# Latest **URL:** https://discuss.elastic.co/latest.md?page=1264 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1265 --- ## [Nearby Search in Elasticsearch app search](https://discuss.elastic.co/t/nearby-search-in-elasticsearch-app-search/294754)
**Author:** [@kabilsharma](https://discuss.elastic.co/u/kabilsharma)\ **Replies:** 3\ **Last updated:** [February 12, 2022, 9:31am UTC](https://discuss.elastic.co/t/nearby-search-in-elasticsearch-app-search/294754 "2022-02-12T09:31:22Z")
.We have a Point of interest data of various categories like restaurant , hotels, temples with Geolocation. We are using Elasticsearch app 7.16 platinum enterprises version. We want to do nearby query on indexed data… --- ## [Use docker to build elastic seal on multiple machines, one on each machine. Then we can monitor them with kibana. Is this a cluster? Is it feasible?](https://discuss.elastic.co/t/use-docker-to-build-elastic-seal-on-multiple-machines-one-on-each-machine-then-we-can-monitor-them-with-kibana-is-this-a-cluster-is-it-feasible/297044)
**Author:** [@Andy\_dufresneguohao](https://discuss.elastic.co/u/Andy_dufresneguohao)\ **Replies:** 1\ **Last updated:** [February 12, 2022, 9:12am UTC](https://discuss.elastic.co/t/use-docker-to-build-elastic-seal-on-multiple-machines-one-on-each-machine-then-we-can-monitor-them-with-kibana-is-this-a-cluster-is-it-feasible/297044 "2022-02-12T09:12:53Z")
I use docker compose to build an ES container on 231 and 184 servers respectively. I want to build a kibana on another machine, and then through kibana Configure Elasticsearch in YML Hosts, let kibana access them through… --- ## [Elastic-Stack7.17 on ubuntu 20.4LTS, still not indexing](https://discuss.elastic.co/t/elastic-stack7-17-on-ubuntu-20-4lts-still-not-indexing/296378)
**Author:** [@Mohammad\_Ramadan\_Abd](https://discuss.elastic.co/u/Mohammad_Ramadan_Abd)\ **Replies:** 10\ **Last updated:** [February 12, 2022, 8:43am UTC](https://discuss.elastic.co/t/elastic-stack7-17-on-ubuntu-20-4lts-still-not-indexing/296378 "2022-02-12T08:43:28Z")
Hello Bro, I have followed up this link How To Install Elasticsearch, Logstash, and Kibana (Elastic Stack) on Ubuntu 20.04 | DigitalOcean to install my elc-stack, and everything went as document explains. But, It stil… --- ## [Update old data from csv python](https://discuss.elastic.co/t/update-old-data-from-csv-python/297034)
**Author:** [@aminedakhlii](https://discuss.elastic.co/u/aminedakhlii)\ **Replies:** 1\ **Last updated:** [February 12, 2022, 7:48am UTC](https://discuss.elastic.co/t/update-old-data-from-csv-python/297034 "2022-02-12T07:48:09Z")
I have a bunch of indices A,B,C,D containing large amounts of data per each let's say 50 million records per index and the record contains data as follows: user: amine, age: 22, state: Michigan and I want to create a … --- ## [Roles not restricting as expected](https://discuss.elastic.co/t/roles-not-restricting-as-expected/295989)
**Author:** [@psmithuk](https://discuss.elastic.co/u/psmithuk)\ **Replies:** 7\ **Last updated:** [February 12, 2022, 7:19am UTC](https://discuss.elastic.co/t/roles-not-restricting-as-expected/295989 "2022-02-12T07:19:01Z")
Hi, I have created a custom read only role for users from my company with the intention that they have read only access to dashboards to consume the data. I have created a custom role on the indices that they need acce… --- ## [Reverse dns lookup for elastic-agent](https://discuss.elastic.co/t/reverse-dns-lookup-for-elastic-agent/296971)
**Author:** [@VoncinaMihael](https://discuss.elastic.co/u/VoncinaMihael)\ **Replies:** 3\ **Last updated:** [February 12, 2022, 3:20am UTC](https://discuss.elastic.co/t/reverse-dns-lookup-for-elastic-agent/296971 "2022-02-12T03:20:45Z")
Hi, I'm trying to find a way to resolve IP to host, for logs ingested from elastic-agents. Within Filebeat i can use dns processor, but i don't know how to do this for agent data... --- ## [Which cert do I use and where do I stick it?](https://discuss.elastic.co/t/which-cert-do-i-use-and-where-do-i-stick-it/297031)
