# Latest **URL:** https://discuss.elastic.co/latest.md?page=1315 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1316 --- ## [Logstash Servers Stopping Each Others Logging](https://discuss.elastic.co/t/logstash-servers-stopping-each-others-logging/293784)
**Author:** [@daniel.talbot](https://discuss.elastic.co/u/daniel.talbot)\ **Replies:** 4\ **Last updated:** [January 10, 2022, 8:56pm UTC](https://discuss.elastic.co/t/logstash-servers-stopping-each-others-logging/293784 "2022-01-10T20:56:40Z")
Hi all, Currently I am troubleshooting a configuration that is working in our prod environment but not in our development environment. We are running multiple servers in Dev so I am testing changes on one while I let t… --- ## [Drop previous csv lines if field value already exists](https://discuss.elastic.co/t/drop-previous-csv-lines-if-field-value-already-exists/293947)
**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 8:55pm UTC](https://discuss.elastic.co/t/drop-previous-csv-lines-if-field-value-already-exists/293947 "2022-01-10T20:55:38Z")
I'd like to know if there is a way to drop/overwrite previous csv documents if a field value already exists. In my screenshot above globalCallID is what I want to match on. Take globalCallID\_callID number 263504... … --- ## [Endpoint monitoring Report](https://discuss.elastic.co/t/endpoint-monitoring-report/293931)
**Author:** [@RSundareswaran](https://discuss.elastic.co/u/RSundareswaran)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 8:01pm UTC](https://discuss.elastic.co/t/endpoint-monitoring-report/293931 "2022-01-10T20:01:20Z")
Hi, We are monitoring status of network endpoints via HTTP/S, TCP, and ICMP through Heartbeat and Uptime in Kibana. To leveage the functionality and promote ELK, our team needs to submit some kind of report to manageme… --- ## [Installation steps for elastic agnet in specific kubernetes namesapce](https://discuss.elastic.co/t/installation-steps-for-elastic-agnet-in-specific-kubernetes-namesapce/293942)
**Author:** [@senyam08](https://discuss.elastic.co/u/senyam08)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 7:57pm UTC](https://discuss.elastic.co/t/installation-steps-for-elastic-agnet-in-specific-kubernetes-namesapce/293942 "2022-01-10T19:57:48Z")
I am working on a POC to showcase elastic stack features with elastic agent & fleet. We got kubernetes cluster with option to create namespace/nodegroup. Can i deploy Elasticsearch/kibana/fleet in one of the namespace an… --- ## [Fleet - adding multiple outputs](https://discuss.elastic.co/t/fleet-adding-multiple-outputs/293887)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 7:54pm UTC](https://discuss.elastic.co/t/fleet-adding-multiple-outputs/293887 "2022-01-10T19:54:37Z")
Is it possible to add more than one output when using fleet? I.e. adding elastic and logstash servers? Bonus question: how can I specify the output when adding integrations via fleet? --- ## [No host logs displayed within Fleet app](https://discuss.elastic.co/t/no-host-logs-displayed-within-fleet-app/293935)
**Author:** [@agentw](https://discuss.elastic.co/u/agentw)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 7:47pm UTC](https://discuss.elastic.co/t/no-host-logs-displayed-within-fleet-app/293935 "2022-01-10T19:47:21Z")
Fleet is not displaying host logs when clicking individual Elastic Agents in the Fleet panel. No results are found when clicking 'Open in Logs' on the Agent page (Observability \> Logs (Stream) app). If I remove the filte… --- ## [\[ANNOUNCEMENT\] - FSCrawler 2.8 released](https://discuss.elastic.co/t/announcement-fscrawler-2-8-released/291748)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 4\ **Last updated:** [January 10, 2022, 7:27pm UTC](https://discuss.elastic.co/t/announcement-fscrawler-2-8-released/291748 "2022-01-10T19:27:08Z")
The FSCrawler team is pleased to announce the FSCrawler 2.8 release! FSCrawler FS Crawler offers a simple way to index binary files into elasticsearch. Usage Download FSCrawler 2.8: wget https://repo1.maven.org/maven2… --- ## [\[ANNOUNCEMENT\] - FSCrawler 2.9 released](https://discuss.elastic.co/t/announcement-fscrawler-2-9-released/293937)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 7:25pm UTC](https://discuss.elastic.co/t/announcement-fscrawler-2-9-released/293937 "2022-01-10T19:25:51Z")
