# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=743

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 744

---

## [Move Elastic Search from C: to D:](https://discuss.elastic.co/t/move-elastic-search-from-c-to-d/317051)

<div class="topic-metadata">

**Author:** [@inemer](https://discuss.elastic.co/u/inemer)\
**Replies:** 12\
**Last updated:** [November 4, 2022, 9:24am UTC](https://discuss.elastic.co/t/move-elastic-search-from-c-to-d/317051 "2022-11-04T09:24:31Z")

</div>

I was asking to research if it possible moving current installation of Kibana from C: drive to D: drive on our server. And if this possible is there Standard Operation Procedure (SOP) with description what step need to b…

---

## [Link Between indices (Geojson + data)](https://discuss.elastic.co/t/link-between-indices-geojson-data/317959)

<div class="topic-metadata">

**Author:** [@Chloe\_Boissavy](https://discuss.elastic.co/u/Chloe_Boissavy)\
**Replies:** 2\
**Last updated:** [November 4, 2022, 8:54am UTC](https://discuss.elastic.co/t/link-between-indices-geojson-data/317959 "2022-11-04T08:54:31Z")

</div>

Hello all, I am using ELK in version 7.17.2 and I need some help. I have 1 Geojson document with the location of my switches (around 80 switches). And I have some indices (logstash-DD-MM-YYYY) about these switches. I…

---

## [OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x000000058a6c0000, 10388504576, 0) failed; error='Cannot allocate memory' (errno=12)](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-info-os-commit-memory-0x000000058a6c0000-10388504576-0-failed-error-cannot-allocate-memory-errno-12/318160)

<div class="topic-metadata">

**Author:** [@shristy](https://discuss.elastic.co/u/shristy)\
**Replies:** 8\
**Last updated:** [November 4, 2022, 8:06am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-info-os-commit-memory-0x000000058a6c0000-10388504576-0-failed-error-cannot-allocate-memory-errno-12/318160 "2022-11-04T08:06:33Z")

</div>

OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x000000058a6c0000, 10388504576, 0) failed; error='Cannot allocate memory' (errno=12) There is insufficient memory for the Java Runtime Environment to continue. …

---

## [Elasticsearch backup and restore results in index being in 'red' state. ES version: 6.8.23](https://discuss.elastic.co/t/elasticsearch-backup-and-restore-results-in-index-being-in-red-state-es-version-6-8-23/318172)

<div class="topic-metadata">

**Author:** [@iZAK328](https://discuss.elastic.co/u/iZAK328)\
**Replies:** 0\
**Last updated:** [November 4, 2022, 8:34am UTC](https://discuss.elastic.co/t/elasticsearch-backup-and-restore-results-in-index-being-in-red-state-es-version-6-8-23/318172 "2022-11-04T08:34:23Z")

</div>

Hi, I had tried to perform a backup of elasticsearch on a server and restore on a different server by copying the backup folder and the steps are mentioned as below. Index name: the\_hive\_15 Source OS: Ubuntu 18.04 - E…

---

## [Auto follow hidden index?](https://discuss.elastic.co/t/auto-follow-hidden-index/318173)

<div class="topic-metadata">

**Author:** [@BobDobelina](https://discuss.elastic.co/u/BobDobelina)\
**Replies:** 0\
**Last updated:** [November 4, 2022, 8:39am UTC](https://discuss.elastic.co/t/auto-follow-hidden-index/318173 "2022-11-04T08:39:25Z")

</div>

Hi All, I am trying to create an auto-follow pattern for a hidden index. For example the agent metrics. .ds-metrics-elastic\_agent.filebeat-default-2022.08.11-000001 I have tried these 2 patterns PUT /\_ccr/auto\_follow…

---

## [I can's run Elastic Search on CentOS7.8](https://discuss.elastic.co/t/i-cans-run-elastic-search-on-centos7-8/317945)

<div class="topic-metadata">

**Author:** [@Shadow\_CHN](https://discuss.elastic.co/u/Shadow_CHN)\
**Replies:** 8\
**Last updated:** [November 4, 2022, 8:17am UTC](https://discuss.elastic.co/t/i-cans-run-elastic-search-on-centos7-8/317945 "2022-11-04T08:17:00Z")

