# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1114

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1115

---

## [Procedure for Backup/Recover the elastic search data from cluster](https://discuss.elastic.co/t/procedure-for-backup-recover-the-elastic-search-data-from-cluster/204893)

<div class="topic-metadata">

**Author:** [@Joseph\_Raj](https://discuss.elastic.co/u/Joseph_Raj)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 8:12am UTC](https://discuss.elastic.co/t/procedure-for-backup-recover-the-elastic-search-data-from-cluster/204893 "2019-10-24T08:12:36Z")

</div>

Hi, Can anyone help you us in finding the steps to recover or backup the elastic search data before the indices are corrupted or any malfunction happens in the cluster or nodes. Thanks in advance!!!

---

## [LifeCycle Policy Configuration](https://discuss.elastic.co/t/lifecycle-policy-configuration/198503)

<div class="topic-metadata">

**Author:** [@antonopo](https://discuss.elastic.co/u/antonopo)\
**Replies:** 37\
**Last updated:** [October 24, 2019, 7:46am UTC](https://discuss.elastic.co/t/lifecycle-policy-configuration/198503 "2019-10-24T07:46:57Z")

</div>

Hi, I have this simple scenario. I have more or less 100 hosts (linux and windows) and i want to gather only logs and metrics. So i have install filebeat and metricbeat to all linux hosts and winlogbeat and metricbeat…

---

## [Elasticsearch Error {type:cluster\_block\_exception,reason:"blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];}](https://discuss.elastic.co/t/elasticsearch-error-type-cluster-block-exception-reason-blocked-by-forbidden-12-index-read-only-allow-delete-api/205006)

<div class="topic-metadata">

**Author:** [@ahmadtamimi](https://discuss.elastic.co/u/ahmadtamimi)\
**Replies:** 4\
**Last updated:** [October 24, 2019, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-error-type-cluster-block-exception-reason-blocked-by-forbidden-12-index-read-only-allow-delete-api/205006 "2019-10-24T07:29:58Z")

</div>

Hello before three days i got below error on production enviroment: {"type":"cluster\_block\_exception","reason":"blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];"} i applied below command, then it it wo…

---

## [Elasticsearch-sql-cli Syntax :: "For the Last Five Minutes..." Query?](https://discuss.elastic.co/t/elasticsearch-sql-cli-syntax-for-the-last-five-minutes-query/204677)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 4\
**Last updated:** [October 24, 2019, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-sql-cli-syntax-for-the-last-five-minutes-query/204677 "2019-10-24T06:56:23Z")

</div>

Hi Elasticsearch Gurus, I’ve recently spun up an Elasticsearch v7.4.0 Docker container. Within the container, I’ve been playing with the “elasticsearch-sql-cli” script and successfully submitting SQL-like queries again…

---

## [Queries about copy\_to field](https://discuss.elastic.co/t/queries-about-copy-to-field/205002)

<div class="topic-metadata">

**Author:** [@sundarcse1216](https://discuss.elastic.co/u/sundarcse1216)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 6:14am UTC](https://discuss.elastic.co/t/queries-about-copy-to-field/205002 "2019-10-24T06:14:03Z")

</div>

Hi, I have couple of queries about copy\_to fields. Please help me to clear following queries. What is the props and cons of copy\_to filed? Is copy\_to field occupies disk space? Thanks.

---

## [\[x\] is defined as an object in mapping \[y\] but this name is already used for a field in other types](https://discuss.elastic.co/t/x-is-defined-as-an-object-in-mapping-y-but-this-name-is-already-used-for-a-field-in-other-types/204993)

<div class="topic-metadata">

**Author:** [@idanruf1](https://discuss.elastic.co/u/idanruf1)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 5:10am UTC](https://discuss.elastic.co/t/x-is-defined-as-an-object-in-mapping-y-but-this-name-is-already-used-for-a-field-in-other-types/204993 "2019-10-24T05:10:57Z")

</div>

I get this error when I try to index a document, and I have no idea what it means and how to solve it. I have a mapping without duplicate fields and a document matching the mapping.

