# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=954

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 955

---

## [How to download and install trial license of elasticsearch](https://discuss.elastic.co/t/how-to-download-and-install-trial-license-of-elasticsearch/303761)

<div class="topic-metadata">

**Author:** [@bhguo](https://discuss.elastic.co/u/bhguo)\
**Replies:** 2\
**Last updated:** [May 3, 2022, 4:19pm UTC](https://discuss.elastic.co/t/how-to-download-and-install-trial-license-of-elasticsearch/303761 "2022-05-03T16:19:09Z")

</div>

Dear sirs, I want to enable my application to connect Elasticsearch with ODBC, the elastic official say that ODBC client requires a Trial or Platinum license installed, here is the information source Download ODBC Clien…

---

## [How to get rid of deleted documents and reclaim disk space?](https://discuss.elastic.co/t/how-to-get-rid-of-deleted-documents-and-reclaim-disk-space/303184)

<div class="topic-metadata">

**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\
**Replies:** 14\
**Last updated:** [May 3, 2022, 4:09pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-deleted-documents-and-reclaim-disk-space/303184 "2022-05-03T16:09:19Z")

</div>

I have a bunch of indexes with a massive amount of deleted documents. I've tried running POST /\_forcemerge?only\_expunge\_deletes=true multiple times, but it doesn't seem to do anything. The command returns Gateway Ti…

---

## [Official Puppet Forge Module Deprecation](https://discuss.elastic.co/t/official-puppet-forge-module-deprecation/303752)

<div class="topic-metadata">

**Author:** [@Arthur7868](https://discuss.elastic.co/u/Arthur7868)\
**Replies:** 2\
**Last updated:** [May 3, 2022, 3:11pm UTC](https://discuss.elastic.co/t/official-puppet-forge-module-deprecation/303752 "2022-05-03T15:11:31Z")

</div>

I noticed that the Puppet Forge Elasticsearch installation module provided by Elastic has been deprecated at the end of March 2022 (elastic/elasticsearch · Module for managing and configuring Elasticsearch nodes · Puppet…

---

## [ERROR: Failed to determine the health of the cluster](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/303772)

<div class="topic-metadata">

**Author:** [@hernani33](https://discuss.elastic.co/u/hernani33)\
**Replies:** 4\
**Last updated:** [May 3, 2022, 3:07pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster/303772 "2022-05-03T15:07:11Z")

</div>

hello, i have Elasticsearch-8.1.3.tar.gz and kibana-8.1.3.tar.gz they are work but when i make this command line ----\> bin/Elasticsearch-create-enrollment-token -s kibana give me error ---\> ERROR: Failed to determin…

---

## [Sorting by Relevance Score and Sold Counts](https://discuss.elastic.co/t/sorting-by-relevance-score-and-sold-counts/303810)

<div class="topic-metadata">

**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\
**Replies:** 3\
**Last updated:** [May 3, 2022, 2:56pm UTC](https://discuss.elastic.co/t/sorting-by-relevance-score-and-sold-counts/303810 "2022-05-03T14:56:58Z")

</div>

Hello everyone, I want to sort results according to sold counts. However, the criteria should also include relevance score. For example, assume that for a "X" product, sold count is 100 and relevance score 3; for a "Y" …

---

## [Mount ExistingClaim in Logstash install with Helm](https://discuss.elastic.co/t/mount-existingclaim-in-logstash-install-with-helm/303784)

<div class="topic-metadata">

**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\
**Replies:** 1\
**Last updated:** [May 3, 2022, 2:14pm UTC](https://discuss.elastic.co/t/mount-existingclaim-in-logstash-install-with-helm/303784 "2022-05-03T14:14:03Z")

</div>

I am using the official Helm chart for Logstash. I want to mount a volume using an existingClaim that has some dictionaries that will be used for translate filters across multiple Logstash instances. How do I bring in …

---

## [Failed to initialize a TrustManager for the system keystore (using elasticsearch-oss; i.e. no XPack)](https://discuss.elastic.co/t/failed-to-initialize-a-trustmanager-for-the-system-keystore-using-elasticsearch-oss-i-e-no-xpack/303778)

