# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1188

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1189

---

## [Indexing a Circle (geoshape) Using NEST](https://discuss.elastic.co/t/indexing-a-circle-geoshape-using-nest/301421)

<div class="topic-metadata">

**Author:** [@xef](https://discuss.elastic.co/u/xef)\
**Replies:** 10\
**Last updated:** [April 4, 2022, 5:33am UTC](https://discuss.elastic.co/t/indexing-a-circle-geoshape-using-nest/301421 "2022-04-04T05:33:02Z")

</div>

Is there anyway of Indexing a Circle i.e. just have the lat/lng and a radius without first having to create a geojson polygon that represents it. i.e. just using its center lat/lng and its radius. Thanks.

---

## [Parent-Child Relationship performance](https://discuss.elastic.co/t/parent-child-relationship-performance/301416)

<div class="topic-metadata">

**Author:** [@sanders\_2345](https://discuss.elastic.co/u/sanders_2345)\
**Replies:** 0\
**Last updated:** [April 3, 2022, 8:17am UTC](https://discuss.elastic.co/t/parent-child-relationship-performance/301416 "2022-04-03T08:17:16Z")

</div>

We've one usecase to implement where we want to maintain a relationship between two types of documents. We tried to put in the same document but the document size exceeding 200kb. So we're exploring parent-child relation…

---

## [Apm-server config in docker compose with ES and Kibana](https://discuss.elastic.co/t/apm-server-config-in-docker-compose-with-es-and-kibana/301227)

<div class="topic-metadata">

**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\
**Replies:** 3\
**Last updated:** [April 4, 2022, 1:06am UTC](https://discuss.elastic.co/t/apm-server-config-in-docker-compose-with-es-and-kibana/301227 "2022-04-04T01:06:27Z")

</div>

Kibana version : 8.0.0 Elasticsearch version : 8.0.0 APM Server version : 8.0.0 APM Agent language and version : Java 1.28.0 Browser version : Chrome Original install method (e.g. download page, yum, deb, from sourc…

---

## [Enabled building block option on rule but still mamy tickets](https://discuss.elastic.co/t/enabled-building-block-option-on-rule-but-still-mamy-tickets/301387)

<div class="topic-metadata">

**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\
**Replies:** 0\
**Last updated:** [April 2, 2022, 12:02pm UTC](https://discuss.elastic.co/t/enabled-building-block-option-on-rule-but-still-mamy-tickets/301387 "2022-04-02T12:02:33Z")

</div>

The main pain for our analyst is noise. For instance we have brute force rules if it matches 100+ hits we need to get one ticket but we are getting 100 tickets generated on out ticketing tool zendesk. I have even enabled…

---

## [How to upgrade ElasticSearch In \`docker-compose.yml\`](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-in-docker-compose-yml/301408)

<div class="topic-metadata">

**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 12:52am UTC](https://discuss.elastic.co/t/how-to-upgrade-elasticsearch-in-docker-compose-yml/301408 "2022-04-04T00:52:51Z")

</div>

According to Upgrade Elasticsearch | Elastic Installation and Upgrade Guide \[8.1\] | Elastic , if I wish to update the ElasticSearch instance started within docker-compose.yml, do I just need to stop all The insert data…

---

## [The consequences of manually changing the mapping of the destination index after reindexing has started](https://discuss.elastic.co/t/the-consequences-of-manually-changing-the-mapping-of-the-destination-index-after-reindexing-has-started/301245)

<div class="topic-metadata">

**Author:** [@Lala\_D](https://discuss.elastic.co/u/Lala_D)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 12:42am UTC](https://discuss.elastic.co/t/the-consequences-of-manually-changing-the-mapping-of-the-destination-index-after-reindexing-has-started/301245 "2022-04-04T00:42:34Z")

</div>

Hello everyone! I am new to Elasticsearch and will highly appreciate any reply. My task is to do reindexing. Without configuring settings, mappings or even creating the destination index, I started reindexing straight…

