# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=355 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 356 --- ## [Can't use multiple enrich policies in the same ingest pipeline](https://discuss.elastic.co/t/cant-use-multiple-enrich-policies-in-the-same-ingest-pipeline/317219)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [October 21, 2022, 6:06pm UTC](https://discuss.elastic.co/t/cant-use-multiple-enrich-policies-in-the-same-ingest-pipeline/317219 "2022-10-21T18:06:24Z")
Hi Im trying to add enrich policies in the same ingest pipeline, but when I try to test it with this simulation I get an error. POST /\_ingest/pipeline/my-pipe/\_simulate?verbose=true { "docs": \[ { "\_index": "… --- ## [Delete document in read only Index](https://discuss.elastic.co/t/delete-document-in-read-only-index/317199)
**Author:** [@manupoti](https://discuss.elastic.co/u/manupoti)\ **Replies:** 1\ **Last updated:** [October 21, 2022, 4:33pm UTC](https://discuss.elastic.co/t/delete-document-in-read-only-index/317199 "2022-10-21T16:33:16Z")
I have two indexes leader index support read write operations and follower index support read operation only but need to delete document in follower index, How can we delete the documents from follower index? Please hel… --- ## [Reconfigure to default \`max\_num\_segments\`](https://discuss.elastic.co/t/reconfigure-to-default-max-num-segments/317186)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 1\ **Last updated:** [October 21, 2022, 10:37am UTC](https://discuss.elastic.co/t/reconfigure-to-default-max-num-segments/317186 "2022-10-21T10:37:27Z")
Hi, according documentation: max\_num\_segments (Optional, integer) The number of segments to merge to. To fully merge indices, set it to 1. Defaults to checking if a merge needs to execute. If so, executes it. Once d… --- ## [Java client: Aggregate class does not contain geohex\_grid kind](https://discuss.elastic.co/t/java-client-aggregate-class-does-not-contain-geohex-grid-kind/317172)
**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\ **Replies:** 0\ **Last updated:** [October 21, 2022, 8:17am UTC](https://discuss.elastic.co/t/java-client-aggregate-class-does-not-contain-geohex-grid-kind/317172 "2022-10-21T08:17:39Z")
Hi, We are trying to make geohex aggregations with the new java client. The request is possible, however the response misses a method in order to use it. I've opened an issue, but nothing has been done about it. Any i… --- ## [Slow sub-aggregation for low-cardinality field + high-cardinality field](https://discuss.elastic.co/t/slow-sub-aggregation-for-low-cardinality-field-high-cardinality-field/316992)
**Author:** [@astrodi](https://discuss.elastic.co/u/astrodi)\ **Replies:** 1\ **Last updated:** [October 21, 2022, 8:08am UTC](https://discuss.elastic.co/t/slow-sub-aggregation-for-low-cardinality-field-high-cardinality-field/316992 "2022-10-21T08:08:42Z")
Hi there, I'm having index having 14M documents, occupying 1.6TB of pri.storage with 50shards. There is query doing 22 aggregations (mainly simple terms aggs), took 0.3s. I needed to add one sub-aggregation to every o… --- ## [Is it possible to force document update despite a smaller version](https://discuss.elastic.co/t/is-it-possible-to-force-document-update-despite-a-smaller-version/317135)
**Author:** [@Achraf](https://discuss.elastic.co/u/Achraf)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 9:24pm UTC](https://discuss.elastic.co/t/is-it-possible-to-force-document-update-despite-a-smaller-version/317135 "2022-10-20T21:24:06Z")
Our documents are indexed in ES with a version, this allows us to be sure that only new versions of the documents are indexed. In some special circumstances, we would like to baypass this mechanism, meaning updating a do… --- ## [Restored indices in red](https://discuss.elastic.co/t/restored-indices-in-red/317099)
**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\ **Replies:** 3\ **Last updated:** [October 20, 2022, 8:59pm UTC](https://discuss.elastic.co/t/restored-indices-in-red/317099 "2022-10-20T20:59:12Z")
Hi, I just restored the ES snapshot, but however I get all the restored indices in red status. When I call GET \_cluster/allocation/explain , I get the following: { "index" : "componentinformation", "shard" : 0, … --- ## [How to use SSL certs with Fleet server - errors on startup](https://discuss.elastic.co/t/how-to-use-ssl-certs-with-fleet-server-errors-on-startup/317148)
