# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=359

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 360

---

## [Accessing Elasticsearch in Cloud through "http" web interface](https://discuss.elastic.co/t/accessing-elasticsearch-in-cloud-through-http-web-interface/316509)

<div class="topic-metadata">

**Author:** [@shivang.ahd](https://discuss.elastic.co/u/shivang.ahd)\
**Replies:** 3\
**Last updated:** [October 14, 2022, 4:58am UTC](https://discuss.elastic.co/t/accessing-elasticsearch-in-cloud-through-http-web-interface/316509 "2022-10-14T04:58:56Z")

</div>

Hi If I create an account in Elastic cloud and start a project there... Is there anyway I can access Elasticsearch in Elastic Cloud through my Jupyter notebook in Google cloud or colab through web interface of "…

---

## [Elastic agents are not sending data to fleet server](https://discuss.elastic.co/t/elastic-agents-are-not-sending-data-to-fleet-server/315599)

<div class="topic-metadata">

**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\
**Replies:** 3\
**Last updated:** [October 14, 2022, 4:37am UTC](https://discuss.elastic.co/t/elastic-agents-are-not-sending-data-to-fleet-server/315599 "2022-10-14T04:37:59Z")

</div>

Hello everyone! I set up a Fleet Server in CentOS with the command sudo ./elastic-agent install \\ --fleet-server-es=http://\<host-ip\>:9200 \\ --fleet-server-service-token=\<token\> \\ --fleet-server-policy=\<policy-id)…

---

## [Delay write to replicas while indexing (not initial data population)](https://discuss.elastic.co/t/delay-write-to-replicas-while-indexing-not-initial-data-population/316546)

<div class="topic-metadata">

**Author:** [@stretchy](https://discuss.elastic.co/u/stretchy)\
**Replies:** 3\
**Last updated:** [October 14, 2022, 12:47am UTC](https://discuss.elastic.co/t/delay-write-to-replicas-while-indexing-not-initial-data-population/316546 "2022-10-14T00:47:05Z")

</div>

Hi, Is there a way to delay writing to replicas while indexing? When indexing data continuously, can we reply to the client after writing only to the primary shard, and replica can be written after a while? Things to …

---

## [How to Sync MongoDB with Azure Elasticloud](https://discuss.elastic.co/t/how-to-sync-mongodb-with-azure-elasticloud/316093)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [October 14, 2022, 12:25am UTC](https://discuss.elastic.co/t/how-to-sync-mongodb-with-azure-elasticloud/316093 "2022-10-14T00:25:01Z")

</div>

Hi, we are trying to sync the data from MongoDB on premise to Azure Elasticloud. Today we have this integration with mongo and elastic using monstash but both are on premise, now that we are moving to elastic cloud on a…

---

## [Replica can not assigned shard in single node](https://discuss.elastic.co/t/replica-can-not-assigned-shard-in-single-node/316504)

<div class="topic-metadata">

**Author:** [@kongnyang](https://discuss.elastic.co/u/kongnyang)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 10:56pm UTC](https://discuss.elastic.co/t/replica-can-not-assigned-shard-in-single-node/316504 "2022-10-13T22:56:24Z")

</div>

I wonder if the replica cannot assign a shard on a single node ( elsticsearch version 8.1.2 ). I know that single node does not need replica but version 7.17.1 can assign shard in replica. I've done the upgrade v 7.17.…

---

## [Update the context of one document based on the context of other document (Please help)](https://discuss.elastic.co/t/update-the-context-of-one-document-based-on-the-context-of-other-document-please-help/316479)

<div class="topic-metadata">

**Author:** [@Venkat\_Pavan1](https://discuss.elastic.co/u/Venkat_Pavan1)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 10:55pm UTC](https://discuss.elastic.co/t/update-the-context-of-one-document-based-on-the-context-of-other-document-please-help/316479 "2022-10-13T22:55:38Z")

</div>

Hey, We have two types of documents type A and type B both are connected through an Id field Type A { "id": "abc", "name": "xyz", "class": "mno" } Type B { "id": "abc", } I want to update all the Type B docume…

---

## [Elasticsearch 7.17 support](https://discuss.elastic.co/t/elasticsearch-7-17-support/316505)

<div class="topic-metadata">

**Author:** [@Eduardo\_Montes](https://discuss.elastic.co/u/Eduardo_Montes)\
**Replies:** 2\
**Last updated:** [October 13, 2022, 10:55pm UTC](https://discuss.elastic.co/t/elasticsearch-7-17-support/316505 "2022-10-13T22:55:12Z")

</div>

How long will be supported ES 7.17? Is any end of support date?

