# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=326 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 327 --- ## [Root mapping definition has unsupported parameters when trying to update the mapping](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-when-trying-to-update-the-mapping/321655)
**Author:** [@cchertita](https://discuss.elastic.co/u/cchertita)\ **Replies:** 1\ **Last updated:** [December 20, 2022, 1:37pm UTC](https://discuss.elastic.co/t/root-mapping-definition-has-unsupported-parameters-when-trying-to-update-the-mapping/321655 "2022-12-20T13:37:34Z")
Hello, I am trying to setup custom logging for Mulesoft APIs and trying to send data to an ELK server (instead of Kibana, it uses OpenSearch from AWS). I am also using a custom JSON Logger that is required for separate … --- ## [Customized Index Template](https://discuss.elastic.co/t/customized-index-template/321557)
**Author:** [@Pankhuri\_Gupta](https://discuss.elastic.co/u/Pankhuri_Gupta)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 1:15pm UTC](https://discuss.elastic.co/t/customized-index-template/321557 "2022-12-20T13:15:13Z")
Hi, I have metricbeat indices being created with metricbeat-7.17\* as index template name but I want to create Index template with some other name.Basically, I want to customize my index templates name. Please provide st… --- ## [ML Datafeed Error](https://discuss.elastic.co/t/ml-datafeed-error/321646)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 0\ **Last updated:** [December 20, 2022, 1:00pm UTC](https://discuss.elastic.co/t/ml-datafeed-error/321646 "2022-12-20T13:00:18Z")
Hello! Does anyone know why im facing this issue ? Datafeed is encountering errors extracting data: No search context found for id \[xxxxxx\] --- ## [Underlying file changed by an external force](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/321401)
**Author:** [@Marco201](https://discuss.elastic.co/u/Marco201)\ **Replies:** 3\ **Last updated:** [December 20, 2022, 10:47am UTC](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/321401 "2022-12-20T10:47:01Z")
Hello, since some time we can find the following warning in certain time intervals in logs of elastic in our environments. Usually this has no effect, but sometimes not all shards are assigned and you have to do a retry… --- ## [Prevent shard in specific node](https://discuss.elastic.co/t/prevent-shard-in-specific-node/321619)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 9:37am UTC](https://discuss.elastic.co/t/prevent-shard-in-specific-node/321619 "2022-12-20T09:37:35Z")
Hello everyone, how to prevent shard in specific node because I need add all nodes in the cluster but there is specific node RAM and CPU limitation, how to handle this approach and what is best practice to make this t… --- ## [Indexed documents disappearing randomly within a short time after indexing](https://discuss.elastic.co/t/indexed-documents-disappearing-randomly-within-a-short-time-after-indexing/321560)
**Author:** [@bob22](https://discuss.elastic.co/u/bob22)\ **Replies:** 6\ **Last updated:** [December 20, 2022, 9:29am UTC](https://discuss.elastic.co/t/indexed-documents-disappearing-randomly-within-a-short-time-after-indexing/321560 "2022-12-20T09:29:51Z")
Hello, I'm having a weird issue with elasticsearch when indexed documents would disappear from the index within a short time after indexing. My application is indexing a couple of thousands documents (not a huge batch) … --- ## [Filebeat vs logstash](https://discuss.elastic.co/t/filebeat-vs-logstash/321613)
**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 9:12am UTC](https://discuss.elastic.co/t/filebeat-vs-logstash/321613 "2022-12-20T09:12:00Z")
Hi Need to send logs in this path /var/log/\* on a client to elastic server. which one more suitable for me? filebeat or logstash? there are lots of log exist in this path with different name, I want to able to filt… --- ## [Assigning failing SHARD's](https://discuss.elastic.co/t/assigning-failing-shards/321544)
**Author:** [@thulsidosskrishnan](https://discuss.elastic.co/u/thulsidosskrishnan)\ **Replies:** 0\ **Last updated:** [December 19, 2022, 10:26am UTC](https://discuss.elastic.co/t/assigning-failing-shards/321544 "2022-12-19T10:26:21Z")
Hello Community, Greetings. I have been trying to get few shards assigned so that the cluster comes back to green status. I have been trying to understand the impact of disable alloaction . Could you please validate … --- ## [Random network spike until cluster restarted. Is that a bug?](https://discuss.elastic.co/t/random-network-spike-until-cluster-restarted-is-that-a-bug/321540)