<div class="topic-metadata">

**Author:** [@Alex\_Nelson](https://discuss.elastic.co/u/Alex_Nelson)\
**Replies:** 4\
**Last updated:** [May 3, 2022, 1:44pm UTC](https://discuss.elastic.co/t/failed-to-initialize-a-trustmanager-for-the-system-keystore-using-elasticsearch-oss-i-e-no-xpack/303778 "2022-05-03T13:44:42Z")

</div>

I manage Elasticsearch on multiple instances. One of my instances is having problems bringing up Elasticsearch. I am unable to determine why this one instance is having problems. All of my instances should have the sa…

---

## [Manage "new" index templates with Logstash](https://discuss.elastic.co/t/manage-new-index-templates-with-logstash/303831)

<div class="topic-metadata">

**Author:** [@frank\_esg](https://discuss.elastic.co/u/frank_esg)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 12:41pm UTC](https://discuss.elastic.co/t/manage-new-index-templates-with-logstash/303831 "2022-05-03T12:41:22Z")

</div>

Hi, whe´re currently using logstash to process all of our messages and we are using the "manage template" function of the Elasticsearch output. Now i' m working on the migration of our legacy templates to the new (comp…

---

## [Logstash Parsing error](https://discuss.elastic.co/t/logstash-parsing-error/302618)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 2\
**Last updated:** [May 3, 2022, 12:31pm UTC](https://discuss.elastic.co/t/logstash-parsing-error/302618 "2022-05-03T12:31:50Z")

</div>

Hi Im getting below error while indexing to Elasticsearch \[2022-04-15T17:10:23,235\]\[WARN \]\[logstash.outputs.Elasticsearch\]\[events\]\[e1ee9c29fd20ba0c5ba383dd438a2c18f56af21d370e65cce136d247cd14831b\] Could not index event…

---

## [How to change field-type in ELK from string to numeric/long?](https://discuss.elastic.co/t/how-to-change-field-type-in-elk-from-string-to-numeric-long/303665)

<div class="topic-metadata">

**Author:** [@Next\_generation](https://discuss.elastic.co/u/Next_generation)\
**Replies:** 8\
**Last updated:** [May 3, 2022, 11:37am UTC](https://discuss.elastic.co/t/how-to-change-field-type-in-elk-from-string-to-numeric-long/303665 "2022-05-03T11:37:01Z")

</div>

For haproxy tc, tw, tr, tq are written in Type string but long I created a new index (I took it from another index mapping) and in the Dev Tools ELK console I entered ELK verison: 7.16.2 How fix it? Thanks a lot

---

## [Searchbox shows "Security" when it's disabled from spaces + error](https://discuss.elastic.co/t/searchbox-shows-security-when-its-disabled-from-spaces-error/303368)

<div class="topic-metadata">

**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\
**Replies:** 3\
**Last updated:** [May 3, 2022, 11:16am UTC](https://discuss.elastic.co/t/searchbox-shows-security-when-its-disabled-from-spaces-error/303368 "2022-05-03T11:16:30Z")

</div>

Hi, this is a bug I discovered in Spaces with Security feature. Could not reproduce it with other features. Disabling security from current space: Searching and clicking Security from global search box An …

---

## [Error: Using autodiscovery on OpenShift/Kubernetes without granting node permission to SA](https://discuss.elastic.co/t/error-using-autodiscovery-on-openshift-kubernetes-without-granting-node-permission-to-sa/303819)

<div class="topic-metadata">

**Author:** [@helmen](https://discuss.elastic.co/u/helmen)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 10:44am UTC](https://discuss.elastic.co/t/error-using-autodiscovery-on-openshift-kubernetes-without-granting-node-permission-to-sa/303819 "2022-05-03T10:44:32Z")

</div>

Hi, I want to upgrade from metricbeat 7.10.3 to 7.11+, including the autodiscovery feature on Openshift/Kubernetes, but always get the following error. E0503 09:16:45.462276 8 reflector.go:138\] pkg/mod/k8s.io/cli…

---

## [How does ES stores the data?](https://discuss.elastic.co/t/how-does-es-stores-the-data/303806)

<div class="topic-metadata">

**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\
**Replies:** 3\
**Last updated:** [May 3, 2022, 10:35am UTC](https://discuss.elastic.co/t/how-does-es-stores-the-data/303806 "2022-05-03T10:35:09Z")

</div>

Hello! how does ES store in a cluster with 5 nodes? All data on 5 nodes or how is that distributed?

