# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=188

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 189

---

## [Security error creating cluster](https://discuss.elastic.co/t/security-error-creating-cluster/345274)

<div class="topic-metadata">

**Author:** [@TIexplorer](https://discuss.elastic.co/u/TIexplorer)\
**Replies:** 0\
**Last updated:** [October 18, 2023, 11:15am UTC](https://discuss.elastic.co/t/security-error-creating-cluster/345274 "2023-10-18T11:15:50Z")

</div>

Hello guys, I’m setting up an elastic cluster and getting these errors in the logs, tell me what I’m doing wrong \[2023-10-11T01:00:19,733\]\[WARN \]\[o.e.c.s.DiagnosticTrustManager\] \[ELK-01\] failed to establish trust with s…

---

## [409 - version conflict - delete\_by\_query (API request using C# NEST)](https://discuss.elastic.co/t/409-version-conflict-delete-by-query-api-request-using-c-nest/345260)

<div class="topic-metadata">

**Author:** [@rd8388](https://discuss.elastic.co/u/rd8388)\
**Replies:** 6\
**Last updated:** [October 18, 2023, 9:56am UTC](https://discuss.elastic.co/t/409-version-conflict-delete-by-query-api-request-using-c-nest/345260 "2023-10-18T09:56:16Z")

</div>

Status: 409 Type: version\_conflict\_engine\_exception Reason: \[My\_Doc\_ID\]: version conflict, required seqNo \[5092680\], primary term \[45\]. current document has seqNo \[5095726\] and primary term \[45\] We are using C# Nes…

---

## [How to know when indices mapping was updated](https://discuss.elastic.co/t/how-to-know-when-indices-mapping-was-updated/345046)

<div class="topic-metadata">

**Author:** [@pratik\_jain163](https://discuss.elastic.co/u/pratik_jain163)\
**Replies:** 6\
**Last updated:** [October 18, 2023, 7:58am UTC](https://discuss.elastic.co/t/how-to-know-when-indices-mapping-was-updated/345046 "2023-10-18T07:58:17Z")

</div>

hi All, Someone has updated the mapping of any indices, so I want to know how we can find this. And also, is there a way we can get all indices to also get udpated. and if we want to enable auditing in ES how we can d…

---

## [ES failed to connect to master node](https://discuss.elastic.co/t/es-failed-to-connect-to-master-node/344986)

<div class="topic-metadata">

**Author:** [@Genesys\_Bagus](https://discuss.elastic.co/u/Genesys_Bagus)\
**Replies:** 9\
**Last updated:** [October 18, 2023, 6:42am UTC](https://discuss.elastic.co/t/es-failed-to-connect-to-master-node/344986 "2023-10-18T06:42:08Z")

</div>

hi team, i have 3 nodes elasticsearch cluster, but at one time elasticsearch couldn't function properly because the master node left (reason = shutdown) \</\> \[2023-09-13T01:14:28,394\]\[INFO \]\[o.e.n.Node \] …

---

## [Rebalance is Not Working In Elasticsearch](https://discuss.elastic.co/t/rebalance-is-not-working-in-elasticsearch/345003)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 4\
**Last updated:** [October 18, 2023, 6:24am UTC](https://discuss.elastic.co/t/rebalance-is-not-working-in-elasticsearch/345003 "2023-10-18T06:24:52Z")

</div>

Hi Team, I had below scenario in my Elasticsearch setup. The cluster previously consists of 2 nodes and one index having docs around 125M. I had added one more node to the cluster but the data is not getting distribut…

---

## [How to Generate a SAML Certificate with OpenSSL on Elastic Cloud?](https://discuss.elastic.co/t/how-to-generate-a-saml-certificate-with-openssl-on-elastic-cloud/345090)

<div class="topic-metadata">

**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\
**Replies:** 1\
**Last updated:** [October 18, 2023, 6:10am UTC](https://discuss.elastic.co/t/how-to-generate-a-saml-certificate-with-openssl-on-elastic-cloud/345090 "2023-10-18T06:10:25Z")