**Author:** [@Bitdoctor](https://discuss.elastic.co/u/Bitdoctor)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 5:47pm UTC](https://discuss.elastic.co/t/how-to-use-ssl-certs-with-fleet-server-errors-on-startup/317148 "2022-10-20T17:47:52Z")
I get the following error trying to start Fleet server after installing it on my Logstash node: Fleet Server - Error - x509: certificate signed by unknown authority","ecs.version":"1.6.0" I'm attempting to use the self… --- ## [Repository-s3 plugin not synching snapshots](https://discuss.elastic.co/t/repository-s3-plugin-not-synching-snapshots/315117)
**Author:** [@Vishrant\_Gupta](https://discuss.elastic.co/u/Vishrant_Gupta)\ **Replies:** 12\ **Last updated:** [October 20, 2022, 4:54pm UTC](https://discuss.elastic.co/t/repository-s3-plugin-not-synching-snapshots/315117 "2022-10-20T16:54:55Z")
Hi there, I have two elasticsearch clusters running on two separate kubernetes clusters. Both the elasticsearch clusters have the repository-s3 plugin installed. "2": { "name": "elasticsearch-client-575db98f… --- ## [Index total\_fields \> limit](https://discuss.elastic.co/t/index-total-fields-limit/317139)
**Author:** [@nagrgk](https://discuss.elastic.co/u/nagrgk)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 4:50pm UTC](https://discuss.elastic.co/t/index-total-fields-limit/317139 "2022-10-20T16:50:18Z")
Hello ElasticTeam, we have an issue with the total\_fields limit, which is defaulted to 1000 and we have increased it to more than 1000, problem is it gets changed back to 1000 after a few days and it is not preserved w… --- ## [Use ctx in if condition is always null\_pointer\_exception](https://discuss.elastic.co/t/use-ctx-in-if-condition-is-always-null-pointer-exception/317121)
**Author:** [@HiganFish](https://discuss.elastic.co/u/HiganFish)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 2:53pm UTC](https://discuss.elastic.co/t/use-ctx-in-if-condition-is-always-null-pointer-exception/317121 "2022-10-20T14:53:15Z")
PUT \_ingest/pipeline/test1 { "processors": \[ {"dissect": { "field": "message", "pattern": "%{logdata}" }} \] } POST \_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ { … --- ## [Run a "lite" elasticsearch](https://discuss.elastic.co/t/run-a-lite-elasticsearch/317033)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 12:36pm UTC](https://discuss.elastic.co/t/run-a-lite-elasticsearch/317033 "2022-10-20T12:36:05Z")
We are using elasticsearch in CI jobs, so we want it as liter as possible. With only the desired features: "search" ! This is very serious problem, elasticsearch is looking too "big" and I see many people leaving it for … --- ## [Migrating Elastic Cloud to Elastic Hosted on Windows Server](https://discuss.elastic.co/t/migrating-elastic-cloud-to-elastic-hosted-on-windows-server/316792)
**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 11:24am UTC](https://discuss.elastic.co/t/migrating-elastic-cloud-to-elastic-hosted-on-windows-server/316792 "2022-10-20T11:24:52Z")
Hello, We have a Cloud(Elasticcloud) Instance hosted on AWS, and i would like to migrate the instance into a private Windows server. I couldn't find any instructions on the same could you please point me to the right r… --- ## [Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: \[error connecting to Elasticsearch](https://discuss.elastic.co/t/exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch/317060)
**Author:** [@Joao\_Malebo](https://discuss.elastic.co/u/Joao_Malebo)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 10:14am UTC](https://discuss.elastic.co/t/exiting-couldnt-connect-to-any-of-the-configured-elasticsearch-hosts-errors-error-connecting-to-elasticsearch/317060 "2022-10-20T10:14:29Z")
Hello dears, I'm getting errors when running filebeats on a remote server to test the Elasticsearch connection Below is the error image and description. sudo filebeat setup -E output.logstash.enabled=false -E output.e… --- ## [Systemd\[1\]: elasticsearch.service: Main process exited, code=exited, status=1/FAILURE](https://discuss.elastic.co/t/systemd-1-elasticsearch-service-main-process-exited-code-exited-status-1-failure/317015)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 2\ **Last updated:** [October 20, 2022, 7:47am UTC](https://discuss.elastic.co/t/systemd-1-elasticsearch-service-main-process-exited-code-exited-status-1-failure/317015 "2022-10-20T07:47:14Z")
