# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=343 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 344 --- ## [Elasticsearch picking wrong port](https://discuss.elastic.co/t/elasticsearch-picking-wrong-port/318978)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 8\ **Last updated:** [November 16, 2022, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-picking-wrong-port/318978 "2022-11-16T07:57:37Z")
Hi Team, I am facing strange behavior in prod environment. I used same configuration in prod and DR servers but in prod its working fine, in DR elasticserch is not connecting to different node when I am configuring clu… --- ## [Mustache double quotes problem in search templates](https://discuss.elastic.co/t/mustache-double-quotes-problem-in-search-templates/318736)
**Author:** [@D1sturbance](https://discuss.elastic.co/u/D1sturbance)\ **Replies:** 7\ **Last updated:** [November 16, 2022, 7:52am UTC](https://discuss.elastic.co/t/mustache-double-quotes-problem-in-search-templates/318736 "2022-11-16T07:52:23Z")
What is the best way to use mustache False values feature in Elasticsearch template? At the moment I am trying to select function based on boolean value. Rendering seems to be working according to the logic, but it pri… --- ## [Transform not updating documents](https://discuss.elastic.co/t/transform-not-updating-documents/318209)
**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\ **Replies:** 8\ **Last updated:** [November 16, 2022, 7:50am UTC](https://discuss.elastic.co/t/transform-not-updating-documents/318209 "2022-11-16T07:50:48Z")
Hi I have a continious transform running with the following query applied which should only allow documents with the status open or closed in the trasnform destination however when documents in these status are updated … --- ## [Comparing Two Indices Across Clusters](https://discuss.elastic.co/t/comparing-two-indices-across-clusters/318904)
**Author:** [@connellyethan](https://discuss.elastic.co/u/connellyethan)\ **Replies:** 5\ **Last updated:** [November 16, 2022, 7:37am UTC](https://discuss.elastic.co/t/comparing-two-indices-across-clusters/318904 "2022-11-16T07:37:08Z")
Hi All, We are currently attempting to compare two indices across clusters to verify we did not lose any records or fields during the process of cross cluster replication, which is how we chose to do this data migration… --- ## [Does update and query document in diff cache?](https://discuss.elastic.co/t/does-update-and-query-document-in-diff-cache/319014)
**Author:** [@GithubRyze](https://discuss.elastic.co/u/GithubRyze)\ **Replies:** 2\ **Last updated:** [November 16, 2022, 6:17am UTC](https://discuss.elastic.co/t/does-update-and-query-document-in-diff-cache/319014 "2022-11-16T06:17:16Z")
step: updated document query the document immediately expected: return latest of the document but retunr the old docment Does update and query document in diff cache? update in RAM CACHE and QUERY IN DISK ? --- ## [Filebeat not shipping logs to logstash](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-logstash/318951)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 4\ **Last updated:** [November 16, 2022, 6:05am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-logs-to-logstash/318951 "2022-11-16T06:05:32Z")
Hi I am setting up ELK stack for POC. I have installed ELK 7.17 version. Installed all the packages separately like different machine. Now i have installed file beat and enabled logstash module but i don't see any logs… --- ## [Caused by: java.util.concurrent.CancellationException: Request execution cancelled](https://discuss.elastic.co/t/caused-by-java-util-concurrent-cancellationexception-request-execution-cancelled/318864)
**Author:** [@tungli](https://discuss.elastic.co/u/tungli)\ **Replies:** 2\ **Last updated:** [November 16, 2022, 1:35am UTC](https://discuss.elastic.co/t/caused-by-java-util-concurrent-cancellationexception-request-execution-cancelled/318864 "2022-11-16T01:35:53Z")
I use es7.15.2 , elasticsearch-java-8.4.2, ElasticsearchAsyncClient, After a period of time，it can't link to es and throw Caused by: java.util.concurrent.CancellationException: Request execution cancelled Caused by: jav… --- ## [How to create sub aggregation for bucket\_script pipeline aggregation using java api client](https://discuss.elastic.co/t/how-to-create-sub-aggregation-for-bucket-script-pipeline-aggregation-using-java-api-client/318999)