</div>

Hi Community, I'm working on configuring SAML authentication for my Elastic Stack deployment, and I've come across the need to generate a SAML certificate and key. The documentation suggests using the openssl req comman…

---

## [JRE with Bouncy Castle for FIPS or is PEM sufficient](https://discuss.elastic.co/t/jre-with-bouncy-castle-for-fips-or-is-pem-sufficient/345144)

<div class="topic-metadata">

**Author:** [@Kris\_U](https://discuss.elastic.co/u/Kris_U)\
**Replies:** 1\
**Last updated:** [October 18, 2023, 6:05am UTC](https://discuss.elastic.co/t/jre-with-bouncy-castle-for-fips-or-is-pem-sufficient/345144 "2023-10-18T06:05:35Z")

</div>

I was able to get Elasticsearch working with the Bouncy Castle BCFKS keystore in Elasticsearch 7.17 (I will post the steps at the end of my post). But Kibana and Logstash will not accept the BCFKS keystore format. I am r…

---

## [ELK service stops when space is limited](https://discuss.elastic.co/t/elk-service-stops-when-space-is-limited/345248)

<div class="topic-metadata">

**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Replies:** 3\
**Last updated:** [October 17, 2023, 11:23pm UTC](https://discuss.elastic.co/t/elk-service-stops-when-space-is-limited/345248 "2023-10-17T23:23:53Z")

</div>

Hello, I am working with an old version of ELK 7.6.0. I have detected that sometimes one of the 3 services stops when the disk reaches 94% or 95% of its capacity. I don't know if this is a default setting, I don't know…

---

## [Elasticsearch falsely(?) reporting it has reached the field limit](https://discuss.elastic.co/t/elasticsearch-falsely-reporting-it-has-reached-the-field-limit/343794)

<div class="topic-metadata">

**Author:** [@dpitchford](https://discuss.elastic.co/u/dpitchford)\
**Replies:** 3\
**Last updated:** [October 17, 2023, 5:26pm UTC](https://discuss.elastic.co/t/elasticsearch-falsely-reporting-it-has-reached-the-field-limit/343794 "2023-10-17T17:26:45Z")

</div>

When trying to index documents into an Elasticsearch 6.8.22 instance, I am seeing error messages like this: {'index': {'\_index': 'data\_explorer', '\_type': 'flywheel', '\_id': '64ff3d667ed067064bf7bd7e', 'status': 400, 'e…

---

## [Getting next 10k documents with AppSearch.list\_documents()](https://discuss.elastic.co/t/getting-next-10k-documents-with-appsearch-list-documents/345216)

<div class="topic-metadata">

**Author:** [@marc.schwarzschild](https://discuss.elastic.co/u/marc.schwarzschild)\
**Replies:** 5\
**Last updated:** [October 17, 2023, 5:14pm UTC](https://discuss.elastic.co/t/getting-next-10k-documents-with-appsearch-list-documents/345216 "2023-10-17T17:14:32Z")

</div>

Hi, I'm trying to get IDs for all our 300k+ documents. The AppSearch API has list\_documents which only lists 10k documents. Is there an argument I can use with it to get the next 10k documents? I have searched and fo…

---

## [Could not find similarity in KnnQuery in Java Client?](https://discuss.elastic.co/t/could-not-find-similarity-in-knnquery-in-java-client/343002)

<div class="topic-metadata">

**Author:** [@csplrj](https://discuss.elastic.co/u/csplrj)\
**Replies:** 3\
**Last updated:** [October 17, 2023, 4:59pm UTC](https://discuss.elastic.co/t/could-not-find-similarity-in-knnquery-in-java-client/343002 "2023-10-17T16:59:35Z")

</div>

Could not find similarity in KnnQuery in Java Client?