---

## [Elastic wont start - java.io.IOException: keystore password was incorrect](https://discuss.elastic.co/t/elastic-wont-start-java-io-ioexception-keystore-password-was-incorrect/204819)

<div class="topic-metadata">

**Author:** [@Sidharth\_Sinha](https://discuss.elastic.co/u/Sidharth_Sinha)\
**Replies:** 4\
**Last updated:** [October 24, 2019, 4:56am UTC](https://discuss.elastic.co/t/elastic-wont-start-java-io-ioexception-keystore-password-was-incorrect/204819 "2019-10-24T04:56:29Z")

</div>

I configured elastic to do x-pack security. Followed the documentation to create pkcs12 certs using the certutil, configured the password, and also added keystore entry to match the password. When I start elastic, I ge…

---

## [Is it possible to deploy Elastic, Logstash and Kibana container in single pod in Openshift/Kubernetes?](https://discuss.elastic.co/t/is-it-possible-to-deploy-elastic-logstash-and-kibana-container-in-single-pod-in-openshift-kubernetes/204994)

<div class="topic-metadata">

**Author:** [@kumavine](https://discuss.elastic.co/u/kumavine)\
**Replies:** 0\
**Last updated:** [October 24, 2019, 3:55am UTC](https://discuss.elastic.co/t/is-it-possible-to-deploy-elastic-logstash-and-kibana-container-in-single-pod-in-openshift-kubernetes/204994 "2019-10-24T03:55:29Z")

</div>

Please can anybody confirm that is it possible to create Elastic, Logstash and Kibana container in single POD in Openshift/Kubernetes? If yes, how?

---

## [Track-params not work, show track parameter(s) are not used by this track](https://discuss.elastic.co/t/track-params-not-work-show-track-parameter-s-are-not-used-by-this-track/204924)

<div class="topic-metadata">

**Author:** [@Jinlian\_Chen](https://discuss.elastic.co/u/Jinlian_Chen)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 2:50am UTC](https://discuss.elastic.co/t/track-params-not-work-show-track-parameter-s-are-not-used-by-this-track/204924 "2019-10-24T02:50:32Z")

</div>

esrally: 1.2.1 elasticesearch: 7.0.1 challenges/default.json { "name": "test", "description": "Test one operations", "schedule": \[ { "operation": "route-email-update", "clients": {{bulk\_in…

---

## [Total shards, but this cluster currently has \[1000\]/\[1000\]](https://discuss.elastic.co/t/total-shards-but-this-cluster-currently-has-1000-1000/204960)

<div class="topic-metadata">

**Author:** [@rbrodrigues](https://discuss.elastic.co/u/rbrodrigues)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 12:03am UTC](https://discuss.elastic.co/t/total-shards-but-this-cluster-currently-has-1000-1000/204960 "2019-10-24T00:03:36Z")

</div>

Hello Elasticsearch Team, I have the following problem when I index a very large volume of data. 2019-10-23 17:33:52,158 ERROR 0:0:0:0:0:0:0:1 admin \[LumisRequest - http-nio-8080-exec-7; url: \[http://localhost:8080/…

---

## [Use cases for es-hadoop](https://discuss.elastic.co/t/use-cases-for-es-hadoop/203317)

<div class="topic-metadata">

**Author:** [@Devendra\_Kumar](https://discuss.elastic.co/u/Devendra_Kumar)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 8:58pm UTC](https://discuss.elastic.co/t/use-cases-for-es-hadoop/203317 "2019-10-23T20:58:13Z")

</div>

I want to know complete use cases for es-hadoop. I want to understand in what ways we can utilise es-hadoop.

