# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=330

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 331

---

## [Reindex API and child queries](https://discuss.elastic.co/t/reindex-api-and-child-queries/321025)

<div class="topic-metadata">

**Author:** [@MattG1](https://discuss.elastic.co/u/MattG1)\
**Replies:** 0\
**Last updated:** [December 12, 2022, 11:34am UTC](https://discuss.elastic.co/t/reindex-api-and-child-queries/321025 "2022-12-12T11:34:48Z")

</div>

Hey, We're investigating the best way to reindex our ES data after an index mapping update and came up with a way that could potentially work for us: new\_index is the index we'll be creating old\_index is the previous …

---

## [A rollover (ILM) on rollup indexes](https://discuss.elastic.co/t/a-rollover-ilm-on-rollup-indexes/316597)

<div class="topic-metadata">

**Author:** [@mguggi](https://discuss.elastic.co/u/mguggi)\
**Replies:** 7\
**Last updated:** [December 12, 2022, 11:23am UTC](https://discuss.elastic.co/t/a-rollover-ilm-on-rollup-indexes/316597 "2022-12-12T11:23:20Z")

</div>

Referring to the post I have some more questions: Since the issue #48003 is closed is there a plan until when this feature will be available? I would also like to know if a numeric rollover works for rollup indexes? If…

---

## ["Unable to Tessellate shape....Possible malformed shape detected." Error while indexing in ES 7.17.7](https://discuss.elastic.co/t/unable-to-tessellate-shape-possible-malformed-shape-detected-error-while-indexing-in-es-7-17-7/319922)

<div class="topic-metadata">

**Author:** [@amal\_antony](https://discuss.elastic.co/u/amal_antony)\
**Replies:** 23\
**Last updated:** [December 12, 2022, 11:15am UTC](https://discuss.elastic.co/t/unable-to-tessellate-shape-possible-malformed-shape-detected-error-while-indexing-in-es-7-17-7/319922 "2022-12-12T11:15:50Z")

</div>

Greetings to the community! We have a logstash pipeline writing a geojson file to Elasticsearch. The file never gets fully indexed and some geo\_shape records get dropped by Elasticsearch. Identified the records that cau…

---

## [What is the different between Elasticsearch Platinum license](https://discuss.elastic.co/t/what-is-the-different-between-elasticsearch-platinum-license/321017)

<div class="topic-metadata">

**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\
**Replies:** 1\
**Last updated:** [December 12, 2022, 10:39am UTC](https://discuss.elastic.co/t/what-is-the-different-between-elasticsearch-platinum-license/321017 "2022-12-12T10:39:57Z")

</div>

Hi, We have Elasticsearch Platinum license and it has two types of licenses such as Production and Non-production, so what is the difference between these two, and what are the limitations between them?

---

## [Support for quote\_analyzer in simple\_query\_string query](https://discuss.elastic.co/t/support-for-quote-analyzer-in-simple-query-string-query/321016)

<div class="topic-metadata">

**Author:** [@mkr-os](https://discuss.elastic.co/u/mkr-os)\
**Replies:** 0\
**Last updated:** [December 12, 2022, 10:11am UTC](https://discuss.elastic.co/t/support-for-quote-analyzer-in-simple-query-string-query/321016 "2022-12-12T10:11:00Z")

</div>

I want to support queries mixing exact (phrase) and more lenient matching without parsing the user query myself. The simple\_query\_string query with its quote\_field\_suffix parameter seemed like a good candidate for this. …

---

## [Index and Alias name exact name](https://discuss.elastic.co/t/index-and-alias-name-exact-name/320989)

<div class="topic-metadata">

**Author:** [@QuestBevan](https://discuss.elastic.co/u/QuestBevan)\
**Replies:** 5\
**Last updated:** [December 12, 2022, 9:29am UTC](https://discuss.elastic.co/t/index-and-alias-name-exact-name/320989 "2022-12-12T09:29:11Z")

</div>

Hi, An index and alias with the exact same name was accidently created and now our Elasticsearch node won't connect to our cluster. Luckily only 1 node was restarted before we read a support article saying DO NOT restar…

---

## [Any examples to use Elastic Search as Graph Database?](https://discuss.elastic.co/t/any-examples-to-use-elastic-search-as-graph-database/320997)

<div class="topic-metadata">

**Author:** [@Shraddha29](https://discuss.elastic.co/u/Shraddha29)\
**Replies:** 2\
**Last updated:** [December 12, 2022, 8:20am UTC](https://discuss.elastic.co/t/any-examples-to-use-elastic-search-as-graph-database/320997 "2022-12-12T08:20:25Z")

</div>

Any examples to use Elastic Search as Graph Database?

