# Latest **URL:** https://discuss.elastic.co/latest.md?page=1882 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1883 --- ## [How to highlight partial word when using edge\_ngram filter](https://discuss.elastic.co/t/how-to-highlight-partial-word-when-using-edge-ngram-filter/261742)
**Author:** [@ralgo](https://discuss.elastic.co/u/ralgo)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 8:16am UTC](https://discuss.elastic.co/t/how-to-highlight-partial-word-when-using-edge-ngram-filter/261742 "2021-01-21T08:16:37Z")
I am using the edge\_ngram filter in my analyzer, e.g. I index a word "EVA京", it will be mapped to an array \[E, EV, EVA, 京\]. And then I search "EV", of cause "EVA京" can be recalled. But the highlight works wrong! The resu… --- ## [How to debug Java Thread Park issues between client process and the AWS Elastic Search?](https://discuss.elastic.co/t/how-to-debug-java-thread-park-issues-between-client-process-and-the-aws-elastic-search/261720)
**Author:** [@Sumaiya](https://discuss.elastic.co/u/Sumaiya)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 8:02am UTC](https://discuss.elastic.co/t/how-to-debug-java-thread-park-issues-between-client-process-and-the-aws-elastic-search/261720 "2021-01-21T08:02:47Z")
Use case : The Sping boot is calling the AWS Elastic server for the searching for an object through RestHighLevelClient Issue : On the client-side we see Java Thread Parked from 1 to 6 secs How do I find out - What … --- ## [Filebeat/Logstash Interface](https://discuss.elastic.co/t/filebeat-logstash-interface/261736)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 7:51am UTC](https://discuss.elastic.co/t/filebeat-logstash-interface/261736 "2021-01-21T07:51:08Z")
Hi, What is the impact on the beat-input of logstash if each filebeat is creating a large number of connections, for example 128? Thx D --- ## [Index strategy for updated docs](https://discuss.elastic.co/t/index-strategy-for-updated-docs/261734)
**Author:** [@esalih](https://discuss.elastic.co/u/esalih)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 7:39am UTC](https://discuss.elastic.co/t/index-strategy-for-updated-docs/261734 "2021-01-21T07:39:49Z")
I plan to keep group of events as a single doc at elastic. Events in a group has a common unique id (e.g, event\_group\_1), and events of a single group arrive in general within a day to my processing pipeline. I update th… --- ## [Esrally to test resiliency of the server](https://discuss.elastic.co/t/esrally-to-test-resiliency-of-the-server/260150)
**Author:** [@ven1](https://discuss.elastic.co/u/ven1)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 7:22am UTC](https://discuss.elastic.co/t/esrally-to-test-resiliency-of-the-server/260150 "2021-01-21T07:22:44Z")
I like to test the resiliency of the elasticsearch cluster when there is a server failure (1 Elasticsearch Node is down). I am following the below process esrally rally as loadgenerator and to deploy a 4 node cluster. … --- ## [An existing connection was forcibly closed by the remote host](https://discuss.elastic.co/t/an-existing-connection-was-forcibly-closed-by-the-remote-host/261246)
**Author:** [@279zlj](https://discuss.elastic.co/u/279zlj)\ **Replies:** 8\ **Last updated:** [January 21, 2021, 7:15am UTC](https://discuss.elastic.co/t/an-existing-connection-was-forcibly-closed-by-the-remote-host/261246 "2021-01-21T07:15:44Z")
Exception in thread "main" java.io.IOException: 远程主机强迫关闭了一个现有的连接。 at org.elasticsearch.client.RestClient$SyncResponseListener.get(RestClient.java:964) at org.elasticsearch.client.RestClient.performRequest(RestClient.ja… --- ## [Tooltip Font-size through CSS - Enhanced Table](https://discuss.elastic.co/t/tooltip-font-size-through-css-enhanced-table/261728)
**Author:** [@sam7](https://discuss.elastic.co/u/sam7)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 6:47am UTC](https://discuss.elastic.co/t/tooltip-font-size-through-css-enhanced-table/261728 "2021-01-21T06:47:53Z")
I am using TVSB markdown to show some images. Used tooltip on the images while hover over it. But, I want to increase the size of fonts-appeared in tool tip using CSS. Any Suggestions? --- ## [Logstash Output Plugin for Hbase](https://discuss.elastic.co/t/logstash-output-plugin-for-hbase/261726)
