# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=337

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 338

---

## [Date parsing issue After upgrading Elasticsearch JDK](https://discuss.elastic.co/t/date-parsing-issue-after-upgrading-elasticsearch-jdk/320002)

<div class="topic-metadata">

**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\
**Replies:** 0\
**Last updated:** [November 29, 2022, 7:15am UTC](https://discuss.elastic.co/t/date-parsing-issue-after-upgrading-elasticsearch-jdk/320002 "2022-11-29T07:15:43Z")

</div>

After upgrading the Elastic JDK version in the spring boot application, stopped parsing the date type field to Java Date Objects. The date field has a default format: strict\_date\_optional\_time||epoch\_millis Java Code: …

---

## [Elasticsearch 8.5.1 does not start - “java.security.AccessControlException: access denied”](https://discuss.elastic.co/t/elasticsearch-8-5-1-does-not-start-java-security-accesscontrolexception-access-denied/319969)

<div class="topic-metadata">

**Author:** [@hrQAQ](https://discuss.elastic.co/u/hrQAQ)\
**Replies:** 3\
**Last updated:** [November 29, 2022, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-1-does-not-start-java-security-accesscontrolexception-access-denied/319969 "2022-11-29T07:43:18Z")

</div>

Hi, I meet problem while starting elasticsearch. When I start elasticsearch it generates a java.security.AccessControlException: access denied The error log and my elasticsearch.yml are list as follow. Environment OS:…

---

## [Reported CPU usage from Elasticsearch node gets stuck/frozen](https://discuss.elastic.co/t/reported-cpu-usage-from-elasticsearch-node-gets-stuck-frozen/319815)

<div class="topic-metadata">

**Author:** [@noxknock](https://discuss.elastic.co/u/noxknock)\
**Replies:** 5\
**Last updated:** [November 29, 2022, 7:37am UTC](https://discuss.elastic.co/t/reported-cpu-usage-from-elasticsearch-node-gets-stuck-frozen/319815 "2022-11-29T07:37:00Z")

</div>

I have a randomly occuring issue where after being up for some time, nodes stop reporting CPU usage correctly. It seems it starts repeating the same value as right before it stopped working. Visible in the Elastic Monit…

---

## [Rolling restart, replica allocation, cluster.routing.allocation.enable vs. index.unassigned.node\_left.delayed\_timeout](https://discuss.elastic.co/t/rolling-restart-replica-allocation-cluster-routing-allocation-enable-vs-index-unassigned-node-left-delayed-timeout/319636)

<div class="topic-metadata">

**Author:** [@lantoniak](https://discuss.elastic.co/u/lantoniak)\
**Replies:** 1\
**Last updated:** [November 29, 2022, 6:41am UTC](https://discuss.elastic.co/t/rolling-restart-replica-allocation-cluster-routing-allocation-enable-vs-index-unassigned-node-left-delayed-timeout/319636 "2022-11-29T06:41:27Z")

</div>

Assume Elastic cluster with 12 data nodes. Index template has 3 replicas (1 primary + 3 replicas copies), and index.write.wait\_for\_active\_shards setting configured to 2. "settings": { "number\_of\_shards": 5, "number\_…

---

## [Regarding index.codec](https://discuss.elastic.co/t/regarding-index-codec/319975)

<div class="topic-metadata">

**Author:** [@prat1](https://discuss.elastic.co/u/prat1)\
**Replies:** 3\
**Last updated:** [November 29, 2022, 6:09am UTC](https://discuss.elastic.co/t/regarding-index-codec/319975 "2022-11-29T06:09:31Z")

</div>

Hi Team, Regarding compression in documentation it is mentioned as below, Use best\_compression The \_source and stored fields can easily take a non negligible amount of disk space. They can be compressed more aggressi…

---

## [Bulk Update operation on multi field type and search](https://discuss.elastic.co/t/bulk-update-operation-on-multi-field-type-and-search/319143)

<div class="topic-metadata">

**Author:** [@Sagar\_Viradiya](https://discuss.elastic.co/u/Sagar_Viradiya)\
**Replies:** 17\
**Last updated:** [November 29, 2022, 5:51am UTC](https://discuss.elastic.co/t/bulk-update-operation-on-multi-field-type-and-search/319143 "2022-11-29T05:51:51Z")