**Author:** [@elghazal-a](https://discuss.elastic.co/u/elghazal-a)\ **Replies:** 5\ **Last updated:** [December 20, 2022, 3:00am UTC](https://discuss.elastic.co/t/random-network-spike-until-cluster-restarted-is-that-a-bug/321540 "2022-12-20T03:00:42Z")
We're running an Elasticsearch cluster. The cluster behaves normally for few days but then the network transfer start to spike for all nodes, then this causes other issues like cpu spike and high GC, high latency, etc.. … --- ## [Parallel Queries on Elasticsearch](https://discuss.elastic.co/t/parallel-queries-on-elasticsearch/321541)
**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 2:53am UTC](https://discuss.elastic.co/t/parallel-queries-on-elasticsearch/321541 "2022-12-20T02:53:36Z")
Hello everyone, I am new to elasticsearch and still trying out a few things. I have an ELK deployment with a single node with multiple indexes and shards . Are the search queries run on the data sequential or are they … --- ## [Spring Data ElasticSearch with SSL](https://discuss.elastic.co/t/spring-data-elasticsearch-with-ssl/321499)
**Author:** [@Daniel\_Schneider](https://discuss.elastic.co/u/Daniel_Schneider)\ **Replies:** 4\ **Last updated:** [December 19, 2022, 10:59pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-with-ssl/321499 "2022-12-19T22:59:41Z")
Hi, I'm trying to understand how basic SSL works using Spring Data Elasticsearch. In order to use SSL for Secure HTTPS configuration you need to call usingSsl() method without any parameter during creation of RestHighL… --- ## [Search geo data by IP address](https://discuss.elastic.co/t/search-geo-data-by-ip-address/321559)
**Author:** [@lamka02sk](https://discuss.elastic.co/u/lamka02sk)\ **Replies:** 1\ **Last updated:** [December 19, 2022, 10:54pm UTC](https://discuss.elastic.co/t/search-geo-data-by-ip-address/321559 "2022-12-19T22:54:51Z")
Hi, I have an index that contains geo\_point field. Is there a way to search in this field (for example filter the distance) by an IP address? For example something like this: GET /my\_locations/\_search { "query": { … --- ## [ES 8.4.3: node disconnected after disk is full](https://discuss.elastic.co/t/es-8-4-3-node-disconnected-after-disk-is-full/321336)
**Author:** [@PengWang-SMARTM](https://discuss.elastic.co/u/PengWang-SMARTM)\ **Replies:** 5\ **Last updated:** [December 19, 2022, 10:41pm UTC](https://discuss.elastic.co/t/es-8-4-3-node-disconnected-after-disk-is-full/321336 "2022-12-19T22:41:18Z")
I followed the helm chart example, and created a 3-node elasticsearch 8.4.3 instance, and it was running OK until running out of the data volume space. The first issue I encountered was not able to open kibana. I XDELET… --- ## [Search and bulk transport tasks stuck running for days on ES 7.17.5](https://discuss.elastic.co/t/search-and-bulk-transport-tasks-stuck-running-for-days-on-es-7-17-5/321437)
**Author:** [@joannas\_q](https://discuss.elastic.co/u/joannas_q)\ **Replies:** 8\ **Last updated:** [December 19, 2022, 10:37pm UTC](https://discuss.elastic.co/t/search-and-bulk-transport-tasks-stuck-running-for-days-on-es-7-17-5/321437 "2022-12-19T22:37:27Z")
elasticsearch version: 7.17.5 lucene\_version: 8.11.1 Hi, we have two elasticsearch clusters that have had degraded search and ingestion performance over the past two+ weeks. We have search/scroll/count/bulk client reque… --- ## [Shrink- multiply index by painless script](https://discuss.elastic.co/t/shrink-multiply-index-by-painless-script/321590)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 1\ **Last updated:** [December 19, 2022, 7:54pm UTC](https://discuss.elastic.co/t/shrink-multiply-index-by-painless-script/321590 "2022-12-19T19:54:34Z")
Hi Do You have any ideas how to make a painless scripts for shrink- multiply index I have many of index where I need to merge a few a small shard into one? based on: --- ## [Missing option on terms aggregation causes 500: "Type: array\_index\_out\_of\_bounds\_exception Reason: "Index -1 out of bounds for length 1""](https://discuss.elastic.co/t/missing-option-on-terms-aggregation-causes-500-type-array-index-out-of-bounds-exception-reason-index-1-out-of-bounds-for-length-1/321585)