---

## [Databricks + ElasticSearch setup](https://discuss.elastic.co/t/databricks-elasticsearch-setup/316578)

<div class="topic-metadata">

**Author:** [@protatopancake](https://discuss.elastic.co/u/protatopancake)\
**Replies:** 3\
**Last updated:** [October 13, 2022, 10:42pm UTC](https://discuss.elastic.co/t/databricks-elasticsearch-setup/316578 "2022-10-13T22:42:04Z")

</div>

First and foremost, apologies for the very simple question. Today is my first day using Elasticsearch. After doing some research I found I can use the tool via a Databricks cluster, which I'm moderately familiar with. I…

---

## [Filter isn't working when trying to create metric visualization panel](https://discuss.elastic.co/t/filter-isnt-working-when-trying-to-create-metric-visualization-panel/316583)

<div class="topic-metadata">

**Author:** [@ernieip1](https://discuss.elastic.co/u/ernieip1)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 9:54pm UTC](https://discuss.elastic.co/t/filter-isnt-working-when-trying-to-create-metric-visualization-panel/316583 "2022-10-13T21:54:09Z")

</div>

Hi, I'm trying to create a panel to calculate the Percentage of Success jenkin builds / Total jenkin builds over 14 days. However, I'm unable to get the filter working in Metrics visualization. For the regular visualiz…

---

## [Trying to run multiple "jobs" in fscrawler (docker)](https://discuss.elastic.co/t/trying-to-run-multiple-jobs-in-fscrawler-docker/316581)

<div class="topic-metadata">

**Author:** [@rwitamb](https://discuss.elastic.co/u/rwitamb)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 9:29pm UTC](https://discuss.elastic.co/t/trying-to-run-multiple-jobs-in-fscrawler-docker/316581 "2022-10-13T21:29:54Z")

</div>

Hey, I was trying to do some text extraction/OCR stuff with a bunch of PDFs, DOCX, and images. I stumbled across fscrawler and it's been working pretty nicely. Here's how my setup looks like. This is the fscrawler ser…

---

## [Python - Sniff Options Attempt to match IP verse Certificate](https://discuss.elastic.co/t/python-sniff-options-attempt-to-match-ip-verse-certificate/316570)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 7:14pm UTC](https://discuss.elastic.co/t/python-sniff-options-attempt-to-match-ip-verse-certificate/316570 "2022-10-13T19:14:33Z")

</div>

My ES setup has 3 master nodes, 5 data nodes and a couple ingest nodes. I'm trying to create an ES object with sniffing turned on. import os from elasticsearch import Elasticsearch ES = Elasticsearch(os.environ.get("E…

---

## [Threading and the Elasticsearch Context in Python](https://discuss.elastic.co/t/threading-and-the-elasticsearch-context-in-python/316561)

<div class="topic-metadata">

**Author:** [@jhop](https://discuss.elastic.co/u/jhop)\
**Replies:** 3\
**Last updated:** [October 13, 2022, 6:59pm UTC](https://discuss.elastic.co/t/threading-and-the-elasticsearch-context-in-python/316561 "2022-10-13T18:59:58Z")

</div>

When I am programming to connect and use Elasticsearch in Python, is the Context thread safe? i.e. do I need one instance per thread or can I use a static Context for all threads?

---

## [Elasticsearch Ingest Pipeline Index Routing](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-index-routing/316474)

<div class="topic-metadata">

**Author:** [@matled](https://discuss.elastic.co/u/matled)\
**Replies:** 7\
**Last updated:** [October 13, 2022, 4:25pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-index-routing/316474 "2022-10-13T16:25:24Z")

</div>

We currently have an Elastic-Stack with seven Nodes and about 50 different integrations running. One Feature we currently miss is the possibility to somehow route the data to a specific index. Let's say we habe an Integ…

---

## [SERVICE\_UNAVAILABLE/2/no master](https://discuss.elastic.co/t/service-unavailable-2-no-master/316076)

<div class="topic-metadata">

**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\
**Replies:** 7\
**Last updated:** [October 13, 2022, 3:33pm UTC](https://discuss.elastic.co/t/service-unavailable-2-no-master/316076 "2022-10-13T15:33:39Z")

</div>

Hi, I am new to Elasticsearch and need your help to understad the issue. Here is my elasticsearch.yml ======================== Elasticsearch Configuration ========================= cluster.name: ELKcluster node.name: …

---

## [Elasticsearch Query with subquery](https://discuss.elastic.co/t/elasticsearch-query-with-subquery/316545)

<div class="topic-metadata">

**Author:** [@samy111](https://discuss.elastic.co/u/samy111)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearch-query-with-subquery/316545 "2022-10-13T13:57:29Z")

</div>

I'm relatively new to elasticsearch. I can able to make simple query in dev tools. I need a help on converting the following sql into es query select c.conversationid from conversations c where c.conversationid not in …

---

## [No handler found for uri \[/icsne/emails\] and method \[POST\] (version : 8.4.3)](https://discuss.elastic.co/t/no-handler-found-for-uri-icsne-emails-and-method-post-version-8-4-3/316192)