---

## [Plati­num license](https://discuss.elastic.co/t/plati-num-license/345213)

<div class="topic-metadata">

**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Replies:** 4\
**Last updated:** [October 17, 2023, 3:46pm UTC](https://discuss.elastic.co/t/plati-num-license/345213 "2023-10-17T15:46:15Z")

</div>

Hello , I want to know if the Plati­num license is based on the number of nodes or on capacity, and whether it applies to coordinator nodes. Thank you.

---

## [Limit number of mapping fields](https://discuss.elastic.co/t/limit-number-of-mapping-fields/345226)

<div class="topic-metadata">

**Author:** [@MathieuINTIA](https://discuss.elastic.co/u/MathieuINTIA)\
**Replies:** 0\
**Last updated:** [October 17, 2023, 2:34pm UTC](https://discuss.elastic.co/t/limit-number-of-mapping-fields/345226 "2023-10-17T14:34:24Z")

</div>

Hello everyone, I have a mapping with well defined fields and fields that I don't want to see either indexed or in the mapping. Here's my mapping definition: mappings: { dynamic: false, properties: { '@t…

---

## [Query to check field is exist or not](https://discuss.elastic.co/t/query-to-check-field-is-exist-or-not/345206)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 1:03pm UTC](https://discuss.elastic.co/t/query-to-check-field-is-exist-or-not/345206 "2023-10-17T13:03:37Z")

</div>

Is there any query we can run to check a fieldname is exist or not

---

## [ElasticSearch User Profile/Personalization](https://discuss.elastic.co/t/elasticsearch-user-profile-personalization/345127)

<div class="topic-metadata">

**Author:** [@RodAndTom](https://discuss.elastic.co/u/RodAndTom)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 12:58pm UTC](https://discuss.elastic.co/t/elasticsearch-user-profile-personalization/345127 "2023-10-17T12:58:13Z")

</div>

Hi, I work with IDOL (Intelligent Data Operating Layer) more for more than 13 years and right now, we are evaluating which IDOL functionalities Elasticsearch can perform OOTB. One of these features is the user profile /…

---

## [ILM Setup support for ELK 8.3](https://discuss.elastic.co/t/ilm-setup-support-for-elk-8-3/345061)

<div class="topic-metadata">

**Author:** [@shailendra1](https://discuss.elastic.co/u/shailendra1)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 12:53pm UTC](https://discuss.elastic.co/t/ilm-setup-support-for-elk-8-3/345061 "2023-10-17T12:53:09Z")

</div>

Dear All, i am looking some suggestions for setting up the ILM for my data/streaming/beats . i have below senerios to accomplished and keep running my platforms. Everyday the indices are generating with abc.yyy.mm.dd …

---

## [Sample code to find similar HTML Documents](https://discuss.elastic.co/t/sample-code-to-find-similar-html-documents/345140)

<div class="topic-metadata">

**Author:** [@Ata\_Zangene](https://discuss.elastic.co/u/Ata_Zangene)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 9:55am UTC](https://discuss.elastic.co/t/sample-code-to-find-similar-html-documents/345140 "2023-10-17T09:55:12Z")

</div>

Hi, I want to index around 10 million of web pages HTML code in elasticsearch, now, I want to give the HTML content as a search query and get the most similar documents related to the search query ( which is an HTML ) s…

---

## [ELK STACK - LICENSE CLARIFICATION](https://discuss.elastic.co/t/elk-stack-license-clarification/345171)

<div class="topic-metadata">

**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 9:52am UTC](https://discuss.elastic.co/t/elk-stack-license-clarification/345171 "2023-10-17T09:52:00Z")

</div>

Hi, So Basically I would like to use ELK as monitoring stack for our own purpose, Can We get alerting like mail alert for hearbeat down or anything on this Download Elastic Products | Elastic what are the limitations?…

---

## [How to auto delete data older than 2 month or 30 days from elastcisearch index?](https://discuss.elastic.co/t/how-to-auto-delete-data-older-than-2-month-or-30-days-from-elastcisearch-index/345161)

<div class="topic-metadata">

**Author:** [@bbkunbi](https://discuss.elastic.co/u/bbkunbi)\
**Replies:** 5\
**Last updated:** [October 17, 2023, 7:40am UTC](https://discuss.elastic.co/t/how-to-auto-delete-data-older-than-2-month-or-30-days-from-elastcisearch-index/345161 "2023-10-17T07:40:02Z")

</div>

Note: I am not using date in index name like index -yyyy-mm . any method to do this i am using python Elasticsearch client to store data in es database.

