# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=348 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 349 --- ## [ECS field for pre-aggregated messages](https://discuss.elastic.co/t/ecs-field-for-pre-aggregated-messages/318143)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 1\ **Last updated:** [November 4, 2022, 5:38pm UTC](https://discuss.elastic.co/t/ecs-field-for-pre-aggregated-messages/318143 "2022-11-04T17:38:03Z")
ES 7.11 brought us the \_doc\_count metadata field and the ability to properly compute aggregations over individual ES documents that represent multiple occurrences. I would like to make use of this feature to preserve th… --- ## [How to get a date\_range boundary on script](https://discuss.elastic.co/t/how-to-get-a-date-range-boundary-on-script/318148)
**Author:** [@Victor\_Garcia](https://discuss.elastic.co/u/Victor_Garcia)\ **Replies:** 0\ **Last updated:** [November 4, 2022, 2:22am UTC](https://discuss.elastic.co/t/how-to-get-a-date-range-boundary-on-script/318148 "2022-11-04T02:22:09Z")
Hi, How can I access to a date\_range field boundary on a script? I tried doc\['field.gte'\] Also, I debug the class of the field Debug.explain(doc\['status.dates'\]) and get org.elasticsearch.index.fielddata.ScriptDocVa… --- ## [Search all doc between 2 times each day](https://discuss.elastic.co/t/search-all-doc-between-2-times-each-day/318124)
**Author:** [@Soren\_vdc](https://discuss.elastic.co/u/Soren_vdc)\ **Replies:** 3\ **Last updated:** [November 4, 2022, 4:16pm UTC](https://discuss.elastic.co/t/search-all-doc-between-2-times-each-day/318124 "2022-11-04T16:16:24Z")
Hi, I have an ES query where i want to search the doc created between 06 AM and 23 PM. I have add this to my query: "range": { "timestamp": { "format": "strict\_hour", … --- ## [Unassigned primary + replica shard, minimise data loss](https://discuss.elastic.co/t/unassigned-primary-replica-shard-minimise-data-loss/317393)
**Author:** [@tg295](https://discuss.elastic.co/u/tg295)\ **Replies:** 11\ **Last updated:** [November 4, 2022, 2:27pm UTC](https://discuss.elastic.co/t/unassigned-primary-replica-shard-minimise-data-loss/317393 "2022-11-04T14:27:53Z")
Hello, my cluster is currently in red state due to one of both the primary and replica shard of an index becoming unassigned. This happened after a number of large tasks were executed simultaneously by accident on the sa… --- ## [How to Update Mapping using Object Initializer Syntax](https://discuss.elastic.co/t/how-to-update-mapping-using-object-initializer-syntax/318198)
**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 0\ **Last updated:** [November 4, 2022, 2:27pm UTC](https://discuss.elastic.co/t/how-to-update-mapping-using-object-initializer-syntax/318198 "2022-11-04T14:27:53Z")
Can someone help me with how to achieve below query using NEST in object initializer syntax. PUT /my-index-000001/\_mapping { "properties": { "email": { "type": "keyword" } } } --- ## [F5 VIP as syslog destination on network devices](https://discuss.elastic.co/t/f5-vip-as-syslog-destination-on-network-devices/318196)
**Author:** [@amitpal](https://discuss.elastic.co/u/amitpal)\ **Replies:** 1\ **Last updated:** [November 4, 2022, 2:27pm UTC](https://discuss.elastic.co/t/f5-vip-as-syslog-destination-on-network-devices/318196 "2022-11-04T14:27:13Z")
We have all the network devices pointing to F5 Virtual server and under that server we have elastic nodes . In elastic , we see logs but all of them have source as F5 Self IP, i have marked NAT as none on F5 VIP but sti… --- ## [Unassigned Replica Shards](https://discuss.elastic.co/t/unassigned-replica-shards/317923)
**Author:** [@James\_Stallings](https://discuss.elastic.co/u/James_Stallings)\ **Replies:** 7\ **Last updated:** [November 4, 2022, 12:47pm UTC](https://discuss.elastic.co/t/unassigned-replica-shards/317923 "2022-11-04T12:47:36Z")
How often does the control loop run that checks to attempt to re-assign an unassigned replica shard? Is there documentation to this effect? Is there source code I can look at? --- ## [How exactly elasticsearch update an document when use update?](https://discuss.elastic.co/t/how-exactly-elasticsearch-update-an-document-when-use-update/318178)
