# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=320 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 321 --- ## [Installing ElasticSearch via Helm without VolumeClaim using existing volumeMount?](https://discuss.elastic.co/t/installing-elasticsearch-via-helm-without-volumeclaim-using-existing-volumemount/322532)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 0\ **Last updated:** [January 5, 2023, 10:47am UTC](https://discuss.elastic.co/t/installing-elasticsearch-via-helm-without-volumeclaim-using-existing-volumemount/322532 "2023-01-05T10:47:24Z")
We want to install Elasticsearch via helm chart and provide our own volumeMount. We don't really want to have anything to do with PVCs. Ideally the resulting container should have something like: volumeMounts… --- ## [Pushing of data](https://discuss.elastic.co/t/pushing-of-data/322517)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 0\ **Last updated:** [January 5, 2023, 7:13am UTC](https://discuss.elastic.co/t/pushing-of-data/322517 "2023-01-05T07:13:02Z")
Error in pushing of data: raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)( elasticsearch.exceptions.AuthorizationException: AuthorizationException(403, 'security\_exception', 'action \[indices:admin/create\] is unaut… --- ## [Elasticsearch,Kibana,logstash,filebeat](https://discuss.elastic.co/t/elasticsearch-kibana-logstash-filebeat/322133)
**Author:** [@Mursel](https://discuss.elastic.co/u/Mursel)\ **Replies:** 15\ **Last updated:** [January 5, 2023, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-logstash-filebeat/322133 "2023-01-05T07:27:50Z")
The hit point in Kibana was more than one hundred thousand for 3 hours. Then I observed that this number has dropped to three thousand. The reason for this was that 90 percent of the memory was full. To fix this, I remov… --- ## [Watcher Script Calculation](https://discuss.elastic.co/t/watcher-script-calculation/322512)
**Author:** [@baoletrg](https://discuss.elastic.co/u/baoletrg)\ **Replies:** 0\ **Last updated:** [January 5, 2023, 5:22am UTC](https://discuss.elastic.co/t/watcher-script-calculation/322512 "2023-01-05T05:22:24Z")
{ "watch\_id": "41f83e51-ea97-4383-8bae-f361fd14a81a", "node": "AUDLWhUORrCEs2E\_lEhqng", "state": "execution\_not\_needed", "@timestamp": "2023-01-05T05:08:34.144Z", "user": "baolt", "status": { "state": { … --- ## [3-Node cluster setup](https://discuss.elastic.co/t/3-node-cluster-setup/322420)
**Author:** [@Sandeepa\_Kariyawasam](https://discuss.elastic.co/u/Sandeepa_Kariyawasam)\ **Replies:** 4\ **Last updated:** [January 5, 2023, 5:06am UTC](https://discuss.elastic.co/t/3-node-cluster-setup/322420 "2023-01-05T05:06:15Z")
I have created a Elasticsearch node with enrolment token configured. Now I'm trying to attach two other nodes to the running node as a cluster. It gave this error, This node will be reconfigured to join an existing clus… --- ## [Setup SSL via load balancer on different server](https://discuss.elastic.co/t/setup-ssl-via-load-balancer-on-different-server/322321)
**Author:** [@stes](https://discuss.elastic.co/u/stes)\ **Replies:** 3\ **Last updated:** [January 5, 2023, 5:04am UTC](https://discuss.elastic.co/t/setup-ssl-via-load-balancer-on-different-server/322321 "2023-01-05T05:04:43Z")
I have a classic setup with a Nginx load balancer that distributes traffic through all my other non-public servers. Each server contains only one service e.g. Postgres or Elasticsearch. I just discovered Elasticsearch a… --- ## [Unfreeze, Read-Only, Move to Cold/Frozen](https://discuss.elastic.co/t/unfreeze-read-only-move-to-cold-frozen/322395)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 6:40pm UTC](https://discuss.elastic.co/t/unfreeze-read-only-move-to-cold-frozen/322395 "2023-01-04T18:40:33Z")
Team, I'm working through the Elastic Upgrade Assistant and its telling me I have 38 Warnings, all the same warning, that I need to, "Index \[XYZ\] is frozen. Frozen indices no longer offer any advantages. Instead, unfree… --- ## [Cannot index event publisher ERROR](https://discuss.elastic.co/t/cannot-index-event-publisher-error/322285)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 5\ **Last updated:** [January 4, 2023, 5:01pm UTC](https://discuss.elastic.co/t/cannot-index-event-publisher-error/322285 "2023-01-04T17:01:45Z")
