# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=870 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 871 --- ## [Elastic8 java client allocation.max\_retries exception](https://discuss.elastic.co/t/elastic8-java-client-allocation-max-retries-exception/308868)
**Author:** [@Idorasi\_Paul](https://discuss.elastic.co/u/Idorasi_Paul)\ **Replies:** 5\ **Last updated:** [July 11, 2022, 10:30am UTC](https://discuss.elastic.co/t/elastic8-java-client-allocation-max-retries-exception/308868 "2022-07-11T10:30:04Z")
Hello, currently using elasticsearch-java 8.1.3 client to communicate with my es cluster. Index settings looks like this: "settings": { "index": { "number\_of\_shards": 1, "number\_of\_replicas": 7, "… --- ## [Curator is not working](https://discuss.elastic.co/t/curator-is-not-working/309219)
**Author:** [@sandeepbisht](https://discuss.elastic.co/u/sandeepbisht)\ **Replies:** 5\ **Last updated:** [July 11, 2022, 9:35am UTC](https://discuss.elastic.co/t/curator-is-not-working/309219 "2022-07-11T09:35:55Z")
Hi All, I was trying to setup curator for auto removal of my old indices but i am getting below error. Please someone help me on this. I have also attached screenshot of my curator and action file with it's output. o… --- ## [Unable to install a specific version of Elastic Stack software (Ubuntu 20.04 LTS)](https://discuss.elastic.co/t/unable-to-install-a-specific-version-of-elastic-stack-software-ubuntu-20-04-lts/309305)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 0\ **Last updated:** [July 11, 2022, 9:28am UTC](https://discuss.elastic.co/t/unable-to-install-a-specific-version-of-elastic-stack-software-ubuntu-20-04-lts/309305 "2022-07-11T09:28:39Z")
Hi, I have Ubuntu 20.04 LTS with the latest updates. root@pk-elk1:/etc/kibana# uname -a Linux pk-elk1 5.13.0-1028-azure #33~20.04.1-Ubuntu SMP Fri Jun 3 15:13:34 UTC 2022 x86\_64 x86\_64 x86\_64 GNU/Linux On this Ubuntu,… --- ## [Cluster in two data centers](https://discuss.elastic.co/t/cluster-in-two-data-centers/309302)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 1\ **Last updated:** [July 11, 2022, 9:25am UTC](https://discuss.elastic.co/t/cluster-in-two-data-centers/309302 "2022-07-11T09:25:42Z")
Hi All, I do have an Elasticsearch cluster where some of the nodes are in an east-US datacenter (the master nodes are located here) and some of them are in a west-US datacenter. I have requested the connections 9200 an… --- ## [Kibana map function](https://discuss.elastic.co/t/kibana-map-function/309259)
**Author:** [@Jathurshan\_Sumandira](https://discuss.elastic.co/u/Jathurshan_Sumandira)\ **Replies:** 1\ **Last updated:** [July 10, 2022, 3:47pm UTC](https://discuss.elastic.co/t/kibana-map-function/309259 "2022-07-10T15:47:52Z")
I am using the kibana map visualization for visualizing my elastic data. I have data on shopping mall locations. So I use the latitude and the longitude of those locations as geo-points and I created a layer on the map a… --- ## [Heap memory overflow master nodes (continuous GC)](https://discuss.elastic.co/t/heap-memory-overflow-master-nodes-continuous-gc/308465)
**Author:** [@Balaji\_Arun](https://discuss.elastic.co/u/Balaji_Arun)\ **Replies:** 3\ **Last updated:** [July 11, 2022, 8:25am UTC](https://discuss.elastic.co/t/heap-memory-overflow-master-nodes-continuous-gc/308465 "2022-07-11T08:25:25Z")
Hi everyone, Recently, encountered increases in the heap memory usage in the master nodes (heap memory overflow master nodes continuous garbage collection). I try to debug the root cause using the heap dump saved in the… --- ## [Logstash not working, if installed in a location where the path contains parentheses (on windows)](https://discuss.elastic.co/t/logstash-not-working-if-installed-in-a-location-where-the-path-contains-parentheses-on-windows/309291)