**Author:** [@takridge](https://discuss.elastic.co/u/takridge)\ **Replies:** 0\ **Last updated:** [December 19, 2022, 6:31pm UTC](https://discuss.elastic.co/t/missing-option-on-terms-aggregation-causes-500-type-array-index-out-of-bounds-exception-reason-index-1-out-of-bounds-for-length-1/321585 "2022-12-19T18:31:29Z")
While running a query on an alias pointing to a single index, the query is to pull a single document. In the aggregations, we have a single aggs, a terms aggregation. We supply a missing value. This query returns a 50… --- ## [ElasticSearch Starting Issue](https://discuss.elastic.co/t/elasticsearch-starting-issue/321415)
**Author:** [@jrpayne30506](https://discuss.elastic.co/u/jrpayne30506)\ **Replies:** 9\ **Last updated:** [December 19, 2022, 4:19pm UTC](https://discuss.elastic.co/t/elasticsearch-starting-issue/321415 "2022-12-19T16:19:38Z")
Hell All, First of all, apologies if I am in the wrong place to post this and for any question that may seem trivial as I am not a linux admin and am basically feeling in the dark. Using a guide I found online, I inst… --- ## [Expiring cerificates - Cluster still functional?](https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 3\ **Last updated:** [December 19, 2022, 1:03pm UTC](https://discuss.elastic.co/t/expiring-cerificates-cluster-still-functional/321528 "2022-12-19T13:03:51Z")
Dear community, in 7x certificates secure the elasticsearch node to node communication, then the communication node to kibana and the client to kibana communication. What happens if such a secured cluster its certifica… --- ## [How to identify and delete invalid child IDs](https://discuss.elastic.co/t/how-to-identify-and-delete-invalid-child-ids/321512)
**Author:** [@kgeographer](https://discuss.elastic.co/u/kgeographer)\ **Replies:** 4\ **Last updated:** [December 19, 2022, 12:36pm UTC](https://discuss.elastic.co/t/how-to-identify-and-delete-invalid-child-ids/321512 "2022-12-19T12:36:44Z")
I have an index making extensive use of Parent/Child relations, and over time some Child docs have been deleted without removing reference to them in their Parent. This doesn't impact searches but I do use a count of Chi… --- ## [Data Stream Issue](https://discuss.elastic.co/t/data-stream-issue/321240)
**Author:** [@Claudio\_Ract\_Costa](https://discuss.elastic.co/u/Claudio_Ract_Costa)\ **Replies:** 2\ **Last updated:** [December 19, 2022, 12:09pm UTC](https://discuss.elastic.co/t/data-stream-issue/321240 "2022-12-19T12:09:27Z")
Hi Guys, I have two Elasticsearh cluster with different versions (7.15.1 and 8.2.2) I have other server running a packetbeat (during tests, a installed different version of packetbeat) Why when i set in packetbeat con… --- ## [Increase in size of refresh queue size, increasing the write thread pool and queue on multiple data nodes](https://discuss.elastic.co/t/increase-in-size-of-refresh-queue-size-increasing-the-write-thread-pool-and-queue-on-multiple-data-nodes/320696)
**Author:** [@Divye](https://discuss.elastic.co/u/Divye)\ **Replies:** 5\ **Last updated:** [December 19, 2022, 10:57am UTC](https://discuss.elastic.co/t/increase-in-size-of-refresh-queue-size-increasing-the-write-thread-pool-and-queue-on-multiple-data-nodes/320696 "2022-12-19T10:57:44Z")
I am having multiple data nodes handling a large logging application elasticsearch running on 7.15.0 version. We are experiencing a massive increase in refresh thread pool and I am still unaware on why the same is happen… --- ## [Heap of nodes](https://discuss.elastic.co/t/heap-of-nodes/321539)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 0\ **Last updated:** [December 19, 2022, 10:00am UTC](https://discuss.elastic.co/t/heap-of-nodes/321539 "2022-12-19T10:00:55Z")
Hi Why from dev tool console I saw the diffrent value then I have from docker stats and deployed cluster GET /\_cat/nodes?v=true&h=name,node.role=c,heap\* name heap.current heap.percent heap.max es\_dat… --- ## [\_source sorting while retrieving the data from es](https://discuss.elastic.co/t/source-sorting-while-retrieving-the-data-from-es/321189)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 2\ **Last updated:** [December 19, 2022, 8:40am UTC](https://discuss.elastic.co/t/source-sorting-while-retrieving-the-data-from-es/321189 "2022-12-19T08:40:36Z")
