# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=314 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 315 --- ## [Elasticsearch high cpu usage](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 11:29pm UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-usage/323079 "2023-01-18T23:29:07Z")
Hi everyone. My Es cluster had high cpu usage at 3:30 am today, below is grafana monitoring: And the kibana monitoring: I don't have a clue, because in my nginx log files, I didn't see any request rise signif… --- ## [Are there any cron jobs I can perform daily to keep my cluster healthy?](https://discuss.elastic.co/t/are-there-any-cron-jobs-i-can-perform-daily-to-keep-my-cluster-healthy/323150)
**Author:** [@SemperFi](https://discuss.elastic.co/u/SemperFi)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 11:16pm UTC](https://discuss.elastic.co/t/are-there-any-cron-jobs-i-can-perform-daily-to-keep-my-cluster-healthy/323150 "2023-01-18T23:16:18Z")
I've got a very basic Elasticsearch cluster set up on my server to support search for a Xenforo forum. My technical knowledge is good enough to be dangerous. Lately Elasticsearch is crashing about once a week and I'm w… --- ## [.alerts-security.alerts-default\* indice removed suddenly](https://discuss.elastic.co/t/alerts-security-alerts-default-indice-removed-suddenly/323434)
**Author:** [@raghiboon](https://discuss.elastic.co/u/raghiboon)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 10:03pm UTC](https://discuss.elastic.co/t/alerts-security-alerts-default-indice-removed-suddenly/323434 "2023-01-18T22:03:56Z")
Hi everybody. i just removed .alerts-security.alerts-default-0000 suddenly after i was working with rules and made my dashboards. is there a way to recreate it? because it gives me this error: Bulk indexing of signals… --- ## [SQL Return Malformed (ignored\_field\_values)](https://discuss.elastic.co/t/sql-return-malformed-ignored-field-values/323418)
**Author:** [@T\_Eckmann](https://discuss.elastic.co/u/T_Eckmann)\ **Replies:** 6\ **Last updated:** [January 18, 2023, 5:29pm UTC](https://discuss.elastic.co/t/sql-return-malformed-ignored-field-values/323418 "2023-01-18T17:29:49Z")
Hopefully I am not missing anything stupid. But I am working on trying to return some data using the Elasticsearch SQL functions. So far no luck. The data I am trying to get can be found in the raw data as well as when … --- ## [After upgrade from 8.2.2 to 8.5.3 elasticsearch.bat works just fine but the elasticsearch-service.bat start fails](https://discuss.elastic.co/t/after-upgrade-from-8-2-2-to-8-5-3-elasticsearch-bat-works-just-fine-but-the-elasticsearch-service-bat-start-fails/322167)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 4:59pm UTC](https://discuss.elastic.co/t/after-upgrade-from-8-2-2-to-8-5-3-elasticsearch-bat-works-just-fine-but-the-elasticsearch-service-bat-start-fails/322167 "2023-01-18T16:59:53Z")
Hi! After upgrade from 8.2.2 to 8.5.3 elasticsearch.bat works just fine but the elasticsearch-service.bat start fails with the following error log: \[2022-12-29 16:51:55\] \[debug\] ( prunsrv.c:1994) \[ 8136\] Apache Commons… --- ## [Trying to recover snapshot](https://discuss.elastic.co/t/trying-to-recover-snapshot/323428)
**Author:** [@Monica\_majua](https://discuss.elastic.co/u/Monica_majua)\ **Replies:** 4\ **Last updated:** [January 18, 2023, 4:35pm UTC](https://discuss.elastic.co/t/trying-to-recover-snapshot/323428 "2023-01-18T16:35:54Z")
Hello everyone, I'm new to this topic, it's my first time using elastic so I'm a bit lost and confused. I have migrated from ES (elasticsearch 7.17.6) to Opendistro (elasticsearch 7.10.2) but I took a snapshot first. Now… --- ## [Can't create cluster with 2 nodes on elasticsearch version 2.2.2](https://discuss.elastic.co/t/cant-create-cluster-with-2-nodes-on-elasticsearch-version-2-2-2/323350)
**Author:** [@KaZuKi\_Yashiro](https://discuss.elastic.co/u/KaZuKi_Yashiro)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 4:34pm UTC](https://discuss.elastic.co/t/cant-create-cluster-with-2-nodes-on-elasticsearch-version-2-2-2/323350 "2023-01-18T16:34:16Z")
Hello there! :slight\_smile: We have a single node of Elasticsearch version 2.2.2 and we decided to extend this cluster to two nodes, with replicas and so. But problem is that these two nodes doesn't see each other. =( … --- ## [Vulnerabilities in docker image elasticsearch/elasticsearch:7.17.8](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377)
