# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=349 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 350 --- ## [Abnormal behavior of anomaly detection found - Elastic ML Stack](https://discuss.elastic.co/t/abnormal-behavior-of-anomaly-detection-found-elastic-ml-stack/317948)
**Author:** [@Sreeja1](https://discuss.elastic.co/u/Sreeja1)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 5:47pm UTC](https://discuss.elastic.co/t/abnormal-behavior-of-anomaly-detection-found-elastic-ml-stack/317948 "2022-11-03T17:47:34Z")
Hi I have created a multi metric Anomaly Detection Job with High Mean Response Time as detector, bucket span was 4h and Training data was for 1year. After a certain span the Upper Bound of the model has increased abr… --- ## [Eland not working with cloud instance](https://discuss.elastic.co/t/eland-not-working-with-cloud-instance/318125)
**Author:** [@bruinjoe](https://discuss.elastic.co/u/bruinjoe)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 4:39pm UTC](https://discuss.elastic.co/t/eland-not-working-with-cloud-instance/318125 "2022-11-03T16:39:30Z")
I'm using a trial version of Elastic cloud. I found the Elasticsearch end point using the admin console at https://cloud.elastic.co/home. I was able to log into the endpoint with a Firefox browser using the elastic usern… --- ## [Where are the elastic password?](https://discuss.elastic.co/t/where-are-the-elastic-password/318112)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 3:55pm UTC](https://discuss.elastic.co/t/where-are-the-elastic-password/318112 "2022-11-03T15:55:54Z")
i installed with sudo yum install --enablerepo=elasticsearch elasticsearch ======================================================================================================================== Package … --- ## [Elasticsearch Reindexing Benchmark](https://discuss.elastic.co/t/elasticsearch-reindexing-benchmark/318106)
**Author:** [@Suraj\_Jannu](https://discuss.elastic.co/u/Suraj_Jannu)\ **Replies:** 1\ **Last updated:** [November 3, 2022, 1:26pm UTC](https://discuss.elastic.co/t/elasticsearch-reindexing-benchmark/318106 "2022-11-03T13:26:24Z")
Hello, I have 2 Elasticsearch clusters i.e with version 7.5.1 and 8.4.3. I am migrating the data from a lower version to a higher version using ReIndexing with a remote server approach. Question: Is there any better… --- ## [Elastic 8 on centos 7 is possible?](https://discuss.elastic.co/t/elastic-8-on-centos-7-is-possible/318085)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [November 3, 2022, 1:16pm UTC](https://discuss.elastic.co/t/elastic-8-on-centos-7-is-possible/318085 "2022-11-03T13:16:35Z")
hello i see this guide Install Elasticsearch with RPM | Elasticsearch Guide \[8.4\] | Elastic but when starting have the error fatal exception while booting Elasticsearch org.elasticsearch.ElasticsearchSecurityExceptio… --- ## [How can i insert the history data into TSDB](https://discuss.elastic.co/t/how-can-i-insert-the-history-data-into-tsdb/318075)
**Author:** [@bo8888](https://discuss.elastic.co/u/bo8888)\ **Replies:** 6\ **Last updated:** [November 3, 2022, 12:02pm UTC](https://discuss.elastic.co/t/how-can-i-insert-the-history-data-into-tsdb/318075 "2022-11-03T12:02:40Z")
I study Set up a time series data stream (TSDS) | Elasticsearch Guide \[8.5\] | Elastic but i insert the data ,found a error PUT metrics-weather\_sensors-dev/\_bulk { "create":{ } } { "@timestamp": "2099-05-06T16:21:15.00… --- ## [Node down alert](https://discuss.elastic.co/t/node-down-alert/317946)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [November 3, 2022, 9:27am UTC](https://discuss.elastic.co/t/node-down-alert/317946 "2022-11-03T09:27:52Z")
Hi Community, I am using ELK cluster version 7.17. I need to get alert if a node goes down for a particular duration like 5 minute. I am using metricbeat to monitor cluster. How can we achieve this. --- ## [Proximity with Boolean operators?](https://discuss.elastic.co/t/proximity-with-boolean-operators/318083)
**Author:** [@Broccolimon](https://discuss.elastic.co/u/Broccolimon)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 9:08am UTC](https://discuss.elastic.co/t/proximity-with-boolean-operators/318083 "2022-11-03T09:08:46Z")
I would like to run queries with the format: query = { "size": limit, "query": { "query\_string": {"query": query, "default\_operator":"AND"} } } Where my query … --- ## [Possibility of Duplicate Value in Field](https://discuss.elastic.co/t/possibility-of-duplicate-value-in-field/318077)