**Author:** [@Raghunandan](https://discuss.elastic.co/u/Raghunandan)\ **Replies:** 0\ **Last updated:** [November 15, 2022, 8:40pm UTC](https://discuss.elastic.co/t/how-to-create-sub-aggregation-for-bucket-script-pipeline-aggregation-using-java-api-client/318999 "2022-11-15T20:40:33Z")
We are trying to create aggregation for bucket script and getting following error: No aggregation found at path : totalEndTimeUtcAGGR Below is the aggregation query { "aggregations": { "successExecutionCountAGGR"… --- ## [Simple\_query\_string with first term having a + or - operator](https://discuss.elastic.co/t/simple-query-string-with-first-term-having-a-or-operator/318992)
**Author:** [@Geoff\_Mueller](https://discuss.elastic.co/u/Geoff_Mueller)\ **Replies:** 0\ **Last updated:** [November 15, 2022, 6:31pm UTC](https://discuss.elastic.co/t/simple-query-string-with-first-term-having-a-or-operator/318992 "2022-11-15T18:31:39Z")
Question regarding the use of AND (+) and NOT (-) operators when using the simple\_query\_string query. It seems there is some inconsistent behavior when performing a query where the first term has an operator included in… --- ## [Date\_time\_exception: Field Year cannot be printed as the value -292275055 exceeds the maximum print width of 4\]](https://discuss.elastic.co/t/date-time-exception-field-year-cannot-be-printed-as-the-value-292275055-exceeds-the-maximum-print-width-of-4/318900)
**Author:** [@hchen1](https://discuss.elastic.co/u/hchen1)\ **Replies:** 2\ **Last updated:** [November 15, 2022, 6:15pm UTC](https://discuss.elastic.co/t/date-time-exception-field-year-cannot-be-printed-as-the-value-292275055-exceeds-the-maximum-print-width-of-4/318900 "2022-11-15T18:15:28Z")
I got date\_time\_exception after disabling dynamic mapping and adding mapping for a Date attribute like this: "mappings": { "dynamic": false, ........ "updateDate": { "type": "date", … --- ## [DLQ settings to handle bulk ingest encoding error](https://discuss.elastic.co/t/dlq-settings-to-handle-bulk-ingest-encoding-error/318802)
**Author:** [@tharris1](https://discuss.elastic.co/u/tharris1)\ **Replies:** 3\ **Last updated:** [November 15, 2022, 3:43pm UTC](https://discuss.elastic.co/t/dlq-settings-to-handle-bulk-ingest-encoding-error/318802 "2022-11-15T15:43:54Z")
I have a large set of archived data to ingest into Elastic and some of the log entries have encoding issues that building up and causing the logstash ingest pipeline to stall. I have DLQ enabled but still getting indefin… --- ## [Clean up Indices? ..... free some storage](https://discuss.elastic.co/t/clean-up-indices-free-some-storage/318925)
**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\ **Replies:** 4\ **Last updated:** [November 15, 2022, 8:06am UTC](https://discuss.elastic.co/t/clean-up-indices-free-some-storage/318925 "2022-11-15T08:06:14Z")
storage utilised over 90% and until now I haven't cleaned up any indices. What would be the perfect way to clean up indices or delete some old index data ? I've searched a lot but there's too much confusion over the in… --- ## [Want to know stable latest elastic version](https://discuss.elastic.co/t/want-to-know-stable-latest-elastic-version/318939)
**Author:** [@priti](https://discuss.elastic.co/u/priti)\ **Replies:** 2\ **Last updated:** [November 15, 2022, 9:24am UTC](https://discuss.elastic.co/t/want-to-know-stable-latest-elastic-version/318939 "2022-11-15T09:24:18Z")
We are planning to build ELK cluster in our environment. Need to know which is the latest stable version is good to setup ? --- ## [Creating an enrich policy from collapsed data](https://discuss.elastic.co/t/creating-an-enrich-policy-from-collapsed-data/318629)
**Author:** [@cwe](https://discuss.elastic.co/u/cwe)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 8:23am UTC](https://discuss.elastic.co/t/creating-an-enrich-policy-from-collapsed-data/318629 "2022-11-15T08:23:34Z")
Hi Elastic community I have an index containing many documents per host.id describing the currently running software. This information might change over time, due to software updates. I can use a collapse query to get … --- ## [How to query with GROUP BY and COUNT(\*)](https://discuss.elastic.co/t/how-to-query-with-group-by-and-count/318936)