**Author:** [@simon137](https://discuss.elastic.co/u/simon137)\ **Replies:** 0\ **Last updated:** [July 11, 2022, 6:57am UTC](https://discuss.elastic.co/t/logstash-not-working-if-installed-in-a-location-where-the-path-contains-parentheses-on-windows/309291 "2022-07-11T06:57:03Z")
Hello together, As the title suggests, with a sample path of "C:\\ProgramData\\Test)Test\\logstash", the call to ".\\bin\\logstash.bat" fails with the message: "Test\\logstash\\jdk\\bin\\java.exe" cannot be processed syntactical… --- ## [Multi Match Phrase query](https://discuss.elastic.co/t/multi-match-phrase-query/309290)
**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\ **Replies:** 0\ **Last updated:** [July 11, 2022, 6:47am UTC](https://discuss.elastic.co/t/multi-match-phrase-query/309290 "2022-07-11T06:47:33Z")
Hi Team, Does elasticsearch multi\_match phrase query supports custom synonyms in search time? Below is the query { "multi\_match": { "query": "add new document", … --- ## [Feasibility to upsert the documents using Bulk operation](https://discuss.elastic.co/t/feasibility-to-upsert-the-documents-using-bulk-operation/309289)
**Author:** [@bkantu](https://discuss.elastic.co/u/bkantu)\ **Replies:** 0\ **Last updated:** [July 11, 2022, 6:35am UTC](https://discuss.elastic.co/t/feasibility-to-upsert-the-documents-using-bulk-operation/309289 "2022-07-11T06:35:36Z")
Hi Team, Is there a way to insert a document if the document doesn't exist or else update the document in Elasticsearch using BulkAll? How can we handle not duplicating the records if we do the import twice? --- ## [How to split an existing index based on number of documents](https://discuss.elastic.co/t/how-to-split-an-existing-index-based-on-number-of-documents/309287)
**Author:** [@Aurovindo\_Sahu](https://discuss.elastic.co/u/Aurovindo_Sahu)\ **Replies:** 4\ **Last updated:** [July 11, 2022, 6:18am UTC](https://discuss.elastic.co/t/how-to-split-an-existing-index-based-on-number-of-documents/309287 "2022-07-11T06:18:51Z")
We have an index of size 70GB which contains 73 million documents and we want to split this index based on number of documents. Is there any way we can divide the current index by taking number of documents into conside… --- ## [OCR integration](https://discuss.elastic.co/t/ocr-integration/308781)
**Author:** [@kanavsha](https://discuss.elastic.co/u/kanavsha)\ **Replies:** 1\ **Last updated:** [July 11, 2022, 6:16am UTC](https://discuss.elastic.co/t/ocr-integration/308781 "2022-07-11T06:16:40Z")
Hi, We have a requirement where we receive pdf/jpg documents having log content. We need to read those documents and convert them to text and index them. We have been guided to use OCR libraries and then index the cont… --- ## [Filebeat PKI certificate authentication not working to es](https://discuss.elastic.co/t/filebeat-pki-certificate-authentication-not-working-to-es/309239)
**Author:** [@fformoso](https://discuss.elastic.co/u/fformoso)\ **Replies:** 1\ **Last updated:** [July 11, 2022, 6:01am UTC](https://discuss.elastic.co/t/filebeat-pki-certificate-authentication-not-working-to-es/309239 "2022-07-11T06:01:38Z")
Dear all, Im trying to setup ssl to connect filebeat to elastic Elastic service is running in xxxxx.yy:9200 filebeat.yml hosts: \["xxxxx.yy:9200"\] protocol: "https" ssl.certificate\_authorities: "/etc/filebeat/securi… --- ## [Kibana\] Action failed with 'Request timed out' while CREATE\_NEW\_TARGET -\> CREATE\_NEW\_TARGET in docker swarm environment](https://discuss.elastic.co/t/kibana-action-failed-with-request-timed-out-while-create-new-target-create-new-target-in-docker-swarm-environment/307106)
