# Unknown hosts in the Trial of Elastic Cloud

**URL:** https://discuss.elastic.co/t/unknown-hosts-in-the-trial-of-elastic-cloud/307754
**Category:** Kibana
**Created:** [June 21, 2022, 11:13am UTC](https://discuss.elastic.co/t/unknown-hosts-in-the-trial-of-elastic-cloud/307754 "2022-06-21T11:13:58Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![SamuelSMendes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/samuelsmendes/32/104246_2.png) [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)
#### Post date: [June 21, 2022, 11:13am UTC](https://discuss.elastic.co/t/unknown-hosts-in-the-trial-of-elastic-cloud/307754/1 "2022-06-21T11:13:58Z")

</div>

What is these hosts that ocasionally appears while on elastic trial? I've seen them a few times but still don't know what it means...

![Screenshot_20220621-075532-1](https://us1.discourse-cdn.com/elastic/original/3X/a/3/a362e8f42d162904a64ed1815950f3bbd49e114d.jpeg)

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [June 21, 2022, 1:03pm UTC](https://discuss.elastic.co/t/unknown-hosts-in-the-trial-of-elastic-cloud/307754/2 "2022-06-21T13:03:00Z")

</div>

Exactly where / what context are you seeing that? What screen?  
Can you provide a little more information please.

---

<div class="post-metadata">

### Author: ![SamuelSMendes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/samuelsmendes/32/104246_2.png) [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)
#### Post date: [June 23, 2022, 12:59pm UTC](https://discuss.elastic.co/t/unknown-hosts-in-the-trial-of-elastic-cloud/307754/3 "2022-06-23T12:59:00Z")

</div>

Found it in the hosts tab in Security. They keep incrasing but I still don't know what they mean...

 ![Captura de Tela (588)](https://us1.discourse-cdn.com/elastic/original/3X/a/8/a8b6c9247fb9bf18a4fce5efa3c03db05a435333.png)

---

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [June 23, 2022, 3:48pm UTC](https://discuss.elastic.co/t/unknown-hosts-in-the-trial-of-elastic-cloud/307754/4 "2022-06-23T15:48:42Z")

</div>

Most Likely You enable Logs and Metrics Collection back to this same cluster.

 ![Screen Shot 2022-06-23 at 8.41.03 AM](https://us1.discourse-cdn.com/elastic/original/3X/8/8/88a7ceaeb923747b808d519713ea25d386db4a4c.png)

These are just the hosts / containers that your cluster is running on... this is Cloud so some underlying hosts are ephemeral.

SIEM automatically picks them up, typically the monitoring logs are sent to a separate monitoring cluster and would not show up here but since you are shipping them to the same source / destination they show up.

The SIEM app automatically reports any host that it see from a number of preset data sources so that is what you are seeing.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 21, 2022, 3:48pm UTC](https://discuss.elastic.co/t/unknown-hosts-in-the-trial-of-elastic-cloud/307754/5 "2022-07-21T15:48:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.