# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1100 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1101 --- ## [Cluster broken after 7.2 -\> 7.4 upgrade](https://discuss.elastic.co/t/cluster-broken-after-7-2-7-4-upgrade/206170)
**Author:** [@Grimur\_Danielsson](https://discuss.elastic.co/u/Grimur_Danielsson)\ **Replies:** 14\ **Last updated:** [November 8, 2019, 10:02am UTC](https://discuss.elastic.co/t/cluster-broken-after-7-2-7-4-upgrade/206170 "2019-11-08T10:02:00Z")
Hi I upgraded my cluster (3 master nodes) from 7.2 to 7.4 last night after which it completely fell apart. It looks like there is some communication issue between the nodes in the cluster and they keep on trying to ele… --- ## [Watcher trigger playload](https://discuss.elastic.co/t/watcher-trigger-playload/206920)
**Author:** [@Karrie\_Koo](https://discuss.elastic.co/u/Karrie_Koo)\ **Replies:** 8\ **Last updated:** [November 8, 2019, 9:48am UTC](https://discuss.elastic.co/t/watcher-trigger-playload/206920 "2019-11-08T09:48:13Z")
If I want to change the category watcher.logging.bppm.(Minor), based on different log Meassage ID, how can I do? "actions": { "log\_error": { "logging": { "category": "watcher.logging.bppm.Minor", "level": "info", "… --- ## [Multimatch with filter](https://discuss.elastic.co/t/multimatch-with-filter/206593)
**Author:** [@rogermerz](https://discuss.elastic.co/u/rogermerz)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 8:25am UTC](https://discuss.elastic.co/t/multimatch-with-filter/206593 "2019-11-08T08:25:23Z")
Hey there I got product data with nested articles and the products got different types. Now I should search in the product.name and product.description and in the product.articles.gtin and should retrieve only product… --- ## ["master not discovered exception" after having 999 of 1000 max. shards open](https://discuss.elastic.co/t/master-not-discovered-exception-after-having-999-of-1000-max-shards-open/207066)
**Author:** [@anli](https://discuss.elastic.co/u/anli)\ **Replies:** 1\ **Last updated:** [November 8, 2019, 8:06am UTC](https://discuss.elastic.co/t/master-not-discovered-exception-after-having-999-of-1000-max-shards-open/207066 "2019-11-08T08:06:56Z")
Hello there, I'm migrating my live data from our live elasticsearch server to our archive elasticsearch server. Both are single nodes. While doing this I missed to close indices on the archive server. Using curator I go… --- ## [What are the search optimizations possible without scoring?](https://discuss.elastic.co/t/what-are-the-search-optimizations-possible-without-scoring/207058)
**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 7:49am UTC](https://discuss.elastic.co/t/what-are-the-search-optimizations-possible-without-scoring/207058 "2019-11-08T07:49:19Z")
Hi guys, I have 30 terabytes of Elasticsearch data spread across 11 nodes. Each index is separated by month and has 5 primary shards with 5 replica shards. Some shards are big (over 200G) and some are small (less than 1… --- ## [Terms Query performance with increased number of terms](https://discuss.elastic.co/t/terms-query-performance-with-increased-number-of-terms/206888)
**Author:** [@nishant.saini](https://discuss.elastic.co/u/nishant.saini)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 6:58am UTC](https://discuss.elastic.co/t/terms-query-performance-with-increased-number-of-terms/206888 "2019-11-08T06:58:31Z")
I would like to understand how the performance of terms query is effected by the number of terms passed in to the terms query. According to very old blogs and Q&A terms around 1000 should not cause issue but what if the … --- ## [Basic license is unavailable for version(7.x)](https://discuss.elastic.co/t/basic-license-is-unavailable-for-version-7-x/207037)
**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 6:14am UTC](https://discuss.elastic.co/t/basic-license-is-unavailable-for-version-7-x/207037 "2019-11-08T06:14:39Z")
Hi all, I'm working on elasticsearch/kibana 7.1, I registered a basic license unfortunately there are only the basic license for version 5.x/6.x, there are no version 7.x. I tried to use this license with 7.1, I got bel… --- ## [And operator does not work as expected](https://discuss.elastic.co/t/and-operator-does-not-work-as-expected/207053)