---

## [How to prooceed with a data node with corrupt disk file system](https://discuss.elastic.co/t/how-to-prooceed-with-a-data-node-with-corrupt-disk-file-system/303503)

<div class="topic-metadata">

**Author:** [@elaskibuser](https://discuss.elastic.co/u/elaskibuser)\
**Replies:** 3\
**Last updated:** [May 3, 2022, 10:32am UTC](https://discuss.elastic.co/t/how-to-prooceed-with-a-data-node-with-corrupt-disk-file-system/303503 "2022-05-03T10:32:50Z")

</div>

I would really appreciate help on the correct course of action. The setup is 3 ELK nodes which have all roles. No shard replication is done. Node 2 experienced a failure on the disk which contains the data folder. An o…

---

## [How to monitor indices (doc count, size...)](https://discuss.elastic.co/t/how-to-monitor-indices-doc-count-size/303713)

<div class="topic-metadata">

**Author:** [@ixperdomo](https://discuss.elastic.co/u/ixperdomo)\
**Replies:** 7\
**Last updated:** [May 3, 2022, 9:10am UTC](https://discuss.elastic.co/t/how-to-monitor-indices-doc-count-size/303713 "2022-05-03T09:10:17Z")

</div>

I'm trying to design a monitoring "architecture" (i.e. workaround) to monitor ES indices. The information of the indices themselves is being ingested by using a data stream, and here it comes why I want to monitor those …

---

## [Must\_not nested with should query not working (ES version 7.10.2) -- not countryiso OR not branch\_id](https://discuss.elastic.co/t/must-not-nested-with-should-query-not-working-es-version-7-10-2-not-countryiso-or-not-branch-id/303737)

<div class="topic-metadata">

**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\
**Replies:** 13\
**Last updated:** [May 3, 2022, 8:59am UTC](https://discuss.elastic.co/t/must-not-nested-with-should-query-not-working-es-version-7-10-2-not-countryiso-or-not-branch-id/303737 "2022-05-03T08:59:54Z")

</div>

{ "size": 0, "query": { "bool": { "filter": \[ { "term": { "is\_reachable": { "value": "YES", "boost": 1 } } }, …

---

## [Optimization on search query when using alias name](https://discuss.elastic.co/t/optimization-on-search-query-when-using-alias-name/303808)

<div class="topic-metadata">

**Author:** [@shiranOren](https://discuss.elastic.co/u/shiranOren)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 8:58am UTC](https://discuss.elastic.co/t/optimization-on-search-query-when-using-alias-name/303808 "2022-05-03T08:58:32Z")

</div>

Hello, I am using an alias name when writing data using Bulk Api. I have 2 questions: Can I get the index name after writing data using the alias name maybe as part of the response? Can I improve performance if I se…

---

## [Help on using suggestions on java client 8.1.3 search](https://discuss.elastic.co/t/help-on-using-suggestions-on-java-client-8-1-3-search/303744)

<div class="topic-metadata">

**Author:** [@mcremolini](https://discuss.elastic.co/u/mcremolini)\
**Replies:** 2\
**Last updated:** [May 3, 2022, 8:30am UTC](https://discuss.elastic.co/t/help-on-using-suggestions-on-java-client-8-1-3-search/303744 "2022-05-03T08:30:45Z")

</div>

Hello, I am trying to search with suggestion using the Java Client. In my first approach I write the code: client.search(request -\> request. index(indexName). suggest(suggest -\> suggest.suggesters("suggest", value…