**Author:** [@Jayasree\_N](https://discuss.elastic.co/u/Jayasree_N)\ **Replies:** 5\ **Last updated:** [January 18, 2023, 2:55pm UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377 "2023-01-18T14:55:48Z")
Hi, we are using elasticsearch/elasticsearch:7.17.8 docker image. We are getting few CVEs reported as high with the vulnerabilities scanning report. CVE-2021-31684 -- nimbus-jose-jwt and json-smart CVE-2020-36518 -- … --- ## [Elastic search aggregations](https://discuss.elastic.co/t/elastic-search-aggregations/323335)
**Author:** [@Pablo\_Cumpe](https://discuss.elastic.co/u/Pablo_Cumpe)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 2:10pm UTC](https://discuss.elastic.co/t/elastic-search-aggregations/323335 "2023-01-18T14:10:08Z")
Hi, Im working with Elasticsearch aggregations in an particular index. I have a dought if aggregations do a full scan of the index or only do o partial scan. Does anyone have an idea about this? --- ## [Keeping anomaly scoring constant](https://discuss.elastic.co/t/keeping-anomaly-scoring-constant/323365)
**Author:** [@emi\_rose](https://discuss.elastic.co/u/emi_rose)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 1:16pm UTC](https://discuss.elastic.co/t/keeping-anomaly-scoring-constant/323365 "2023-01-18T13:16:34Z")
Hi there, I'm currently trying to configure an advanced job that detects low counts or zero counts of documents by using low\_count by field1. I basically want the job to detect any abnormal behavior at all. Some attribu… --- ## [co.elastic.clients.json.JsonpMappingException: Error deserializing co.elastic.clients.elasticsearch.\_types.mapping.VersionProperty: Unknown field 'index'](https://discuss.elastic.co/t/co-elastic-clients-json-jsonpmappingexception-error-deserializing-co-elastic-clients-elasticsearch-types-mapping-versionproperty-unknown-field-index/323316)
**Author:** [@sundar.s](https://discuss.elastic.co/u/sundar.s)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 12:17pm UTC](https://discuss.elastic.co/t/co-elastic-clients-json-jsonpmappingexception-error-deserializing-co-elastic-clients-elasticsearch-types-mapping-versionproperty-unknown-field-index/323316 "2023-01-18T12:17:04Z")
Hi, When I tried to create an index containing a field of type: "version" or "geo\_point" with 'index' : true/false (sample input below) through the Java API client (7.17.7), I am getting the following exception. Could… --- ## [ES Build failure - resolve all task dependencies](https://discuss.elastic.co/t/es-build-failure-resolve-all-task-dependencies/322823)
**Author:** [@kvmprashanth](https://discuss.elastic.co/u/kvmprashanth)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 11:53am UTC](https://discuss.elastic.co/t/es-build-failure-resolve-all-task-dependencies/322823 "2023-01-18T11:53:56Z")
I am trying to build Elasticsearch from scratch using ./gradlew localDistro command on one of the latest releases. When I build on master it works. However, when I try to build from one of the tagged (v8.5.3 or even v7.1… --- ## [Joining a New ES search Node to a Bootstrapped Cluster](https://discuss.elastic.co/t/joining-a-new-es-search-node-to-a-bootstrapped-cluster/323378)
**Author:** [@A.Hani](https://discuss.elastic.co/u/A.Hani)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 10:27am UTC](https://discuss.elastic.co/t/joining-a-new-es-search-node-to-a-bootstrapped-cluster/323378 "2023-01-18T10:27:12Z")
Hello, Is there a way to join a new ES node to an already existing bootstrapped single node cluster that already contains data? I read on some other blog posts that for this to happen, I'll have to remove the data from … --- ## ["No logs for this cluster"](https://discuss.elastic.co/t/no-logs-for-this-cluster/322932)
**Author:** [@fus80677](https://discuss.elastic.co/u/fus80677)\ **Replies:** 15\ **Last updated:** [January 18, 2023, 8:59am UTC](https://discuss.elastic.co/t/no-logs-for-this-cluster/322932 "2023-01-18T08:59:21Z")
I've been trying to set up logging for the Stack Monitoring page, but it just won't seem to work: I enabled the elasticsearch module in filebeat with this config: # Module: elasticsearch # Docs: https://www.elastic.c… --- ## [ElasticSearch Dockercompose with plugin not starting up](https://discuss.elastic.co/t/elasticsearch-dockercompose-with-plugin-not-starting-up/322523)
**Author:** [@gjahagir](https://discuss.elastic.co/u/gjahagir)\ **Replies:** 3\ **Last updated:** [January 18, 2023, 8:48am UTC](https://discuss.elastic.co/t/elasticsearch-dockercompose-with-plugin-not-starting-up/322523 "2023-01-18T08:48:40Z")
Hi, I followed the article here to start a multi node cluster using docker compose. i also installed mapper-size plugin for each node, manually using command - docker exec es02 elasticsearch-plugin install mapper-size… --- ## [Elasticsearch service keep restarting time to time](https://discuss.elastic.co/t/elasticsearch-service-keep-restarting-time-to-time/323387)