**Author:** [@arpit1305](https://discuss.elastic.co/u/arpit1305)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 6:02am UTC](https://discuss.elastic.co/t/logstash-output-plugin-for-hbase/261726 "2021-01-21T06:02:51Z")
Hi, I am looking for logstash output to be stored in Hbase. Any guidance or inputs please? Regards, Arpit --- ## [Why isn't the template working inside logstash?](https://discuss.elastic.co/t/why-isnt-the-template-working-inside-logstash/261723)
**Author:** [@chb1828](https://discuss.elastic.co/u/chb1828)\ **Replies:** 0\ **Last updated:** [January 21, 2021, 5:47am UTC](https://discuss.elastic.co/t/why-isnt-the-template-working-inside-logstash/261723 "2021-01-21T05:47:41Z")
I'm using logstash 7.0.0. I install my template but it doesn't apply. Logs in logstash are print like this. Attempting to install template {:manage\_template=\>{"template"=\>"news\*", "settings"=\>{"index.refresh\_interval"… --- ## [Correlation in ELK dashboard](https://discuss.elastic.co/t/correlation-in-elk-dashboard/260160)
**Author:** [@Sivajanani](https://discuss.elastic.co/u/Sivajanani)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 5:37am UTC](https://discuss.elastic.co/t/correlation-in-elk-dashboard/260160 "2021-01-21T05:37:21Z")
Hello All, I have an index with below fields and data set, 1.indicator:13.12.14.15 action:success 2.indicators:13.12.14.15 tags:elk-search 3.indicator:14.4.5.67.84 action:success I have built a das… --- ## [DataStream vs detection rules](https://discuss.elastic.co/t/datastream-vs-detection-rules/261563)
**Author:** [@Charles100](https://discuss.elastic.co/u/Charles100)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 5:32am UTC](https://discuss.elastic.co/t/datastream-vs-detection-rules/261563 "2021-01-21T05:32:29Z")
Hi, I'm testing datastreams right now and observed that default detection rules are not looking logs from my datastreams indices. Do I have to manually change all default rules (and new ones added by updates) to include… --- ## [Performace Tuning to avoid Latency](https://discuss.elastic.co/t/performace-tuning-to-avoid-latency/261717)
**Author:** [@Ishaan](https://discuss.elastic.co/u/Ishaan)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 5:27am UTC](https://discuss.elastic.co/t/performace-tuning-to-avoid-latency/261717 "2021-01-21T05:27:49Z")
How can we do performance tuning in Metricbeat Configuration file to avoid any latency? or What are the best practices one should follow to avoid any latency in production? Any recommendation or suggestion would be help… --- ## [Could I drop @timestamp and @metadata in a event before sending event to Kafka?](https://discuss.elastic.co/t/could-i-drop-timestamp-and-metadata-in-a-event-before-sending-event-to-kafka/261719)
**Author:** [@cy-zheng](https://discuss.elastic.co/u/cy-zheng)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 4:40am UTC](https://discuss.elastic.co/t/could-i-drop-timestamp-and-metadata-in-a-event-before-sending-event-to-kafka/261719 "2021-01-21T04:40:23Z")
Could I drop @timestamp and @metadata in a event before sending event to Kafka? --- ## [Filebeat cisco asa module source and destination IP showing reversed](https://discuss.elastic.co/t/filebeat-cisco-asa-module-source-and-destination-ip-showing-reversed/261327)
**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 4:25am UTC](https://discuss.elastic.co/t/filebeat-cisco-asa-module-source-and-destination-ip-showing-reversed/261327 "2021-01-21T04:25:23Z")
Hi Team, We are using the filebeat cisco asa module in filebeat to parse the data from cisco asa firewalls. One issues we noticed is the source IP and destination IP are actually showing as reversed when its parsed. Fi… --- ## [Cannot ship ssh logs from filebeat to logstash](https://discuss.elastic.co/t/cannot-ship-ssh-logs-from-filebeat-to-logstash/261575)
**Author:** [@john8](https://discuss.elastic.co/u/john8)\ **Replies:** 3\ **Last updated:** [January 21, 2021, 3:44am UTC](https://discuss.elastic.co/t/cannot-ship-ssh-logs-from-filebeat-to-logstash/261575 "2021-01-21T03:44:36Z")
I sent syslog from filebeat to logstash it appeared in kibana as well then when I changed the path of the log file to /var/logs/auth.log it did not work. My main goal is to visualize the ssh logs. Thanks in advance. --- ## [Elasticsearch SQL query](https://discuss.elastic.co/t/elasticsearch-sql-query/261635)