**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\ **Replies:** 0\ **Last updated:** [February 12, 2022, 12:41am UTC](https://discuss.elastic.co/t/which-cert-do-i-use-and-where-do-i-stick-it/297031 "2022-02-12T00:41:06Z")
Remote cluster has a self-signed certificate. Is that the right cert to add to the local cluster and, if so, where do I add that on the local cluster so that the two clusters can trust one another? I'm thinking inside … --- ## [🎉 Elastic 8.0: A new era of speed, scale, relevance, and simplicity](https://discuss.elastic.co/t/elastic-8-0-a-new-era-of-speed-scale-relevance-and-simplicity/297028)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 11:21pm UTC](https://discuss.elastic.co/t/elastic-8-0-a-new-era-of-speed-scale-relevance-and-simplicity/297028 "2022-02-11T23:21:12Z")
:tada: Elastic 8.0 is here: A new era of speed, scale, relevance, and simplicity We are pleased to announce the general availability of Elastic 8.0. With enhancements to Elasticsearch’s vector search capabilities, nativ… --- ## [Filebeat httpjson chained requests](https://discuss.elastic.co/t/filebeat-httpjson-chained-requests/296959)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 9:56pm UTC](https://discuss.elastic.co/t/filebeat-httpjson-chained-requests/296959 "2022-02-11T21:56:55Z")
Hi is there a way to chain multiple httpjson requests? Let's say I need to do a first query to an endpoint to get a hosts lists, and then another one to another url constructed using the hosts that I got from the first q… --- ## [Increase RAM on Kibana 7.6.2](https://discuss.elastic.co/t/increase-ram-on-kibana-7-6-2/296967)
**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 9:45pm UTC](https://discuss.elastic.co/t/increase-ram-on-kibana-7-6-2/296967 "2022-02-11T21:45:39Z")
Hi, It's possible to increase the RAM allocation in Kibana? Currently I'm using the v7.6.2. Thank you in advance. --- ## [ERROR metrics/metrics.go:380](https://discuss.elastic.co/t/error-metrics-metrics-go-380/297026)
**Author:** [@rcts](https://discuss.elastic.co/u/rcts)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 9:43pm UTC](https://discuss.elastic.co/t/error-metrics-metrics-go-380/297026 "2022-02-11T21:43:46Z")
Hello guys, i need help to fix issue. I don't know what to do \< 2022-02-11T21:37:34.802Z ERROR metrics/metrics.go:380 error getting cgroup stats: error fetching stats for controller io: error fetching IO stats: error f… --- ## [License Question: x-pack Modules](https://discuss.elastic.co/t/license-question-x-pack-modules/296975)
**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\ **Replies:** 4\ **Last updated:** [February 11, 2022, 9:42pm UTC](https://discuss.elastic.co/t/license-question-x-pack-modules/296975 "2022-02-11T21:42:19Z")
Hello, I have been struggling to get the netflow module working. The error I keep ending up with is: 2022-02-11T07:49:28.539-0500 ERROR instance/beat.go:1015 Exiting: Failed to start crawler: creating module rel… --- ## [Nginx Upgrade for vulnerability](https://discuss.elastic.co/t/nginx-upgrade-for-vulnerability/297021)
**Author:** [@jwilfreds](https://discuss.elastic.co/u/jwilfreds)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 9:39pm UTC](https://discuss.elastic.co/t/nginx-upgrade-for-vulnerability/297021 "2022-02-11T21:39:36Z")
We have nginx/1.16.1. We need to upgrade to 1.21.0, 1.20.1. Can you pls share any article that describes the upgrade process. I'm a complete newbie to Elastic / Kibana. The tech who installed the server, left the job. I… --- ## [Java api client to implement a complex query](https://discuss.elastic.co/t/java-api-client-to-implement-a-complex-query/295611)
**Author:** [@colddew](https://discuss.elastic.co/u/colddew)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 9:20pm UTC](https://discuss.elastic.co/t/java-api-client-to-implement-a-complex-query/295611 "2022-02-11T21:20:19Z")
I spent much time to try the new Elasticsearch Java client 7.16.3, but it is hard for me to use it, such as must , terms , multi\_match , functions , filter and so on. Can someone please help me in building the query as b… --- ## [Problem in getting percentage in canvas](https://discuss.elastic.co/t/problem-in-getting-percentage-in-canvas/296927)
**Author:** [@dannie-ml](https://discuss.elastic.co/u/dannie-ml)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 9:11pm UTC](https://discuss.elastic.co/t/problem-in-getting-percentage-in-canvas/296927 "2022-02-11T21:11:35Z")
Hi, im having a problem with this expression. What I have done is get the error percentage, i.e, I have for example 643 transactions with 49 errors what I want is the error percentage. The expression work well but when I… --- ## [Cant install es-termstat plugin](https://discuss.elastic.co/t/cant-install-es-termstat-plugin/297016)