---

## [Elastic Alert Rules - History of an alert being disabled/enabled](https://discuss.elastic.co/t/elastic-alert-rules-history-of-an-alert-being-disabled-enabled/344723)

<div class="topic-metadata">

**Author:** [@ElasticNovis](https://discuss.elastic.co/u/ElasticNovis)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 8:01am UTC](https://discuss.elastic.co/t/elastic-alert-rules-history-of-an-alert-being-disabled-enabled/344723 "2023-10-17T08:01:18Z")

</div>

We are using v8.9.0. Is it possible to see a history of when a rule/alert (Stack Management\>Alerts and Insights\>Rules)? I am interested to see the history of when an alert was enabled/disabled. The history of the chang…

---

## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/345162)

<div class="topic-metadata">

**Author:** [@merson](https://discuss.elastic.co/u/merson)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 7:31am UTC](https://discuss.elastic.co/t/elasticsearch/345162 "2023-10-17T07:31:01Z")

</div>

Suddenly am getting this Error in Elasticsearch: org.elasticsearch.ElasticsearchException: Trying to create too many scroll contexts. Must be less than or equal to: \[500\]. This limit can be set by changing the \[search.m…

---

## [Ingest pipeline - extract regex from events](https://discuss.elastic.co/t/ingest-pipeline-extract-regex-from-events/345133)

<div class="topic-metadata">

**Author:** [@xyz3](https://discuss.elastic.co/u/xyz3)\
**Replies:** 1\
**Last updated:** [October 17, 2023, 6:36am UTC](https://discuss.elastic.co/t/ingest-pipeline-extract-regex-from-events/345133 "2023-10-17T06:36:18Z")

</div>

Hello I need to extract some text string from existing index field: IMSChargingIdentifier and place it into new, separate field. New, incoming events should be parsed exactly the same way. Here is sample record from t…

---

## [Snapshot restore](https://discuss.elastic.co/t/snapshot-restore/345160)

<div class="topic-metadata">

**Author:** [@Sandeepa\_Kariyawasam](https://discuss.elastic.co/u/Sandeepa_Kariyawasam)\
**Replies:** 0\
**Last updated:** [October 17, 2023, 5:36am UTC](https://discuss.elastic.co/t/snapshot-restore/345160 "2023-10-17T05:36:28Z")

</div>

I have been restoring snapshots which caused some missing errors for some time but I only could find it possible one by one. Is there any way that I can restore all missing or erroneous snapshot all at once?

---

## [How to restart an Elasticsearch cluster (2 master node, 2 data node, 1 voting-only master-eligible node) after a 1 master node and 1 data node failed due to hardware failure without losing data?](https://discuss.elastic.co/t/how-to-restart-an-elasticsearch-cluster-2-master-node-2-data-node-1-voting-only-master-eligible-node-after-a-1-master-node-and-1-data-node-failed-due-to-hardware-failure-without-losing-data/345027)

<div class="topic-metadata">

**Author:** [@ThuyNguyen](https://discuss.elastic.co/u/ThuyNguyen)\
**Replies:** 5\
**Last updated:** [October 17, 2023, 3:36am UTC](https://discuss.elastic.co/t/how-to-restart-an-elasticsearch-cluster-2-master-node-2-data-node-1-voting-only-master-eligible-node-after-a-1-master-node-and-1-data-node-failed-due-to-hardware-failure-without-losing-data/345027 "2023-10-17T03:36:05Z")

</div>

Hi team, I have an Elasticsearch cluster which is setup across 3 servers through docker. Here is the configuration that I used: server 1: 1 voting-only master server 2: 1 master node, 1 data node, and snapshot server …