**Author:** [@Sathish22](https://discuss.elastic.co/u/Sathish22)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 3:13am UTC](https://discuss.elastic.co/t/elasticsearch-sql-query/261635 "2021-01-21T03:13:52Z")
Hi, I have three questions Can we push Elasticsearcsh SQL query output to a new index It is possible to use Elasticsearch SQL query in Dashboard/Visualization Is it possible to convert Elasticsearch SQL query to KQL q… --- ## [How can I restore an index pattern and dashboards?](https://discuss.elastic.co/t/how-can-i-restore-an-index-pattern-and-dashboards/261709)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 2\ **Last updated:** [January 21, 2021, 2:33am UTC](https://discuss.elastic.co/t/how-can-i-restore-an-index-pattern-and-dashboards/261709 "2021-01-21T02:33:14Z")
Hi all, I made a mistake and deleted an index pattern that broke 3 dashboards I have. I don't know exactly how to reconstruct the visualizations inside the dashboard, as it was not named correctly, and when I click in t… --- ## [How does es fetch the right source with stale docIDs, after lucene merged queried segments](https://discuss.elastic.co/t/how-does-es-fetch-the-right-source-with-stale-docids-after-lucene-merged-queried-segments/261511)
**Author:** [@vsop\_479](https://discuss.elastic.co/u/vsop_479)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 2:13am UTC](https://discuss.elastic.co/t/how-does-es-fetch-the-right-source-with-stale-docids-after-lucene-merged-queried-segments/261511 "2021-01-21T02:13:32Z")
Deleted documents are dropped when segments are merged, which will change the follows' docID. so how does es fetch the right source with stale docIDs. --- ## [Logstash Centralized management pipeline](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691)
**Author:** [@esijati](https://discuss.elastic.co/u/esijati)\ **Replies:** 7\ **Last updated:** [January 21, 2021, 12:09am UTC](https://discuss.elastic.co/t/logstash-centralized-management-pipeline/261691 "2021-01-21T00:09:03Z")
Hi, I am trying to enable the logstash centralized pipeline management with X-Pack security enabled, but with limited documentation from ELK I am unable to proceed further on how it will look at Kibana side. Regards J… --- ## [Integrate APM Elastic for Android / iOS APP](https://discuss.elastic.co/t/integrate-apm-elastic-for-android-ios-app/261235)
**Author:** [@fio](https://discuss.elastic.co/u/fio)\ **Replies:** 5\ **Last updated:** [January 20, 2021, 10:54pm UTC](https://discuss.elastic.co/t/integrate-apm-elastic-for-android-ios-app/261235 "2021-01-20T22:54:09Z")
Hi All, How can I integrate APM Elastic into my APP (Swift and Kotlin)? Can I use APM API (Events Intake API)? --- ## [Split API: shard sizing issue post split process](https://discuss.elastic.co/t/split-api-shard-sizing-issue-post-split-process/261526)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 1\ **Last updated:** [January 20, 2021, 9:58pm UTC](https://discuss.elastic.co/t/split-api-shard-sizing-issue-post-split-process/261526 "2021-01-20T21:58:57Z")
Hi, elasticsearch version: 7.3.1 I had an index of size 107GB with a single shard (replicas: 0, primary shards: 1). Since it was too large and messing up the load distribution (based on disk), I decided to use split-ap… --- ## [Removing comma from values generated in Enhanced table](https://discuss.elastic.co/t/removing-comma-from-values-generated-in-enhanced-table/261637)
**Author:** [@sam7](https://discuss.elastic.co/u/sam7)\ **Replies:** 4\ **Last updated:** [January 20, 2021, 9:56pm UTC](https://discuss.elastic.co/t/removing-comma-from-values-generated-in-enhanced-table/261637 "2021-01-20T21:56:07Z")
I am using Enhanced table to generate a table showing some values. I want to remove comma generated in the table between values. Example - \["de","ne","us","ni"\] I want to hide comma between values. Is there a way … --- ## [Looking for Elasticsearch expert as Elastic sporadically is overloaded and stop responding](https://discuss.elastic.co/t/looking-for-elasticsearch-expert-as-elastic-sporadically-is-overloaded-and-stop-responding/261699)
**Author:** [@pamamolf](https://discuss.elastic.co/u/pamamolf)\ **Replies:** 0\ **Last updated:** [January 20, 2021, 8:13pm UTC](https://discuss.elastic.co/t/looking-for-elasticsearch-expert-as-elastic-sporadically-is-overloaded-and-stop-responding/261699 "2021-01-20T20:13:09Z")
Hello I am looking for an expert for my Invision forum as Elasticsearch sporadically is overloaded and stop responding... It will be great if he can check in depth and not only the config ..... Of course it will be a … --- ## [Request Entity Too Large when importing Kibana saved objects](https://discuss.elastic.co/t/request-entity-too-large-when-importing-kibana-saved-objects/261497)