hi if iam a query like this query = {"query":{"bool":{"must":\[{ "range":{ "timestamp":{ from\_time\_key:from\_time, to\_time\_key:to\_time … --- ## [Index Lifecycle Management Metricbeat](https://discuss.elastic.co/t/index-lifecycle-management-metricbeat/318757)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 20\ **Last updated:** [December 19, 2022, 8:03am UTC](https://discuss.elastic.co/t/index-lifecycle-management-metricbeat/318757 "2022-12-19T08:03:15Z")
Hi Team, I have metricbeat installed on my servers to send data to ES. I want to have daily indexes for each day. Along with this, I also want to delete the indexes after few days using ILM. I am attaching my metricbea… --- ## [Elasticsearch Java API client about source filtering function](https://discuss.elastic.co/t/elasticsearch-java-api-client-about-source-filtering-function/321173)
**Author:** [@cchuang4](https://discuss.elastic.co/u/cchuang4)\ **Replies:** 2\ **Last updated:** [December 19, 2022, 7:05am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-about-source-filtering-function/321173 "2022-12-19T07:05:10Z")
Hello, I would like to migrate from High Level rest Java to new java api client. I have old method using the source filtering feature in High level rest java, like sourceBuilder.fetchSource(includeFields, excludeFiel… --- ## [Should i use the same elasticsearch p12 keystore and truststore for every node in the cluster?](https://discuss.elastic.co/t/should-i-use-the-same-elasticsearch-p12-keystore-and-truststore-for-every-node-in-the-cluster/321514)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 3\ **Last updated:** [December 19, 2022, 6:05am UTC](https://discuss.elastic.co/t/should-i-use-the-same-elasticsearch-p12-keystore-and-truststore-for-every-node-in-the-cluster/321514 "2022-12-19T06:05:12Z")
Hello, i'm updating the ssl transport with an external CA (not generated by elastic). The documentation tells to use the same p12 keystore and truststore for ever node: Set up basic security for the Elastic Stack | Elas… --- ## [Index Lifecycle Management](https://discuss.elastic.co/t/index-lifecycle-management/321411)
**Author:** [@Pankhuri\_Gupta](https://discuss.elastic.co/u/Pankhuri_Gupta)\ **Replies:** 2\ **Last updated:** [December 19, 2022, 5:01am UTC](https://discuss.elastic.co/t/index-lifecycle-management/321411 "2022-12-19T05:01:32Z")
Hi Team, I am running a python script which is sending data to elasticsearch on daily basis and creates index datewise. I want to apply ILM policy of deletion for the indexes to be automatically deleted after 2days and … --- ## [Empty fields in Kibana if you ingest an index using python](https://discuss.elastic.co/t/empty-fields-in-kibana-if-you-ingest-an-index-using-python/321426)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 2\ **Last updated:** [December 19, 2022, 5:31am UTC](https://discuss.elastic.co/t/empty-fields-in-kibana-if-you-ingest-an-index-using-python/321426 "2022-12-19T05:31:39Z")
I am pushing a CSV file in Elasticsearch using python with a change in mappings. The error that I'm facing is that the mappings are getting updated by ingesting the CSV through python but while creating the data view man… --- ## [Monitoring shards number](https://discuss.elastic.co/t/monitoring-shards-number/320621)
**Author:** [@waitangi](https://discuss.elastic.co/u/waitangi)\ **Replies:** 6\ **Last updated:** [December 19, 2022, 5:18am UTC](https://discuss.elastic.co/t/monitoring-shards-number/320621 "2022-12-19T05:18:31Z")
Hello My customer would like to monitor shards number on Elasticsearch node. He would like to recive email alerting that the limit is about to exceed max value. How to arrange that? As far as i know shards number is in… --- ## [Could use some guidance on creating a proper setup with compose](https://discuss.elastic.co/t/could-use-some-guidance-on-creating-a-proper-setup-with-compose/321498)
**Author:** [@Matt\_Pruett](https://discuss.elastic.co/u/Matt_Pruett)\ **Replies:** 2\ **Last updated:** [December 18, 2022, 11:33pm UTC](https://discuss.elastic.co/t/could-use-some-guidance-on-creating-a-proper-setup-with-compose/321498 "2022-12-18T23:33:21Z")
I have been following the instructions at: Install Kibana with Docker | Kibana Guide \[8.5\] | Elastic I was able to get it all up and running according to these instructions without using compose. However upgrading then … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=325) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=327)