Getting this error {"type":"mapper\_parsing\_exception","reason":"failed to parse field \[network.forwarded\_ip\] of type \[ip\] in document with id 'msD2cIUBIsfwhIgCSPy9'. Preview of field's value: '0'","caused\_by":{"type":"i… --- ## [How elastic ML detect anomaly?](https://discuss.elastic.co/t/how-elastic-ml-detect-anomaly/321551)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 11\ **Last updated:** [January 4, 2023, 5:01pm UTC](https://discuss.elastic.co/t/how-elastic-ml-detect-anomaly/321551 "2023-01-04T17:01:14Z")
Hi Community, In above screenshot the upper bound values is between 1 to 4.8 something On dec 12th at 9:15 it detect major anomaly it actual value was 3 , upper bound value was 0.754 and lower bound was 0 so in … --- ## [Multiple SLM Policies, same Snapshot Repository and same Elasticsearch Cluster?](https://discuss.elastic.co/t/multiple-slm-policies-same-snapshot-repository-and-same-elasticsearch-cluster/322484)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 3:51pm UTC](https://discuss.elastic.co/t/multiple-slm-policies-same-snapshot-repository-and-same-elasticsearch-cluster/322484 "2023-01-04T15:51:30Z")
Hi All, I wasn't able to find much about this topic in the Elasticsearch documentation, so thought I'd ask here to see if anyone has the answer. Question: Is it safe to have multiple SLM policies pointing to the same … --- ## [Compatibility with grafana](https://discuss.elastic.co/t/compatibility-with-grafana/322469)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 3:27pm UTC](https://discuss.elastic.co/t/compatibility-with-grafana/322469 "2023-01-04T15:27:28Z")
hello everyone. Is there compatibility Grafana version 9.2 and ELK 7.2.11 as data source? --- ## [Installing Elasticsearch - archive vs DEB](https://discuss.elastic.co/t/installing-elasticsearch-archive-vs-deb/322478)
**Author:** [@Evram\_Yousef](https://discuss.elastic.co/u/Evram_Yousef)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 3:04pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-archive-vs-deb/322478 "2023-01-04T15:04:59Z")
Hello All, Now I've been using this ES on linux machines - Azure machines simply by downloading archive - tar - and install Now I wanted to move to multiple nodes. I found that I can't communicate between two nodes… --- ## [Error sending logs to Elastic from UIPATH system](https://discuss.elastic.co/t/error-sending-logs-to-elastic-from-uipath-system/322471)
**Author:** [@aviadhaim18](https://discuss.elastic.co/u/aviadhaim18)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 1:53pm UTC](https://discuss.elastic.co/t/error-sending-logs-to-elastic-from-uipath-system/322471 "2023-01-04T13:53:35Z")
Hi, When I try to send logs to Elastic, I get the following error: Elasticsearch: Bulk item failed: index:rpa\_test-2023.01.04 result: type:logEvent error:Type: illegal\_argument\_exception Reason: "Invalid type: expectin… --- ## [What happens to \>5GB segments?](https://discuss.elastic.co/t/what-happens-to-5gb-segments/322460)
**Author:** [@sezuan](https://discuss.elastic.co/u/sezuan)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 12:33pm UTC](https://discuss.elastic.co/t/what-happens-to-5gb-segments/322460 "2023-01-04T12:33:43Z")
Hello, I'm wondering what happens to segments that are larger than 5gb (index.merge.policy.max\_merged\_segment ) and the index has more than 33% deleted documents (index.merge.policy.deletes\_pct\_allowed) and it's no poss… --- ## [Key with dot notation in rank features of ES v8.4.0](https://discuss.elastic.co/t/key-with-dot-notation-in-rank-features-of-es-v8-4-0/322424)
**Author:** [@Chen\_Bright](https://discuss.elastic.co/u/Chen_Bright)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 11:42am UTC](https://discuss.elastic.co/t/key-with-dot-notation-in-rank-features-of-es-v8-4-0/322424 "2023-01-04T11:42:36Z")
ENV: Elasticsearch v8.4.0 operation steps(very simple): what i wanna know is, how can i insert this kind of data in the rank features field?(i tested in es v7.10.2, it works, so maybe es changed the way to treat the… --- ## [existsAlias returns false](https://discuss.elastic.co/t/existsalias-returns-false/322455)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 11:37am UTC](https://discuss.elastic.co/t/existsalias-returns-false/322455 "2023-01-04T11:37:26Z")