**Author:** [@itsraj](https://discuss.elastic.co/u/itsraj)\ **Replies:** 3\ **Last updated:** [July 11, 2022, 4:12am UTC](https://discuss.elastic.co/t/kibana-action-failed-with-request-timed-out-while-create-new-target-create-new-target-in-docker-swarm-environment/307106 "2022-07-11T04:12:52Z")
Hi Community, I am trying to deploy Elastic Cluster with 3 nodes on a docker swarm environment with Kibana. All 4 services (3 elastic and 1 kibana) are running fine. Below image for reference. But Kibana is failing … --- ## [Analyzer-ik Can we support the 祖-10 participle?](https://discuss.elastic.co/t/analyzer-ik-can-we-support-the-10-participle/309062)
**Author:** [@zhilong](https://discuss.elastic.co/u/zhilong)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 1:46am UTC](https://discuss.elastic.co/t/analyzer-ik-can-we-support-the-10-participle/309062 "2022-07-07T01:46:24Z")
Can we support the 祖-10 participle? I was unable to support the 祖-10 participle after using the Analyzer - IK test --- ## [Query\_string with wildcard does not return an explanation (explain=true)](https://discuss.elastic.co/t/query-string-with-wildcard-does-not-return-an-explanation-explain-true/309278)
**Author:** [@Alberto\_Calvo\_Rubio](https://discuss.elastic.co/u/Alberto_Calvo_Rubio)\ **Replies:** 0\ **Last updated:** [July 10, 2022, 9:18pm UTC](https://discuss.elastic.co/t/query-string-with-wildcard-does-not-return-an-explanation-explain-true/309278 "2022-07-10T21:18:49Z")
Hello, The following query\_string does not return the explanation of the matching (explain=true) GET myindex/\_search?explain=true { "query": { "nested": { "path": "entity", "query": { … --- ## [Issue with Embed Kibana Dashboard](https://discuss.elastic.co/t/issue-with-embed-kibana-dashboard/309275)
**Author:** [@soumilshah1995](https://discuss.elastic.co/u/soumilshah1995)\ **Replies:** 0\ **Last updated:** [July 10, 2022, 9:00pm UTC](https://discuss.elastic.co/t/issue-with-embed-kibana-dashboard/309275 "2022-07-10T21:00:10Z")
Hello all i have spent almost more than 4 hours reading and resolving this issue I have a dashboard which I am trying top embed on the website I went and created a role and assigned the role to the user and added chan… --- ## [Wondering about REST API difference between \_cat/count vs \_stats](https://discuss.elastic.co/t/wondering-about-rest-api-difference-between-cat-count-vs-stats/309272)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 0\ **Last updated:** [July 10, 2022, 8:38pm UTC](https://discuss.elastic.co/t/wondering-about-rest-api-difference-between-cat-count-vs-stats/309272 "2022-07-10T20:38:32Z")
Trying to understand why it seems that indicies/\_stats doesn't return the proper numbers of docs as \_cat/count/index and kibana discover does? eg. finding these samples from a sample index with a simple REST API CLI wra… --- ## [ElasticSearch on NAS](https://discuss.elastic.co/t/elasticsearch-on-nas/309156)
**Author:** [@akassabi](https://discuss.elastic.co/u/akassabi)\ **Replies:** 17\ **Last updated:** [July 10, 2022, 6:48pm UTC](https://discuss.elastic.co/t/elasticsearch-on-nas/309156 "2022-07-10T18:48:23Z")
We have deployed ES7 to an Oracle PCA environment. This consists of several Oracle VMs connected to an Oracle NAS filer. Initially, the ES data partitions were mounted as NFS, but we are hitting the filer IOPS limits. Ou… --- ## [Error: fleet-server failed: context canceled | Error - dial tcp 172.18.0.2:9200: i/o timeout](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled-error-dial-tcp-172-18-0-2-i-o-timeout/306411)
