# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1792

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1793

---

## [Best approach to multi-word search as you type](https://discuss.elastic.co/t/best-approach-to-multi-word-search-as-you-type/266826)

<div class="topic-metadata">

**Author:** [@tbzl](https://discuss.elastic.co/u/tbzl)\
**Replies:** 0\
**Last updated:** [March 10, 2021, 3:00pm UTC](https://discuss.elastic.co/t/best-approach-to-multi-word-search-as-you-type/266826 "2021-03-10T15:00:51Z")

</div>

Hi, I would like to add some sort of "search as you type" functionality but have been struggling to find the right one. Say I have the following product name: Some Brand Sweater Striped Green What would be the best m…

---

## [Filebeat: Error while retrieving FD information: error getting number of open FD: key not found](https://discuss.elastic.co/t/filebeat-error-while-retrieving-fd-information-error-getting-number-of-open-fd-key-not-found/266822)

<div class="topic-metadata">

**Author:** [@meissen](https://discuss.elastic.co/u/meissen)\
**Replies:** 0\
**Last updated:** [March 10, 2021, 2:37pm UTC](https://discuss.elastic.co/t/filebeat-error-while-retrieving-fd-information-error-getting-number-of-open-fd-key-not-found/266822 "2021-03-10T14:37:58Z")

</div>

Hello, after upgrading filebeat to version 7.9.0 I'm getting the following error : Filebeat: Error while retrieving FD information: error getting number of open FD: key not found the filebeat agent is started via the …

---

## [Adding rollover configuration in ELK 7.6](https://discuss.elastic.co/t/adding-rollover-configuration-in-elk-7-6/265521)

<div class="topic-metadata">

**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 2:32pm UTC](https://discuss.elastic.co/t/adding-rollover-configuration-in-elk-7-6/265521 "2021-03-10T14:32:13Z")

</div>

I am trying to rollover indices that are over 30 days and need to target indices that are already in the elasticsearch along with new indices Our indices get created on weekly basis and i am not able to add an rollover …

---

## [Has error making http request: Get "http://npipe/state": been fixed yet for Elastic Agent 7.10.2?](https://discuss.elastic.co/t/has-error-making-http-request-get-http-npipe-state-been-fixed-yet-for-elastic-agent-7-10-2/266722)

<div class="topic-metadata">

**Author:** [@dvo](https://discuss.elastic.co/u/dvo)\
**Replies:** 4\
**Last updated:** [March 10, 2021, 2:25pm UTC](https://discuss.elastic.co/t/has-error-making-http-request-get-http-npipe-state-been-fixed-yet-for-elastic-agent-7-10-2/266722 "2021-03-10T14:25:05Z")

</div>

I'm testing a single Windows agent, and Kibana is littered with these errors, and it looks bad to the potential customer. I've got to get it cleaned up. error making http request: Get "http://npipe/state": open \\default…

---

## [Unable to establish connection](https://discuss.elastic.co/t/unable-to-establish-connection/266808)

<div class="topic-metadata">

**Author:** [@RomanK](https://discuss.elastic.co/u/RomanK)\
**Replies:** 0\
**Last updated:** [March 10, 2021, 12:55pm UTC](https://discuss.elastic.co/t/unable-to-establish-connection/266808 "2021-03-10T12:55:39Z")

</div>

Our architecture has microservices that cannot connect to the internal network by themselves (for security reasons). Is it possible to establish a TCP connection from the Elasticsearch side?