---

## [Signals to consider the nature of operation](https://discuss.elastic.co/t/signals-to-consider-the-nature-of-operation/343681)

<div class="topic-metadata">

**Author:** [@Dhineshkumar\_R](https://discuss.elastic.co/u/Dhineshkumar_R)\
**Replies:** 3\
**Last updated:** [October 17, 2023, 3:11am UTC](https://discuss.elastic.co/t/signals-to-consider-the-nature-of-operation/343681 "2023-10-17T03:11:36Z")

</div>

Hello folks, I recently came across this post Elasticsearch memory-bound tasks. Basis which I am trying to understand the nature of a search request to my cluster. Following are some questions I have What are the sig…

---

## [How to rollover index that is ending with date](https://discuss.elastic.co/t/how-to-rollover-index-that-is-ending-with-date/344827)

<div class="topic-metadata">

**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\
**Replies:** 6\
**Last updated:** [October 17, 2023, 2:00am UTC](https://discuss.elastic.co/t/how-to-rollover-index-that-is-ending-with-date/344827 "2023-10-17T02:00:40Z")

</div>

Hi, I have some indices in the cluster that have index names as follows: abc-asd-2023-10-09 abc-asd-2023-10-10 abc-asd-2023-10-11 There is no function running in the cluster to create daily indices. I wanted to add…

---

## [Log ELSER inference time](https://discuss.elastic.co/t/log-elser-inference-time/345057)

<div class="topic-metadata">

**Author:** [@cvarano](https://discuss.elastic.co/u/cvarano)\
**Replies:** 2\
**Last updated:** [October 16, 2023, 4:47pm UTC](https://discuss.elastic.co/t/log-elser-inference-time/345057 "2023-10-16T16:47:16Z")

</div>

When using ELSER, you can find the "Avg. inference time" under Kibana \> Analytics \> Machine Learning \> Model Management \> Trained Models. I cannot find any logs related to inference time when searching in Analytics \> Di…

---

## [Entreprise Resource Unit](https://discuss.elastic.co/t/entreprise-resource-unit/345104)

<div class="topic-metadata">

**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Replies:** 1\
**Last updated:** [October 16, 2023, 12:58pm UTC](https://discuss.elastic.co/t/entreprise-resource-unit/345104 "2023-10-16T12:58:25Z")

</div>

I have a qst about how to calculate Elastic's Enterprise Resource Unit (ERU) licenses. Is it based on system resources or JVM resources? Thank you

---

## [Not able to search with date range filter](https://discuss.elastic.co/t/not-able-to-search-with-date-range-filter/345088)

<div class="topic-metadata">

**Author:** [@bhumika](https://discuss.elastic.co/u/bhumika)\
**Replies:** 22\
**Last updated:** [October 16, 2023, 11:35am UTC](https://discuss.elastic.co/t/not-able-to-search-with-date-range-filter/345088 "2023-10-16T11:35:07Z")

</div>

I had integrated Elasticsearch in my ruby on rails project with chewy gem. All the searches are working fine except date range filter I tried every approach but not getting any error or response is always blank array th…

---

## [Observed kernel bug for Elasticsearch 7.17.5 on Debian 12](https://discuss.elastic.co/t/observed-kernel-bug-for-elasticsearch-7-17-5-on-debian-12/345083)

<div class="topic-metadata">

**Author:** [@bunste](https://discuss.elastic.co/u/bunste)\
**Replies:** 2\
**Last updated:** [October 16, 2023, 10:35am UTC](https://discuss.elastic.co/t/observed-kernel-bug-for-elasticsearch-7-17-5-on-debian-12/345083 "2023-10-16T10:35:34Z")

</div>

Hi all, we are running an ES cluster in version 7.17.5 and some of our data nodes are already running on Debian 12. Now recently one data node failed. Elasticsearch itself did not log anything about the incident. Also s…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=187)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=189)
