# Latest **URL:** https://discuss.elastic.co/latest.md?page=1186 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1187 --- ## [Issue with logstash (1:7.17.1-1) service on Ubuntu 18.04.3 LTS](https://discuss.elastic.co/t/issue-with-logstash-1-7-17-1-1-service-on-ubuntu-18-04-3-lts/299460)
**Author:** [@rahulgupta18](https://discuss.elastic.co/u/rahulgupta18)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 6:30pm UTC](https://discuss.elastic.co/t/issue-with-logstash-1-7-17-1-1-service-on-ubuntu-18-04-3-lts/299460 "2022-04-04T18:30:06Z")
Hi Team, I have deployed a 2-node ELK stack cluster where I can successfully login to kibana instance with my superuser credentials. All of the ELK components (running on same Ubuntu VM) including metricbeats is runnin… --- ## [Reference Tables in Elastic](https://discuss.elastic.co/t/reference-tables-in-elastic/301369)
**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\ **Replies:** 7\ **Last updated:** [April 4, 2022, 6:24pm UTC](https://discuss.elastic.co/t/reference-tables-in-elastic/301369 "2022-04-04T18:24:12Z")
Scenario: I have a multi-field index which stores documents, 'index a', which has a field "id" whose value is a hexadecimal number i have another index 'b' which stores a list of id's and their corresponding string nam… --- ## [Log ingestion to Elastic Cloud not working with ECS Fargate](https://discuss.elastic.co/t/log-ingestion-to-elastic-cloud-not-working-with-ecs-fargate/300762)
**Author:** [@Gabriel\_Carvalho](https://discuss.elastic.co/u/Gabriel_Carvalho)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 6:23pm UTC](https://discuss.elastic.co/t/log-ingestion-to-elastic-cloud-not-working-with-ecs-fargate/300762 "2022-04-04T18:23:48Z")
Hi everyone! I am trying to send logs of my apps running on an ECS Fargate Cluster to Elastic Cloud. I am using aws firelens logging driver and fluentbit as log router, I followed Elastic Cloud's documentation and every… --- ## [Elastic Training CTF password reset](https://discuss.elastic.co/t/elastic-training-ctf-password-reset/301550)
**Author:** [@karlaugust.j.smith](https://discuss.elastic.co/u/karlaugust.j.smith)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 6:12pm UTC](https://discuss.elastic.co/t/elastic-training-ctf-password-reset/301550 "2022-04-04T18:12:19Z")
Unable to log into CTF for Protocol Analysis course. Training Operations referred me to the Discuss Forum. Does anyone know who to contact for a password reset? Thanks --- ## [Is it possible to exclude the geo\_shape match field in a geo\_match enrich policy?](https://discuss.elastic.co/t/is-it-possible-to-exclude-the-geo-shape-match-field-in-a-geo-match-enrich-policy/301007)
**Author:** [@Joseph\_Parish](https://discuss.elastic.co/u/Joseph_Parish)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 6:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-exclude-the-geo-shape-match-field-in-a-geo-match-enrich-policy/301007 "2022-04-04T18:00:23Z")
I am following this example and excluded the match\_field from the enrich\_fields (the example includes the match\_field in the array) but the match\_field still shows up in the target\_field. The reason for exclusion is that… --- ## [IIS - Taken time - event.duration?](https://discuss.elastic.co/t/iis-taken-time-event-duration/301546)
**Author:** [@mgfeal](https://discuss.elastic.co/u/mgfeal)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 5:56pm UTC](https://discuss.elastic.co/t/iis-taken-time-event-duration/301546 "2022-04-04T17:56:02Z")
Hi, I was reading this topic: And we also use to put in our dashboards the "Taken Time" from IIS. So, is correct that event.duration is the value for taken time? If it's not correct, how can we use it? Thanks! --- ## [Unable to use MySQLdb cursor execute function after instantiating ElasticAPM in Flask](https://discuss.elastic.co/t/unable-to-use-mysqldb-cursor-execute-function-after-instantiating-elasticapm-in-flask/301403)
**Author:** [@ibbyzj](https://discuss.elastic.co/u/ibbyzj)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 5:48pm UTC](https://discuss.elastic.co/t/unable-to-use-mysqldb-cursor-execute-function-after-instantiating-elasticapm-in-flask/301403 "2022-04-04T17:48:34Z")
Hello Team, I am using APM flask client in my Flask APP. After I instantiate the apm object, I am unable to use existing MySQLdb function in my app, below is how I instantiate the class. apm = ElasticAPM(app) The erro… --- ## [Unable to send data from metricbeat to logstash](https://discuss.elastic.co/t/unable-to-send-data-from-metricbeat-to-logstash/301523)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 5:46pm UTC](https://discuss.elastic.co/t/unable-to-send-data-from-metricbeat-to-logstash/301523 "2022-04-04T17:46:53Z")