</div>

Previously we had mapping in index\_1 Index. { "properties": { "offer\_id":{ "type":long, "fields": { "keyword": { "type": "text" } …

---

## [Master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/319911)

<div class="topic-metadata">

**Author:** [@mumahmoud](https://discuss.elastic.co/u/mumahmoud)\
**Replies:** 1\
**Last updated:** [November 29, 2022, 2:30am UTC](https://discuss.elastic.co/t/master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-v7-cluster/319911 "2022-11-29T02:30:26Z")

</div>

Hi, I am getting the following error after installing RPA (automation anywhere A360 and configuring it). i have 2 nodes under WAF cluster f5 Error: \[2022-11-28T10:53:41,329\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelpe…

---

## [E: The repository 'https://artifacts.elastic.co/packages/7.x/apt stable Release' does not have a Release file](https://discuss.elastic.co/t/e-the-repository-https-artifacts-elastic-co-packages-7-x-apt-stable-release-does-not-have-a-release-file/319947)

<div class="topic-metadata">

**Author:** [@Rohith2](https://discuss.elastic.co/u/Rohith2)\
**Replies:** 1\
**Last updated:** [November 29, 2022, 2:22am UTC](https://discuss.elastic.co/t/e-the-repository-https-artifacts-elastic-co-packages-7-x-apt-stable-release-does-not-have-a-release-file/319947 "2022-11-29T02:22:07Z")

</div>

Hi, When I am giving the "sudo apt update" command I am getting this error: Err:2 https://artifacts.elastic.co/packages/7.x/apt stable Release Certificate verification failed: The certificate is NOT trusted. The certi…

---

## [My advanced watcher is failing](https://discuss.elastic.co/t/my-advanced-watcher-is-failing/319792)

<div class="topic-metadata">

**Author:** [@shivani1](https://discuss.elastic.co/u/shivani1)\
**Replies:** 0\
**Last updated:** [November 25, 2022, 6:59am UTC](https://discuss.elastic.co/t/my-advanced-watcher-is-failing/319792 "2022-11-25T06:59:54Z")

</div>

the state of my advanced watcher is showing error and execution is failed showing in the comment .But when simulating it i can see the state is ok for action and logging both.

---

## [Elastic Search - Partial Update to around 30 million records in Elastic search index](https://discuss.elastic.co/t/elastic-search-partial-update-to-around-30-million-records-in-elastic-search-index/319167)

<div class="topic-metadata">

**Author:** [@harish0309](https://discuss.elastic.co/u/harish0309)\
**Replies:** 3\
**Last updated:** [November 29, 2022, 1:05am UTC](https://discuss.elastic.co/t/elastic-search-partial-update-to-around-30-million-records-in-elastic-search-index/319167 "2022-11-29T01:05:22Z")

</div>

Hi, I need to update some of the attributes of the document daily for around 30m records. Can you please suggest a suitable way to do it.

---

## [Reserved underscore field names](https://discuss.elastic.co/t/reserved-underscore-field-names/319212)

<div class="topic-metadata">

**Author:** [@6NMgfDwZ3](https://discuss.elastic.co/u/6NMgfDwZ3)\
**Replies:** 3\
**Last updated:** [November 29, 2022, 12:59am UTC](https://discuss.elastic.co/t/reserved-underscore-field-names/319212 "2022-11-29T00:59:10Z")

</div>

Hello, ELK stack version: v7.x ... latest (Elasticsearch + Kibana + Filebeat) there are fields in the documents like \_id, \_index, \_score, \_type . I would like to add custom fields with names starting with an undersco…

---

## [Result window is too large](https://discuss.elastic.co/t/result-window-is-too-large/319979)

<div class="topic-metadata">

**Author:** [@rayyanalbaz1](https://discuss.elastic.co/u/rayyanalbaz1)\
**Replies:** 1\
**Last updated:** [November 28, 2022, 11:01pm UTC](https://discuss.elastic.co/t/result-window-is-too-large/319979 "2022-11-28T23:01:51Z")