The FSCrawler team is pleased to announce the FSCrawler 2.9 release! FSCrawler FS Crawler offers a simple way to index binary files into elasticsearch. Usage Download FSCrawler 2.9: wget https://repo1.maven.org/maven2… --- ## [Filebeat Module O365 API URI?](https://discuss.elastic.co/t/filebeat-module-o365-api-uri/293471)
**Author:** [@elasticband](https://discuss.elastic.co/u/elasticband)\ **Replies:** 5\ **Last updated:** [January 10, 2022, 7:23pm UTC](https://discuss.elastic.co/t/filebeat-module-o365-api-uri/293471 "2022-01-10T19:23:15Z")
I am trying to get some support from Microsoft because I am not seeing all the login data I see in the Azure AD Console via the O365 Module. They would like to know what URI the module is using for API calls and I am not… --- ## [Filebeat duplicates events after restart](https://discuss.elastic.co/t/filebeat-duplicates-events-after-restart/293917)
**Author:** [@pilincom](https://discuss.elastic.co/u/pilincom)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 5:07pm UTC](https://discuss.elastic.co/t/filebeat-duplicates-events-after-restart/293917 "2022-01-10T17:07:51Z")
I'm using Filebeat 7.16.2 to ship logs to Logstash -\> ES. For some reason every time I restart filebeat service, it scans all files in the log directory again and sends them to logstash. registry directory is accessible… --- ## [Boosting Boolean Should's & Best Approach for Address](https://discuss.elastic.co/t/boosting-boolean-shoulds-best-approach-for-address/293916)
**Author:** [@snoopy20](https://discuss.elastic.co/u/snoopy20)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 5:06pm UTC](https://discuss.elastic.co/t/boosting-boolean-shoulds-best-approach-for-address/293916 "2022-01-10T17:06:25Z")
Hi, Couldn't find anything in the documentation about how do you go about boosting an individual should match? I'd hoped it would be a simple case of adding the boost: n into the object as with multi\_search but it's not… --- ## [External NIC Blocked by Elastic Agent](https://discuss.elastic.co/t/external-nic-blocked-by-elastic-agent/290772)
**Author:** [@teamomni](https://discuss.elastic.co/u/teamomni)\ **Replies:** 26\ **Last updated:** [January 10, 2022, 5:05pm UTC](https://discuss.elastic.co/t/external-nic-blocked-by-elastic-agent/290772 "2022-01-10T17:05:11Z")
We recently received our first MacBook Pro with an M1 ARM based processor and the external NIC appears to be blocked by the "ElasticEndpoint" that is running in the Network window. Our other MacBook Pros which are all I… --- ## [Maps showing incorrect data](https://discuss.elastic.co/t/maps-showing-incorrect-data/293137)
**Author:** [@bm11100](https://discuss.elastic.co/u/bm11100)\ **Replies:** 9\ **Last updated:** [January 10, 2022, 4:02pm UTC](https://discuss.elastic.co/t/maps-showing-incorrect-data/293137 "2022-01-10T16:02:17Z")
Hello, I'm using the o365 integration and want to save a map of source login locations. When I edit the map, the data is correct, see below Once the map is saved, the data is incorrect, it has many more data points… --- ## [Precision tuning availability](https://discuss.elastic.co/t/precision-tuning-availability/293894)
**Author:** [@SriAkash](https://discuss.elastic.co/u/SriAkash)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 4:00pm UTC](https://discuss.elastic.co/t/precision-tuning-availability/293894 "2022-01-10T16:00:07Z")
Precision tuning is a very useful feature allowing us to control the fuzziness in result sets. Its been in beta stage for quite some time now. Is there a plan to move this feature soon to release stage so we can start le… --- ## [Count over Time](https://discuss.elastic.co/t/count-over-time/293653)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 11\ **Last updated:** [January 10, 2022, 3:56pm UTC](https://discuss.elastic.co/t/count-over-time/293653 "2022-01-10T15:56:23Z")
Hello and a happy new year, i ingest the Transports Logs from several Exchange Server via Logstash into Elastic. I'd like to count the TOP 10 Sender Adresses and TOP 10 Recipient Adresses in a given Timerange, like the… --- ## [How does we can implement ingest pipeline in runtime](https://discuss.elastic.co/t/how-does-we-can-implement-ingest-pipeline-in-runtime/293830)