**Author:** [@sonaleeka\_dash](https://discuss.elastic.co/u/sonaleeka_dash)\ **Replies:** 0\ **Last updated:** [November 8, 2019, 6:14am UTC](https://discuss.elastic.co/t/and-operator-does-not-work-as-expected/207053 "2019-11-08T06:14:21Z")
I have customField which is the combination of customFieldTypeId and value . My Document content data something like this For CustomeField.combined I want search using AND operator I tried something like this(tried M… --- ## [Monthly backup and restore along with snapshot](https://discuss.elastic.co/t/monthly-backup-and-restore-along-with-snapshot/206734)
**Author:** [@Rajat\_Panwar](https://discuss.elastic.co/u/Rajat_Panwar)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 5:54am UTC](https://discuss.elastic.co/t/monthly-backup-and-restore-along-with-snapshot/206734 "2019-11-08T05:54:05Z")
Hi, We are pretty new to Elasticseach, so our question may look like something trivial, But really need your advise. We have Elasticsearch hosted on elastic cloud. We are using this to save our logs. At any given time… --- ## [Regarding the Elastic Search Machine Learning Model for Anomaly Detection](https://discuss.elastic.co/t/regarding-the-elastic-search-machine-learning-model-for-anomaly-detection/206874)
**Author:** [@Tahmid\_Rahman](https://discuss.elastic.co/u/Tahmid_Rahman)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 11:24pm UTC](https://discuss.elastic.co/t/regarding-the-elastic-search-machine-learning-model-for-anomaly-detection/206874 "2019-11-07T23:24:16Z")
Does a single model detect anomalies for all use-cases? Or, is their different models used for different use-cases to detect anomalies? --- ## [Search All fields in an Index](https://discuss.elastic.co/t/search-all-fields-in-an-index/204965)
**Author:** [@keerthn](https://discuss.elastic.co/u/keerthn)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 9:52pm UTC](https://discuss.elastic.co/t/search-all-fields-in-an-index/204965 "2019-11-07T21:52:24Z")
Hey There ! I want to do a search where i can access all the documents within the given index to find the word i'm looking for. I see that "\_all" has been taken off which brings it down to use only the wildcard search w… --- ## [Can't get delete by query to actually delete](https://discuss.elastic.co/t/cant-get-delete-by-query-to-actually-delete/205323)
**Author:** [@CityofRome](https://discuss.elastic.co/u/CityofRome)\ **Replies:** 19\ **Last updated:** [November 7, 2019, 8:27pm UTC](https://discuss.elastic.co/t/cant-get-delete-by-query-to-actually-delete/205323 "2019-11-07T20:27:32Z")
I can't seem to get a delete query (ANY delete query) to actually delete anything. I've even tried the basic ones in the documentation (edited for my test index) and they don't work either. What am I overlooking? I'm … --- ## [Inconsistent aggregation results](https://discuss.elastic.co/t/inconsistent-aggregation-results/207006)
**Author:** [@pinkus13](https://discuss.elastic.co/u/pinkus13)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 8:03pm UTC](https://discuss.elastic.co/t/inconsistent-aggregation-results/207006 "2019-11-07T20:03:11Z")
Hi I am trying to run a terms aggregation to return a list of unique values. But each time I run the aggregation I get a different number of buckets returned. I have terms aggregation which has a sub aggregation to giv… --- ## [Elastic Doesnt work after enabling security settings on ubuntu](https://discuss.elastic.co/t/elastic-doesnt-work-after-enabling-security-settings-on-ubuntu/206858)
**Author:** [@Jayasri\_Cimba](https://discuss.elastic.co/u/Jayasri_Cimba)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 7:09pm UTC](https://discuss.elastic.co/t/elastic-doesnt-work-after-enabling-security-settings-on-ubuntu/206858 "2019-11-07T19:09:44Z")
Caused by: java.lang.reflect.InvocationTargetException Caused by: org.elasticsearch.ElasticsearchException: failed to initialize a TrustManagerFactory Caused by: java.nio.file.AccessDeniedException: /etc/elasticsearch/… --- ## [How remove multi delimiter in a file](https://discuss.elastic.co/t/how-remove-multi-delimiter-in-a-file/206999)
**Author:** [@atchyuth](https://discuss.elastic.co/u/atchyuth)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 6:36pm UTC](https://discuss.elastic.co/t/how-remove-multi-delimiter-in-a-file/206999 "2019-11-07T18:36:10Z")
I have a file with each field separated by |~|. I am new to GROK pattern. Can someone help me build a custom pattern to remove the |~|. Empty or Null values should not be removed while processing. The data structure is … --- ## [Reindex and concurrent writings in the source index](https://discuss.elastic.co/t/reindex-and-concurrent-writings-in-the-source-index/206991)