Hello , Can someone help in this,I'm unable to send data from metricbeat to logstash. Below are the configurations: metricbeat.config.modules: path: ${path.config}/modules.d/\*.yml reload.enabled: false setup.kiban… --- ## [Which NEST version should i use with the latest 8.1 Elastic?](https://discuss.elastic.co/t/which-nest-version-should-i-use-with-the-latest-8-1-elastic/301458)
**Author:** [@Suat\_Kose](https://discuss.elastic.co/u/Suat_Kose)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 5:13pm UTC](https://discuss.elastic.co/t/which-nest-version-should-i-use-with-the-latest-8-1-elastic/301458 "2022-04-04T17:13:45Z")
Hi, We use NEST 6.8.0 with 6.8.4 Elasticsearch. We are upgrading our Elasticsearch version to 8.1. Should we use this client ?NuGet Gallery | Elastic.Clients.Elasticsearch 8.0.0-alpha.4 Is this alpha version recommende… --- ## [Running 2x 4 Node Cluster Using Docker, Advice with Hardware and Approach](https://discuss.elastic.co/t/running-2x-4-node-cluster-using-docker-advice-with-hardware-and-approach/301540)
**Author:** [@webscrapinglife](https://discuss.elastic.co/u/webscrapinglife)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 4:24pm UTC](https://discuss.elastic.co/t/running-2x-4-node-cluster-using-docker-advice-with-hardware-and-approach/301540 "2022-04-04T16:24:34Z")
Hi everyone, i'm looking for some input/feedback /guidance on how i use elastic both from a hardware point of view and how i utilising docker. First everything below has grown from self interest, i don't operate a busin… --- ## [Edit pre-build rule](https://discuss.elastic.co/t/edit-pre-build-rule/301515)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 4:08pm UTC](https://discuss.elastic.co/t/edit-pre-build-rule/301515 "2022-04-04T16:08:28Z")
Hi, Is it possible to edit pre-build rules? I would like to configure the output action (index connector) for each pre-build rule. It depends on the license? My current stack version: 7.16.2 Thx --- ## [Logstash kv plugin is not working](https://discuss.elastic.co/t/logstash-kv-plugin-is-not-working/300548)
**Author:** [@mmk1995](https://discuss.elastic.co/u/mmk1995)\ **Replies:** 10\ **Last updated:** [April 4, 2022, 3:36pm UTC](https://discuss.elastic.co/t/logstash-kv-plugin-is-not-working/300548 "2022-04-04T15:36:42Z")
I am using ELK 7.6.2 The problem is when I remove the kv plugin, there is log loaded to Elasticsearch, when I add kv plugin, there is zero data can be loaded to Elasticsearch. Moreover, there is no error is logged in t… --- ## [Unable to activate GOLD license](https://discuss.elastic.co/t/unable-to-activate-gold-license/301524)
**Author:** [@discuss\_lipak](https://discuss.elastic.co/u/discuss_lipak)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 2:37pm UTC](https://discuss.elastic.co/t/unable-to-activate-gold-license/301524 "2022-04-04T14:37:43Z")
We are having Elasticsearch GOLD license for our org and we are trying to install the license with security disabled. But we are getting error "Cannot install a \[GOLD\] license unless TLS is configured or security is dis… --- ## [Docker Compose file with 3 ES nodes Logstash and Kibana -updated 2022](https://discuss.elastic.co/t/docker-compose-file-with-3-es-nodes-logstash-and-kibana-updated-2022/301527)
**Author:** [@Lupul\_Dacic](https://discuss.elastic.co/u/Lupul_Dacic)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 2:34pm UTC](https://discuss.elastic.co/t/docker-compose-file-with-3-es-nodes-logstash-and-kibana-updated-2022/301527 "2022-04-04T14:34:54Z")
Hi team, Could you please provide me an example of a docker-compose.yml file with an updated version without certs? I was able to find only obsolete version that in reality do not work correctly. In my case neither th… --- ## [I have a problem when I want to send logs of clamav-0.104.2.linux.x86\_64 to EK version 7.14.2 , ubuntu 20.04](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-clamav-0-104-2-linux-x86-64-to-ek-version-7-14-2-ubuntu-20-04/297611)