</div>

After the installation and configuration is completed, I changed to user elastic and used /etc/elasticsearch-8.4.3/bin/elasticsearch for booting Elastic Search for many times, but every time it won's run successfully and…

---

## [Balancing indexes by priority](https://discuss.elastic.co/t/balancing-indexes-by-priority/318110)

<div class="topic-metadata">

**Author:** [@driveirk](https://discuss.elastic.co/u/driveirk)\
**Replies:** 6\
**Last updated:** [November 4, 2022, 8:13am UTC](https://discuss.elastic.co/t/balancing-indexes-by-priority/318110 "2022-11-04T08:13:47Z")

</div>

Very often, we get so that all new indices converge on one node and the node starts to reject. Now we use ILM and each index is given a priority. I want to configure so that indexes with equal priority are placed evenl…

---

## [Upload custom plugin in Elastic Cloud](https://discuss.elastic.co/t/upload-custom-plugin-in-elastic-cloud/318163)

<div class="topic-metadata">

**Author:** [@xinyi](https://discuss.elastic.co/u/xinyi)\
**Replies:** 4\
**Last updated:** [November 4, 2022, 8:10am UTC](https://discuss.elastic.co/t/upload-custom-plugin-in-elastic-cloud/318163 "2022-11-04T08:10:46Z")

</div>

Hello. I'm a gold level user of Elastic cloud, but not allowed to use this feature

---

## [Error with SSL keystore when trying to do remote reindex](https://discuss.elastic.co/t/error-with-ssl-keystore-when-trying-to-do-remote-reindex/317800)

<div class="topic-metadata">

**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\
**Replies:** 4\
**Last updated:** [November 4, 2022, 7:53am UTC](https://discuss.elastic.co/t/error-with-ssl-keystore-when-trying-to-do-remote-reindex/317800 "2022-11-04T07:53:06Z")

</div>

Hi, I'm trying to perform a remote reindex and the remote ES has been configured with SSL by someone else. I was able to get the abc.p12 cert of the remote ES, as well as the password that was auto-generated (an alpha-n…

---

## [Error Running Logstash multiple config](https://discuss.elastic.co/t/error-running-logstash-multiple-config/318167)

<div class="topic-metadata">

**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\
**Replies:** 2\
**Last updated:** [November 4, 2022, 7:51am UTC](https://discuss.elastic.co/t/error-running-logstash-multiple-config/318167 "2022-11-04T07:51:29Z")

</div>

Hello, I want to run multiple configs from logstash. So I wrote two pipelines in my piepeline.yml file. # List of pipelines to be loaded by Logstash # # This document must be a list of dictionaries/hashes, where the ke…

---

## [Logstash stuck when lumberjack server is down](https://discuss.elastic.co/t/logstash-stuck-when-lumberjack-server-is-down/318166)

<div class="topic-metadata">

**Author:** [@ferdose\_shaik](https://discuss.elastic.co/u/ferdose_shaik)\
**Replies:** 0\
**Last updated:** [November 4, 2022, 7:25am UTC](https://discuss.elastic.co/t/logstash-stuck-when-lumberjack-server-is-down/318166 "2022-11-04T07:25:23Z")

</div>

We are using Logstash 7.15.2 with following lumberjack output configured. output { lumberjack { id =\> "dcae5gcprod" hosts =\> \["dcae-5gc-prod.ecomp.idns.cci.att.com"\] codec =\> json port =\> 31135 ssl\_cert…

---

## [Is it feasible to install tow versions of Elastic Search on a single host and run them at the same time?](https://discuss.elastic.co/t/is-it-feasible-to-install-tow-versions-of-elastic-search-on-a-single-host-and-run-them-at-the-same-time/317943)

<div class="topic-metadata">

**Author:** [@Shadow\_CHN](https://discuss.elastic.co/u/Shadow_CHN)\
**Replies:** 2\
**Last updated:** [November 4, 2022, 7:15am UTC](https://discuss.elastic.co/t/is-it-feasible-to-install-tow-versions-of-elastic-search-on-a-single-host-and-run-them-at-the-same-time/317943 "2022-11-04T07:15:32Z")

</div>

As my topic said, I'm wondering is it worked? I hope es7.x is for graylog and ex8.x for ELK.