**Author:** [@lorenzoranucci](https://discuss.elastic.co/u/lorenzoranucci)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 4:43pm UTC](https://discuss.elastic.co/t/reindex-and-concurrent-writings-in-the-source-index/206991 "2019-11-07T16:43:32Z")
Hi, I'm trying to change the index mapping and reindex without downtime. The strategy is: create a new-index with the new mapping reindex the old-index to the new-index swap the alias from the old-index to the new-in… --- ## [Can't found the field "Suggest" in Nest](https://discuss.elastic.co/t/cant-found-the-field-suggest-in-nest/206990)
**Author:** [@lethienhoang](https://discuss.elastic.co/u/lethienhoang)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 4:33pm UTC](https://discuss.elastic.co/t/cant-found-the-field-suggest-in-nest/206990 "2019-11-07T16:33:01Z")
I just define the model as below code client.Indices.Create("demo", c =\> c .Index\() .Map\(c =\> c .AutoMap() .Propert… --- ## [Setting document limits for Machine Learning anomalies](https://discuss.elastic.co/t/setting-document-limits-for-machine-learning-anomalies/206213)
**Author:** [@elasticitous](https://discuss.elastic.co/u/elasticitous)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 4:02pm UTC](https://discuss.elastic.co/t/setting-document-limits-for-machine-learning-anomalies/206213 "2019-11-07T16:02:11Z")
I've successfully created some Population machine learning jobs but I'm seeing a lot of false positive anomalies generated from members of the population with too small a sample size for those metrics to converge to anyt… --- ## [Errors on fresh install](https://discuss.elastic.co/t/errors-on-fresh-install/206982)
**Author:** [@JH82](https://discuss.elastic.co/u/JH82)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 3:43pm UTC](https://discuss.elastic.co/t/errors-on-fresh-install/206982 "2019-11-07T15:43:18Z")
Hello, I've build a new cluster with 2 nodes. All works fine without Xpack security. When I enabled security and when I try to check the communication with the second node I've this error : { "error" : { "root\_caus… --- ## [Monitoring query sent to Elasticsearch](https://discuss.elastic.co/t/monitoring-query-sent-to-elasticsearch/206849)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 3:37pm UTC](https://discuss.elastic.co/t/monitoring-query-sent-to-elasticsearch/206849 "2019-11-07T15:37:30Z")
hi guys, currently I have one cluster with v5.6.x and, even thought we have scheduled to upgrade it to v6.8, I have to dive deeper regarding the query sent to ES just to check what is happening in that moment. I found … --- ## [Elastic Rolling upgrade 6.6.0 to 6.8](https://discuss.elastic.co/t/elastic-rolling-upgrade-6-6-0-to-6-8/206967)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 3:33pm UTC](https://discuss.elastic.co/t/elastic-rolling-upgrade-6-6-0-to-6-8/206967 "2019-11-07T15:33:43Z")
Today, I tried to upgrade my 5 nodes cluster from 6.6.1 to 6.8. I planned to apply the rolling upgrade procedure I found here: https://www.elastic.co/guide/en/elasticsearch/reference/6.8/rolling-upgrades.html I then d… --- ## [Implications of deleting a non existing document (By document ID)](https://discuss.elastic.co/t/implications-of-deleting-a-non-existing-document-by-document-id/206912)
**Author:** [@itaydvir](https://discuss.elastic.co/u/itaydvir)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 3:12pm UTC](https://discuss.elastic.co/t/implications-of-deleting-a-non-existing-document-by-document-id/206912 "2019-11-07T15:12:47Z")
Hello, Is there any Implications of deleting a non existing document? What happens when a DELETE call by document id arrives to a node and no such document id? for example DELETE /index/type/12345 especially i'm talk… --- ## [Why my date format is not working?](https://discuss.elastic.co/t/why-my-date-format-is-not-working/206308)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 11\ **Last updated:** [November 7, 2019, 3:07pm UTC](https://discuss.elastic.co/t/why-my-date-format-is-not-working/206308 "2019-11-07T15:07:34Z")
Here is the field I get from filebeat: PC\_Local\_Time\_1and the value it has is 2019-10-15T10:54:27.447Z. I tried to convert it to Date field in Elasticsearch pipeline as below: { "date": { "field": "PC\_Lo… --- ## [How to avoid "Phantom Read" problem of nested field](https://discuss.elastic.co/t/how-to-avoid-phantom-read-problem-of-nested-field/206878)