**Author:** [@haikal.azaim](https://discuss.elastic.co/u/haikal.azaim)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 9:12am UTC](https://discuss.elastic.co/t/possibility-of-duplicate-value-in-field/318077 "2022-11-03T09:12:13Z")
Hi, i am new to elastic and really enjoy exploring elastic stack so far. For the background, i still developing log normalization for my monitoring assets and classify them into specific event.category and specific even… --- ## [Java API client 8.x with Elasticsearch 7.x](https://discuss.elastic.co/t/java-api-client-8-x-with-elasticsearch-7-x/318000)
**Author:** [@YNikolay](https://discuss.elastic.co/u/YNikolay)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 9:00am UTC](https://discuss.elastic.co/t/java-api-client-8-x-with-elasticsearch-7-x/318000 "2022-11-03T09:00:10Z")
Hello, Can the Java API client 8.x be used with Elasticsearch server 7.x? --- ## [Elasticsearch 8.4.3 enable remote access](https://discuss.elastic.co/t/elasticsearch-8-4-3-enable-remote-access/317842)
**Author:** [@ChristopherHS](https://discuss.elastic.co/u/ChristopherHS)\ **Replies:** 12\ **Last updated:** [November 3, 2022, 6:59am UTC](https://discuss.elastic.co/t/elasticsearch-8-4-3-enable-remote-access/317842 "2022-11-03T06:59:06Z")
Hello, We took a server to test Elasticsearch version 8.4.3 and do some tests. We followed the installation steps: Elasticsearch starts fine and responds to: curl -X GET http://localhost:9200 We are trying to make … --- ## [Index RED with Error This version of Lucene only supports indexes created with release 6.0 and later](https://discuss.elastic.co/t/index-red-with-error-this-version-of-lucene-only-supports-indexes-created-with-release-6-0-and-later/317975)
**Author:** [@vishalbhandari](https://discuss.elastic.co/u/vishalbhandari)\ **Replies:** 3\ **Last updated:** [November 3, 2022, 5:31am UTC](https://discuss.elastic.co/t/index-red-with-error-this-version-of-lucene-only-supports-indexes-created-with-release-6-0-and-later/317975 "2022-11-03T05:31:21Z")
Hi I have Elastic search version 7.16.3, in this one index is showing RED and when i tried recover it using CheckIndex command "java -cp lucene-core-8.10.1.jar -ea:org.apache.lucene… org.apache.lucene.index.CheckIndex C… --- ## [Cluster breaks very frequently](https://discuss.elastic.co/t/cluster-breaks-very-frequently/317967)
**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\ **Replies:** 9\ **Last updated:** [November 3, 2022, 4:35am UTC](https://discuss.elastic.co/t/cluster-breaks-very-frequently/317967 "2022-11-03T04:35:57Z")
I have a 3-node cluster, all are master eligible. I am facing a weird issue of cluster breaks since last month and it's very frequent. I've tried a lot of things to make it stable but nothing works. I am using ES 5.6.16 … --- ## [Unable to create pipeline when using drop processor](https://discuss.elastic.co/t/unable-to-create-pipeline-when-using-drop-processor/317897)
**Author:** [@matttjones60](https://discuss.elastic.co/u/matttjones60)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 11:51pm UTC](https://discuss.elastic.co/t/unable-to-create-pipeline-when-using-drop-processor/317897 "2022-11-02T23:51:28Z")
Hi Fairly new to Elastic so apologies if this is an obvious issue! I'm trying to create a new processor to drop any entries containing: user\_agent.original =="GoogleHC/1.0" But when I add a processor containing that… --- ## [ICU and upgrading from 7.17.1 to 8.5](https://discuss.elastic.co/t/icu-and-upgrading-from-7-17-1-to-8-5/317929)
**Author:** [@elasticism](https://discuss.elastic.co/u/elasticism)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 11:19pm UTC](https://discuss.elastic.co/t/icu-and-upgrading-from-7-17-1-to-8-5/317929 "2022-11-02T23:19:24Z")
On the page for ICU (ICU Analysis Plugin | Elasticsearch Plugins and Integrations \[8.5\] | Elastic), there's a callout that says ICU analysis and backwards compatibility From time to time, the ICU library receives updat… --- ## [Elasticsearch data nodes - pagefile/hard faults vs. heap usage](https://discuss.elastic.co/t/elasticsearch-data-nodes-pagefile-hard-faults-vs-heap-usage/317570)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 3\ **Last updated:** [November 2, 2022, 10:03pm UTC](https://discuss.elastic.co/t/elasticsearch-data-nodes-pagefile-hard-faults-vs-heap-usage/317570 "2022-11-02T22:03:22Z")