Hi, Using RestHighLevelClient with Elasticsearch 7.17.7 both client and server. For new records coming in I check wether an expected alias exists. boolean exists = client.indices().existsAlias(requestWithAlias, Reques… --- ## [How to get the JSON for a BoolQuery](https://discuss.elastic.co/t/how-to-get-the-json-for-a-boolquery/322452)
**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 11:32am UTC](https://discuss.elastic.co/t/how-to-get-the-json-for-a-boolquery/322452 "2023-01-04T11:32:18Z")
Given an instance of BoolQuery, how can I find out the JSON string that will be sent to the ES server? --- ## [Kibana 7.17.3 - serverBasePath result in 404 Status](https://discuss.elastic.co/t/kibana-7-17-3-serverbasepath-result-in-404-status/322449)
**Author:** [@vijaykumar](https://discuss.elastic.co/u/vijaykumar)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 10:52am UTC](https://discuss.elastic.co/t/kibana-7-17-3-serverbasepath-result-in-404-status/322449 "2023-01-04T10:52:10Z")
I setup EFK Stack Using Helm Chart and versions of Elasticsearch Kibana and filebeat are 7.17.3 Helm Chart Link: Installation is success Able to access kibana UI (When exposed as service type Loadbalancer) now wh… --- ## ["Search as you type" and elasticsearch](https://discuss.elastic.co/t/search-as-you-type-and-elasticsearch/322438)
**Author:** [@Rhh](https://discuss.elastic.co/u/Rhh)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 9:05am UTC](https://discuss.elastic.co/t/search-as-you-type-and-elasticsearch/322438 "2023-01-04T09:05:00Z")
Hi I have a text field with the type set to "search as you type". When I request data I get all data corresponding to BLAKER OR 288 in the street field. ( the street field contains the streetname + house number ) But … --- ## [Restore to a different cluster](https://discuss.elastic.co/t/restore-to-a-different-cluster/322357)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 7\ **Last updated:** [January 4, 2023, 7:04am UTC](https://discuss.elastic.co/t/restore-to-a-different-cluster/322357 "2023-01-04T07:04:09Z")
Hi, Good day! I have a Production Environment (3 Nodes) and a DR Environment (3 Nodes). I received the error "snapshot does not exist" on the DR Environment after trying to restore the snapshot of the Production on the… --- ## [Best way to make a consistent copy of data](https://discuss.elastic.co/t/best-way-to-make-a-consistent-copy-of-data/322418)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 1\ **Last updated:** [January 4, 2023, 7:03am UTC](https://discuss.elastic.co/t/best-way-to-make-a-consistent-copy-of-data/322418 "2023-01-04T07:03:16Z")
I have a system containing billions of documents. I have a requirement to have a consistent point in time copy of a subset of fields from 1 year's worth of data (eg 200M documents). The documents are subject to change, i… --- ## [Issue with ElasticSearch Highlighter](https://discuss.elastic.co/t/issue-with-elasticsearch-highlighter/322340)
**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\ **Replies:** 0\ **Last updated:** [January 3, 2023, 6:18am UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-highlighter/322340 "2023-01-03T06:18:28Z")
Hi Team, We are getting response time issue with elasticsearch highlighter. In Mapping we are using copy field with store: true parameter. When we are trying to fetch copy field in highlighter query it is taking around… --- ## [Match exact phrase using elasticsearch Nest](https://discuss.elastic.co/t/match-exact-phrase-using-elasticsearch-nest/322412)
**Author:** [@Javier\_Zaldivar](https://discuss.elastic.co/u/Javier_Zaldivar)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 2:24am UTC](https://discuss.elastic.co/t/match-exact-phrase-using-elasticsearch-nest/322412 "2023-01-04T02:24:47Z")
I'm using Nest to build a query. I have a class called Event which has a property called Location and a property called Address (a string). So the indices look something like this: "id" : "something1", "location": { … --- ## [Execute Enrich Policy Creating Index, "Unexpected"](https://discuss.elastic.co/t/execute-enrich-policy-creating-index-unexpected/322400)