**Author:** [@kadiveti](https://discuss.elastic.co/u/kadiveti)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 3:44pm UTC](https://discuss.elastic.co/t/how-does-we-can-implement-ingest-pipeline-in-runtime/293830 "2022-01-10T15:44:15Z")
Hi Team, I created a ingest pipeline like below. PUT \_ingest/pipeline/test2 { "description": "Test the pipe line", "processors": \[ { "remove": { "field": "account\_number" }, "set": { "field": "\_source.fullname… --- ## [From visState to raw aggregations request](https://discuss.elastic.co/t/from-visstate-to-raw-aggregations-request/293465)
**Author:** [@Nicolap](https://discuss.elastic.co/u/Nicolap)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 3:43pm UTC](https://discuss.elastic.co/t/from-visstate-to-raw-aggregations-request/293465 "2022-01-10T15:43:18Z")
Hi all, I'm trying to create an aggregation request from a visstate of a visualize (mainly from a data table). I'm searching in the kibana code but didn't find anything... What I want to do is to get the same result o… --- ## [Enrollment Issue of fleet agent](https://discuss.elastic.co/t/enrollment-issue-of-fleet-agent/292655)
**Author:** [@MuhammadBilal](https://discuss.elastic.co/u/MuhammadBilal)\ **Replies:** 6\ **Last updated:** [January 10, 2022, 3:40pm UTC](https://discuss.elastic.co/t/enrollment-issue-of-fleet-agent/292655 "2022-01-10T15:40:02Z")
Hello, I m trying to integrate elastic endpoint security into my ELK stack, i have successfully install fleet and elastic agent to my endpoint but the issue is endpoint is not appearing in endpoint management in kibana. … --- ## [Hello, I wanted output like attched tableau in kibana..but I am getting something different onlywhat to do? Please help me on this](https://discuss.elastic.co/t/hello-i-wanted-output-like-attched-tableau-in-kibana-but-i-am-getting-something-different-onlywhat-to-do-please-help-me-on-this/293814)
**Author:** [@swati\_pal](https://discuss.elastic.co/u/swati_pal)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 3:37pm UTC](https://discuss.elastic.co/t/hello-i-wanted-output-like-attched-tableau-in-kibana-but-i-am-getting-something-different-onlywhat-to-do-please-help-me-on-this/293814 "2022-01-10T15:37:43Z")
--- ## [\[7.15\] Kibana plugin development - Import saved objects to specific space](https://discuss.elastic.co/t/7-15-kibana-plugin-development-import-saved-objects-to-specific-space/293869)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 4\ **Last updated:** [January 10, 2022, 3:18pm UTC](https://discuss.elastic.co/t/7-15-kibana-plugin-development-import-saved-objects-to-specific-space/293869 "2022-01-10T15:18:17Z")
Hi there, my team and I are developing a custom Kibana plugin and during the initialization phase we'd like to import some custom Saved Objects into a new space. Basically, we managed to create the space during the ini… --- ## [Dec 24th, 2021: \[en\] Elastic Docs - give the gift of feedback](https://discuss.elastic.co/t/dec-24th-2021-en-elastic-docs-give-the-gift-of-feedback/292183)
**Author:** [@OliverHowell](https://discuss.elastic.co/u/OliverHowell)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 3:11pm UTC](https://discuss.elastic.co/t/dec-24th-2021-en-elastic-docs-give-the-gift-of-feedback/292183 "2022-01-10T15:11:26Z")
'Twas the night before Christmas, when all through Elastic Not a creature was typing, not even a mouse; The docs were hung by the website with care In hopes our users would soon read it there; The writers were nestle… --- ## [Document delete spike in elastic v7](https://discuss.elastic.co/t/document-delete-spike-in-elastic-v7/293903)
**Author:** [@Idan\_Koch](https://discuss.elastic.co/u/Idan_Koch)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 3:03pm UTC](https://discuss.elastic.co/t/document-delete-spike-in-elastic-v7/293903 "2022-01-10T15:03:32Z")
Hi, Recently we are upgrading from Elasticsearch v6 to Elasticsearch v7 we are basically doing the same thing but we see that we have huge spikes in document deleted (unlike v6) and that IOPS are higher 10x can you pl… --- ## [Disaster Recovery - Non-Enterprise version](https://discuss.elastic.co/t/disaster-recovery-non-enterprise-version/293897)
**Author:** [@rajeev.j.khanna](https://discuss.elastic.co/u/rajeev.j.khanna)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 2:50pm UTC](https://discuss.elastic.co/t/disaster-recovery-non-enterprise-version/293897 "2022-01-10T14:50:06Z")
Hi Team, We are using the open-source version of ELK. We want to implement a Disaster Recovery (DR) solution for our application. That means ELK LOGS has to be replicated. How can we do this? (Please do not share the… --- ## [Time series graph that summarizes the index state for each time point](https://discuss.elastic.co/t/time-series-graph-that-summarizes-the-index-state-for-each-time-point/293660)