---

## [Elasticsearch audit log take more size](https://discuss.elastic.co/t/elasticsearch-audit-log-take-more-size/319627)

<div class="topic-metadata">

**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\
**Replies:** 12\
**Last updated:** [December 12, 2022, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-audit-log-take-more-size/319627 "2022-12-12T08:07:01Z")

</div>

Hi Team, Elasticsearch audit log take 20-25 GB size every day. I'm using elasticsearch 7.16.2 and same version for filebeat. I have enable the audit key by enabling the below keys in elasticsearch.yml file. xpack.secur…

---

## [How can create script field by using SQL or DSL instead of painless?](https://discuss.elastic.co/t/how-can-create-script-field-by-using-sql-or-dsl-instead-of-painless/320863)

<div class="topic-metadata">

**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\
**Replies:** 4\
**Last updated:** [December 12, 2022, 5:30am UTC](https://discuss.elastic.co/t/how-can-create-script-field-by-using-sql-or-dsl-instead-of-painless/320863 "2022-12-12T05:30:10Z")

</div>

hi everyone, as i know Es support create script field, running\_time filed while query by using painless. But can I create an script field like that by using SQL ? Example: select case when col1 = 1 then 2 else 0 end as …

---

## [Connect to remote cluster](https://discuss.elastic.co/t/connect-to-remote-cluster/320952)

<div class="topic-metadata">

**Author:** [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\
**Replies:** 2\
**Last updated:** [December 12, 2022, 5:23am UTC](https://discuss.elastic.co/t/connect-to-remote-cluster/320952 "2022-12-12T05:23:26Z")

</div>

hi guys i want to connect two clusters elasticsearch for cross search this is my query : PUT /\_cluster/settings { "persistent" : { "cluster" : { "remote" : { "c2" : { "seeds" : \[ "\*\*\*\*\*\*\*\*\*\*\*\*\*.westeurope.azure…

---

## [Store size in esrally summary report doesn't match real index size](https://discuss.elastic.co/t/store-size-in-esrally-summary-report-doesnt-match-real-index-size/320908)

<div class="topic-metadata">

**Author:** [@tmdgk490255](https://discuss.elastic.co/u/tmdgk490255)\
**Replies:** 1\
**Last updated:** [December 12, 2022, 2:43am UTC](https://discuss.elastic.co/t/store-size-in-esrally-summary-report-doesnt-match-real-index-size/320908 "2022-12-12T02:43:22Z")

</div>

I'm using custom track and benchmarking on existing cluster(single node) This is my summary report for custom track \_\_\_\_ \_\_\_\_ / \_\_ \\\_\_\_\_ \_/ / /\_ \_\_ / /\_/ / \_\_ \`/ / / / / / / \_, \_/ /\_/ / / / /\_/ / /\_/ …

---

## [Service fails to start, I don't know why](https://discuss.elastic.co/t/service-fails-to-start-i-dont-know-why/320837)

<div class="topic-metadata">

**Author:** [@ant2ne](https://discuss.elastic.co/u/ant2ne)\
**Replies:** 3\
**Last updated:** [December 11, 2022, 11:48pm UTC](https://discuss.elastic.co/t/service-fails-to-start-i-dont-know-why/320837 "2022-12-11T23:48:01Z")

</div>

When security is disabled, they are talking via tcp (10. is the remote host sending rsyslog to elk and the 3. is the elk server)..... 21:50:01.334042 tun0 Out IP 10.226.28.173.53286 \> 3.133.215.55.5044: Flags \[S\], seq …