**Author:** [@khouloud1](https://discuss.elastic.co/u/khouloud1)\ **Replies:** 9\ **Last updated:** [April 4, 2022, 2:31pm UTC](https://discuss.elastic.co/t/i-have-a-problem-when-i-want-to-send-logs-of-clamav-0-104-2-linux-x86-64-to-ek-version-7-14-2-ubuntu-20-04/297611 "2022-04-04T14:31:12Z")
I have a problem when I want to send logs of clamav-0.104.2.linux.x86\_64 to EK version 7.14.2 I did configure PFSense to send logsto EK but I did not find the best procedure to configure Elasticsearch and Kibana (7.14.2… --- ## [Heartbeat subcommands unable to run on 7.17.x and 8.0.x docker images](https://discuss.elastic.co/t/heartbeat-subcommands-unable-to-run-on-7-17-x-and-8-0-x-docker-images/299630)
**Author:** [@cdavid15](https://discuss.elastic.co/u/cdavid15)\ **Replies:** 7\ **Last updated:** [April 4, 2022, 1:45pm UTC](https://discuss.elastic.co/t/heartbeat-subcommands-unable-to-run-on-7-17-x-and-8-0-x-docker-images/299630 "2022-04-04T13:45:17Z")
Hi all, I am trying to run the heartbeat setup but I am getting the following error only on the 7.17.0, 7.17.1 and 8.0.0 docker images: /usr/local/bin/docker-entrypoint: line 25: exec: setup: not found It appears the … --- ## [FIlebeat modules proxy](https://discuss.elastic.co/t/filebeat-modules-proxy/301506)
**Author:** [@grumo35](https://discuss.elastic.co/u/grumo35)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-modules-proxy/301506 "2022-04-04T13:14:01Z")
Hey, I was wondering if it was possible to include proxy settings for o365 module or any other module that need to perform requests online ? looks like envars and proxy\_url are not working. Is it possible to implement… --- ## [How to calculate variance in a data table visualization](https://discuss.elastic.co/t/how-to-calculate-variance-in-a-data-table-visualization/301501)
**Author:** [@AICHP](https://discuss.elastic.co/u/AICHP)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 11:37am UTC](https://discuss.elastic.co/t/how-to-calculate-variance-in-a-data-table-visualization/301501 "2022-04-04T11:37:26Z")
Hi All, This is prosenjit . I am a new to Kibana. I am trying to develope dashboards and visualization in Kibana hosted in Peoplesoft 9.2 FSCM suite. Version :- 7.10 In my current requirement I need to calulate a vari… --- ## [Mapping\_data with 2 index](https://discuss.elastic.co/t/mapping-data-with-2-index/300495)
**Author:** [@wdffw](https://discuss.elastic.co/u/wdffw)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 11:41am UTC](https://discuss.elastic.co/t/mapping-data-with-2-index/300495 "2022-04-04T11:41:10Z")
Hello, I have a question about kibana and any help is welcome, I'm stuck on this for a week. I have two indexes (index1 and index2 let's say) and I want to create a mapping in index1 which has as name change and whose … --- ## [Metricbeat jolokia module jmx.application|instance](https://discuss.elastic.co/t/metricbeat-jolokia-module-jmx-application-instance/301500)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 11:24am UTC](https://discuss.elastic.co/t/metricbeat-jolokia-module-jmx-application-instance/301500 "2022-04-04T11:24:40Z")
The metricbeat v.8.1 module jolokia speaks not much about these: jmx.application: jmx.instance: what are they meant for? --- ## [Elastic Cloud - Too many shards - Help to fix it](https://discuss.elastic.co/t/elastic-cloud-too-many-shards-help-to-fix-it/301419)
**Author:** [@mgfeal](https://discuss.elastic.co/u/mgfeal)\ **Replies:** 4\ **Last updated:** [April 4, 2022, 11:20am UTC](https://discuss.elastic.co/t/elastic-cloud-too-many-shards-help-to-fix-it/301419 "2022-04-04T11:20:09Z")
Hello, We have definitely contracted Elastic Cloud. And we've started building integrations for IIS, which collect access and error logs, and IIS metrics as well. When we had added about 5 such integrations, Elastic st… --- ## [Query using NEST API if a point (Lat/lng) falls within a Polygon](https://discuss.elastic.co/t/query-using-nest-api-if-a-point-lat-lng-falls-within-a-polygon/301498)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 11:10am UTC](https://discuss.elastic.co/t/query-using-nest-api-if-a-point-lat-lng-falls-within-a-polygon/301498 "2022-04-04T11:10:53Z")
Say we have an index that has a field of geo\_shape and in it are the co-ordinates of a polygon. How do I query to return all documents that have the point described by a lat/lng(not a field value but just a pair of valu… --- ## [8.1.1 Cannot display Logstash pipeline in monitoring UI](https://discuss.elastic.co/t/8-1-1-cannot-display-logstash-pipeline-in-monitoring-ui/300554)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 17\ **Last updated:** [April 4, 2022, 10:54am UTC](https://discuss.elastic.co/t/8-1-1-cannot-display-logstash-pipeline-in-monitoring-ui/300554 "2022-04-04T10:54:29Z")