---

## [Spring elasticsearch - how to generate mapping for all the fields statically?](https://discuss.elastic.co/t/spring-elasticsearch-how-to-generate-mapping-for-all-the-fields-statically/318165)

<div class="topic-metadata">

**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\
**Replies:** 0\
**Last updated:** [November 4, 2022, 7:13am UTC](https://discuss.elastic.co/t/spring-elasticsearch-how-to-generate-mapping-for-all-the-fields-statically/318165 "2022-11-04T07:13:32Z")

</div>

I have a Person class: @Document(indexName = "person") @Data @EqualsAndHashCode(callSuper = true) public class Person extends BaseEntity implements Serializable { @Field(type=FieldType.Keyword) private String first…

---

## [Logstash SNMP input plugin](https://discuss.elastic.co/t/logstash-snmp-input-plugin/318158)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 0\
**Last updated:** [November 4, 2022, 5:20am UTC](https://discuss.elastic.co/t/logstash-snmp-input-plugin/318158 "2022-11-04T05:20:51Z")

</div>

Hi Community, We have multiple IPs for monitoring SNMP OIDs is there any method we can put all ip in a file and use it in a snmp input plugin of logstash.

---

## [Unmapped types in Suggest](https://discuss.elastic.co/t/unmapped-types-in-suggest/317989)

<div class="topic-metadata">

**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\
**Replies:** 1\
**Last updated:** [November 4, 2022, 1:37am UTC](https://discuss.elastic.co/t/unmapped-types-in-suggest/317989 "2022-11-04T01:37:32Z")

</div>

I am trying to implement suggest feature - Suggesters | Elasticsearch Guide \[8.5\] | Elastic for handling misspelled words in my search implementation. My search query is executed across multiple indices but while trying…

---

## [Elasticsearch mapping issue for ES version 7.\*](https://discuss.elastic.co/t/elasticsearch-mapping-issue-for-es-version-7/318114)

<div class="topic-metadata">

**Author:** [@sssamant](https://discuss.elastic.co/u/sssamant)\
**Replies:** 1\
**Last updated:** [November 4, 2022, 1:29am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-issue-for-es-version-7/318114 "2022-11-04T01:29:07Z")

</div>

Hello, We are facing some issue related to mapping when we ingest data. Here is error we are getting: "error"=\>{"type"=\>"illegal\_argument\_exception", "reason"=\>"Mapper for \[fn.keyword\] conflicts with existing mapper:\\…

---

## [Change of unit](https://discuss.elastic.co/t/change-of-unit/318122)

<div class="topic-metadata">

**Author:** [@Isay](https://discuss.elastic.co/u/Isay)\
**Replies:** 6\
**Last updated:** [November 4, 2022, 1:27am UTC](https://discuss.elastic.co/t/change-of-unit/318122 "2022-11-04T01:27:39Z")

</div>

My disk is full and I want to change my information to another Elasticsearch unit, in the configuration I know that the new route is added ----------------------------------- Paths ------------------------------------ P…

---

## [Allocation fails on newly added nodes](https://discuss.elastic.co/t/allocation-fails-on-newly-added-nodes/318120)

<div class="topic-metadata">

**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\
**Replies:** 1\
**Last updated:** [November 4, 2022, 1:27am UTC](https://discuss.elastic.co/t/allocation-fails-on-newly-added-nodes/318120 "2022-11-04T01:27:38Z")

</div>

Hello Guys, Anyone know why the below error occurs when shard allocation happens. We added a few nodes to the existing cluster and this started happening as soon as we enabled the allocations. \[indices:data/write/bulk\[…

---

## [SSL(curl) connection error in ElasticSearch setup](https://discuss.elastic.co/t/ssl-curl-connection-error-in-elasticsearch-setup/318137)