---

## [Changing path to which pv is pointing](https://discuss.elastic.co/t/changing-path-to-which-pv-is-pointing/301311)

<div class="topic-metadata">

**Author:** [@shisir99](https://discuss.elastic.co/u/shisir99)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 12:41am UTC](https://discuss.elastic.co/t/changing-path-to-which-pv-is-pointing/301311 "2022-04-04T00:41:32Z")

</div>

Hello, I want to change the path to which the following pv is pointing. I am using Elasticsearch helm chart provided by elastic.co

---

## [APM Server failed to index event (security\_exception): action \[indices:admin/auto\_create\] is unauthorized for user](https://discuss.elastic.co/t/apm-server-failed-to-index-event-security-exception-action-indices-admin-auto-create-is-unauthorized-for-user/301322)

<div class="topic-metadata">

**Author:** [@CodeToElastic](https://discuss.elastic.co/u/CodeToElastic)\
**Replies:** 0\
**Last updated:** [April 1, 2022, 12:58pm UTC](https://discuss.elastic.co/t/apm-server-failed-to-index-event-security-exception-action-indices-admin-auto-create-is-unauthorized-for-user/301322 "2022-04-01T12:58:48Z")

</div>

Kibana version: 8.0.0 Elasticsearch version: 8.0.0 APM Server version: 8.0.0 APM Agent language and version: JAVA 11 Browser version: Chrome Original install method (e.g. download page, yum, deb, from source, etc.) …

---

## [Index old zip files along with new files with index life management](https://discuss.elastic.co/t/index-old-zip-files-along-with-new-files-with-index-life-management/301324)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 12:40am UTC](https://discuss.elastic.co/t/index-old-zip-files-along-with-new-files-with-index-life-management/301324 "2022-04-04T00:40:07Z")

</div>

i am indexing files collected by syslog server using filebeat. And those indexes are given index life management as to create new indexes by appending current date when the size of the index file reaches 50Gb But i have…

---

## [Elasticsearch cloud returning errors on each query](https://discuss.elastic.co/t/elasticsearch-cloud-returning-errors-on-each-query/301331)

<div class="topic-metadata">

**Author:** [@Munashe\_komichi](https://discuss.elastic.co/u/Munashe_komichi)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 12:36am UTC](https://discuss.elastic.co/t/elasticsearch-cloud-returning-errors-on-each-query/301331 "2022-04-04T00:36:49Z")

</div>

Trying to run queries with Elasticsearch but getting errors, help would be appreciated! elasticsearch.exceptions.AuthorizationException: AuthorizationException(403, 'security\_exception', 'action \[indices:data/write/ind…

---

## [Logging on startup](https://discuss.elastic.co/t/logging-on-startup/301354)

<div class="topic-metadata">

**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 12:35am UTC](https://discuss.elastic.co/t/logging-on-startup/301354 "2022-04-04T00:35:28Z")

</div>

Does logging, including login that the application is starting, begin on startup or does it start some time after? If so is this documented anywhere?

---

## [JVM heap size arguments](https://discuss.elastic.co/t/jvm-heap-size-arguments/301343)

<div class="topic-metadata">

**Author:** [@Leo\_Collette](https://discuss.elastic.co/u/Leo_Collette)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 12:35am UTC](https://discuss.elastic.co/t/jvm-heap-size-arguments/301343 "2022-04-04T00:35:05Z")

</div>

hello guys, in my system we adopted a pattern of adjusting the heap size parameter to 1G, but over time the service ends up consuming more than this value, is this ok or not? another question, does adjusting a limit for …

---

## [Strong authentication](https://discuss.elastic.co/t/strong-authentication/301355)

<div class="topic-metadata">

**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\
**Replies:** 0\
**Last updated:** [April 1, 2022, 4:59pm UTC](https://discuss.elastic.co/t/strong-authentication/301355 "2022-04-01T16:59:29Z")

</div>

Does the Native Realm use strong authentication like Kerberos, IPSEC, or Secure Shell (SSH)? Is that documented somewhere?