**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\ **Replies:** 3\ **Last updated:** [November 4, 2022, 11:25am UTC](https://discuss.elastic.co/t/how-exactly-elasticsearch-update-an-document-when-use-update/318178 "2022-11-04T11:25:52Z")
hi everyone, as i read elasticsearch doc that, everytime I update an document, es will create new doc then merge old doc with new doc with new data. but what if my udpate API not change any filed of it, will it still c… --- ## [Best option for working with MySQL](https://discuss.elastic.co/t/best-option-for-working-with-mysql/318084)
**Author:** [@ChristopherHS](https://discuss.elastic.co/u/ChristopherHS)\ **Replies:** 2\ **Last updated:** [November 4, 2022, 11:10am UTC](https://discuss.elastic.co/t/best-option-for-working-with-mysql/318084 "2022-11-04T11:10:40Z")
Hello, We currently use Percona but to improve the search, we want to delegate this task to Elasticsearch. We have a videos table which contains over 4 million recordings. The search is done on all the fields below li… --- ## [How can i insert the history data into the data stream](https://discuss.elastic.co/t/how-can-i-insert-the-history-data-into-the-data-stream/318081)
**Author:** [@bo8888](https://discuss.elastic.co/u/bo8888)\ **Replies:** 2\ **Last updated:** [November 4, 2022, 9:53am UTC](https://discuss.elastic.co/t/how-can-i-insert-the-history-data-into-the-data-stream/318081 "2022-11-04T09:53:23Z")
{ "index\_templates": \[ { "name": "my-weather-sensor-index-template", "index\_template": { "index\_patterns": \[ "metrics-weather\_sensors-\*" \], "template": { "set… --- ## [Master\_not\_discovered\_exception error while setting up passwords for user](https://discuss.elastic.co/t/master-not-discovered-exception-error-while-setting-up-passwords-for-user/318079)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 1\ **Last updated:** [November 4, 2022, 9:39am UTC](https://discuss.elastic.co/t/master-not-discovered-exception-error-while-setting-up-passwords-for-user/318079 "2022-11-04T09:39:19Z")
While setting up the pasword for the built-in ES accounts by logging into the newly setup 3 node cluster docker exec -it es01 sh then running bin/elasticsearch-setup-passwords interactive --url https://localhost:9200 G… --- ## [Move Elastic Search from C: to D:](https://discuss.elastic.co/t/move-elastic-search-from-c-to-d/317051)
**Author:** [@inemer](https://discuss.elastic.co/u/inemer)\ **Replies:** 12\ **Last updated:** [November 4, 2022, 9:24am UTC](https://discuss.elastic.co/t/move-elastic-search-from-c-to-d/317051 "2022-11-04T09:24:31Z")
I was asking to research if it possible moving current installation of Kibana from C: drive to D: drive on our server. And if this possible is there Standard Operation Procedure (SOP) with description what step need to b… --- ## [OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x000000058a6c0000, 10388504576, 0) failed; error='Cannot allocate memory' (errno=12)](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-info-os-commit-memory-0x000000058a6c0000-10388504576-0-failed-error-cannot-allocate-memory-errno-12/318160)
**Author:** [@shristy](https://discuss.elastic.co/u/shristy)\ **Replies:** 8\ **Last updated:** [November 4, 2022, 8:06am UTC](https://discuss.elastic.co/t/openjdk-64-bit-server-vm-warning-info-os-commit-memory-0x000000058a6c0000-10388504576-0-failed-error-cannot-allocate-memory-errno-12/318160 "2022-11-04T08:06:33Z")
OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x000000058a6c0000, 10388504576, 0) failed; error='Cannot allocate memory' (errno=12) There is insufficient memory for the Java Runtime Environment to continue. … --- ## [Elasticsearch backup and restore results in index being in 'red' state. ES version: 6.8.23](https://discuss.elastic.co/t/elasticsearch-backup-and-restore-results-in-index-being-in-red-state-es-version-6-8-23/318172)
**Author:** [@iZAK328](https://discuss.elastic.co/u/iZAK328)\ **Replies:** 0\ **Last updated:** [November 4, 2022, 8:34am UTC](https://discuss.elastic.co/t/elasticsearch-backup-and-restore-results-in-index-being-in-red-state-es-version-6-8-23/318172 "2022-11-04T08:34:23Z")
Hi, I had tried to perform a backup of elasticsearch on a server and restore on a different server by copying the backup folder and the steps are mentioned as below. Index name: the\_hive\_15 Source OS: Ubuntu 18.04 - E… --- ## [Auto follow hidden index?](https://discuss.elastic.co/t/auto-follow-hidden-index/318173)