---

## [Default Route for specific spaces](https://discuss.elastic.co/t/default-route-for-specific-spaces/266702)

<div class="topic-metadata">

**Author:** [@Lambo1971](https://discuss.elastic.co/u/Lambo1971)\
**Replies:** 5\
**Last updated:** [March 10, 2021, 12:21pm UTC](https://discuss.elastic.co/t/default-route-for-specific-spaces/266702 "2021-03-10T12:21:31Z")

</div>

Hi, I read somewhere that each space can now have its own default route via the advanced settings page. However, i only appear to be able to see an advanced settings option under the kibana menu item for the Default spac…

---

## [How to sum two fields in Kibana?](https://discuss.elastic.co/t/how-to-sum-two-fields-in-kibana/266765)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 6\
**Last updated:** [March 10, 2021, 11:44am UTC](https://discuss.elastic.co/t/how-to-sum-two-fields-in-kibana/266765 "2021-03-10T11:44:12Z")

</div>

I have two different fields. Let Suppose A and B and I want sum of these two fields A+B and create new field and save records in this new created field.

---

## [Is it possible to configure the Java APM agent to collect metrics but not traces?](https://discuss.elastic.co/t/is-it-possible-to-configure-the-java-apm-agent-to-collect-metrics-but-not-traces/266405)

<div class="topic-metadata">

**Author:** [@bplies](https://discuss.elastic.co/u/bplies)\
**Replies:** 6\
**Last updated:** [March 10, 2021, 11:03am UTC](https://discuss.elastic.co/t/is-it-possible-to-configure-the-java-apm-agent-to-collect-metrics-but-not-traces/266405 "2021-03-10T11:03:01Z")

</div>

We have an edge service that will receive maybe a billion requests per day where it isn't feasible to have much of any transaction sample rate. It is implemented with Spring WebFlux running on Netty which aren't officia…

---

## [Can we control space between label and aggregated value in metric visualization?](https://discuss.elastic.co/t/can-we-control-space-between-label-and-aggregated-value-in-metric-visualization/266767)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 2\
**Last updated:** [March 10, 2021, 10:57am UTC](https://discuss.elastic.co/t/can-we-control-space-between-label-and-aggregated-value-in-metric-visualization/266767 "2021-03-10T10:57:24Z")

</div>

Hello, In any way can we control space between label and aggregated value in metric visualization, as 'g' is getting cut in text, as shown in above image.

---

## [Logstash file input reading partial lines with docker setup](https://discuss.elastic.co/t/logstash-file-input-reading-partial-lines-with-docker-setup/266798)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 0\
**Last updated:** [March 10, 2021, 10:47am UTC](https://discuss.elastic.co/t/logstash-file-input-reading-partial-lines-with-docker-setup/266798 "2021-03-10T10:47:46Z")

</div>

I've been having difficulty with the logstash input filter sometimes picking up partial lines with my setup. I think it may be related to how I am using docker but I'm running out of ideas. I have logstash in a docker …

---

## [Init container fails due to license](https://discuss.elastic.co/t/init-container-fails-due-to-license/266695)

<div class="topic-metadata">

**Author:** [@smsajid](https://discuss.elastic.co/u/smsajid)\
**Replies:** 2\
**Last updated:** [March 10, 2021, 10:42am UTC](https://discuss.elastic.co/t/init-container-fails-due-to-license/266695 "2021-03-10T10:42:30Z")

</div>

I deployed the latest operator version 1.4.0 and it was successful. I created a Elasticsearch instance using the yaml below: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: na…

---

## [How to adjust Tooltip width? More than half of text is hidden-2](https://discuss.elastic.co/t/how-to-adjust-tooltip-width-more-than-half-of-text-is-hidden-2/266789)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 10:24am UTC](https://discuss.elastic.co/t/how-to-adjust-tooltip-width-more-than-half-of-text-is-hidden-2/266789 "2021-03-10T10:24:30Z")

</div>

Hi all, the tooltip in most charts such as line chart,vertical bar chart is not customizable . Only half tooltip appears. There is already an issue which was raised, but no action: An enhancement issue is already r…

---

## [Cannot link Java class io.netty.handler.ssl.OpenSsl](https://discuss.elastic.co/t/cannot-link-java-class-io-netty-handler-ssl-openssl/266790)

<div class="topic-metadata">

**Author:** [@zarak](https://discuss.elastic.co/u/zarak)\
**Replies:** 0\
**Last updated:** [March 10, 2021, 10:01am UTC](https://discuss.elastic.co/t/cannot-link-java-class-io-netty-handler-ssl-openssl/266790 "2021-03-10T10:01:28Z")