**Author:** [@Gihan\_Indrajith](https://discuss.elastic.co/u/Gihan_Indrajith)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 8:28am UTC](https://discuss.elastic.co/t/elasticsearch-service-keep-restarting-time-to-time/323387 "2023-01-18T08:28:46Z")
Observed that elasticsearch service keep restarting time to time. Node has 16GB memory and allocated 8GB for the heap. Elasticsearch version - 7.13 Below is the log. This is one of the nodes from 5 node cluster. \[2023… --- ## [Indices generated lately than real time several hours](https://discuss.elastic.co/t/indices-generated-lately-than-real-time-several-hours/323206)
**Author:** [@Anh\_Nguyen](https://discuss.elastic.co/u/Anh_Nguyen)\ **Replies:** 12\ **Last updated:** [January 18, 2023, 6:44am UTC](https://discuss.elastic.co/t/indices-generated-lately-than-real-time-several-hours/323206 "2023-01-18T06:44:25Z")
I got some problems with Datastream's Indices Generating. In detail, the indices are generated more lately than real time 1 day or a few hours. I want to have an index for the right date of the generated index but i coul… --- ## [Which version of Elasticsearch can be migrated to Open search 1.3.6](https://discuss.elastic.co/t/which-version-of-elasticsearch-can-be-migrated-to-open-search-1-3-6/323374)
**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\ **Replies:** 2\ **Last updated:** [January 18, 2023, 5:38am UTC](https://discuss.elastic.co/t/which-version-of-elasticsearch-can-be-migrated-to-open-search-1-3-6/323374 "2023-01-18T05:38:00Z")
Hello Team, I wanted to know which version of Elasticsearch can be migrated to Open search 1.3.6, we are using Graylog with Elasticsearch 7.16 and we wanted to move to OS from ES. from Graylog it says that anything bey… --- ## [Has anyone made a "serverless" elasticsearch?](https://discuss.elastic.co/t/has-anyone-made-a-serverless-elasticsearch/168468)
**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\ **Replies:** 4\ **Last updated:** [January 18, 2023, 2:08am UTC](https://discuss.elastic.co/t/has-anyone-made-a-serverless-elasticsearch/168468 "2023-01-18T02:08:00Z")
hello, I'm a big fan of ES and have been using it for years now. Just wondering if anyone has made an attempt to make a serverless approach to ES? Let me expand on what I mean: I personally use Elasticsearch for a pr… --- ## [Elasticsearch kubernetes deployment](https://discuss.elastic.co/t/elasticsearch-kubernetes-deployment/323308)
**Author:** [@Ayyappan](https://discuss.elastic.co/u/Ayyappan)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 1:36am UTC](https://discuss.elastic.co/t/elasticsearch-kubernetes-deployment/323308 "2023-01-18T01:36:09Z")
is it possible to restore the data from the cache once its cleared/overwritten? --- ## [Elastic Search Docker upgrade to latest](https://discuss.elastic.co/t/elastic-search-docker-upgrade-to-latest/323341)
**Author:** [@gjahagir](https://discuss.elastic.co/u/gjahagir)\ **Replies:** 1\ **Last updated:** [January 18, 2023, 1:31am UTC](https://discuss.elastic.co/t/elastic-search-docker-upgrade-to-latest/323341 "2023-01-18T01:31:46Z")
Hi, I'm new to Elasticsearch as well as docker. I spinned up a 3 node elastic cluster following the documentation here I used stack version as 8.0.1 to test the upgrade process. I followed the documentation on upgrade… --- ## [Logstash with ILM configuration](https://discuss.elastic.co/t/logstash-with-ilm-configuration/323363)
**Author:** [@Erates](https://discuss.elastic.co/u/Erates)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 9:39pm UTC](https://discuss.elastic.co/t/logstash-with-ilm-configuration/323363 "2023-01-17T21:39:27Z")
Hi, we have an ELK stack running (I have no say in which version, which is currently 7.x) to get the logs of our applications running in a Kubernetes cluster all combined in 1 place. The applications are pushing their lo… --- ## [Error: disk usage exceeded flood-stage watermark, index has read-only-allow-delete block](https://discuss.elastic.co/t/error-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/323357)