</div>

Hello, I am facing an issue when using from and size to query the last page for example: my index contains 122000 documents if I specify size = 100 and from = 121000 I get the following error: {"type":"illegal\_argume…

---

## [Minimum\_should\_match ignore specific should property](https://discuss.elastic.co/t/minimum-should-match-ignore-specific-should-property/319982)

<div class="topic-metadata">

**Author:** [@hgr](https://discuss.elastic.co/u/hgr)\
**Replies:** 0\
**Last updated:** [November 28, 2022, 9:33pm UTC](https://discuss.elastic.co/t/minimum-should-match-ignore-specific-should-property/319982 "2022-11-28T21:33:50Z")

</div>

Hi there, I have a query with 3 should filters, with different boost values, like this "should": \[ { "constant\_score": { "filter": { "term": { …

---

## [Result window is too large when using from and size](https://discuss.elastic.co/t/result-window-is-too-large-when-using-from-and-size/319978)

<div class="topic-metadata">

**Author:** [@rayyanalbaz1](https://discuss.elastic.co/u/rayyanalbaz1)\
**Replies:** 0\
**Last updated:** [November 28, 2022, 9:16pm UTC](https://discuss.elastic.co/t/result-window-is-too-large-when-using-from-and-size/319978 "2022-11-28T21:16:48Z")

</div>

(topic deleted by author)

---

## [TSL: Unable to connect to remote cluster, certificate missing "common-names"](https://discuss.elastic.co/t/tsl-unable-to-connect-to-remote-cluster-certificate-missing-common-names/319855)

<div class="topic-metadata">

**Author:** [@hkhalil](https://discuss.elastic.co/u/hkhalil)\
**Replies:** 5\
**Last updated:** [November 28, 2022, 5:51pm UTC](https://discuss.elastic.co/t/tsl-unable-to-connect-to-remote-cluster-certificate-missing-common-names/319855 "2022-11-28T17:51:28Z")

</div>

Hi, We would like to use markdown to display images on our Kibana dashboards which are hosted in the cloud (i.e.: "Elastic Cloud"). Those images are confidential. As such, we cannot host them on a server accessible fro…

---

## [Ingest pipeline](https://discuss.elastic.co/t/ingest-pipeline/319931)

<div class="topic-metadata">

**Author:** [@ramiwashere](https://discuss.elastic.co/u/ramiwashere)\
**Replies:** 2\
**Last updated:** [November 28, 2022, 1:19pm UTC](https://discuss.elastic.co/t/ingest-pipeline/319931 "2022-11-28T13:19:23Z")

</div>

Hi there, Im new to ELK, and trying to extract some custom log no covered by filebeat module into kibana. So I tried to create a ingest node pipeline between filebeat and ES. So on filebeat.yml: 1) Add the pipeline nam…

---

## [Unable Return Multiple Variables from a transform in Elasticsearch Watcher script](https://discuss.elastic.co/t/unable-return-multiple-variables-from-a-transform-in-elasticsearch-watcher-script/319816)

<div class="topic-metadata">

**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\
**Replies:** 2\
**Last updated:** [November 28, 2022, 1:18pm UTC](https://discuss.elastic.co/t/unable-return-multiple-variables-from-a-transform-in-elasticsearch-watcher-script/319816 "2022-11-28T13:18:34Z")

</div>

Hi team, I have written a watch script where I need to pass the total hits value from an es search query and also a variable that I have created using transform. I have referred the following link for this -- Watcher: M…

---

## [Greater throughput in Standalone nodes compared to Multiple instances in same Hardware](https://discuss.elastic.co/t/greater-throughput-in-standalone-nodes-compared-to-multiple-instances-in-same-hardware/319918)

<div class="topic-metadata">

**Author:** [@Ritik\_Singhal](https://discuss.elastic.co/u/Ritik_Singhal)\
**Replies:** 7\
**Last updated:** [November 28, 2022, 12:52pm UTC](https://discuss.elastic.co/t/greater-throughput-in-standalone-nodes-compared-to-multiple-instances-in-same-hardware/319918 "2022-11-28T12:52:07Z")