**Author:** [@ilia19945](https://discuss.elastic.co/u/ilia19945)\ **Replies:** 5\ **Last updated:** [July 10, 2022, 4:57pm UTC](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled-error-dial-tcp-172-18-0-2-i-o-timeout/306411 "2022-07-10T16:57:18Z")
Kibana version: v 8.2.2 Elasticsearch version: v 8.2.2 APM Server version: v 8.2.2 APM Agent language and version: Python 3.10.0 Browser version: Google Chrome Version 102.0.5005.63 (Official Build) (64-bit) O… --- ## [Watcher: comparing two fields in same Doc?](https://discuss.elastic.co/t/watcher-comparing-two-fields-in-same-doc/309267)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 0\ **Last updated:** [July 10, 2022, 2:57pm UTC](https://discuss.elastic.co/t/watcher-comparing-two-fields-in-same-doc/309267 "2022-07-10T14:57:05Z")
how i compare two fields in same doc ? --- ## [Migrate Elasticsearch objects (index templates, scripts..) to New Cluster](https://discuss.elastic.co/t/migrate-elasticsearch-objects-index-templates-scripts-to-new-cluster/309266)
**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\ **Replies:** 0\ **Last updated:** [July 10, 2022, 2:34pm UTC](https://discuss.elastic.co/t/migrate-elasticsearch-objects-index-templates-scripts-to-new-cluster/309266 "2022-07-10T14:34:28Z")
Hi, We are considering migrating our on-premises cluster to Elastic Cloud. Whilst there are many options to migrate indices data (reindex, snapshot & restore) I didn't find what is the best practice to migrate objects … --- ## [How to use the value in buckets\_path to filter the whole document？](https://discuss.elastic.co/t/how-to-use-the-value-in-buckets-path-to-filter-the-whole-document/309265)
**Author:** [@josephLiu](https://discuss.elastic.co/u/josephLiu)\ **Replies:** 0\ **Last updated:** [July 10, 2022, 2:07pm UTC](https://discuss.elastic.co/t/how-to-use-the-value-in-buckets-path-to-filter-the-whole-document/309265 "2022-07-10T14:07:39Z")
I have a DSL，i want to use the value return from buckets\_path to filter the whole index. can ES supports this kind of operation？In SQL SERVER like select \* from table where max(datatime) \< (select max(datatime) from … --- ## [Randomise hits results every iterations](https://discuss.elastic.co/t/randomise-hits-results-every-iterations/309260)
**Author:** [@Eddie\_Vuong](https://discuss.elastic.co/u/Eddie_Vuong)\ **Replies:** 5\ **Last updated:** [July 10, 2022, 10:42am UTC](https://discuss.elastic.co/t/randomise-hits-results-every-iterations/309260 "2022-07-10T10:42:34Z")
Is there any way to randomise the search hits every I rerun a query? Due to the large number of hits, I just want to sample my results and do some statistical test on it. However, I have yet to find a way to randomise t… --- ## [Advise for logging infrastructure](https://discuss.elastic.co/t/advise-for-logging-infrastructure/309209)
**Author:** [@loicattena](https://discuss.elastic.co/u/loicattena)\ **Replies:** 1\ **Last updated:** [July 10, 2022, 8:56am UTC](https://discuss.elastic.co/t/advise-for-logging-infrastructure/309209 "2022-07-10T08:56:04Z")
Hi, I would like to get advise from experienced people to build a HA infrastructure to log 1.5To of data in JSON format every week. I need to have a retention time of 7 days and need to be able to requests these data by… --- ## [Connecting logstash to Elasticsearch via SSL](https://discuss.elastic.co/t/connecting-logstash-to-elasticsearch-via-ssl/308828)