**Author:** [@pmono](https://discuss.elastic.co/u/pmono)\ **Replies:** 5\ **Last updated:** [January 17, 2023, 9:14pm UTC](https://discuss.elastic.co/t/error-disk-usage-exceeded-flood-stage-watermark-index-has-read-only-allow-delete-block/323357 "2023-01-17T21:14:59Z")
Hello, I'm getting a weird error: \[2023-01-17T18:18:32.398997+00:00\] main.ERROR: Child process failed with message: Elasticsearch engine returned an error response. item id: 20. Error type: "cluster\_block\_exception", r… --- ## [More master node?](https://discuss.elastic.co/t/more-master-node/323348)
**Author:** [@Verdugo\_Gonzalo](https://discuss.elastic.co/u/Verdugo_Gonzalo)\ **Replies:** 6\ **Last updated:** [January 17, 2023, 8:02pm UTC](https://discuss.elastic.co/t/more-master-node/323348 "2023-01-17T20:02:54Z")
Hello everyone, I explain my context. I am designing an architecture with 18 nodes where everyone can be master (of the 18 nodes, only 1 master remains) if necessary, but I feel that 1 for 17 is too little and I want to… --- ## [Log incoming connection IP?](https://discuss.elastic.co/t/log-incoming-connection-ip/323359)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 2\ **Last updated:** [January 17, 2023, 7:55pm UTC](https://discuss.elastic.co/t/log-incoming-connection-ip/323359 "2023-01-17T19:55:17Z")
Maybe this has been answered before. But I can't seem to find it. Does anybody know how to enable logging in ES to show the IP address an API is invoked from? Things like when an index is created, I see the log with t… --- ## [Elasticsearch Java API client 8.5, does generate the correct format for source ordering for composition aggregation](https://discuss.elastic.co/t/elasticsearch-java-api-client-8-5-does-generate-the-correct-format-for-source-ordering-for-composition-aggregation/323352)
**Author:** [@snguyen](https://discuss.elastic.co/u/snguyen)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 4:55pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-8-5-does-generate-the-correct-format-for-source-ordering-for-composition-aggregation/323352 "2023-01-17T16:55:22Z")
Hi, I am using Elasticsearch Java API client 8.5. I need to be able to specified the order for the sources such as for date histogram aggregation as the source. However the issue is that it generates array as the value … --- ## [Eland, when querying an index it will store the whole index in a dataframe?](https://discuss.elastic.co/t/eland-when-querying-an-index-it-will-store-the-whole-index-in-a-dataframe/323340)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 3:33pm UTC](https://discuss.elastic.co/t/eland-when-querying-an-index-it-will-store-the-whole-index-in-a-dataframe/323340 "2023-01-17T15:33:45Z")
Using Eland, When querying an index it will store the whole index in a dataframe? or only the elasticsearch limit 10000 documents? these dataframes are stored in the memory of the server? Any strategy you recomend when… --- ## [Heap usage in versions 6 and 7](https://discuss.elastic.co/t/heap-usage-in-versions-6-and-7/322127)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 5\ **Last updated:** [January 17, 2023, 12:53pm UTC](https://discuss.elastic.co/t/heap-usage-in-versions-6-and-7/322127 "2023-01-17T12:53:56Z")
After upgrading from 6.7.0 to 7.10.2, the amount of data in each data node has decreased, but the heap utilization rate has increased, leading to frequent circuit\_breaking. The 7 version FST has moved to the off heap mem… --- ## [I am setting elasticsearch 8.5.3 but getting below error](https://discuss.elastic.co/t/i-am-setting-elasticsearch-8-5-3-but-getting-below-error/323216)
**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\ **Replies:** 10\ **Last updated:** [January 17, 2023, 12:35pm UTC](https://discuss.elastic.co/t/i-am-setting-elasticsearch-8-5-3-but-getting-below-error/323216 "2023-01-17T12:35:42Z")
\[2023-01-16T10:41:07,855\]\[ERROR\]\[o.e.i.g.GeoIpDownloader \] \[node-203\] exception during geoip databases update java.net.SocketTimeoutException: Connect timed out at sun.nio.ch.NioSocketImpl.timedFinishConnect(NioSocket… --- ## [Using Power BI conditional formatting](https://discuss.elastic.co/t/using-power-bi-conditional-formatting/323292)
**Author:** [@Likithsai](https://discuss.elastic.co/u/Likithsai)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 11:39am UTC](https://discuss.elastic.co/t/using-power-bi-conditional-formatting/323292 "2023-01-17T11:39:32Z")
Problem: When attempting to use conditional formatting on a card, table, etc. I can right click off the measure or column data involved to select conditional formatting. The process starts and the conditional formatting … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=313) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=315)