</div>

Hello ! I'm running Logstash 6.8.14 on debian. It's running fine, until I try to send a SIHGUP to reload the pipelines and config. I now have this in the logs, restarting it doesn't solve the issue: Mar 10 10:51:39 hos…

---

## [Filebeat-7.10.2-mongodb-log-pipeline: cannot write to a field alias \[cloud.availability\_zone\]](https://discuss.elastic.co/t/filebeat-7-10-2-mongodb-log-pipeline-cannot-write-to-a-field-alias-cloud-availability-zone/266783)

<div class="topic-metadata">

**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 10:00am UTC](https://discuss.elastic.co/t/filebeat-7-10-2-mongodb-log-pipeline-cannot-write-to-a-field-alias-cloud-availability-zone/266783 "2021-03-10T10:00:08Z")

</div>

Dear experts, after migration from 6.8.13 to 7.10.2, MongoDB events logged are no more properly parsed by the factory mongodb ingest pipelines. To be honest, I have no idea about the root cause. Many thanks for your he…

---

## [Changing Logo of Elastic Search](https://discuss.elastic.co/t/changing-logo-of-elastic-search/266690)

<div class="topic-metadata">

**Author:** [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 9:51am UTC](https://discuss.elastic.co/t/changing-logo-of-elastic-search/266690 "2021-03-10T09:51:23Z")

</div>

Hi All, I am using Stack Management 7.10.2 and I want to replace the logo of elastic search at every level with my own logo. I have noticed that the logo appearing is being fetched from logoElastic class or variable. Pl…

---

## [Snapshot recovery problem](https://discuss.elastic.co/t/snapshot-recovery-problem/266782)

<div class="topic-metadata">

**Author:** [@haipeng.zhao](https://discuss.elastic.co/u/haipeng.zhao)\
**Replies:** 0\
**Last updated:** [March 10, 2021, 9:03am UTC](https://discuss.elastic.co/t/snapshot-recovery-problem/266782 "2021-03-10T09:03:11Z")

</div>

hi all POST /\_snapshot/my\_backup/snapshot\_1/\_restore { "indices": "data\_stream\_1,index\_1,index\_2", "ignore\_unavailable": true, "include\_global\_state": false, "rename\_pattern": "index\_(.+)", "rena…

---

## [Kibana keeps showing old logs on the discover tab after applying a lifecycle policy with index template](https://discuss.elastic.co/t/kibana-keeps-showing-old-logs-on-the-discover-tab-after-applying-a-lifecycle-policy-with-index-template/265791)

<div class="topic-metadata">

**Author:** [@K\_Shayeb](https://discuss.elastic.co/u/K_Shayeb)\
**Replies:** 7\
**Last updated:** [March 10, 2021, 8:38am UTC](https://discuss.elastic.co/t/kibana-keeps-showing-old-logs-on-the-discover-tab-after-applying-a-lifecycle-policy-with-index-template/265791 "2021-03-10T08:38:33Z")

</div>

Description I'm using fluentd to send logs to Elasticsearch 7.10.0 / Kibana 7.10.0 Now without applying any IndexTemplate and LifecyclePolicy I face no issues. However, After applying an IndexTemplate and LifecyclePolic…

---

## [Performance of outside Query vs filter inside aggregation while aggregating](https://discuss.elastic.co/t/performance-of-outside-query-vs-filter-inside-aggregation-while-aggregating/266726)

<div class="topic-metadata">

**Author:** [@the\_nemo](https://discuss.elastic.co/u/the_nemo)\
**Replies:** 3\
**Last updated:** [March 10, 2021, 8:24am UTC](https://discuss.elastic.co/t/performance-of-outside-query-vs-filter-inside-aggregation-while-aggregating/266726 "2021-03-10T08:24:16Z")