**Author:** [@chbrown](https://discuss.elastic.co/u/chbrown)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 9:10pm UTC](https://discuss.elastic.co/t/cant-install-es-termstat-plugin/297016 "2022-02-11T21:10:27Z")
Hi there, Im trying to install this plugin but havent been able to so far. I've tried to download the archive and then run the install with the file path, and running the install with the github url. I get this error for… --- ## [Winlogbeat repeats batches of event logs](https://discuss.elastic.co/t/winlogbeat-repeats-batches-of-event-logs/296519)
**Author:** [@dhelk](https://discuss.elastic.co/u/dhelk)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 8:03pm UTC](https://discuss.elastic.co/t/winlogbeat-repeats-batches-of-event-logs/296519 "2022-02-11T20:03:12Z")
I am testing uploading Windows EVTX to Elastic using Winlogbeat and Logstash, and when opening several evtx files the Winlogbeat will not terminate the processing job, but will instead keep trying to resubmit. I original… --- ## [Logstash document id string does not get evaluated](https://discuss.elastic.co/t/logstash-document-id-string-does-not-get-evaluated/297019)
**Author:** [@Leo\_Baby\_Jacob](https://discuss.elastic.co/u/Leo_Baby_Jacob)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 7:05pm UTC](https://discuss.elastic.co/t/logstash-document-id-string-does-not-get-evaluated/297019 "2022-02-11T19:05:27Z")
To prevent data duplication while injesting data from logstash I am adding a document\_id string for logstash conf with a peopleRowId column. However it does not get evaluated. So in my case I am trying to set document id… --- ## [Node.JS process metrics like GC not getting captured by APM agent](https://discuss.elastic.co/t/node-js-process-metrics-like-gc-not-getting-captured-by-apm-agent/295344)
**Author:** [@satpreetsn](https://discuss.elastic.co/u/satpreetsn)\ **Replies:** 7\ **Last updated:** [February 11, 2022, 6:48pm UTC](https://discuss.elastic.co/t/node-js-process-metrics-like-gc-not-getting-captured-by-apm-agent/295344 "2022-02-11T18:48:58Z")
Hey, i have integrated the ELK apm to my Node Js application. I see the request calls, latency, throughput but i do not see any metric related to event loops and GC unlike i can see it incase of Java applications on Kib… --- ## [Filebeat Not able to catch up with rotating container logs](https://discuss.elastic.co/t/filebeat-not-able-to-catch-up-with-rotating-container-logs/296935)
**Author:** [@elk\_follower](https://discuss.elastic.co/u/elk_follower)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 6:17pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-catch-up-with-rotating-container-logs/296935 "2022-02-11T18:17:22Z")
We have a situation where container logs are rotated ~5 times with-in a minute and only last 5 files are kept before getting deleted. We have Filebeat running as daemon set in the K8 cluster and it is able to send th… --- ## [Remote ES node CPU only in advanced view](https://discuss.elastic.co/t/remote-es-node-cpu-only-in-advanced-view/296913)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 6:03pm UTC](https://discuss.elastic.co/t/remote-es-node-cpu-only-in-advanced-view/296913 "2022-02-11T18:03:32Z")
Hey there, I am using legacy mode to monitor remote cluster. I saw a strange behavior regarding the nodes CPU values. I can see it only if I switch to Advanced view otherwise (using standard tab) the timeseries graph wi… --- ## [Curl -x put content-type: application/json throwing error](https://discuss.elastic.co/t/curl-x-put-content-type-application-json-throwing-error/296868)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 7\ **Last updated:** [February 11, 2022, 4:39pm UTC](https://discuss.elastic.co/t/curl-x-put-content-type-application-json-throwing-error/296868 "2022-02-11T16:39:02Z")
I have an Elasticsearch instance that has reached it's default max shards of 1000 and now I'm trying to increase that number using curl but am running into an issue with the -h content-type declaration. Here is my curl … --- ## [Load balancer for logstash question](https://discuss.elastic.co/t/load-balancer-for-logstash-question/296993)