---

## [Unable to setup filebeat dashboard on kibana](https://discuss.elastic.co/t/unable-to-setup-filebeat-dashboard-on-kibana/301265)

<div class="topic-metadata">

**Author:** [@spo](https://discuss.elastic.co/u/spo)\
**Replies:** 3\
**Last updated:** [April 4, 2022, 12:30am UTC](https://discuss.elastic.co/t/unable-to-setup-filebeat-dashboard-on-kibana/301265 "2022-04-04T00:30:21Z")

</div>

HI I have filebeat on a ec2 windows instance.I am trying to pull IIS logs .Elasticsearch, Kibana are in docker containers on an ubuntu instance.Filebeat is not in docker. So when i try to setup filebeat dashboard on kib…

---

## [Index life cycle policy to delete indices](https://discuss.elastic.co/t/index-life-cycle-policy-to-delete-indices/300649)

<div class="topic-metadata">

**Author:** [@tkotthakota](https://discuss.elastic.co/u/tkotthakota)\
**Replies:** 14\
**Last updated:** [April 4, 2022, 12:29am UTC](https://discuss.elastic.co/t/index-life-cycle-policy-to-delete-indices/300649 "2022-04-04T00:29:43Z")

</div>

Hi, I created below policy to delete old indices. I notice that old indices are getting deleted but slowly . Meaning the count went down from 695 to 573 in 1 hour. Is it normal? PUT \_ilm/policy/QA\_only\_cleanup\_old\_indic…

---

## [Heartbeat behind proxy](https://discuss.elastic.co/t/heartbeat-behind-proxy/301194)

<div class="topic-metadata">

**Author:** [@sulfred](https://discuss.elastic.co/u/sulfred)\
**Replies:** 2\
**Last updated:** [April 3, 2022, 11:15pm UTC](https://discuss.elastic.co/t/heartbeat-behind-proxy/301194 "2022-04-03T23:15:03Z")

</div>

I am running heartbeat in a container. The version of the heartbeat is heartbeat:8.1.0. My heartbeat is running behind the proxy and output to the elastic cloud. In the docker-compose.yml environment: HTTP\_PROXY: "ht…

---

## [Basic Authentication not working via python client](https://discuss.elastic.co/t/basic-authentication-not-working-via-python-client/301435)

<div class="topic-metadata">

**Author:** [@tfinan](https://discuss.elastic.co/u/tfinan)\
**Replies:** 2\
**Last updated:** [April 3, 2022, 9:55pm UTC](https://discuss.elastic.co/t/basic-authentication-not-working-via-python-client/301435 "2022-04-03T21:55:12Z")

</div>

I have been experimenting with some very simply python code to interact with Elasticsearch. Up until a couple of days ago, everything was working great. I could add data to an index, read from the index, search, etc...…

---

## [After deleting an index and creating new index with same name, new data is visible for sometime after than old data is coming](https://discuss.elastic.co/t/after-deleting-an-index-and-creating-new-index-with-same-name-new-data-is-visible-for-sometime-after-than-old-data-is-coming/301423)

<div class="topic-metadata">

**Author:** [@sona](https://discuss.elastic.co/u/sona)\
**Replies:** 2\
**Last updated:** [April 3, 2022, 6:10pm UTC](https://discuss.elastic.co/t/after-deleting-an-index-and-creating-new-index-with-same-name-new-data-is-visible-for-sometime-after-than-old-data-is-coming/301423 "2022-04-03T18:10:38Z")

</div>

I have deleted an index from my Elasticsearch and created the new index with same name. When I am trying to get doc.count using below command then initially it is showing 0 curl -X GET "localhost:9200/\_cat/indices?v&pr…

---

## [Connection refused elasticsearch port 9200 on ubuntu 20.04](https://discuss.elastic.co/t/connection-refused-elasticsearch-port-9200-on-ubuntu-20-04/301335)