</div>

We found below mentioned stats using esrally on comparing multiple instances on same node with standalone instances .Everything was same including configs and cluster size . | …

---

## [Elasticsearch Upgrade from 7.17.1 to 8.4.3](https://discuss.elastic.co/t/elasticsearch-upgrade-from-7-17-1-to-8-4-3/319872)

<div class="topic-metadata">

**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\
**Replies:** 1\
**Last updated:** [November 28, 2022, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-7-17-1-to-8-4-3/319872 "2022-11-28T11:37:07Z")

</div>

Hello, I am upgrading the Elasticsearch instance from 7.5.1 to 8.4.3 but it's not working. I have created an Elasticsearch instance in Ubuntu 18.04 with version 7.5.1 and created a sample index and populated the data. …

---

## [Any esrally track which can index and query at the same time](https://discuss.elastic.co/t/any-esrally-track-which-can-index-and-query-at-the-same-time/319772)

<div class="topic-metadata">

**Author:** [@2019240081](https://discuss.elastic.co/u/2019240081)\
**Replies:** 1\
**Last updated:** [November 28, 2022, 11:19am UTC](https://discuss.elastic.co/t/any-esrally-track-which-can-index-and-query-at-the-same-time/319772 "2022-11-28T11:19:19Z")

</div>

I watched two videos here (Quantitative Cluster Sizing | Elastic / Using Rally to Get Your Elasticsearch Cluster Size Right | Elastic Videos) and both of them emphasize the importance of testing indexing and querying a…

---

## [Getting error on starting elasticsearch ingest.geoip.downloader.enabled: false](https://discuss.elastic.co/t/getting-error-on-starting-elasticsearch-ingest-geoip-downloader-enabled-false/319388)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 24\
**Last updated:** [November 28, 2022, 9:26am UTC](https://discuss.elastic.co/t/getting-error-on-starting-elasticsearch-ingest-geoip-downloader-enabled-false/319388 "2022-11-28T09:26:05Z")

</div>

Hi, I have installed elk stack 8.5.1. with authentication without https on elasticsearch xpack.security.http.ssl: enabled: false keystore.path: certs/http.p12 When i start elasticsearch and kibana it shows active, …

---

## [Elasticsearch service fails](https://discuss.elastic.co/t/elasticsearch-service-fails/319650)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 5\
**Last updated:** [November 28, 2022, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-service-fails/319650 "2022-11-28T09:20:32Z")

</div>

Hi i have elk 8.5.1 installed on a machine with 8 gb ram and 50 gb hardisk. i've set jvm options to 2g for elasticsearch and 2g for logstash. I've elk stack +filebeat installed here. and i am getting logs from jenkins, n…

---

## [Can we use basic Elasticsearch for commercial use](https://discuss.elastic.co/t/can-we-use-basic-elasticsearch-for-commercial-use/319710)

<div class="topic-metadata">

**Author:** [@lhy507613824](https://discuss.elastic.co/u/lhy507613824)\
**Replies:** 7\
**Last updated:** [November 28, 2022, 9:10am UTC](https://discuss.elastic.co/t/can-we-use-basic-elasticsearch-for-commercial-use/319710 "2022-11-28T09:10:40Z")

</div>

Can we use basic Elasticsearch8.5 for commercial use

---

## [Index corrupt exception](https://discuss.elastic.co/t/index-corrupt-exception/319883)

<div class="topic-metadata">

**Author:** [@JAYALAKSHMI](https://discuss.elastic.co/u/JAYALAKSHMI)\
**Replies:** 4\
**Last updated:** [November 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/index-corrupt-exception/319883 "2022-11-28T07:52:09Z")

</div>

Hi, We are seeing the Filesystem corruption issue. Due to this two shards are not accessible on the cluster. There is no issue from the hardware end and all other shards are accessible and available. Error: "store\_exc…

---

## [Unable to start ElasticSearch in Windows 11](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows-11/319740)

<div class="topic-metadata">

**Author:** [@yuvrajbset](https://discuss.elastic.co/u/yuvrajbset)\
**Replies:** 2\
**Last updated:** [November 28, 2022, 4:46am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-in-windows-11/319740 "2022-11-28T04:46:27Z")