I have an Elasticsearch cluster version 7.8.1running on Windows server 2019. There are 3 3 data nodes, 3 master nodes, and 1 coordinating node, in the cluster. That data nodes each have 48gb ram, and 24gb is dedicated to… --- ## [Searching for image changes](https://discuss.elastic.co/t/searching-for-image-changes/318047)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 4\ **Last updated:** [November 2, 2022, 9:55pm UTC](https://discuss.elastic.co/t/searching-for-image-changes/318047 "2022-11-02T21:55:01Z")
Hello There! With my Friend we would like to know if there is a possibility to use Elastic as a tool to find that images were changed. We would like to upload an image and check if it is an original picture or not. For… --- ## [Show aggregations of same category after filter](https://discuss.elastic.co/t/show-aggregations-of-same-category-after-filter/318055)
**Author:** [@Peter\_Valek](https://discuss.elastic.co/u/Peter_Valek)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 9:21pm UTC](https://discuss.elastic.co/t/show-aggregations-of-same-category-after-filter/318055 "2022-11-02T21:21:35Z")
Hello everyone ! I would like to create filter and aggregations after filter for procuts in Elasticsearch. I am having base aggregations for all products: "size": { "doc\_count\_error\_upper\_bound": 0, "su… --- ## [AutoDelete Index](https://discuss.elastic.co/t/autodelete-index/317985)
**Author:** [@Grigio\_Basi](https://discuss.elastic.co/u/Grigio_Basi)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 4:51pm UTC](https://discuss.elastic.co/t/autodelete-index/317985 "2022-11-02T16:51:13Z")
Hi. I have following settings elastic in my Docker File. environment: - node.name=es01 - cluster.name=es-docker-cluster - discovery.type=single-node - bootstrap.memory\_lock=true - "ES\_JAVA\_… --- ## [8.3 Memory calculations and nested fields](https://discuss.elastic.co/t/8-3-memory-calculations-and-nested-fields/317988)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 6\ **Last updated:** [November 2, 2022, 4:10pm UTC](https://discuss.elastic.co/t/8-3-memory-calculations-and-nested-fields/317988 "2022-11-02T16:10:04Z")
Hi, Trying to better understanding the new memory planning for 8.3. Do nested fields count just like other fields? My indices have nested fields. So a single index including its nested fields has 100 fields. Accordin… --- ## [Is it possible to acknowledge an alert / watcher?](https://discuss.elastic.co/t/is-it-possible-to-acknowledge-an-alert-watcher/317540)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 2:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-acknowledge-an-alert-watcher/317540 "2022-11-02T14:57:30Z")
Hello, is it possible to acknowledge an alert? Let's imagine that every 10 minutes, an application sends to Elasticsearch an information telling me if there is an error or not : The application send me two kind of data… --- ## [Elasticsearch dis\_max with PHP](https://discuss.elastic.co/t/elasticsearch-dis-max-with-php/317976)
**Author:** [@Makaveli1O](https://discuss.elastic.co/u/Makaveli1O)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 11:01am UTC](https://discuss.elastic.co/t/elasticsearch-dis-max-with-php/317976 "2022-11-02T11:01:12Z")
My console query looks like this: { "query": { "dis\_max": { "tie\_breaker": 0.7, "boost": 1.2, "queries": \[ { "multi\_match": { "query": "this exact phrase", … --- ## [Cluster is yellow and 3 shards are unassigned](https://discuss.elastic.co/t/cluster-is-yellow-and-3-shards-are-unassigned/317892)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 8:32am UTC](https://discuss.elastic.co/t/cluster-is-yellow-and-3-shards-are-unassigned/317892 "2022-11-02T08:32:13Z")
I had a Elastic search stack crash due to disk almost full, after enabling extra winlogbeat, which took me a bit with surprise, so I added some policies to reduce them a bit. But after doing that and expanding the disk,… --- ## [Can we do CCR between ECE & elastic cloud services? between local and Elastic cloud services?](https://discuss.elastic.co/t/can-we-do-ccr-between-ece-elastic-cloud-services-between-local-and-elastic-cloud-services/317921)