<div class="topic-metadata">

**Author:** [@danielbsilva2](https://discuss.elastic.co/u/danielbsilva2)\
**Replies:** 12\
**Last updated:** [April 3, 2022, 5:15pm UTC](https://discuss.elastic.co/t/connection-refused-elasticsearch-port-9200-on-ubuntu-20-04/301335 "2022-04-03T17:15:11Z")

</div>

good afternoon guys my English is not very good but I will try to explain myself I have a test server here at digitalocean with ubuntu 20.04 and I installed Elasticsearch for log collection on this same test server but …

---

## [Logstash pipeline running but not loading the data](https://discuss.elastic.co/t/logstash-pipeline-running-but-not-loading-the-data/301427)

<div class="topic-metadata">

**Author:** [@acozme](https://discuss.elastic.co/u/acozme)\
**Replies:** 2\
**Last updated:** [April 3, 2022, 3:02pm UTC](https://discuss.elastic.co/t/logstash-pipeline-running-but-not-loading-the-data/301427 "2022-04-03T15:02:27Z")

</div>

Hello! I'm starting to learn Elastick Stack. Right now I'm trying to load some data from a csv file from a tutorial. I think everything is ok, the pipeline is running but no data is loaded to Elastic. This is the conf f…

---

## [Elastic search complex query](https://discuss.elastic.co/t/elastic-search-complex-query/301399)

<div class="topic-metadata">

**Author:** [@Hassan\_Shaitou](https://discuss.elastic.co/u/Hassan_Shaitou)\
**Replies:** 5\
**Last updated:** [April 3, 2022, 2:15pm UTC](https://discuss.elastic.co/t/elastic-search-complex-query/301399 "2022-04-03T14:15:03Z")

</div>

So, let us say I have 2 indices users and products. Within users I have the following format: users: { uid:"00001", name:"Hash", country:"US" }, Within the products I have the following format: product: { prod…

---

## [Aliases and indices on demand](https://discuss.elastic.co/t/aliases-and-indices-on-demand/298625)

<div class="topic-metadata">

**Author:** [@Metheny](https://discuss.elastic.co/u/Metheny)\
**Replies:** 10\
**Last updated:** [April 3, 2022, 1:08pm UTC](https://discuss.elastic.co/t/aliases-and-indices-on-demand/298625 "2022-04-03T13:08:08Z")

</div>

We have many indices in our system, and we're following the general guideline to create indices only on demand. We're also starting to use aliases to allow for rollover and for background data migrations (using the inde…

---

## [Oracle vs elastic](https://discuss.elastic.co/t/oracle-vs-elastic/301256)

<div class="topic-metadata">

**Author:** [@dridk](https://discuss.elastic.co/u/dridk)\
**Replies:** 1\
**Last updated:** [April 3, 2022, 11:49am UTC](https://discuss.elastic.co/t/oracle-vs-elastic/301256 "2022-04-03T11:49:13Z")

</div>

Bonjour, Je decouvre un peu elastic et j'aimerai bien votre avis. Je dois réaliser une moteur de recherche, type google, sur des documents non structurés déjà présent dans une base de données oracle. Ce sont des donnée…

---

## [Unable to connect to Enterprise Search from Kibana - Connection Refused](https://discuss.elastic.co/t/unable-to-connect-to-enterprise-search-from-kibana-connection-refused/301411)

<div class="topic-metadata">

**Author:** [@Abraham\_Dika](https://discuss.elastic.co/u/Abraham_Dika)\
**Replies:** 0\
**Last updated:** [April 3, 2022, 4:00am UTC](https://discuss.elastic.co/t/unable-to-connect-to-enterprise-search-from-kibana-connection-refused/301411 "2022-04-03T04:00:26Z")

</div>

Hi ELK Team, I set up Elastic stack in separate docker containers on my local machine. It is build based on the following Github repository: https://github.com/deviantony/docker-elk below is \*\*\* Docker-compose file…