**Author:** [@BobDobelina](https://discuss.elastic.co/u/BobDobelina)\ **Replies:** 0\ **Last updated:** [November 4, 2022, 8:39am UTC](https://discuss.elastic.co/t/auto-follow-hidden-index/318173 "2022-11-04T08:39:25Z")
Hi All, I am trying to create an auto-follow pattern for a hidden index. For example the agent metrics. .ds-metrics-elastic\_agent.filebeat-default-2022.08.11-000001 I have tried these 2 patterns PUT /\_ccr/auto\_follow… --- ## [I can's run Elastic Search on CentOS7.8](https://discuss.elastic.co/t/i-cans-run-elastic-search-on-centos7-8/317945)
**Author:** [@Shadow\_CHN](https://discuss.elastic.co/u/Shadow_CHN)\ **Replies:** 8\ **Last updated:** [November 4, 2022, 8:17am UTC](https://discuss.elastic.co/t/i-cans-run-elastic-search-on-centos7-8/317945 "2022-11-04T08:17:00Z")
After the installation and configuration is completed, I changed to user elastic and used /etc/elasticsearch-8.4.3/bin/elasticsearch for booting Elastic Search for many times, but every time it won's run successfully and… --- ## [Balancing indexes by priority](https://discuss.elastic.co/t/balancing-indexes-by-priority/318110)
**Author:** [@driveirk](https://discuss.elastic.co/u/driveirk)\ **Replies:** 6\ **Last updated:** [November 4, 2022, 8:13am UTC](https://discuss.elastic.co/t/balancing-indexes-by-priority/318110 "2022-11-04T08:13:47Z")
Very often, we get so that all new indices converge on one node and the node starts to reject. Now we use ILM and each index is given a priority. I want to configure so that indexes with equal priority are placed evenl… --- ## [Upload custom plugin in Elastic Cloud](https://discuss.elastic.co/t/upload-custom-plugin-in-elastic-cloud/318163)
**Author:** [@xinyi](https://discuss.elastic.co/u/xinyi)\ **Replies:** 4\ **Last updated:** [November 4, 2022, 8:10am UTC](https://discuss.elastic.co/t/upload-custom-plugin-in-elastic-cloud/318163 "2022-11-04T08:10:46Z")
Hello. I'm a gold level user of Elastic cloud, but not allowed to use this feature --- ## [Error with SSL keystore when trying to do remote reindex](https://discuss.elastic.co/t/error-with-ssl-keystore-when-trying-to-do-remote-reindex/317800)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 4\ **Last updated:** [November 4, 2022, 7:53am UTC](https://discuss.elastic.co/t/error-with-ssl-keystore-when-trying-to-do-remote-reindex/317800 "2022-11-04T07:53:06Z")
Hi, I'm trying to perform a remote reindex and the remote ES has been configured with SSL by someone else. I was able to get the abc.p12 cert of the remote ES, as well as the password that was auto-generated (an alpha-n… --- ## [Is it feasible to install tow versions of Elastic Search on a single host and run them at the same time?](https://discuss.elastic.co/t/is-it-feasible-to-install-tow-versions-of-elastic-search-on-a-single-host-and-run-them-at-the-same-time/317943)
**Author:** [@Shadow\_CHN](https://discuss.elastic.co/u/Shadow_CHN)\ **Replies:** 2\ **Last updated:** [November 4, 2022, 7:15am UTC](https://discuss.elastic.co/t/is-it-feasible-to-install-tow-versions-of-elastic-search-on-a-single-host-and-run-them-at-the-same-time/317943 "2022-11-04T07:15:32Z")
As my topic said, I'm wondering is it worked? I hope es7.x is for graylog and ex8.x for ELK. --- ## [Spring elasticsearch - how to generate mapping for all the fields statically?](https://discuss.elastic.co/t/spring-elasticsearch-how-to-generate-mapping-for-all-the-fields-statically/318165)
**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\ **Replies:** 0\ **Last updated:** [November 4, 2022, 7:13am UTC](https://discuss.elastic.co/t/spring-elasticsearch-how-to-generate-mapping-for-all-the-fields-statically/318165 "2022-11-04T07:13:32Z")
I have a Person class: @Document(indexName = "person") @Data @EqualsAndHashCode(callSuper = true) public class Person extends BaseEntity implements Serializable { @Field(type=FieldType.Keyword) private String first… --- ## [Unmapped types in Suggest](https://discuss.elastic.co/t/unmapped-types-in-suggest/317989)
**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 1\ **Last updated:** [November 4, 2022, 1:37am UTC](https://discuss.elastic.co/t/unmapped-types-in-suggest/317989 "2022-11-04T01:37:32Z")
I am trying to implement suggest feature - Suggesters | Elasticsearch Guide \[8.5\] | Elastic for handling misspelled words in my search implementation. My search query is executed across multiple indices but while trying… --- ## [Change of unit](https://discuss.elastic.co/t/change-of-unit/318122)