**Author:** [@RajuParipelly](https://discuss.elastic.co/u/RajuParipelly)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 4:33pm UTC](https://discuss.elastic.co/t/load-balancer-for-logstash-question/296993 "2022-02-11T16:33:27Z")
We have 3 logstash instances running and we are trying to create a load balancer for logstash using Big IP f5. This load balancer should distribute the logs that it receives from network devices to the 3 logstash instanc… --- ## [Error saving watch \[1:234\] \[script\] unknown field \[query\]](https://discuss.elastic.co/t/error-saving-watch-1-234-script-unknown-field-query/296989)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 2\ **Last updated:** [February 11, 2022, 4:26pm UTC](https://discuss.elastic.co/t/error-saving-watch-1-234-script-unknown-field-query/296989 "2022-02-11T16:26:32Z")
{ "trigger": { "schedule": { "interval": "10s" } }, "input": { "chain": { "inputs": \[ { "first": { "http": { "request": { "scheme": "https", "host": "", "port": , "method": "get", "path": "llm\_full\_addre… --- ## [Inconsistency between deserialization of number values in \_msearch/\_mget and \_search/\_get - elasticsearch-java client (7.16.2)](https://discuss.elastic.co/t/inconsistency-between-deserialization-of-number-values-in-msearch-mget-and-search-get-elasticsearch-java-client-7-16-2/297001)
**Author:** [@Xupi](https://discuss.elastic.co/u/Xupi)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 4:23pm UTC](https://discuss.elastic.co/t/inconsistency-between-deserialization-of-number-values-in-msearch-mget-and-search-get-elasticsearch-java-client-7-16-2/297001 "2022-02-11T16:23:04Z")
Hi, I have a problem with scientific notation numbers returned from elastic through \_search/\_get and \_msearch/\_mget. Value in elastic \_source is = 1.4778125E7. Queried through dev console is always returned the same = … --- ## [Compare message if it's similar to others](https://discuss.elastic.co/t/compare-message-if-its-similar-to-others/296826)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 9\ **Last updated:** [February 11, 2022, 4:08pm UTC](https://discuss.elastic.co/t/compare-message-if-its-similar-to-others/296826 "2022-02-11T16:08:42Z")
Hi, filebeat.yml configuration: multiline.pattern: \\d\\d/\\d\\d/\\d\\d\\d\\d\\s\\d\\d:\\d\\d:\\d\\d\\s\\d\\d\\d-\\sMAIN\\sEXCEPTION\\b multiline.negate: true multiline.match: after multiline.max\_lines: 7 Logstash configuration: input { … --- ## [Filebeat Lag](https://discuss.elastic.co/t/filebeat-lag/296995)
**Author:** [@Winfield\_Henry](https://discuss.elastic.co/u/Winfield_Henry)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 3:32pm UTC](https://discuss.elastic.co/t/filebeat-lag/296995 "2022-02-11T15:32:38Z")
Hello, We have recently implemented an internal IDS solution. That solution can generate somewhere in the neighborhood of ~30k logs (json format) per minute. Filebeat has a pre-canned module that we are using and it doe… --- ## [Anomali Limo using Elastic Agent](https://discuss.elastic.co/t/anomali-limo-using-elastic-agent/296965)
**Author:** [@samoz83](https://discuss.elastic.co/u/samoz83)\ **Replies:** 1\ **Last updated:** [February 11, 2022, 3:27pm UTC](https://discuss.elastic.co/t/anomali-limo-using-elastic-agent/296965 "2022-02-11T15:27:24Z")
Just updated to v8 and enabled the Anomali Limo API using the Elastic Agent, not sure if anyone else has had success using this integration but it doesn't seem to pull any data using the default settings? --- ## [Fleet CEF Processor](https://discuss.elastic.co/t/fleet-cef-processor/296790)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 6\ **Last updated:** [February 11, 2022, 3:20pm UTC](https://discuss.elastic.co/t/fleet-cef-processor/296790 "2022-02-11T15:20:51Z")
Hello, We are trying to use the CEF integration to parse syslogs sent over from SentinelOne, but are getting an error message on processing which appears to be due to the date format. Error - Text '2022-02-09 00:25:02,… --- ## [Issue in Offset Rounding in case Offset leads to change in the DST state](https://discuss.elastic.co/t/issue-in-offset-rounding-in-case-offset-leads-to-change-in-the-dst-state/296986)
**Author:** [@PRIYANSHU\_KUSHWAHA](https://discuss.elastic.co/u/PRIYANSHU_KUSHWAHA)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 2:33pm UTC](https://discuss.elastic.co/t/issue-in-offset-rounding-in-case-offset-leads-to-change-in-the-dst-state/296986 "2022-02-11T14:33:35Z")
I am using ES version 7.11. { "size": 0, "query": { "constant\_score": { "filter": { "bool": { "must": \[ { "terms": { "deleted": \[ … [Previous page](https://discuss.elastic.co/latest.md?page=1263) [Next page](https://discuss.elastic.co/latest.md?page=1265)