ## [Mlockall in elastic 7.15.2](https://discuss.elastic.co/t/mlockall-in-elastic-7-15-2/301326)
**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 9:38am UTC](https://discuss.elastic.co/t/mlockall-in-elastic-7-15-2/301326 "2022-04-04T09:38:59Z")
Hi I have changed memory settings for the system and elastic, both, while working on ES v7.6.2 More recently, I've found an ES system running 7.15.2 whose mlockall returned false I checked the documentation and it say… --- ## [Do I need cluster.initial\_master\_nodes?](https://discuss.elastic.co/t/do-i-need-cluster-initial-master-nodes/301480)
**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 9:17am UTC](https://discuss.elastic.co/t/do-i-need-cluster-initial-master-nodes/301480 "2022-04-04T09:17:59Z")
Below is the Elasticsearch.yml configuration for my ec2 based ECS Elasticsearch setup. cluster.name: dashboards-elasticsearch node.data: true node.master: true # node.name: ${ES\_NODE\_NAME:} path.data: ${ES\_DATA\_PATH:/… --- ## [How to do subqueries in Kibana?](https://discuss.elastic.co/t/how-to-do-subqueries-in-kibana/301471)
**Author:** [@Yazid\_S](https://discuss.elastic.co/u/Yazid_S)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 8:23am UTC](https://discuss.elastic.co/t/how-to-do-subqueries-in-kibana/301471 "2022-04-04T08:23:11Z")
Hi all, I am exploring log files throught Kibana and I would like to extract the logs that are in error. My problem is that in a day, a machine can be in error in the morning and not be in error in the afternoon. So I … --- ## [Visualize date range pie using custom timestamp with format YYYY-MM-DD-HH:MM:SS](https://discuss.elastic.co/t/visualize-date-range-pie-using-custom-timestamp-with-format-yyyy-mm-dd-hhss/301456)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 9:10am UTC](https://discuss.elastic.co/t/visualize-date-range-pie-using-custom-timestamp-with-format-yyyy-mm-dd-hhss/301456 "2022-04-04T09:10:39Z")
Dear all, I am trying to visualize a pie chart using one of my custom timestamp columns available in my custom log which has the format YYYY-MM-DD-HH:MM:SS (example 2020-02-18-00:13:17). However "create visualizations… --- ## [Create visualization with average of the last 3 weeks](https://discuss.elastic.co/t/create-visualization-with-average-of-the-last-3-weeks/301288)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 9:00am UTC](https://discuss.elastic.co/t/create-visualization-with-average-of-the-last-3-weeks/301288 "2022-04-04T09:00:11Z")
Hello! I would like to know if there is any way to create a visualization in kibana that makes an average of a metric of the last 3 weeks. I attached a simple drawing for better understanding. If someone could help … --- ## [How to use Top\_Hit in a alarm querry](https://discuss.elastic.co/t/how-to-use-top-hit-in-a-alarm-querry/301473)
**Author:** [@mathric](https://discuss.elastic.co/u/mathric)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 8:40am UTC](https://discuss.elastic.co/t/how-to-use-top-hit-in-a-alarm-querry/301473 "2022-04-04T08:40:50Z")
Hi, we use alarms to get notification about missing (or new) machines onbording to our elk. Therefore we querry the docs containing heartbeats for the last 15min and have a look if every machine has more than 12 beats. … --- ## [How to configure metric threshold using elastic query](https://discuss.elastic.co/t/how-to-configure-metric-threshold-using-elastic-query/301307)
**Author:** [@waelboss](https://discuss.elastic.co/u/waelboss)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 8:27am UTC](https://discuss.elastic.co/t/how-to-configure-metric-threshold-using-elastic-query/301307 "2022-04-04T08:27:00Z")
i want to create a metric threshold using the elastic query that calculate the percentage rate between Max value filed and Current value field and fire the alert when the rate \>= 90% could you please help to write the q… --- ## [Elasticsearch performance](https://discuss.elastic.co/t/elasticsearch-performance/301430)
**Author:** [@osamaali2405](https://discuss.elastic.co/u/osamaali2405)\ **Replies:** 5\ **Last updated:** [April 4, 2022, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-performance/301430 "2022-04-04T08:23:23Z")
I have an issue when try to update in Elasticsearch, sometimes it takes more than 10 seconds According to the elastic logs, the overall health check itself takes too long , below example is \> 20 seconds {"type": "serve… --- ## [Help with a visualization](https://discuss.elastic.co/t/help-with-a-visualization/301267)
**Author:** [@edu\_perez\_alvarez](https://discuss.elastic.co/u/edu_perez_alvarez)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 8:15am UTC](https://discuss.elastic.co/t/help-with-a-visualization/301267 "2022-04-04T08:15:00Z")
Hello! I have a simple visualization in a dashboard. X-axis is the @timestamp. Y-axis is a MetricValue of a service. I want to add another visualization (another graphic) with the same X-axis. Here, the MetricValue for … --- ## [How to add hyperlink on pie chart block?](https://discuss.elastic.co/t/how-to-add-hyperlink-on-pie-chart-block/300947)
**Author:** [@varsha\_kamble](https://discuss.elastic.co/u/varsha_kamble)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 8:06am UTC](https://discuss.elastic.co/t/how-to-add-hyperlink-on-pie-chart-block/300947 "2022-04-04T08:06:10Z")
hello there? I need to add hyperlinks on pie chart so that it will redirected to other webpage , any provision to do that ? --- ## [How to Reduce Received Logs Size in ELK Stack?](https://discuss.elastic.co/t/how-to-reduce-received-logs-size-in-elk-stack/301066)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 31\ **Last updated:** [April 4, 2022, 7:56am UTC](https://discuss.elastic.co/t/how-to-reduce-received-logs-size-in-elk-stack/301066 "2022-04-04T07:56:54Z")
Hi, I would like to ask, any way we can compress / dedup the sizes of the logs that we received in ELK stack? Thanks. --- ## [Can I have only one master eligible node in elasticsearch](https://discuss.elastic.co/t/can-i-have-only-one-master-eligible-node-in-elasticsearch/301461)
**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 7:39am UTC](https://discuss.elastic.co/t/can-i-have-only-one-master-eligible-node-in-elasticsearch/301461 "2022-04-04T07:39:46Z")
I am getting following log message when my single master eligible node goes down and then starts again in ecs. Is it possible to have a cluster with only one master eligible node? What is the ideal number of master e… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=986) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=988)