**Author:** [@dsilvera](https://discuss.elastic.co/u/dsilvera)\ **Replies:** 5\ **Last updated:** [July 10, 2022, 2:01am UTC](https://discuss.elastic.co/t/connecting-logstash-to-elasticsearch-via-ssl/308828 "2022-07-10T02:01:32Z")
So I have read that since v8.0 Elasticsearch has encryption turned on by default for connections from Logstash, Kabana, Beats. But I'm not finding a guide on how to setup the certificate and connect to Elasticsearch fro… --- ## [Valid or Invalid Restore bytes and files](https://discuss.elastic.co/t/valid-or-invalid-restore-bytes-and-files/309253)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 0\ **Last updated:** [July 9, 2022, 3:34pm UTC](https://discuss.elastic.co/t/valid-or-invalid-restore-bytes-and-files/309253 "2022-07-09T15:34:35Z")
Hi ElasticTeam, I asked this before but haven't heard any confirmation yet so I want to raised and make sure if the Restore I did is valid or not. The status is "Complete", and has 100% remarks, but the bytes and file ar… --- ## [Unable to parse response body for Response | ElasticsearchSinkConnector](https://discuss.elastic.co/t/unable-to-parse-response-body-for-response-elasticsearchsinkconnector/309241)
**Author:** [@Mayderson\_Santos](https://discuss.elastic.co/u/Mayderson_Santos)\ **Replies:** 0\ **Last updated:** [July 9, 2022, 2:44am UTC](https://discuss.elastic.co/t/unable-to-parse-response-body-for-response-elasticsearchsinkconnector/309241 "2022-07-09T02:44:54Z")
Hello, I'm having a problem in Elasticsearch version 8.3.2, I'm using Kafka Connect with Elasticsearch's sink connector in version 13.1.0, the following error occurs: Failed to execute bulk request due to 'java.io.IOEx… --- ## [Looking for way to search for wildcard with space characters. Does KQL have character escaping?](https://discuss.elastic.co/t/looking-for-way-to-search-for-wildcard-with-space-characters-does-kql-have-character-escaping/309250)
**Author:** [@megaksa](https://discuss.elastic.co/u/megaksa)\ **Replies:** 0\ **Last updated:** [July 9, 2022, 1:57pm UTC](https://discuss.elastic.co/t/looking-for-way-to-search-for-wildcard-with-space-characters-does-kql-have-character-escaping/309250 "2022-07-09T13:57:50Z")
Basically, I have log strings that I wanted to keep as a wildcard type to be able to search for exact substrings with either wildcard query \*abc\* or with regex /.\*abc.\*/. The problem is that Observability → Logs doesn't… --- ## [The CPU useage of elasticsearch three nodes is not balance](https://discuss.elastic.co/t/the-cpu-useage-of-elasticsearch-three-nodes-is-not-balance/309243)
**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\ **Replies:** 3\ **Last updated:** [July 9, 2022, 11:27am UTC](https://discuss.elastic.co/t/the-cpu-useage-of-elasticsearch-three-nodes-is-not-balance/309243 "2022-07-09T11:27:59Z")
elasticsearch version：7.10.2 nodes：3 indice config：3 primary shard & 1 Replica I use {"query": {"match\_all": {}} to query 10 pieces of data, and the CPU useage of the three nodes is not balance. node-0: node-1: … --- ## [Not equal condtions in elasticsearch aggregation](https://discuss.elastic.co/t/not-equal-condtions-in-elasticsearch-aggregation/308976)
**Author:** [@hadii](https://discuss.elastic.co/u/hadii)\ **Replies:** 5\ **Last updated:** [July 9, 2022, 5:21am UTC](https://discuss.elastic.co/t/not-equal-condtions-in-elasticsearch-aggregation/308976 "2022-07-09T05:21:23Z")
I have a rails app that connects to Elasticsearch and the user could define some conditions like (at least),(at most), and ... to compare and find his specific result. everything is fine but now I have to add not equal t… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=869) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=871)