---

## [Get aggregation labels from another index](https://discuss.elastic.co/t/get-aggregation-labels-from-another-index/320939)

<div class="topic-metadata">

**Author:** [@masoud\_darvishi](https://discuss.elastic.co/u/masoud_darvishi)\
**Replies:** 1\
**Last updated:** [December 11, 2022, 9:51pm UTC](https://discuss.elastic.co/t/get-aggregation-labels-from-another-index/320939 "2022-12-11T21:51:44Z")

</div>

hi i have two indexes with below fields roles { id: 1, name: "admin", }, { id: 2, name: "user" }, users { id: 1, name: "a", roles\_id: \[1,2\], }, { id: 2, name: "b", roles\_id: …

---

## [Elastic Deployment on minukube cluster Failing](https://discuss.elastic.co/t/elastic-deployment-on-minukube-cluster-failing/320928)

<div class="topic-metadata">

**Author:** [@akansha.agarwal1](https://discuss.elastic.co/u/akansha.agarwal1)\
**Replies:** 1\
**Last updated:** [December 11, 2022, 8:50pm UTC](https://discuss.elastic.co/t/elastic-deployment-on-minukube-cluster-failing/320928 "2022-12-11T20:50:55Z")

</div>

Hi, I am trying to deploy Elastic 8.5.2 on minukube cluster using: Helm, Statefulset & simple Elasticsearch cluster specification. But all deployments are failing with error: CrashLoopBackOff Although, deployment for…

---

## [CircuitBreakingException: \[parent\] Data too large](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/320152)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 6\
**Last updated:** [December 11, 2022, 8:39pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large/320152 "2022-12-11T20:39:52Z")

</div>

Hi All, Today morning, I got an error while checking kibana discover stating that its unable to fetch the result. Then I checked Stack Monitoring and found the below error -- On further investigation, I found that ou…

---

## [Incorrect HTTP method for uri](https://discuss.elastic.co/t/incorrect-http-method-for-uri/320931)

<div class="topic-metadata">

**Author:** [@someusername](https://discuss.elastic.co/u/someusername)\
**Replies:** 5\
**Last updated:** [December 11, 2022, 4:07pm UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri/320931 "2022-12-11T16:07:53Z")

</div>

Hello, I want to connect using the python client but I can't figure out what's wrong. from elasticsearch import Elasticsearch endpoint = 'https://foo.gcp.cloud.es.io:443/search-addresses/\_doc?pipeline=ent-search-gener…

---

## [How to avoid loading all articles from the text](https://discuss.elastic.co/t/how-to-avoid-loading-all-articles-from-the-text/320903)

<div class="topic-metadata">

**Author:** [@ryendluri](https://discuss.elastic.co/u/ryendluri)\
**Replies:** 2\
**Last updated:** [December 11, 2022, 4:19pm UTC](https://discuss.elastic.co/t/how-to-avoid-loading-all-articles-from-the-text/320903 "2022-12-11T16:19:51Z")

</div>

how to avoid loading all English language articles such as "And", "Or", "The", "A", "I", "it", "For", etc. so I do not get unnecessary rows during search / retrieval? thanks

---

## [Elasticsearch 7.10.2](https://discuss.elastic.co/t/elasticsearch-7-10-2/320960)

<div class="topic-metadata">

**Author:** [@faen](https://discuss.elastic.co/u/faen)\
**Replies:** 4\
**Last updated:** [December 11, 2022, 2:00pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-2/320960 "2022-12-11T14:00:49Z")

</div>

I am trying to install Elasticsearch 7.10.2 though the Elastic repository. I'm getting an error: "The repository ‘https://artifacts.elastic.co/packages/oss-7.10.2/apt stable Release’ does not have a Release file.” Has…

---

## [Understanding what value will be used for sorting by nested field if field has a several nested values](https://discuss.elastic.co/t/understanding-what-value-will-be-used-for-sorting-by-nested-field-if-field-has-a-several-nested-values/320956)