**Author:** [@Remon\_Andrew](https://discuss.elastic.co/u/Remon_Andrew)\ **Replies:** 0\ **Last updated:** [November 15, 2022, 8:20am UTC](https://discuss.elastic.co/t/how-to-query-with-group-by-and-count/318936 "2022-11-15T08:20:29Z")
Hi all, I have this query that I used to run on MySQL: SELECT from\_mobile\_number, event\_name, COUNT(\*) AS count FROM analytics\_events WHERE date \>= '2022-10-01 00:00:00' AND date \<= '2022-09-30 23:59:59' AND from\_mobil… --- ## [Watcher Email output](https://discuss.elastic.co/t/watcher-email-output/318793)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 7:27am UTC](https://discuss.elastic.co/t/watcher-email-output/318793 "2022-11-15T07:27:25Z")
{ "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ "metricbeat-\*" \], … --- ## [Elasticsearch](https://discuss.elastic.co/t/elasticsearch/318924)
**Author:** [@giri1](https://discuss.elastic.co/u/giri1)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 7:10am UTC](https://discuss.elastic.co/t/elasticsearch/318924 "2022-11-15T07:10:12Z")
hey search\_as\_type is not working when i connect it through java. Completion is showing error when i used it with bool query --- ## [Generating metrics from documents present in index](https://discuss.elastic.co/t/generating-metrics-from-documents-present-in-index/318130)
**Author:** [@Vikash\_Kumar\_Sharma](https://discuss.elastic.co/u/Vikash_Kumar_Sharma)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 6:14am UTC](https://discuss.elastic.co/t/generating-metrics-from-documents-present-in-index/318130 "2022-11-15T06:14:32Z")
Hi I have an index that has the following documents timestamp:t1, job:j1, status:started timestamp:t2, job:j1, status:completed timestamp:t1, job:j2, status:started timestamp:t2, job:j2, status:completed So from these… --- ## [Reindex api errors out while reindexing when documents in the index exceed 2147483519](https://discuss.elastic.co/t/reindex-api-errors-out-while-reindexing-when-documents-in-the-index-exceed-2147483519/318771)
**Author:** [@Srikant\_Magdum](https://discuss.elastic.co/u/Srikant_Magdum)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 6:06am UTC](https://discuss.elastic.co/t/reindex-api-errors-out-while-reindexing-when-documents-in-the-index-exceed-2147483519/318771 "2022-11-15T06:06:57Z")
One of my shard in the index is in red state as the documents in that shard exceeded 2147483519 as below : failed shard on node \[GK1he55KSJmqQXx-qDrPFQ\]: shard failure, reason \[no-op origin\[PRIMARY\] seq#\[350554097\] fail… --- ## [Unable to retrieve version information from Elasticsearch nodes. security\_exception](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-security-exception/318919)
**Author:** [@Vivek\_Arumugam](https://discuss.elastic.co/u/Vivek_Arumugam)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 6:01am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-security-exception/318919 "2022-11-15T06:01:43Z")
Hi Team, I am getting the following error while installing kibana.please help on this issue. Unable to retrieve version information from Elasticsearch nodes. security\_exception: \[security\_exception\] Reason: missing aut… --- ## [Unable to start elastic search in AKS cluster, throwing bootstrap errors](https://discuss.elastic.co/t/unable-to-start-elastic-search-in-aks-cluster-throwing-bootstrap-errors/318921)
**Author:** [@sunil\_s](https://discuss.elastic.co/u/sunil_s)\ **Replies:** 0\ **Last updated:** [November 15, 2022, 5:14am UTC](https://discuss.elastic.co/t/unable-to-start-elastic-search-in-aks-cluster-throwing-bootstrap-errors/318921 "2022-11-15T05:14:51Z")
PFB errors {"@timestamp":"2022-11-15T05:06:07.108Z", "log.level": "INFO", "message":"Native controller process has stopped - no new native processes can be started", "ecs.version": "1.2.0","service.name":"ES\_ECS","event… --- ## [Help with creating a search](https://discuss.elastic.co/t/help-with-creating-a-search/318450)
**Author:** [@cdeblois](https://discuss.elastic.co/u/cdeblois)\ **Replies:** 2\ **Last updated:** [November 10, 2022, 6:59pm UTC](https://discuss.elastic.co/t/help-with-creating-a-search/318450 "2022-11-10T18:59:16Z")
Hello, I'm trying to see if there's a way to make an API call so we can know when an index or an indices has not been written to for a specific period of time. Is there a way to do this? I've been wracking my brain try… --- ## [Repository-azure for 7.17](https://discuss.elastic.co/t/repository-azure-for-7-17/318845)