---

## [Logstash logs want in proper format](https://discuss.elastic.co/t/logstash-logs-want-in-proper-format/303379)

<div class="topic-metadata">

**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\
**Replies:** 4\
**Last updated:** [May 3, 2022, 8:25am UTC](https://discuss.elastic.co/t/logstash-logs-want-in-proper-format/303379 "2022-05-03T08:25:36Z")

</div>

Hello Everyone I am recieved message from some alerts and data is look like as belwo I want to set in proper looks can you please help any one ? type=update&date\_time=2022-04-27T04%3A11%3A06-05%3A00&initiated\_from=admi…

---

## [Confused about Kibana Task Manager index](https://discuss.elastic.co/t/confused-about-kibana-task-manager-index/303040)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 3\
**Last updated:** [May 3, 2022, 8:03am UTC](https://discuss.elastic.co/t/confused-about-kibana-task-manager-index/303040 "2022-05-03T08:03:27Z")

</div>

I'm looking at getting our test and production clusters upgraded from 6.8 to 7.17 and am very confused about the .kibana\_task\_manager index. Both clusters have multiple Kibana instances each with it's own kibana.index s…

---

## [Get Field Mapping request failing with UnexpectedJsonEventException using the Java API Client](https://discuss.elastic.co/t/get-field-mapping-request-failing-with-unexpectedjsoneventexception-using-the-java-api-client/303746)

<div class="topic-metadata">

**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\
**Replies:** 4\
**Last updated:** [May 3, 2022, 7:30am UTC](https://discuss.elastic.co/t/get-field-mapping-request-failing-with-unexpectedjsoneventexception-using-the-java-api-client/303746 "2022-05-03T07:30:23Z")

</div>

Hello, during the process of migrating our code base from the Java High Level REST Client to the Java API Client, we are hitting an issue when trying to retrieve fields mappings. When running the following code (with a…

---

## [Howto connect Kibana 8 with ES8?](https://discuss.elastic.co/t/howto-connect-kibana-8-with-es8/303717)

<div class="topic-metadata">

**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\
**Replies:** 12\
**Last updated:** [May 3, 2022, 7:30am UTC](https://discuss.elastic.co/t/howto-connect-kibana-8-with-es8/303717 "2022-05-03T07:30:16Z")

</div>

Hello! Es is running with: 128 \[::ffff:127.0.0.1\]:9200 : users:(("java",pid=43127,fd=463)) LISTEN 0 128 \[::1\]:9200 \[::\]…

---

## [Trouble with searchable snapshot](https://discuss.elastic.co/t/trouble-with-searchable-snapshot/303708)

<div class="topic-metadata">

**Author:** [@Nazarenko](https://discuss.elastic.co/u/Nazarenko)\
**Replies:** 2\
**Last updated:** [May 3, 2022, 7:27am UTC](https://discuss.elastic.co/t/trouble-with-searchable-snapshot/303708 "2022-05-03T07:27:43Z")

</div>

Hi everyone, I have a self-deployed Elasticsearch cluster, and I have some troubles with a searchable snapshot. I successfully mounted NFS to data nodes, and configure Index Lifecycle Policies I manually attach this…

---

## [Function Score Functions with Nested Objects and Score Replace](https://discuss.elastic.co/t/function-score-functions-with-nested-objects-and-score-replace/303081)

<div class="topic-metadata">

**Author:** [@terzano](https://discuss.elastic.co/u/terzano)\
**Replies:** 6\
**Last updated:** [May 3, 2022, 5:31am UTC](https://discuss.elastic.co/t/function-score-functions-with-nested-objects-and-score-replace/303081 "2022-05-03T05:31:01Z")

</div>

I have tried various approaches to combine function\_score with a nested field inside "functions" in order to override the relevance \_score. The "query" within the function\_score works perfectly, as intended. However, th…

---

## [Monitor logstash](https://discuss.elastic.co/t/monitor-logstash/303799)

<div class="topic-metadata">

**Author:** [@bleedgreen](https://discuss.elastic.co/u/bleedgreen)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 4:32am UTC](https://discuss.elastic.co/t/monitor-logstash/303799 "2022-05-03T04:32:35Z")