**Author:** [@tony21177](https://discuss.elastic.co/u/tony21177)\ **Replies:** 3\ **Last updated:** [November 7, 2019, 3:06pm UTC](https://discuss.elastic.co/t/how-to-avoid-phantom-read-problem-of-nested-field/206878 "2019-11-07T15:06:47Z")
Hi, I have a rdbms table design which are one to many relation. Under some consideration,we decide put the relation into elasticsearch index. I create a index(for parent table) and a nested field for the child table. … --- ## [Capture Changes (Updates/New) in my ElasticSearch Index and send to Kafka topic](https://discuss.elastic.co/t/capture-changes-updates-new-in-my-elasticsearch-index-and-send-to-kafka-topic/206959)
**Author:** [@giridhar\_varma](https://discuss.elastic.co/u/giridhar_varma)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 1:12pm UTC](https://discuss.elastic.co/t/capture-changes-updates-new-in-my-elasticsearch-index-and-send-to-kafka-topic/206959 "2019-11-07T13:12:51Z")
Team - I am looking to send only updates occuring in my ES index to kafka topic, how to accomplish, can anyone help me please? --- ## [Percentiles aggregation yield different results between ES 1.7.x and 7.x](https://discuss.elastic.co/t/percentiles-aggregation-yield-different-results-between-es-1-7-x-and-7-x/206954)
**Author:** [@joneslee85](https://discuss.elastic.co/u/joneslee85)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 12:27pm UTC](https://discuss.elastic.co/t/percentiles-aggregation-yield-different-results-between-es-1-7-x-and-7-x/206954 "2019-11-07T12:27:18Z")
Let's create 3 products with sale\_counts field: PUT products/\_mapping { "properties": { "sales\_count": { "type": "integer" } } } POST products/\_doc/ { "sales\_count" : 323, } POST products/\_doc/ { … --- ## [Index Lifecycle Policy doesn't work](https://discuss.elastic.co/t/index-lifecycle-policy-doesnt-work/206357)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 11:09am UTC](https://discuss.elastic.co/t/index-lifecycle-policy-doesnt-work/206357 "2019-11-07T11:09:53Z")
Hey Guys, i tought i'd like to try the Index Lifecycle Policies. But i'm pretty sure i've done something wrong, because the Index to which i assigned it is now 37GB instead of a max of 20GB. I Created one which looks l… --- ## [Could not find java in JAVA\_HOME or bundled at elasticsearch-7.4.2/jdk/bin/java](https://discuss.elastic.co/t/could-not-find-java-in-java-home-or-bundled-at-elasticsearch-7-4-2-jdk-bin-java/206777)
**Author:** [@MKU](https://discuss.elastic.co/u/MKU)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 10:51am UTC](https://discuss.elastic.co/t/could-not-find-java-in-java-home-or-bundled-at-elasticsearch-7-4-2-jdk-bin-java/206777 "2019-11-07T10:51:32Z")
Hi all, I am trying to install elasticsearch 7.4.2. in documentation it says it comes bundled with jdk. but i get the this message, could not find java in JAVA\_HOME or bundled at /root/Downloads/elasticsearch-7.4.2/j… --- ## [Elasticsearch crashes when using Completion suggester](https://discuss.elastic.co/t/elasticsearch-crashes-when-using-completion-suggester/206935)
**Author:** [@Leksh](https://discuss.elastic.co/u/Leksh)\ **Replies:** 0\ **Last updated:** [November 7, 2019, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-crashes-when-using-completion-suggester/206935 "2019-11-07T09:35:23Z")
We have Elasticsearch 6.6.2 running on a system with 32 core 128 GB RAM. We have around 400 million data in 10 indices which are running in one node with 5 shards. Also we set 32 GB heap memory for Elasticsearch. Recentl… --- ## [Invalid license found, requires a basic or a valid trial license and received Open source](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license-and-received-open-source/206929)
**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:14am UTC](https://discuss.elastic.co/t/invalid-license-found-requires-a-basic-or-a-valid-trial-license-and-received-open-source/206929 "2019-11-07T09:14:07Z")
Hi, I have an ELK cluster with 6 nodes (5linux and 1windows). I am using the basic license. I tried to add one more linux node on my ELK cluster (Centos 7). I used exactly the same instructions to add the new node on t… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1099) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1101)