**Author:** [@oskrdt](https://discuss.elastic.co/u/oskrdt)\ **Replies:** 6\ **Last updated:** [January 20, 2021, 9:31pm UTC](https://discuss.elastic.co/t/request-entity-too-large-when-importing-kibana-saved-objects/261497 "2021-01-20T21:31:48Z")
I'm trying to import a ndjson file with size 11.2 MB, but I'm getting the error 413 Request Entity Too Large when trying to do that. I tried increasing the following values on kibana.yml server.maxPayloadBytes: 104857… --- ## [ILM Rollover Issue](https://discuss.elastic.co/t/ilm-rollover-issue/261560)
**Author:** [@dfoot](https://discuss.elastic.co/u/dfoot)\ **Replies:** 1\ **Last updated:** [January 20, 2021, 9:15pm UTC](https://discuss.elastic.co/t/ilm-rollover-issue/261560 "2021-01-20T21:15:51Z")
Issue with ILM rollover after updated elasticsearch output: input\_storage-alias is the name of index I created policy name as input\_storage\_policy but from Index Management I am getting error message 'illegal\_argument\_… --- ## [Calculating the time remaining for re-indexing process](https://discuss.elastic.co/t/calculating-the-time-remaining-for-re-indexing-process/261702)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 2\ **Last updated:** [January 20, 2021, 8:44pm UTC](https://discuss.elastic.co/t/calculating-the-time-remaining-for-re-indexing-process/261702 "2021-01-20T20:44:29Z")
While curator is a fantastic tool, I wish it was showing the approximate time remaining for a re-indexing process. Right now, I calculate the approximate time using the following: Fire GET \_tasks?detailed=true&action… --- ## [Elastic-agent fleet apache integration illegal\_argument\_exception](https://discuss.elastic.co/t/elastic-agent-fleet-apache-integration-illegal-argument-exception/261644)
**Author:** [@gregorys](https://discuss.elastic.co/u/gregorys)\ **Replies:** 2\ **Last updated:** [January 20, 2021, 8:35pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-apache-integration-illegal-argument-exception/261644 "2021-01-20T20:35:52Z")
Hi, Running on 7.10.2. I have added the "Apache" integration to collect only logfiles, not metrics. When I go to discover to browse the logs-\* index, these errors appear: 1 of 8 shards failed ## illegal\_argument\_exce… --- ## [Kibana reporting](https://discuss.elastic.co/t/kibana-reporting/261698)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 3\ **Last updated:** [January 20, 2021, 8:22pm UTC](https://discuss.elastic.co/t/kibana-reporting/261698 "2021-01-20T20:22:48Z")
Hello there, I have a few indexes and a lot of data and I need to generate report and graphs for that data. can anyone please tell me how do I do that? Thanks, Akhil --- ## [Remove/hide comma separator between multiple values in a cell of Enhanced Data Table Visualization](https://discuss.elastic.co/t/remove-hide-comma-separator-between-multiple-values-in-a-cell-of-enhanced-data-table-visualization/261561)
**Author:** [@preeti1211](https://discuss.elastic.co/u/preeti1211)\ **Replies:** 2\ **Last updated:** [January 20, 2021, 7:55pm UTC](https://discuss.elastic.co/t/remove-hide-comma-separator-between-multiple-values-in-a-cell-of-enhanced-data-table-visualization/261561 "2021-01-20T19:55:18Z")
Hi Team, i have one usecase which i am able to achieve via Enhanced Data Table Visualization in Kibana. But since we are having multiple values in a single cell, they are coming as comma separated by default. Is there… --- ## [Unable to delete snapshot - no space left on device - Solved?](https://discuss.elastic.co/t/unable-to-delete-snapshot-no-space-left-on-device-solved/261675)
**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\ **Replies:** 4\ **Last updated:** [January 20, 2021, 7:50pm UTC](https://discuss.elastic.co/t/unable-to-delete-snapshot-no-space-left-on-device-solved/261675 "2021-01-20T19:50:14Z")
Hi all, Using 7.10.2 Basic licence After let my snapshot file system run out of space (100% full), I face the error were no more daily snapshots could run. This file system has nothing but snapshots, so I couldn't del… [Previous page](https://discuss.elastic.co/latest.md?page=1881) [Next page](https://discuss.elastic.co/latest.md?page=1883)