**Author:** [@cj\_hillbrand](https://discuss.elastic.co/u/cj_hillbrand)\ **Replies:** 0\ **Last updated:** [January 3, 2023, 7:21pm UTC](https://discuss.elastic.co/t/execute-enrich-policy-creating-index-unexpected/322400 "2023-01-03T19:21:54Z")
Hello, I am running into an issue when executing an enrich policy via the dotnet NEST API. The top-level issue is that there is no, ".enrich-my-index-name" after issuing the execute on the enrich policy. There is autom… --- ## [How to list one records when there are 4 similar records with no unique field in ELK](https://discuss.elastic.co/t/how-to-list-one-records-when-there-are-4-similar-records-with-no-unique-field-in-elk/322324)
**Author:** [@Anuradha\_Pendyala](https://discuss.elastic.co/u/Anuradha_Pendyala)\ **Replies:** 3\ **Last updated:** [January 3, 2023, 8:45pm UTC](https://discuss.elastic.co/t/how-to-list-one-records-when-there-are-4-similar-records-with-no-unique-field-in-elk/322324 "2023-01-03T20:45:47Z")
Hi , we have an alerting mechanism in place with the help of watcher where we have a complex filter query with an attachment from kibana saved objects ,our index contains multiple records with very similar field values… --- ## [Data Loss when cluster has hit Watermark](https://discuss.elastic.co/t/data-loss-when-cluster-has-hit-watermark/322389)
**Author:** [@jobypm](https://discuss.elastic.co/u/jobypm)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 3:09pm UTC](https://discuss.elastic.co/t/data-loss-when-cluster-has-hit-watermark/322389 "2023-01-03T15:09:57Z")
If a cluster hits watermark and gets rectified few hrs later, will there be data loss for the duration when the cluster was readonly? If there is data lost, is there a way we can retrigger using any parameter in filebea… --- ## [Help my please realized clarifying filtering](https://discuss.elastic.co/t/help-my-please-realized-clarifying-filtering/322385)
**Author:** [@Parano9I](https://discuss.elastic.co/u/Parano9I)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 2:59pm UTC](https://discuss.elastic.co/t/help-my-please-realized-clarifying-filtering/322385 "2023-01-03T14:59:05Z")
GET original\_docs/\_search { "\_source": \[ "styles", "production\_date\_start" \], "from": 20, "size": 20, "query": { "bool": { "filter": \[ { "nested": { "path": "styl… --- ## [How to extend /var file partition](https://discuss.elastic.co/t/how-to-extend-var-file-partition/322305)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 7\ **Last updated:** [January 3, 2023, 2:57pm UTC](https://discuss.elastic.co/t/how-to-extend-var-file-partition/322305 "2023-01-03T14:57:36Z")
The /dev/mapper/centos-var partition got full Can anyone suggest a solution for extending it or any solution? --- ## [Maximum requests per seconde on elasticsearch node](https://discuss.elastic.co/t/maximum-requests-per-seconde-on-elasticsearch-node/322369)
**Author:** [@b\_Ensberg](https://discuss.elastic.co/u/b_Ensberg)\ **Replies:** 2\ **Last updated:** [January 3, 2023, 1:36pm UTC](https://discuss.elastic.co/t/maximum-requests-per-seconde-on-elasticsearch-node/322369 "2023-01-03T13:36:03Z")
I installed elasticseach on a linux server, I have a single node of it. I have a csv file of several tens of thousands of lines which contains IDs, the goal is to iterate over this file and retrieve the data from the ela… --- ## [RabbitMQ VS IBM MQ For integrate with ELK](https://discuss.elastic.co/t/rabbitmq-vs-ibm-mq-for-integrate-with-elk/322297)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 9\ **Last updated:** [January 3, 2023, 11:23am UTC](https://discuss.elastic.co/t/rabbitmq-vs-ibm-mq-for-integrate-with-elk/322297 "2023-01-03T11:23:49Z")
Hello Everybody, I need from ELK integrations Expertise to Recommend for me Whet is the best from between IBM MQ and Rabbit MQ to pull Messages in terms of performance and compatibility with ELK 7.11.2. [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=319) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=321)