---

## [Will Elasticsearch automatically load balance a two node cluser](https://discuss.elastic.co/t/will-elasticsearch-automatically-load-balance-a-two-node-cluser/204956)

<div class="topic-metadata">

**Author:** [@jtgajda](https://discuss.elastic.co/u/jtgajda)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 8:19pm UTC](https://discuss.elastic.co/t/will-elasticsearch-automatically-load-balance-a-two-node-cluser/204956 "2019-10-23T20:19:09Z")

</div>

I have a two node cluster. I currently connect to the master node using the Python Elasticsearch client. Will python automatically distibute the query traffice between the two nodes or do I need to take special actions? …

---

## [Elasticsearch 7.4 does not start](https://discuss.elastic.co/t/elasticsearch-7-4-does-not-start/204954)

<div class="topic-metadata">

**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 8:16pm UTC](https://discuss.elastic.co/t/elasticsearch-7-4-does-not-start/204954 "2019-10-23T20:16:50Z")

</div>

I am trying to install an instance of elasticsearch and I am using the following config file: cluster.name: elasticsearch node.name: hostname path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch # Set the…

---

## [Elasticsearch Accessible Without Authentication](https://discuss.elastic.co/t/elasticsearch-accessible-without-authentication/204895)

<div class="topic-metadata">

**Author:** [@edster](https://discuss.elastic.co/u/edster)\
**Replies:** 6\
**Last updated:** [October 23, 2019, 8:10pm UTC](https://discuss.elastic.co/t/elasticsearch-accessible-without-authentication/204895 "2019-10-23T20:10:18Z")

</div>

How can we close or secure the accessibility of Elasticsearch? We are using Ubuntu servers and are using Elasticsearch 6.7.2. We are a custom Angular front end. Anybody seems to be able to reach or manipulate or do anyth…

---

## [Using ElasticSearch from Xamarin Forms](https://discuss.elastic.co/t/using-elasticsearch-from-xamarin-forms/204951)

<div class="topic-metadata">

**Author:** [@Enrique\_Mainero\_Sali](https://discuss.elastic.co/u/Enrique_Mainero_Sali)\
**Replies:** 0\
**Last updated:** [October 23, 2019, 8:01pm UTC](https://discuss.elastic.co/t/using-elasticsearch-from-xamarin-forms/204951 "2019-10-23T20:01:37Z")

</div>

How can I implement Elastic in my Xamarin Forms Project? Any Nuget Package Recomendation?

---

## [ES6.0 client and ES 7.0 cluster](https://discuss.elastic.co/t/es6-0-client-and-es-7-0-cluster/204938)

<div class="topic-metadata">

**Author:** [@zhongchen](https://discuss.elastic.co/u/zhongchen)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 6:40pm UTC](https://discuss.elastic.co/t/es6-0-client-and-es-7-0-cluster/204938 "2019-10-23T18:40:57Z")

</div>

Is it okay to use es6.0 client for es7.0 cluster? Any potential issues? Saw the breaking changes in the rest client here. https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0.html#breakin…

---

## [Create a new index](https://discuss.elastic.co/t/create-a-new-index/203491)

<div class="topic-metadata">

**Author:** [@mouna\_boujrad](https://discuss.elastic.co/u/mouna_boujrad)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 6:21pm UTC](https://discuss.elastic.co/t/create-a-new-index/203491 "2019-10-23T18:21:42Z")

</div>

hello, I installed packetbeat into two machines i want to have different indexes for each packetbeat agent, can I do that ? to clarify more I installed a machine with elasticsearch kibana and packetbeat, I am getting a…

---

## [ELK basic Version and JDBC connector to DBs](https://discuss.elastic.co/t/elk-basic-version-and-jdbc-connector-to-dbs/204916)

<div class="topic-metadata">

**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 6:18pm UTC](https://discuss.elastic.co/t/elk-basic-version-and-jdbc-connector-to-dbs/204916 "2019-10-23T18:18:50Z")

</div>

Hi there: We use ELK basic version for testing now. Now we need to query some databases from ELK, my question would be that, JDBC connector on Logstash with logstash JDBC plugin is supported on ELK Basic Version, can y…