<div class="topic-metadata">

**Author:** [@Yuri\_Khmelevsky](https://discuss.elastic.co/u/Yuri_Khmelevsky)\
**Replies:** 0\
**Last updated:** [December 10, 2022, 10:51pm UTC](https://discuss.elastic.co/t/understanding-what-value-will-be-used-for-sorting-by-nested-field-if-field-has-a-several-nested-values/320956 "2022-12-10T22:51:17Z")

</div>

I have the following mapping { "mappings": { "properties": { "rank-by-views": { "type": "nested", "properties": { "id": {"type": "keyword"}, "value": {"type": "keyword"} …

---

## [High load issues on node (related to shard allocation)](https://discuss.elastic.co/t/high-load-issues-on-node-related-to-shard-allocation/320922)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [December 10, 2022, 10:01pm UTC](https://discuss.elastic.co/t/high-load-issues-on-node-related-to-shard-allocation/320922 "2022-12-10T22:01:30Z")

</div>

I have a "warm" node with spinning disks which is experiencing high loads due to io waits. The problem is that some very active hot ingestion shards are being allocated to this node. Is there anyway I can stop ES from …

---

## [Why don't I see version java client 8.5.3 in the maven repository?](https://discuss.elastic.co/t/why-dont-i-see-version-java-client-8-5-3-in-the-maven-repository/320947)

<div class="topic-metadata">

**Author:** [@nocode2k](https://discuss.elastic.co/u/nocode2k)\
**Replies:** 1\
**Last updated:** [December 10, 2022, 5:27pm UTC](https://discuss.elastic.co/t/why-dont-i-see-version-java-client-8-5-3-in-the-maven-repository/320947 "2022-12-10T17:27:18Z")

</div>

has been distributed. The version was updated on December 7th. Why doesn't the java client 8.5.3 version appear in the maven repository?

---

## [Two pipelines for single filebeat input | ELK version (6.5.4)](https://discuss.elastic.co/t/two-pipelines-for-single-filebeat-input-elk-version-6-5-4/320950)

<div class="topic-metadata">

**Author:** [@gyrao\_72](https://discuss.elastic.co/u/gyrao_72)\
**Replies:** 1\
**Last updated:** [December 10, 2022, 3:29pm UTC](https://discuss.elastic.co/t/two-pipelines-for-single-filebeat-input-elk-version-6-5-4/320950 "2022-12-10T15:29:17Z")

</div>

I am trying to create multiple pipelines first-pipeline and second-pipeline in logstash listening to beats events from the same port but getting an error saying the address in use for the second pipeline and the reason w…

---

## [ElasticSearch 8.5 and Java Client Error ""com.fasterxml.jackson.core.JsonParseException: Unrecognized token 'Client'](https://discuss.elastic.co/t/elasticsearch-8-5-and-java-client-error-com-fasterxml-jackson-core-jsonparseexception-unrecognized-token-client/319700)

<div class="topic-metadata">

**Author:** [@AlwaysBatMan](https://discuss.elastic.co/u/AlwaysBatMan)\
**Replies:** 3\
**Last updated:** [December 10, 2022, 10:34am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-and-java-client-error-com-fasterxml-jackson-core-jsonparseexception-unrecognized-token-client/319700 "2022-12-10T10:34:05Z")

</div>

I am trying to use Elasticsearch 8.5 and its associated RestClient.I am having some difficulties using it and I am not able to make sense of this as to why this error message will be thrown.Looking for some guidance on h…

---

## [Different same-field highlighting with alias fields and highlight queries broken](https://discuss.elastic.co/t/different-same-field-highlighting-with-alias-fields-and-highlight-queries-broken/320940)

<div class="topic-metadata">

**Author:** [@Erik\_Fassler](https://discuss.elastic.co/u/Erik_Fassler)\
**Replies:** 1\
**Last updated:** [December 10, 2022, 9:35am UTC](https://discuss.elastic.co/t/different-same-field-highlighting-with-alias-fields-and-highlight-queries-broken/320940 "2022-12-10T09:35:18Z")

</div>

I am using alias fields to do different highlighting on basically the same field. I use highlight\_queries to highlight different parts of the same field. This worked fine in ES up to 7.9.1 but changed its behaviour in ne…