Hello, i have an 8.4.x Elastic's version. After editing the .yml file, setting IP address, cluster name and http port, the service doesn't start. jourcnalcte -xeu elasticsearch.service ott 19 16:05:54 ubuntu-linux-2… --- ## [Records missing from Elastic Index when running our Talend ETL process](https://discuss.elastic.co/t/records-missing-from-elastic-index-when-running-our-talend-etl-process/317085)
**Author:** [@BroJo](https://discuss.elastic.co/u/BroJo)\ **Replies:** 0\ **Last updated:** [October 20, 2022, 8:57am UTC](https://discuss.elastic.co/t/records-missing-from-elastic-index-when-running-our-talend-etl-process/317085 "2022-10-20T08:57:00Z")
Hi there, In our application we decided to use elasticsearch create a daily snapshot of some critical application data for visualizations. The issue we are facing is that we are getting missing records in out etl proce… --- ## [Index doesn't rollover](https://discuss.elastic.co/t/index-doesnt-rollover/316837)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 5:55am UTC](https://discuss.elastic.co/t/index-doesnt-rollover/316837 "2022-10-20T05:55:15Z")
Hi, My server restarted, so I restarted my Filebeat, ES and Kibana. Initially, filebeat was giving the error of no write index is defined for alias \[filebeat-7.14.0\]. So I resolved it by using the Update Index Aliases A… --- ## [Is there a library/API in Java to connect and fetch data from Elasticsearch](https://discuss.elastic.co/t/is-there-a-library-api-in-java-to-connect-and-fetch-data-from-elasticsearch/317069)
**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 5:30am UTC](https://discuss.elastic.co/t/is-there-a-library-api-in-java-to-connect-and-fetch-data-from-elasticsearch/317069 "2022-10-20T05:30:58Z")
Is there a library/API in Java to connect and fetch data from Elasticsearch --- ## [Can ELK configure Remote Syslog Forwarding to Third party syslog server?](https://discuss.elastic.co/t/can-elk-configure-remote-syslog-forwarding-to-third-party-syslog-server/316953)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 5\ **Last updated:** [October 20, 2022, 3:30am UTC](https://discuss.elastic.co/t/can-elk-configure-remote-syslog-forwarding-to-third-party-syslog-server/316953 "2022-10-20T03:30:26Z")
Hi All, Can ELK Stack able to configure remote syslog forwarding to another syslog server? Kindly please advise. Thanks. --- ## [A node cannot be upgraded directly from version \[7.10.2\] to version \[8.4.3\], it must first be upgraded to version \[7.17.0\]](https://discuss.elastic.co/t/a-node-cannot-be-upgraded-directly-from-version-7-10-2-to-version-8-4-3-it-must-first-be-upgraded-to-version-7-17-0/317036)
**Author:** [@SUNA](https://discuss.elastic.co/u/SUNA)\ **Replies:** 6\ **Last updated:** [October 20, 2022, 3:27am UTC](https://discuss.elastic.co/t/a-node-cannot-be-upgraded-directly-from-version-7-10-2-to-version-8-4-3-it-must-first-be-upgraded-to-version-7-17-0/317036 "2022-10-20T03:27:11Z")
Hi Team, I'm not sure how elastic verion managed to upgrade the major version without tried anyone. Did the stack try to upgrade itself? Kindly help how can i fix this error. my kibana down due to this error --- ## [Watcher: same query two different ranges (times)](https://discuss.elastic.co/t/watcher-same-query-two-different-ranges-times/316982)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 2:43am UTC](https://discuss.elastic.co/t/watcher-same-query-two-different-ranges-times/316982 "2022-10-20T02:43:47Z")
Hi, it's possible to create a watcher with a single query on two different times? Ex. If a certain threshold is exceeded between 10-11 and 11-12 and so on. So the alert would trigger only if the two conditions are met … --- ## [Elastic Search Anomaly Detection - Influencing Anomaly Scoring](https://discuss.elastic.co/t/elastic-search-anomaly-detection-influencing-anomaly-scoring/316797)
**Author:** [@LordMathis](https://discuss.elastic.co/u/LordMathis)\ **Replies:** 1\ **Last updated:** [October 20, 2022, 2:15am UTC](https://discuss.elastic.co/t/elastic-search-anomaly-detection-influencing-anomaly-scoring/316797 "2022-10-20T02:15:29Z")
Hello, I am working with the Elasticsearch anomaly detection tools. I am looking for a way to advance the scoring of an anomaly based off a specific threshold. For instance, lets say we have a max on a number that repre… --- ## [How change pattern of data?](https://discuss.elastic.co/t/how-change-pattern-of-data/317045)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 11:08pm UTC](https://discuss.elastic.co/t/how-change-pattern-of-data/317045 "2022-10-19T23:08:23Z")