</div>

Is there any performance difference between the below two quires assuming "type" is a keyword? { "size": 0, "aggs": { "t\_shirts": { "filter": { "term": { "type…

---

## [Could not create index / connection refused every minute](https://discuss.elastic.co/t/could-not-create-index-connection-refused-every-minute/266723)

<div class="topic-metadata">

**Author:** [@Youssef\_CHTOUROU](https://discuss.elastic.co/u/Youssef_CHTOUROU)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 7:59am UTC](https://discuss.elastic.co/t/could-not-create-index-connection-refused-every-minute/266723 "2021-03-10T07:59:00Z")

</div>

Kibana version: 7.10.1 Elasticsearch version: 7.10.1 APM Server version: 7.10.1 APM Agent language and version: Language : Java Version : 1.9 Description of the problem including expected versus actual behavior.…

---

## [Metricbeat 7.10.2 on Win 10: First 10 minutes not logging](https://discuss.elastic.co/t/metricbeat-7-10-2-on-win-10-first-10-minutes-not-logging/266662)

<div class="topic-metadata">

**Author:** [@Jaroslav](https://discuss.elastic.co/u/Jaroslav)\
**Replies:** 2\
**Last updated:** [March 10, 2021, 7:45am UTC](https://discuss.elastic.co/t/metricbeat-7-10-2-on-win-10-first-10-minutes-not-logging/266662 "2021-03-10T07:45:54Z")

</div>

Hello guys, I am running Metricbeat on Windows and observed that first 10 minutes of system events after service restart is not logged anywhere. Is it bug or a feature? Even when I switch to queue.disk, the first data i…

---

## [Ingest Node](https://discuss.elastic.co/t/ingest-node/266763)

<div class="topic-metadata">

**Author:** [@Changra](https://discuss.elastic.co/u/Changra)\
**Replies:** 3\
**Last updated:** [March 10, 2021, 7:08am UTC](https://discuss.elastic.co/t/ingest-node/266763 "2021-03-10T07:08:21Z")

</div>

I added the ingest pipeline with the name "transfer-pipeline" in the logstash output as below, output { if "mm" in \[service\_name\] { elasticsearch { ssl =\> true ssl\_certificate\_verification =\> true ilm\_rollover\_ali…

---

## [How to store real estate data in an elastic search?](https://discuss.elastic.co/t/how-to-store-real-estate-data-in-an-elastic-search/266747)

<div class="topic-metadata">

**Author:** [@jay2021](https://discuss.elastic.co/u/jay2021)\
**Replies:** 1\
**Last updated:** [March 9, 2021, 11:49pm UTC](https://discuss.elastic.co/t/how-to-store-real-estate-data-in-an-elastic-search/266747 "2021-03-09T23:49:54Z")

</div>

I have Real Estate data. I am looking into storing it into elastic search to allow users to search the database real time. I want to be able to let my users search by key fields like price, lot size, year-built, total b…

---

## [Add 3 master nodes to our cluster configured only default(master/data...) node](https://discuss.elastic.co/t/add-3-master-nodes-to-our-cluster-configured-only-default-master-data-node/266764)

<div class="topic-metadata">

**Author:** [@mgjung02](https://discuss.elastic.co/u/mgjung02)\
**Replies:** 0\
**Last updated:** [March 10, 2021, 5:39am UTC](https://discuss.elastic.co/t/add-3-master-nodes-to-our-cluster-configured-only-default-master-data-node/266764 "2021-03-10T05:39:59Z")

</div>

Now, we run 6 nodes and all of them has default role (master/data...). For more efficient cluster environment, we want to change our cluster like below. Add 2 master-dedicated node. (new node) Change one existed n…

---

## [Every line of Logs is not passing through](https://discuss.elastic.co/t/every-line-of-logs-is-not-passing-through/266698)

<div class="topic-metadata">

**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\
**Replies:** 2\
**Last updated:** [March 10, 2021, 5:25am UTC](https://discuss.elastic.co/t/every-line-of-logs-is-not-passing-through/266698 "2021-03-10T05:25:29Z")