**Author:** [@Vijaykumar\_Deshmukh1](https://discuss.elastic.co/u/Vijaykumar_Deshmukh1)\ **Replies:** 3\ **Last updated:** [November 2, 2022, 6:44am UTC](https://discuss.elastic.co/t/can-we-do-ccr-between-ece-elastic-cloud-services-between-local-and-elastic-cloud-services/317921 "2022-11-02T06:44:06Z")
Just want to know Can i do CCR between ECE and Elastic cloud services?? Can i do CCR between local machine and Elastic cloud services?? Can i do CCR between local machine and ECE?? Thanks! --- ## [Split index failed](https://discuss.elastic.co/t/split-index-failed/317744)
**Author:** [@tonycongjie](https://discuss.elastic.co/u/tonycongjie)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 5:09am UTC](https://discuss.elastic.co/t/split-index-failed/317744 "2022-11-02T05:09:21Z")
Hello, I tried to split my index to more shard. My cluster has 3 node, the index currently have 1 shard and 1 replicas. I tried to split the shard, but I got a return with “shards\_acknowledged : false” PUT /my\_source\_i… --- ## [Is Elasticsearch suitable for efficient retrieval of large number of docs?](https://discuss.elastic.co/t/is-elasticsearch-suitable-for-efficient-retrieval-of-large-number-of-docs/317845)
**Author:** [@David\_Yu](https://discuss.elastic.co/u/David_Yu)\ **Replies:** 14\ **Last updated:** [November 1, 2022, 4:13pm UTC](https://discuss.elastic.co/t/is-elasticsearch-suitable-for-efficient-retrieval-of-large-number-of-docs/317845 "2022-11-01T16:13:17Z")
How do we use ES? Our team is using ES to index ads metadata. When we need to show a user ads, we query ES for a list of ads that satisfy certain criteria (e.g. geo, queries, campaign date range, etc). Upon fetching the… --- ## [HIVE-Elasticsearch Error Handler for Malformed records](https://discuss.elastic.co/t/hive-elasticsearch-error-handler-for-malformed-records/317901)
**Author:** [@Md\_rafi](https://discuss.elastic.co/u/Md_rafi)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 3:31am UTC](https://discuss.elastic.co/t/hive-elasticsearch-error-handler-for-malformed-records/317901 "2022-11-02T03:31:32Z")
Hi, We are trying to ingest data from Hive to Elasticsearch, Had issues ingesting the data and few of them are malformed json records Followed below documentation for handling bad records and created DDL script to ing… --- ## [Never started node but got ERROR: Skipping security auto configuration because it appears that security is already configured](https://discuss.elastic.co/t/never-started-node-but-got-error-skipping-security-auto-configuration-because-it-appears-that-security-is-already-configured/317757)
**Author:** [@2019240081](https://discuss.elastic.co/u/2019240081)\ **Replies:** 3\ **Last updated:** [November 2, 2022, 2:44am UTC](https://discuss.elastic.co/t/never-started-node-but-got-error-skipping-security-auto-configuration-because-it-appears-that-security-is-already-configured/317757 "2022-11-02T02:44:02Z")
I got token from already running master node with following command bin\\elasticsearch-create-enrollment-token -s node I ran other node that I've never strated bin\\elasticsearch --enrollment-token \ b… --- ## [Need advice for my small ElasticSearch cluster](https://discuss.elastic.co/t/need-advice-for-my-small-elasticsearch-cluster/317881)
**Author:** [@tomboy](https://discuss.elastic.co/u/tomboy)\ **Replies:** 2\ **Last updated:** [November 1, 2022, 11:56pm UTC](https://discuss.elastic.co/t/need-advice-for-my-small-elasticsearch-cluster/317881 "2022-11-01T23:56:39Z")
Hi all, We have a 3-node cluster in production in the past, and recently we added an independent DC for backup usage. For simplicity, I want to deploy a single ES instance in the backup DC, and keep data in sync with 3… --- ## [Monitor indicies and shards](https://discuss.elastic.co/t/monitor-indicies-and-shards/317920)
**Author:** [@Saeedeh\_Moghimi](https://discuss.elastic.co/u/Saeedeh_Moghimi)\ **Replies:** 1\ **Last updated:** [November 1, 2022, 7:59pm UTC](https://discuss.elastic.co/t/monitor-indicies-and-shards/317920 "2022-11-01T19:59:49Z")
I'm looking for a way to monitor inside of the cluster like: how many indices are available on my cluster, how many shards each index has and ... I know we can do it manually by GET \_cluster/... commands but I'm looki… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=348) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=350)