I have migrated the Elastic stack from 7.17.1 to 8.1.1. After the upgrade everything works fine, except the Kibana monitoring logstash pipeline viewer UI. stack monitoring \> logstash \> pipelines pipeline main points… --- ## [Elasticsearch API throws search\_phase\_execution\_exception error](https://discuss.elastic.co/t/elasticsearch-api-throws-search-phase-execution-exception-error/301495)
**Author:** [@itsakiridisfs](https://discuss.elastic.co/u/itsakiridisfs)\ **Replies:** 0\ **Last updated:** [April 4, 2022, 10:42am UTC](https://discuss.elastic.co/t/elasticsearch-api-throws-search-phase-execution-exception-error/301495 "2022-04-04T10:42:52Z")
Hello, we are using the Elasticsearch API, to do an aggregation with two fields and we get the following error: Merging/Reducing the multi\_term aggregations failed when computing the aggregation GroupByLevel & GroupByPro… --- ## [Querying a field name across multiple indices for identical value](https://discuss.elastic.co/t/querying-a-field-name-across-multiple-indices-for-identical-value/301436)
**Author:** [@sectorx](https://discuss.elastic.co/u/sectorx)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 10:24am UTC](https://discuss.elastic.co/t/querying-a-field-name-across-multiple-indices-for-identical-value/301436 "2022-04-04T10:24:48Z")
I was hoping someone can offer a level of guidance. I have an Elasticsearch Enterprise cluster which is made up of three servers. My question is actually a basic one. There are two indices that I have - a) okta-ioc-i… --- ## [How to secure access to Kibana?](https://discuss.elastic.co/t/how-to-secure-access-to-kibana/301464)
**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 10:20am UTC](https://discuss.elastic.co/t/how-to-secure-access-to-kibana/301464 "2022-04-04T10:20:14Z")
Hi to everyone I have made an installation of ELK stack version 8.1 on three different servers (one for Kibana, one for Logstash and one for Elasticsearch) I have reviewed the documentation and I have seen that to inte… --- ## [We can’t establish a connection to Enterprise Search at the host URL: https://myip:3002](https://discuss.elastic.co/t/we-can-t-establish-a-connection-to-enterprise-search-at-the-host-url-https-myip-3002/300711)
**Author:** [@bibilena](https://discuss.elastic.co/u/bibilena)\ **Replies:** 5\ **Last updated:** [April 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/we-can-t-establish-a-connection-to-enterprise-search-at-the-host-url-https-myip-3002/300711 "2022-04-04T10:03:46Z")
hello, I have a problem my Kibana and my enterprise search can't establish connection but in the log enterprise search said he is successfully connected to Kibana. I can connect to https://myip:3002, https://myip:5601 a… --- ## [How documents is retrieved if we are not using \_routing](https://discuss.elastic.co/t/how-documents-is-retrieved-if-we-are-not-using-routing/301479)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [April 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/how-documents-is-retrieved-if-we-are-not-using-routing/301479 "2022-04-04T10:03:23Z")
I have an index with 3 primary and 1 replicas,total 6 shards for an index. I sent 5 messages to Elasticsearch cluster and these messages is distributed among 5 different shards. As a client i am curious how a client ca… --- ## [Watcher keeps firing when created via watcher api](https://discuss.elastic.co/t/watcher-keeps-firing-when-created-via-watcher-api/300204)
**Author:** [@gerardpeters](https://discuss.elastic.co/u/gerardpeters)\ **Replies:** 1\ **Last updated:** [April 4, 2022, 10:01am UTC](https://discuss.elastic.co/t/watcher-keeps-firing-when-created-via-watcher-api/300204 "2022-04-04T10:01:59Z")
Hi, I've got several watcher that watch the metrics of kafka. Now something strange happens. When I create the watch via de API the watch keeps firing. When I manually save the watcher the status becomes OK. I tried cop… --- ## [Java Apm Agent - Spring4Shell](https://discuss.elastic.co/t/java-apm-agent-spring4shell/301477)
**Author:** [@Amar\_Sharma](https://discuss.elastic.co/u/Amar_Sharma)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 9:59am UTC](https://discuss.elastic.co/t/java-apm-agent-spring4shell/301477 "2022-04-04T09:59:23Z")
Hi Team , We are using APM Agent 1.28.1. We would like to know if this version is impacted by Spring Framework RCE vulnerability \[CVE-2022-22965\] - https://tanzu.vmware.com/security/cve-2022-22965 [Previous page](https://discuss.elastic.co/latest.md?page=1185) [Next page](https://discuss.elastic.co/latest.md?page=1187)