</div>

Hello All , I have below sample line in from the log file which is not passing through logstash. I am not sure where the problem is , I have the below log line 2021-02-24 10:46:29,827 INFO \[5b5021c6-6af1-4e70-9cfb-f0…

---

## [Cannot find Alias field in Discover](https://discuss.elastic.co/t/cannot-find-alias-field-in-discover/264517)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 4\
**Last updated:** [March 10, 2021, 5:18am UTC](https://discuss.elastic.co/t/cannot-find-alias-field-in-discover/264517 "2021-03-10T05:18:59Z")

</div>

Kibana version : 7.9 Elasticsearch version : 7.10 APM Server version : 7.10 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install I wanted to create field alias for a…

---

## [I downloaded and installed elasticsearch](https://discuss.elastic.co/t/i-downloaded-and-installed-elasticsearch/266760)

<div class="topic-metadata">

**Author:** [@PaulGureghian](https://discuss.elastic.co/u/PaulGureghian)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 4:41am UTC](https://discuss.elastic.co/t/i-downloaded-and-installed-elasticsearch/266760 "2021-03-10T04:41:32Z")

</div>

But when I do ./bin/elasticsearch it says it can't find the bundled jdk. Why do I have to set JAVA\_HOME for Elasticsearch to use it's bundled Java? And if I have to set JAVA\_HOME, what exactly do I need to do ? What …

---

## [Referencing values from multiple elements](https://discuss.elastic.co/t/referencing-values-from-multiple-elements/266756)

<div class="topic-metadata">

**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\
**Replies:** 4\
**Last updated:** [March 10, 2021, 4:26am UTC](https://discuss.elastic.co/t/referencing-values-from-multiple-elements/266756 "2021-03-10T04:26:57Z")

</div>

Hi, is it possible to reference column values from two different datatables. What I would like to do is to use the values from the separate tables to calculate a new value and then use it in a separate element. If not, i…

---

## [/\_template OR /\_index\_template?](https://discuss.elastic.co/t/template-or-index-template/266567)

<div class="topic-metadata">

**Author:** [@thesn](https://discuss.elastic.co/u/thesn)\
**Replies:** 4\
**Last updated:** [March 10, 2021, 4:20am UTC](https://discuss.elastic.co/t/template-or-index-template/266567 "2021-03-10T04:20:09Z")

</div>

Hi, I am using ES 7.11.1 and Logstash 7.11.1 in Docker container. here is my logstash.conf: input { file { codec =\> "json" path =\> "/usr/share/logstash/config/sample.log" } } filter { } output { el…

---

## [How to use port 443 to access Kibana](https://discuss.elastic.co/t/how-to-use-port-443-to-access-kibana/266757)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 2:57am UTC](https://discuss.elastic.co/t/how-to-use-port-443-to-access-kibana/266757 "2021-03-10T02:57:56Z")

</div>

Hi, I think this is basic. How can I use port 443? Changing the kibana.yml itself is not enough?! Any other configurations on the OS level? Or something else? Currently, I can access with HTTPS but with port 5601 on…

---

## [Using TLS with PFX from third party in 7.11](https://discuss.elastic.co/t/using-tls-with-pfx-from-third-party-in-7-11/266743)

<div class="topic-metadata">

**Author:** [@ARDiver86](https://discuss.elastic.co/u/ARDiver86)\
**Replies:** 1\
**Last updated:** [March 10, 2021, 2:46am UTC](https://discuss.elastic.co/t/using-tls-with-pfx-from-third-party-in-7-11/266743 "2021-03-10T02:46:42Z")

</div>

I am having issues getting TLS working on my two-node cluster. I know two-node is not best practice or supported in Elastic or any other clustering technology, but this is just test environment that I will add more nodes…

[Previous page](https://discuss.elastic.co/latest.md?page=1791)

[Next page](https://discuss.elastic.co/latest.md?page=1793)