**Author:** [@Isay](https://discuss.elastic.co/u/Isay)\ **Replies:** 6\ **Last updated:** [November 4, 2022, 1:27am UTC](https://discuss.elastic.co/t/change-of-unit/318122 "2022-11-04T01:27:39Z")
My disk is full and I want to change my information to another Elasticsearch unit, in the configuration I know that the new route is added ----------------------------------- Paths ------------------------------------ P… --- ## [Allocation fails on newly added nodes](https://discuss.elastic.co/t/allocation-fails-on-newly-added-nodes/318120)
**Author:** [@sbk-elk](https://discuss.elastic.co/u/sbk-elk)\ **Replies:** 1\ **Last updated:** [November 4, 2022, 1:27am UTC](https://discuss.elastic.co/t/allocation-fails-on-newly-added-nodes/318120 "2022-11-04T01:27:38Z")
Hello Guys, Anyone know why the below error occurs when shard allocation happens. We added a few nodes to the existing cluster and this started happening as soon as we enabled the allocations. \[indices:data/write/bulk\[… --- ## [SSL(curl) connection error in ElasticSearch setup](https://discuss.elastic.co/t/ssl-curl-connection-error-in-elasticsearch-setup/318137)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 10:15pm UTC](https://discuss.elastic.co/t/ssl-curl-connection-error-in-elasticsearch-setup/318137 "2022-11-03T22:15:40Z")
Have setup a 3-node Elasticsearch cluster using docker-compose. Followed below steps: On one of the master nodes, es11, gets below error, however same curl command works fine on other 2 nodes i.e. es12, es13: Error: cu… --- ## [Elastic-Index Join](https://discuss.elastic.co/t/elastic-index-join/317474)
**Author:** [@balaa](https://discuss.elastic.co/u/balaa)\ **Replies:** 6\ **Last updated:** [November 3, 2022, 10:04pm UTC](https://discuss.elastic.co/t/elastic-index-join/317474 "2022-11-03T22:04:02Z")
Hi Team, My requirement is to join two index as mentioned below.Is it possible? if yes how to achieve it. Index 1: { "A": 1, "B": "Sam", "C": 1234 } Index 2: { "C": 1234, "D": "elastic", "E": "Support" } Fi… --- ## [Cannot allocate because allocation is not permitted to any of the nodes that hold an in-sync shard copy](https://discuss.elastic.co/t/cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes-that-hold-an-in-sync-shard-copy/318066)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 3\ **Last updated:** [November 3, 2022, 10:03pm UTC](https://discuss.elastic.co/t/cannot-allocate-because-allocation-is-not-permitted-to-any-of-the-nodes-that-hold-an-in-sync-shard-copy/318066 "2022-11-03T22:03:45Z")
ES version - 6.x ES cluster is red and getting the below error sh-4.2# curl -k -XGET https://127.0.0.1:9200/\_cluster/allocation/explain?pretty^M {^H "index" : "index1",^M "shard" : 2,^M "primary" : true,^M "cur… --- ## [Unable to bul index](https://discuss.elastic.co/t/unable-to-bul-index/318097)
**Author:** [@Tushar\_Singh1](https://discuss.elastic.co/u/Tushar_Singh1)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 9:54pm UTC](https://discuss.elastic.co/t/unable-to-bul-index/318097 "2022-11-03T21:54:37Z")
I am new to windows . I was working my entire on linux. Can somebody help me here for \_bulk api indexing C:\\ELK\\master-1\\elasticsearch\\sample\_data\>curl -k -H 'Content-Type: application/x-ndjson' -X POST 'https://localho… --- ## [Best approach for upgrading from 7.15 to say 8.5](https://discuss.elastic.co/t/best-approach-for-upgrading-from-7-15-to-say-8-5/318057)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 9:14pm UTC](https://discuss.elastic.co/t/best-approach-for-upgrading-from-7-15-to-say-8-5/318057 "2022-11-03T21:14:58Z")
I'm running 7.15 today (both ES & REST client). Is there a document suggesting how to upgrade to say ES 8.5? We don't do instance upgrade. We use double write. We will have both 7.15 & 8.5 clusters running during the t… --- ## [Watcher - loop through results of the first search and use them for the second search](https://discuss.elastic.co/t/watcher-loop-through-results-of-the-first-search-and-use-them-for-the-second-search/317518)
**Author:** [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 5:58pm UTC](https://discuss.elastic.co/t/watcher-loop-through-results-of-the-first-search-and-use-them-for-the-second-search/317518 "2022-11-03T17:58:17Z")
Hi, I'd like to use every hit of the first result as a parameter for the second search. And after condition checking start an action. What I mean: for result1 in first\_search\_results: for result2 in second\_search… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=347) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=349)