</div>

Hi All, I have a logstash instance with input plugin with different input plugin (kafka,syslog, file) I want to monitor and detect when and event cannot be published to a target . Say for example a connection with sysl…

---

## [Http input does not result in the expected number of documents](https://discuss.elastic.co/t/http-input-does-not-result-in-the-expected-number-of-documents/303797)

<div class="topic-metadata">

**Author:** [@hughjarse](https://discuss.elastic.co/u/hughjarse)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 3:32am UTC](https://discuss.elastic.co/t/http-input-does-not-result-in-the-expected-number-of-documents/303797 "2022-05-03T03:32:49Z")

</div>

Hi. I would like ideas about what Logstash functionality I can use to troubleshoot a problem I'm experiencing with the http input plugin. Problem My http input does not seem to receive?/process? the expected number of e…

---

## [Unexpected error handling request. java.lang.RuntimeException: Fielddata is disabled on text fields by default. Set fielddata=true on \[traceId\] in order to load fielddata in memory by uninverting the inverted index](https://discuss.elastic.co/t/unexpected-error-handling-request-java-lang-runtimeexception-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-traceid-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index/303776)

<div class="topic-metadata">

**Author:** [@Akhil\_Manepalli](https://discuss.elastic.co/u/Akhil_Manepalli)\
**Replies:** 2\
**Last updated:** [May 3, 2022, 2:31am UTC](https://discuss.elastic.co/t/unexpected-error-handling-request-java-lang-runtimeexception-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true-on-traceid-in-order-to-load-fielddata-in-memory-by-uninverting-the-inverted-index/303776 "2022-05-03T02:31:27Z")

</div>

My elastic deployments consist of es-data, ingest & master. These are deployed as deployments in Kubernetes. I have Zipkin which uses elastic and Zipkin log shows the above error: : Unexpected error handling request. j…

---

## [Elastic Agent Standalone Configuration Input types logFile and filestream difference](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-input-types-logfile-and-filestream-difference/303773)

<div class="topic-metadata">

**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\
**Replies:** 0\
**Last updated:** [May 2, 2022, 8:16pm UTC](https://discuss.elastic.co/t/elastic-agent-standalone-configuration-input-types-logfile-and-filestream-difference/303773 "2022-05-02T20:16:44Z")

</div>

Elastic agent reference config file: Trying to setup standalone agent. came across few questions: In the inputs section, I have type as logFile and filestream, would like to know the difference and when to use which…

---

## [Applying platinum license in deployment config](https://discuss.elastic.co/t/applying-platinum-license-in-deployment-config/303743)

<div class="topic-metadata">

**Author:** [@seb.sch](https://discuss.elastic.co/u/seb.sch)\
**Replies:** 1\
**Last updated:** [May 3, 2022, 12:33am UTC](https://discuss.elastic.co/t/applying-platinum-license-in-deployment-config/303743 "2022-05-03T00:33:46Z")

</div>

Hello, as of December 2020, it was not possible to apply the license in the deployment on a OpenShift/Kubernetes cluster (see: Applying platinum license in Kubernetes - Elastic Stack / Elasticsearch - Discuss the Elasti…

---

## [Node not discovering master node properly, "Cluster state has not been recovered yet, cannot write to the \[null\] index" error \[503\]](https://discuss.elastic.co/t/node-not-discovering-master-node-properly-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index-error-503/303692)

<div class="topic-metadata">

**Author:** [@dheist](https://discuss.elastic.co/u/dheist)\
**Replies:** 3\
**Last updated:** [May 3, 2022, 12:32am UTC](https://discuss.elastic.co/t/node-not-discovering-master-node-properly-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index-error-503/303692 "2022-05-03T00:32:29Z")

</div>

Hello, I have 2 servers in 2 different locations I am trying to make into a cluster. Both are running Elasticsearch v8.1.3. I have the master server, which is configured like this: cluster.name: yyz-news-prod node.name…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=953)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=955)