**Author:** [@rwiker](https://discuss.elastic.co/u/rwiker)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 12:42am UTC](https://discuss.elastic.co/t/repository-azure-for-7-17/318845 "2022-11-15T00:42:48Z")
Hi, We're using repository-azure with our 7.17 installation of Elasticsearch, running on Azure VMs. Last week, we got a notification from Microsoft that there are known issues with one of the packages used by the repos… --- ## [XContentType.Json not working](https://discuss.elastic.co/t/xcontenttype-json-not-working/318834)
**Author:** [@suresh\_chaudhari](https://discuss.elastic.co/u/suresh_chaudhari)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 12:38am UTC](https://discuss.elastic.co/t/xcontenttype-json-not-working/318834 "2022-11-15T00:38:57Z")
IndexRequest iRequest = new IndexRequest(LoadBalancerVip+"9" , "\_doc"); iRequest.source(flattenedJson,XContentType.JSON); This innocent XContentType.Json cannot insert more than 150 records neither it shows any bug try… --- ## [Watcher with Json body](https://discuss.elastic.co/t/watcher-with-json-body/318847)
**Author:** [@sudheendra](https://discuss.elastic.co/u/sudheendra)\ **Replies:** 0\ **Last updated:** [November 14, 2022, 9:47am UTC](https://discuss.elastic.co/t/watcher-with-json-body/318847 "2022-11-14T09:47:01Z")
I am using the watcher to send post request to webhook listener ,but I am failing to convert output array into json object . "actions": { "send\_alert\_to\_jumpstart\_server": { "webhook": { "scheme": "http", "host": "\*\*\*\*\*… --- ## [ElasticSearch TASKS API - Task is given to a different node after 1 minute](https://discuss.elastic.co/t/elasticsearch-tasks-api-task-is-given-to-a-different-node-after-1-minute/318600)
**Author:** [@vedalas21](https://discuss.elastic.co/u/vedalas21)\ **Replies:** 1\ **Last updated:** [November 15, 2022, 12:20am UTC](https://discuss.elastic.co/t/elasticsearch-tasks-api-task-is-given-to-a-different-node-after-1-minute/318600 "2022-11-15T00:20:20Z")
Hi Team, I had a weird observation in our Elasticsearch Cluster. We have an ES Query that will be executed from a python script. When the Query is being fired from python, right away a task will get created under GET /… --- ## [Unable to login in kibana](https://discuss.elastic.co/t/unable-to-login-in-kibana/318893)
**Author:** [@AnkitaP](https://discuss.elastic.co/u/AnkitaP)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 10:32pm UTC](https://discuss.elastic.co/t/unable-to-login-in-kibana/318893 "2022-11-14T22:32:52Z")
Hello, I am unable to login into kibana. I am getting error as incorrect username/Password even after entering correct credentials. Please find attached screenshots of the Logs. Note--ELK stack version--7.16 Kindly he… --- ## [ELK On Prem License](https://discuss.elastic.co/t/elk-on-prem-license/318884)
**Author:** [@akrog79](https://discuss.elastic.co/u/akrog79)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 5:28pm UTC](https://discuss.elastic.co/t/elk-on-prem-license/318884 "2022-11-14T17:28:12Z")
I want to integrate the ELK that I have On Premise with my Active Directory. However, I don't know what license I have to acquire or where I should buy it since the information I find is usually from Elastic Cloud. Som… --- ## [Add leading zeroes in sort script](https://discuss.elastic.co/t/add-leading-zeroes-in-sort-script/318870)
**Author:** [@undefined\_Undefined](https://discuss.elastic.co/u/undefined_Undefined)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 3:08pm UTC](https://discuss.elastic.co/t/add-leading-zeroes-in-sort-script/318870 "2022-11-14T15:08:54Z")
Hello, im use elastic 7.10.1 and i need help I wanna sort my numbers, but i can't use number type, so i decide sort it with leading zeroes { "sort": { "\_script": { "type": "string", "order": "asc", … --- ## [Term vectors for nested fields](https://discuss.elastic.co/t/term-vectors-for-nested-fields/318348)
**Author:** [@gioele](https://discuss.elastic.co/u/gioele)\ **Replies:** 1\ **Last updated:** [November 14, 2022, 2:31pm UTC](https://discuss.elastic.co/t/term-vectors-for-nested-fields/318348 "2022-11-14T14:31:48Z")
Hi everyone. I'm trying to use the mtermvectors api to get the term vectors (with term\_statistics) for an artificial document having several nested fields. I noticed however that, while for standard fields this works wi… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=342) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=344)