**Author:** [@Janujc](https://discuss.elastic.co/u/Janujc)\ **Replies:** 4\ **Last updated:** [January 10, 2022, 2:32pm UTC](https://discuss.elastic.co/t/time-series-graph-that-summarizes-the-index-state-for-each-time-point/293660 "2022-01-10T14:32:55Z")
Hello, I'm currently trying to solve the following problem: We have users that are active from the date when they start a certain action to the date when they complete it. We need to display a graph showing the number … --- ## [EQL correlation query help look up value within a message](https://discuss.elastic.co/t/eql-correlation-query-help-look-up-value-within-a-message/293474)
**Author:** [@krabel1ze](https://discuss.elastic.co/u/krabel1ze)\ **Replies:** 5\ **Last updated:** [January 10, 2022, 1:59pm UTC](https://discuss.elastic.co/t/eql-correlation-query-help-look-up-value-within-a-message/293474 "2022-01-10T13:59:08Z")
Hello! I want to created an Okta SSO authentication alert in Elastic.co based on geo-ip information. The query in LOGIC terms should look something like this: If client.user.id {133713371337} event.outcome == "success" … --- ## [Multiple custom navLinks Kibana 7.15](https://discuss.elastic.co/t/multiple-custom-navlinks-kibana-7-15/293858)
**Author:** [@Osysh](https://discuss.elastic.co/u/Osysh)\ **Replies:** 3\ **Last updated:** [January 10, 2022, 1:50pm UTC](https://discuss.elastic.co/t/multiple-custom-navlinks-kibana-7-15/293858 "2022-01-10T13:50:47Z")
Hi, I try to add multiple custom nav link under a new category in the kibana menu. I used the setCustomNavLink function but it allows you only to add one menu item only. Is there another solution ? Regards --- ## [Scale monitoring using metricbeat](https://discuss.elastic.co/t/scale-monitoring-using-metricbeat/293891)
**Author:** [@motkele](https://discuss.elastic.co/u/motkele)\ **Replies:** 3\ **Last updated:** [January 10, 2022, 1:46pm UTC](https://discuss.elastic.co/t/scale-monitoring-using-metricbeat/293891 "2022-01-10T13:46:04Z")
Hello, I have a very specific question regarding the way to collect metrics using metricbeat. I would like to collect the metrics from all the services running on the server (and for which a metricbeat module is availa… --- ## [How to sync elasticsearch data between DC, DR](https://discuss.elastic.co/t/how-to-sync-elasticsearch-data-between-dc-dr/293651)
**Author:** [@banf](https://discuss.elastic.co/u/banf)\ **Replies:** 6\ **Last updated:** [January 10, 2022, 1:41pm UTC](https://discuss.elastic.co/t/how-to-sync-elasticsearch-data-between-dc-dr/293651 "2022-01-10T13:41:24Z")
Hi Team, We have elasticsearch running on our DC side so standalone as of now. We would like to know how can we sync elasticsearch data to DR side so that if DR happens, we can still see data in kibana. It is installe… --- ## [Metricbeat showing "server's certificate chain verification is disabled"](https://discuss.elastic.co/t/metricbeat-showing-servers-certificate-chain-verification-is-disabled/287759)
**Author:** [@gboer](https://discuss.elastic.co/u/gboer)\ **Replies:** 9\ **Last updated:** [January 10, 2022, 1:38pm UTC](https://discuss.elastic.co/t/metricbeat-showing-servers-certificate-chain-verification-is-disabled/287759 "2022-01-10T13:38:14Z")
Hello, As far as I can see, I've set up Metricbeat to correctly validate/use SSL, but it still gives the following warning when running 'metricbeat test output': server's certificate chain verification is disabled My … --- ## [FIlebeat IIS module](https://discuss.elastic.co/t/filebeat-iis-module/293257)
**Author:** [@rckvwijk](https://discuss.elastic.co/u/rckvwijk)\ **Replies:** 11\ **Last updated:** [January 10, 2022, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-iis-module/293257 "2022-01-10T13:31:31Z")
Hi there, We're using filebeat with great succes for most of our logging but we've received a new request from within the organisation. They want to ingest the IIS logs from our Windows Server 2016 machine but even thou… [Previous page](https://discuss.elastic.co/latest.md?page=1314) [Next page](https://discuss.elastic.co/latest.md?page=1316)