<div class="topic-metadata">

**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\
**Replies:** 4\
**Last updated:** [November 3, 2022, 10:15pm UTC](https://discuss.elastic.co/t/ssl-curl-connection-error-in-elasticsearch-setup/318137 "2022-11-03T22:15:40Z")

</div>

Have setup a 3-node Elasticsearch cluster using docker-compose. Followed below steps: On one of the master nodes, es11, gets below error, however same curl command works fine on other 2 nodes i.e. es12, es13: Error: cu…

---

## [Kibana is not able to connect to Elastic Search](https://discuss.elastic.co/t/kibana-is-not-able-to-connect-to-elastic-search/317994)

<div class="topic-metadata">

**Author:** [@dubeyamit620](https://discuss.elastic.co/u/dubeyamit620)\
**Replies:** 3\
**Last updated:** [November 3, 2022, 10:04pm UTC](https://discuss.elastic.co/t/kibana-is-not-able-to-connect-to-elastic-search/317994 "2022-11-03T22:04:58Z")

</div>

We are facing issues connecting Kibana to Elastic Search and getting the following error in the Logs : \["error","elasticsearch","admin"\],"pid":67908,"message":"Request error, retrying\\nGET http://127.0.0.1:9200/.kibana\_…

---

## [Elastic-Index Join](https://discuss.elastic.co/t/elastic-index-join/317474)

<div class="topic-metadata">

**Author:** [@balaa](https://discuss.elastic.co/u/balaa)\
**Replies:** 6\
**Last updated:** [November 3, 2022, 10:04pm UTC](https://discuss.elastic.co/t/elastic-index-join/317474 "2022-11-03T22:04:02Z")

</div>

Hi Team, My requirement is to join two index as mentioned below.Is it possible? if yes how to achieve it. Index 1: { "A": 1, "B": "Sam", "C": 1234 } Index 2: { "C": 1234, "D": "elastic", "E": "Support" } Fi…

---

## [Cannot allocate because allocation is not permitted to any of the nodes that hold an in-sync shard copy](https://discuss.elastic.co/t/cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes-that-hold-an-in-sync-shard-copy/318066)

<div class="topic-metadata">

**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\
**Replies:** 3\
**Last updated:** [November 3, 2022, 10:03pm UTC](https://discuss.elastic.co/t/cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes-that-hold-an-in-sync-shard-copy/318066 "2022-11-03T22:03:45Z")

</div>

ES version - 6.x ES cluster is red and getting the below error sh-4.2# curl -k -XGET https://127.0.0.1:9200/\_cluster/allocation/explain?pretty^M {^H "index" : "index1",^M "shard" : 2,^M "primary" : true,^M "cur…

---

## [Unable to bul index](https://discuss.elastic.co/t/unable-to-bul-index/318097)

<div class="topic-metadata">

**Author:** [@Tushar\_Singh1](https://discuss.elastic.co/u/Tushar_Singh1)\
**Replies:** 1\
**Last updated:** [November 3, 2022, 9:54pm UTC](https://discuss.elastic.co/t/unable-to-bul-index/318097 "2022-11-03T21:54:37Z")

</div>

I am new to windows . I was working my entire on linux. Can somebody help me here for \_bulk api indexing C:\\ELK\\master-1\\elasticsearch\\sample\_data\>curl -k -H 'Content-Type: application/x-ndjson' -X POST 'https://localho…

---

## [Heartbeat 8.5.0 mapper error workaround](https://discuss.elastic.co/t/heartbeat-8-5-0-mapper-error-workaround/318133)

<div class="topic-metadata">

**Author:** [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)\
**Replies:** 0\
**Last updated:** [November 3, 2022, 7:00pm UTC](https://discuss.elastic.co/t/heartbeat-8-5-0-mapper-error-workaround/318133 "2022-11-03T19:00:11Z")

</div>

Hi all, Andrew from Elastic here, Tech Lead for Heartbeat. We're sorry to report that Heartbeat 8.5.0 has a severe bug that will break indexing in most installs after ~30m of runtime. The good news is there's an easy wor…