---

## [The new variable in the filter ruby event must be set() before it can be used?](https://discuss.elastic.co/t/the-new-variable-in-the-filter-ruby-event-must-be-set-before-it-can-be-used/301406)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [April 3, 2022, 4:08am UTC](https://discuss.elastic.co/t/the-new-variable-in-the-filter-ruby-event-must-be-set-before-it-can-be-used/301406 "2022-04-03T04:08:51Z")

</div>

ruby { code =\> " pubtime\_new = event.get('\[pubtime\]').to\_i \* 1000 event.set('pubtime\_new',pubtime\_new) \>\>\>\> If I don't register pubtime\_new then below can't get the value of pubtime\_new.…

---

## [How to Increase timeout for kibana file upload](https://discuss.elastic.co/t/how-to-increase-timeout-for-kibana-file-upload/301407)

<div class="topic-metadata">

**Author:** [@fawazahmed0](https://discuss.elastic.co/u/fawazahmed0)\
**Replies:** 1\
**Last updated:** [April 3, 2022, 1:45am UTC](https://discuss.elastic.co/t/how-to-increase-timeout-for-kibana-file-upload/301407 "2022-04-03T01:45:33Z")

</div>

Hi I am getting started with Elasticsearch and I would like to import a csv file into Elasticsearch index. The problem is that, it is getting timeout error (file size is around 8mb). How would I increase the timeout…

---

## [Assign Email Connector to Multiple Rules](https://discuss.elastic.co/t/assign-email-connector-to-multiple-rules/301148)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 1\
**Last updated:** [April 2, 2022, 10:05pm UTC](https://discuss.elastic.co/t/assign-email-connector-to-multiple-rules/301148 "2022-04-02T22:05:35Z")

</div>

Is there a way to assign the Email connector to multiple detection rule actions at once? Or do you have to set these rule actions for each individual rule? The documentation seems to indicate the latter, but this doesn't…

---

## [Elasticsearch alerting free for MS Teams](https://discuss.elastic.co/t/elasticsearch-alerting-free-for-ms-teams/301400)

<div class="topic-metadata">

**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\
**Replies:** 1\
**Last updated:** [April 2, 2022, 8:42pm UTC](https://discuss.elastic.co/t/elasticsearch-alerting-free-for-ms-teams/301400 "2022-04-02T20:42:43Z")

</div>

Hi All, I would like to know whether Alerting to MS Teams is available for free (basic) in any version of Elasticsearch. Please confirm on this.

---

## [Duplicate Tokens in elasticsearch uax\_url\_email tokenizer](https://discuss.elastic.co/t/duplicate-tokens-in-elasticsearch-uax-url-email-tokenizer/301398)

<div class="topic-metadata">

**Author:** [@TheGreatBaldOne](https://discuss.elastic.co/u/TheGreatBaldOne)\
**Replies:** 0\
**Last updated:** [April 2, 2022, 7:02pm UTC](https://discuss.elastic.co/t/duplicate-tokens-in-elasticsearch-uax-url-email-tokenizer/301398 "2022-04-02T19:02:48Z")

</div>

I have created a test index here { "settings" : { "analysis" : { "filter" : { "emailcustom" : { …

---

## [Logstash JSON parser Error](https://discuss.elastic.co/t/logstash-json-parser-error/301389)

<div class="topic-metadata">

**Author:** [@Lupul\_Dacic](https://discuss.elastic.co/u/Lupul_Dacic)\
**Replies:** 5\
**Last updated:** [April 2, 2022, 5:41pm UTC](https://discuss.elastic.co/t/logstash-json-parser-error/301389 "2022-04-02T17:41:38Z")

</div>

Hi guys, I am new to ELK and I need your help in order to parse a JSON file with Logstash. I want to make it available in Kibana. My logstash.conf is input { file { path =\> "/usr/share/logstash/c.json" star…

[Previous page](https://discuss.elastic.co/latest.md?page=1187)

[Next page](https://discuss.elastic.co/latest.md?page=1189)