---

## [Extremely regular "took" spiking](https://discuss.elastic.co/t/extremely-regular-took-spiking/204744)

<div class="topic-metadata">

**Author:** [@Zach\_Diemer](https://discuss.elastic.co/u/Zach_Diemer)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 6:18pm UTC](https://discuss.elastic.co/t/extremely-regular-took-spiking/204744 "2019-10-23T18:18:28Z")

</div>

I'm logging the took value that's returned from Elasticsearch, and I've noticed that there's an extremely regular pattern to how it's spiking (every 5 minutes, almost exactly). I'm using Elasticsearch 6.4.2 and my cli…

---

## [ILM with multiple indices](https://discuss.elastic.co/t/ilm-with-multiple-indices/203481)

<div class="topic-metadata">

**Author:** [@jtdepalm](https://discuss.elastic.co/u/jtdepalm)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 6:08pm UTC](https://discuss.elastic.co/t/ilm-with-multiple-indices/203481 "2019-10-23T18:08:19Z")

</div>

Hello, I am working to set-up a hot-warm-cold-delete policy for my ELK cluster that has multiple indices. I basically have 4 questions and as much data following them up as I thought needed. Many thanks to any help! A…

---

## [ILM with a loadbalancer](https://discuss.elastic.co/t/ilm-with-a-loadbalancer/202055)

<div class="topic-metadata">

**Author:** [@jtdepalm](https://discuss.elastic.co/u/jtdepalm)\
**Replies:** 2\
**Last updated:** [October 23, 2019, 5:53pm UTC](https://discuss.elastic.co/t/ilm-with-a-loadbalancer/202055 "2019-10-23T17:53:24Z")

</div>

Hello, I currently have a 6 node cluster in Azure (3 master, 3 data) with the 3 data nodes behind a loadbalancer. Kibana and Logstash point to the loadbalancer for the queries of and sending to Elasticsearch. I would l…

---

## [JVM memory pressure is high only for one master node](https://discuss.elastic.co/t/jvm-memory-pressure-is-high-only-for-one-master-node/204921)

<div class="topic-metadata">

**Author:** [@dalakada](https://discuss.elastic.co/u/dalakada)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 5:45pm UTC](https://discuss.elastic.co/t/jvm-memory-pressure-is-high-only-for-one-master-node/204921 "2019-10-23T17:45:51Z")

</div>

Our ES cluster lives on AWS. We have 3 master nodes and 4 data nodes. But JVM memory pressure is not distributed evenly across them. 2 of them are having usually around %10 but last one is usually fixed at %60. Any r…

---

## [How to increase the Shards limit in Elasticsearch 7.1](https://discuss.elastic.co/t/how-to-increase-the-shards-limit-in-elasticsearch-7-1/204865)

<div class="topic-metadata">

**Author:** [@rbrodrigues](https://discuss.elastic.co/u/rbrodrigues)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 5:22pm UTC](https://discuss.elastic.co/t/how-to-increase-the-shards-limit-in-elasticsearch-7-1/204865 "2019-10-23T17:22:28Z")

</div>

Our application is indexing content and is passing the Elasticsearch 7.1 Shards limit of 1000. What setting in elasticsearch.yml should we do to increase this limit?

---

## [Snapshot api is not working](https://discuss.elastic.co/t/snapshot-api-is-not-working/204702)

<div class="topic-metadata">

**Author:** [@baselai](https://discuss.elastic.co/u/baselai)\
**Replies:** 4\
**Last updated:** [October 23, 2019, 5:15pm UTC](https://discuss.elastic.co/t/snapshot-api-is-not-working/204702 "2019-10-23T17:15:27Z")

</div>

I have the following code: curl -X PUT "localhost:9200/\_snapshot/backup?wait\_for\_completion=true" -H'Content-Type:application/json' -d '{ "indices": "index\_1", ”type": "fs", "settings": { "location": "/Users/bas…

---

## [.StartupException: java.lang.RuntimeException: can not run elasticsearch as root](https://discuss.elastic.co/t/startupexception-java-lang-runtimeexception-can-not-run-elasticsearch-as-root/204547)