---

## [Problem with range search with datetime field](https://discuss.elastic.co/t/problem-with-range-search-with-datetime-field/320878)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 4\
**Last updated:** [December 10, 2022, 9:33am UTC](https://discuss.elastic.co/t/problem-with-range-search-with-datetime-field/320878 "2022-12-10T09:33:36Z")

</div>

I have a strange problem when I make queries in date range Mapping index . . . "datetime": { "type": "date", "format": "epoch\_second||yyyy-MM-dd HH:mm:ss", "ignore\_malformed": true …

---

## [Degrading search performance and old recods](https://discuss.elastic.co/t/degrading-search-performance-and-old-recods/320892)

<div class="topic-metadata">

**Author:** [@rvallel](https://discuss.elastic.co/u/rvallel)\
**Replies:** 3\
**Last updated:** [December 10, 2022, 9:02am UTC](https://discuss.elastic.co/t/degrading-search-performance-and-old-recods/320892 "2022-12-10T09:02:41Z")

</div>

Hi! My searches become slower and slower as the number of indexed documents grow. However, we only query the documents that happen to be produced in the last 3 months. I wonder if it is possible to have an alias or an…

---

## [Logstash Aggregate filter inside Elasticsearch](https://discuss.elastic.co/t/logstash-aggregate-filter-inside-elasticsearch/320934)

<div class="topic-metadata">

**Author:** [@watercannons](https://discuss.elastic.co/u/watercannons)\
**Replies:** 0\
**Last updated:** [December 9, 2022, 9:53pm UTC](https://discuss.elastic.co/t/logstash-aggregate-filter-inside-elasticsearch/320934 "2022-12-09T21:53:11Z")

</div>

Hi, first time on this forum, sorry if this is a duplicate. I'm running into some weird hardware-specific issues running LogStash that's causing the aggregate plugin to not apply on certain events. However, all of the da…

---

## [ES Field Capabilities API does not return non-indexed/disabled fields when include\_unmapped=true](https://discuss.elastic.co/t/es-field-capabilities-api-does-not-return-non-indexed-disabled-fields-when-include-unmapped-true/320810)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 3\
**Last updated:** [December 9, 2022, 8:07pm UTC](https://discuss.elastic.co/t/es-field-capabilities-api-does-not-return-non-indexed-disabled-fields-when-include-unmapped-true/320810 "2022-12-09T20:07:21Z")

</div>

Hi, I'm trying to list all fields in a certain index, indexed and non-indexed fields. I'm using the ES Field capabilities API: GET \<index-name\>/\_field\_caps?fields=\*&include\_unmapped=true. However, the API is not returni…

---

## [Elastic Deployment on minukube cluster Failing](https://discuss.elastic.co/t/elastic-deployment-on-minukube-cluster-failing/320924)

<div class="topic-metadata">

**Author:** [@akansha.agarwal1](https://discuss.elastic.co/u/akansha.agarwal1)\
**Replies:** 0\
**Last updated:** [December 9, 2022, 7:42pm UTC](https://discuss.elastic.co/t/elastic-deployment-on-minukube-cluster-failing/320924 "2022-12-09T19:42:04Z")

</div>

Hi, I am trying to deploy Elastic 8.5.2 on minukube cluster using: Helm, Statefulset & simple Elasticsearch cluster specification. But all deployments are failing with error: CrashLoopBackOff Although, deployment for…

---

## [authorizeIndexAction never gets called for custom AuthorizationEngine plugin](https://discuss.elastic.co/t/authorizeindexaction-never-gets-called-for-custom-authorizationengine-plugin/320921)

<div class="topic-metadata">

**Author:** [@adamsandor](https://discuss.elastic.co/u/adamsandor)\
**Replies:** 0\
**Last updated:** [December 9, 2022, 7:23pm UTC](https://discuss.elastic.co/t/authorizeindexaction-never-gets-called-for-custom-authorizationengine-plugin/320921 "2022-12-09T19:23:16Z")

</div>

I'm building a plugin that would execute some custom authorization logic, namely integrating the OpenPolicyAgent into the authorization flow of ES. I have implemented the org.elasticsearch.xpack.core.security.authz.Autho…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=329)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=331)