i have this format in kibana Jul 27, 2022 @ 15:27:26.598 but is have a problem not order correctly with create a field datetime in logstash filter { grok { match =\> \["message", "%{TIMESTAMP\_ISO8601:log… --- ## [Elastic Search Slow Response time range filter query](https://discuss.elastic.co/t/elastic-search-slow-response-time-range-filter-query/316936)
**Author:** [@prateek\_shekhar](https://discuss.elastic.co/u/prateek_shekhar)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 10:35pm UTC](https://discuss.elastic.co/t/elastic-search-slow-response-time-range-filter-query/316936 "2022-10-19T22:35:25Z")
Hi Everyone, We a have a use case where we have added a new float field to our Elasticsearch index. The structure of the field is: class Foo { Float x Float y } This is our filter query which uses the above field: {… --- ## [How to compare 2 values in the only field using elasticsearch on grafana dashboard](https://discuss.elastic.co/t/how-to-compare-2-values-in-the-only-field-using-elasticsearch-on-grafana-dashboard/316932)
**Author:** [@Vitoria\_De\_Lara](https://discuss.elastic.co/u/Vitoria_De_Lara)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 10:00pm UTC](https://discuss.elastic.co/t/how-to-compare-2-values-in-the-only-field-using-elasticsearch-on-grafana-dashboard/316932 "2022-10-19T22:00:11Z")
I need to create a dashboard that shows the two results of my boolean field. --- ## [Scroll in Python Elasticsearch client is not working](https://discuss.elastic.co/t/scroll-in-python-elasticsearch-client-is-not-working/317038)
**Author:** [@Yeashin\_Rabbi](https://discuss.elastic.co/u/Yeashin_Rabbi)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 5:28pm UTC](https://discuss.elastic.co/t/scroll-in-python-elasticsearch-client-is-not-working/317038 "2022-10-19T17:28:41Z")
I tried to scroll all documents with python. it return empty array of hits. Here is my code: es = Elasticsearch(self.source, http\_auth=(self.user, self.password), timeout=80000, request\_timeo… --- ## [Vulnerability (CVE-2022-42889) Apache Commons Text](https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009)
**Author:** [@mduijkers](https://discuss.elastic.co/u/mduijkers)\ **Replies:** 1\ **Last updated:** [October 19, 2022, 8:56pm UTC](https://discuss.elastic.co/t/vulnerability-cve-2022-42889-apache-commons-text/317009 "2022-10-19T20:56:55Z")
Vulnerability (CVE-2022-42889) Apache Commons Text. For this vulnerability ES needs to upgrade to Apache Commons Text 1.10.0 Source: https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om Which version of ES… --- ## [Send json data with escape character](https://discuss.elastic.co/t/send-json-data-with-escape-character/317041)
**Author:** [@Pratik1](https://discuss.elastic.co/u/Pratik1)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 5:50pm UTC](https://discuss.elastic.co/t/send-json-data-with-escape-character/317041 "2022-10-19T17:50:51Z")
I am using Kapacitor to send alerts via post method to elasticsearch. However, I was unable to do, so to debug further I was using a local django application to read the post response. By using alert template I am able t… --- ## [Elasticsearch proxy that can proxy searches to mask ES version?](https://discuss.elastic.co/t/elasticsearch-proxy-that-can-proxy-searches-to-mask-es-version/317028)
**Author:** [@Todd\_Lyons](https://discuss.elastic.co/u/Todd_Lyons)\ **Replies:** 0\ **Last updated:** [October 19, 2022, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-proxy-that-can-proxy-searches-to-mask-es-version/317028 "2022-10-19T16:07:44Z")
Hi, all! We have used PMM 1.x for quite some time (Percona Monitoring & Management) to monitor our various mysql servers. Under the hood it's grafana and victoriametrics. It can use ES clusters as a data source and we… --- ## [Treating your Cluster like cattle instead of pets](https://discuss.elastic.co/t/treating-your-cluster-like-cattle-instead-of-pets/316930)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 3:16pm UTC](https://discuss.elastic.co/t/treating-your-cluster-like-cattle-instead-of-pets/316930 "2022-10-19T15:16:01Z")
Anyone who has managed large server farms soon realizes that treating your servers like cattle instead of pets is the most efficient way to deploy, run, decommission nodes quickly and efficiently. If a server fails you, … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=354) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=356)