<div class="topic-metadata">

**Author:** [@Sreekanth3](https://discuss.elastic.co/u/Sreekanth3)\
**Replies:** 7\
**Last updated:** [October 23, 2019, 4:04pm UTC](https://discuss.elastic.co/t/startupexception-java-lang-runtimeexception-can-not-run-elasticsearch-as-root/204547 "2019-10-23T16:04:11Z")

</div>

I wanted to enable SSL on the elastic search , after adding the certificates , i need to restart the elasticsearch where it is throwing error. I have tried this by creating a user but it is showing error .i have attache…

---

## [Help with aggregation query](https://discuss.elastic.co/t/help-with-aggregation-query/204737)

<div class="topic-metadata">

**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\
**Replies:** 4\
**Last updated:** [October 23, 2019, 3:42pm UTC](https://discuss.elastic.co/t/help-with-aggregation-query/204737 "2019-10-23T15:42:45Z")

</div>

I've been trying to create a query to use with the API to match what I've configured in Kibana as shown in this screen cap, but without luck. I'm able to create a query, but not sure how to incorporate aggs into it. Can …

---

## [Calculating the Number of data nodes](https://discuss.elastic.co/t/calculating-the-number-of-data-nodes/204840)

<div class="topic-metadata">

**Author:** [@imaad](https://discuss.elastic.co/u/imaad)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 3:35pm UTC](https://discuss.elastic.co/t/calculating-the-number-of-data-nodes/204840 "2019-10-23T15:35:50Z")

</div>

Hello, Total Storage size : 193,6gb/day Total Docs count : ‭371 558 142‬/day JVM Heap : 17.1 GB / 31.9 GB Disk available : 1.4 TB / 3.4 TB Elastic 7.3.0 1 replica 1 shard How Do I calculate the number of data node…

---

## [How to set up ES 7.1 cluster?](https://discuss.elastic.co/t/how-to-set-up-es-7-1-cluster/204726)

<div class="topic-metadata">

**Author:** [@rbrodrigues](https://discuss.elastic.co/u/rbrodrigues)\
**Replies:** 3\
**Last updated:** [October 23, 2019, 3:35pm UTC](https://discuss.elastic.co/t/how-to-set-up-es-7-1-cluster/204726 "2019-10-23T15:35:14Z")

</div>

Hello, We just switched to Elasticsearch 7.0.0. What is the correct setting in the elasticsearch.yml file? We are having issues shown below: Log node 2 \[2019-10-22T16:57:24,317\]\[INFO \]\[o.e.p.PluginsService \] \[lum…

---

## [Aggregation with nested properties](https://discuss.elastic.co/t/aggregation-with-nested-properties/204103)

<div class="topic-metadata">

**Author:** [@skouame](https://discuss.elastic.co/u/skouame)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 3:12pm UTC](https://discuss.elastic.co/t/aggregation-with-nested-properties/204103 "2019-10-23T15:12:02Z")

</div>

Hello, I have the mapping below: mappings: properties: companyId: type: long customFields: type: nested properties: id: type: long customFieldId: …

---

## [Disk usage in Elasticsearch 7.2 vs Elasticsearch 2.4](https://discuss.elastic.co/t/disk-usage-in-elasticsearch-7-2-vs-elasticsearch-2-4/204874)

<div class="topic-metadata">

**Author:** [@garry12](https://discuss.elastic.co/u/garry12)\
**Replies:** 1\
**Last updated:** [October 23, 2019, 3:07pm UTC](https://discuss.elastic.co/t/disk-usage-in-elasticsearch-7-2-vs-elasticsearch-2-4/204874 "2019-10-23T15:07:09Z")

</div>

Hey I have recently upgraded from Elasticsearch 2.4 to elasticsearch 7.2 and I was wondering that my index( 15 GB in 2.4 version ) I completely inserted the exact same index with same mapping, same number of documents, s…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1113)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1115)