---

## [Best approach for upgrading from 7.15 to say 8.5](https://discuss.elastic.co/t/best-approach-for-upgrading-from-7-15-to-say-8-5/318057)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 4\
**Last updated:** [November 3, 2022, 9:14pm UTC](https://discuss.elastic.co/t/best-approach-for-upgrading-from-7-15-to-say-8-5/318057 "2022-11-03T21:14:58Z")

</div>

I'm running 7.15 today (both ES & REST client). Is there a document suggesting how to upgrade to say ES 8.5? We don't do instance upgrade. We use double write. We will have both 7.15 & 8.5 clusters running during the t…

---

## [No matching indices found: No indices match "apim\_event\_faulty"](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-apim-event-faulty/317814)

<div class="topic-metadata">

**Author:** [@ahmed.emad](https://discuss.elastic.co/u/ahmed.emad)\
**Replies:** 2\
**Last updated:** [November 3, 2022, 8:01pm UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-apim-event-faulty/317814 "2022-11-03T20:01:02Z")

</div>

Hi all, I want to use ELK to monitor the WSO2 API Manager and I have done configurations here https://apim.docs.wso2.com/en/latest/api-analytics/on-prem/elk-installation-guide/ but I got an error when connecting to kib…

---

## [Error Indexing Logs generated by APM](https://discuss.elastic.co/t/error-indexing-logs-generated-by-apm/318135)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 0\
**Last updated:** [November 3, 2022, 7:18pm UTC](https://discuss.elastic.co/t/error-indexing-logs-generated-by-apm/318135 "2022-11-03T19:18:09Z")

</div>

I'm receiving the following error, whether I'm monitoring this application with a filebeat daemonset deployed to Kubernetes using autodiscovery or with Elastic Agent and the Kubernetes integration: Cannot index event pu…

---

## [Painless script "Cannot cast from \[boolean\] to \[java.lang.String\]" issue](https://discuss.elastic.co/t/painless-script-cannot-cast-from-boolean-to-java-lang-string-issue/318034)

<div class="topic-metadata">

**Author:** [@alex\_sws](https://discuss.elastic.co/u/alex_sws)\
**Replies:** 3\
**Last updated:** [November 3, 2022, 6:03pm UTC](https://discuss.elastic.co/t/painless-script-cannot-cast-from-boolean-to-java-lang-string-issue/318034 "2022-11-03T18:03:55Z")

</div>

Having trouble spotting the error in my script. "reason": "class\_cast\_exception: Cannot cast from \[boolean\] to \[java.lang.String\]." The Scripted field: Instant Currentdate = Instant.ofEpochMilli(new Date().getTime());…

---

## [Watcher - loop through results of the first search and use them for the second search](https://discuss.elastic.co/t/watcher-loop-through-results-of-the-first-search-and-use-them-for-the-second-search/317518)

<div class="topic-metadata">

**Author:** [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\
**Replies:** 1\
**Last updated:** [November 3, 2022, 5:58pm UTC](https://discuss.elastic.co/t/watcher-loop-through-results-of-the-first-search-and-use-them-for-the-second-search/317518 "2022-11-03T17:58:17Z")

</div>

Hi, I'd like to use every hit of the first result as a parameter for the second search. And after condition checking start an action. What I mean: for result1 in first\_search\_results: for result2 in second\_search…

---

## [Abnormal behavior of anomaly detection found - Elastic ML Stack](https://discuss.elastic.co/t/abnormal-behavior-of-anomaly-detection-found-elastic-ml-stack/317948)

<div class="topic-metadata">

**Author:** [@Sreeja1](https://discuss.elastic.co/u/Sreeja1)\
**Replies:** 1\
**Last updated:** [November 3, 2022, 5:47pm UTC](https://discuss.elastic.co/t/abnormal-behavior-of-anomaly-detection-found-elastic-ml-stack/317948 "2022-11-03T17:47:34Z")

</div>

Hi I have created a multi metric Anomaly Detection Job with High Mean Response Time as detector, bucket span was 4h and Training data was for 1year. After a certain span the Upper Bound of the model has increased abr…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=742)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=744)