</div>

Hello ES Team, I am unable to run the Elasticsearch in my web browser after installation. The browser returns a message "ERR\_EMPTY\_RESPONSE" after access the 9200 port after running the elasticsearch I receive this mess…

---

## [How to parse glastopf honeypot json logs in logstash?](https://discuss.elastic.co/t/how-to-parse-glastopf-honeypot-json-logs-in-logstash/319900)

<div class="topic-metadata">

**Author:** [@mr\_ka](https://discuss.elastic.co/u/mr_ka)\
**Replies:** 0\
**Last updated:** [November 28, 2022, 3:01am UTC](https://discuss.elastic.co/t/how-to-parse-glastopf-honeypot-json-logs-in-logstash/319900 "2022-11-28T03:01:15Z")

</div>

I have a raw data in json format that I want to visualize in Kibana, but I'm having trouble parsing the data in logstash, previously I was able to visualize raw data for honeypot dionaea and cowrie. please help me in doi…

---

## [Does NLP in ElasticSearch8.5.1 support GPU?](https://discuss.elastic.co/t/does-nlp-in-elasticsearch8-5-1-support-gpu/319898)

<div class="topic-metadata">

**Author:** [@xy\_xia](https://discuss.elastic.co/u/xy_xia)\
**Replies:** 1\
**Last updated:** [November 28, 2022, 4:00am UTC](https://discuss.elastic.co/t/does-nlp-in-elasticsearch8-5-1-support-gpu/319898 "2022-11-28T04:00:41Z")

</div>

Hi, Is it possible to use GPU when I'm doing inference with nlp models like bert in elasticsearch8. Is there any relevant parameter setting to use GPU or CPU?

---

## [How to increase the number of shards or replicas dynamically in single race on esrally](https://discuss.elastic.co/t/how-to-increase-the-number-of-shards-or-replicas-dynamically-in-single-race-on-esrally/319773)

<div class="topic-metadata">

**Author:** [@qksjdhi1212](https://discuss.elastic.co/u/qksjdhi1212)\
**Replies:** 1\
**Last updated:** [November 28, 2022, 12:31am UTC](https://discuss.elastic.co/t/how-to-increase-the-number-of-shards-or-replicas-dynamically-in-single-race-on-esrally/319773 "2022-11-28T00:31:54Z")

</div>

I planned to set cluster and increase the number of shards or replicas to optimize it testing the cluster with esrally Is there any way to start one shard and increase to n shards on single esrally race +) I found foll…

---

## [Creating http.p12,tranport.p12 from a signed CSR for Elasticsearch](https://discuss.elastic.co/t/creating-http-p12-tranport-p12-from-a-signed-csr-for-elasticsearch/319680)

<div class="topic-metadata">

**Author:** [@redsearch2022](https://discuss.elastic.co/u/redsearch2022)\
**Replies:** 4\
**Last updated:** [November 27, 2022, 11:28pm UTC](https://discuss.elastic.co/t/creating-http-p12-tranport-p12-from-a-signed-csr-for-elasticsearch/319680 "2022-11-27T23:28:57Z")

</div>

After getting the CSR signed, how do I create the http.p12 and transport.p12 needed for Elasticsearch xpack.security.http.ssl: enabled: true keystore.path: certs/http.p12 xpack.security.transport.ssl: enabled: tr…

---

## [How to exclude keys by multi-terms/composite aggregations](https://discuss.elastic.co/t/how-to-exclude-keys-by-multi-terms-composite-aggregations/319881)

<div class="topic-metadata">

**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\
**Replies:** 0\
**Last updated:** [November 27, 2022, 1:29pm UTC](https://discuss.elastic.co/t/how-to-exclude-keys-by-multi-terms-composite-aggregations/319881 "2022-11-27T13:29:32Z")

</div>

Hi, I am writing an composite aggregation in Elasticsearch like the following: POST family\_predicted\_data/\_search { "query": { "bool": { "filter": \[ { "terms": { "query\_id": \[ …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=336)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=338)