<div class="topic-metadata">

**Author:** [@Abid\_Hussain1](https://discuss.elastic.co/u/Abid_Hussain1)\
**Replies:** 3\
**Last updated:** [October 13, 2022, 1:32pm UTC](https://discuss.elastic.co/t/no-handler-found-for-uri-icsne-emails-and-method-post-version-8-4-3/316192 "2022-10-13T13:32:19Z")

</div>

Elastic search running successfully, i created index but i could not create type following errors is showing in postman // "error": "no handler found for uri \[/icsne/emails\] and method \[POST\]" and console shows follo…

---

## [Elasticsearch "status" : "yellow" How to fix the status?](https://discuss.elastic.co/t/elasticsearch-status-yellow-how-to-fix-the-status/316467)

<div class="topic-metadata">

**Author:** [@igor\_denisov](https://discuss.elastic.co/u/igor_denisov)\
**Replies:** 3\
**Last updated:** [October 13, 2022, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-status-yellow-how-to-fix-the-status/316467 "2022-10-13T13:01:56Z")

</div>

\#curl kibana:kibana@172.17.0.1:9200/\_cluster/health?pretty=true { "cluster\_name" : "xxxxx-cluster", "status" : "yellow", "timed\_out" : false, "number\_of\_nodes" : 2, "number\_of\_data\_nodes" : 2, "active\_primar…

---

## [Opendistro for 8.x](https://discuss.elastic.co/t/opendistro-for-8-x/316534)

<div class="topic-metadata">

**Author:** [@zurrehma](https://discuss.elastic.co/u/zurrehma)\
**Replies:** 4\
**Last updated:** [October 13, 2022, 12:13pm UTC](https://discuss.elastic.co/t/opendistro-for-8-x/316534 "2022-10-13T12:13:09Z")

</div>

Hi, We are trying to migrate from Elasticsearch 7.x to 8.x. We were using opendistro security, job scheduler, alerting, anomaly-detection and index management plugins. I am seeing now opendistro doesn't have new version…

---

## [Calculate duration of transactions](https://discuss.elastic.co/t/calculate-duration-of-transactions/316522)

<div class="topic-metadata">

**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 10:53am UTC](https://discuss.elastic.co/t/calculate-duration-of-transactions/316522 "2022-10-13T10:53:08Z")

</div>

Hi need to calcualte duration bettween each Out/In where A=A+100 B=B IDS=IDS 00:03:02.067 app catZZ\_DDP\_AP: IN\[host\]A\[1000\]B\[123456\]IDS\[123456789987\] 00:03:02.110 app catZZ\_DDP\_AP: OUT\[host\]A\[1100\]B\[123456\]IDS\[1234567…

---

## [Elasticsearch in docker container running as root](https://discuss.elastic.co/t/elasticsearch-in-docker-container-running-as-root/316441)

<div class="topic-metadata">

**Author:** [@HeadScratcher](https://discuss.elastic.co/u/HeadScratcher)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 10:55am UTC](https://discuss.elastic.co/t/elasticsearch-in-docker-container-running-as-root/316441 "2022-10-13T10:55:05Z")

</div>

Hi all, I've been wrestling with this problem for a few days now and im scratching my head a bit as i can't figure out what's wrong. I ran a fresh docker pull and install with docker-compose and it ran fine. then i ra…

---

## [\`UseAllElastic\` references a Package that doesn't exist](https://discuss.elastic.co/t/useallelastic-references-a-package-that-doesnt-exist/316511)

<div class="topic-metadata">

**Author:** [@sejhemming](https://discuss.elastic.co/u/sejhemming)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 9:02am UTC](https://discuss.elastic.co/t/useallelastic-references-a-package-that-doesnt-exist/316511 "2022-10-13T09:02:22Z")

</div>

If I add .UseAllElastic() references Microsoft.AspNetCore.Http.Abstractions, Version=5.0.0.0. No such version exists. The latest version of that package is 2.2.0.0

---

## [Watcher, Convert timestap field in loop](https://discuss.elastic.co/t/watcher-convert-timestap-field-in-loop/316428)

<div class="topic-metadata">

**Author:** [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\
**Replies:** 2\
**Last updated:** [October 13, 2022, 8:36am UTC](https://discuss.elastic.co/t/watcher-convert-timestap-field-in-loop/316428 "2022-10-13T08:36:47Z")

</div>

Hi everyone, I' d like to iterate through ctx.payload.hits.hits and convert @timestamp field from ISO8601 to milliseconds. I have the following configuration: "actions": { "log\_hits": { "foreach": "ctx.payload.h…

---

## [Custom text analyzer for url encoded logs](https://discuss.elastic.co/t/custom-text-analyzer-for-url-encoded-logs/316499)

<div class="topic-metadata">

**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 7:45am UTC](https://discuss.elastic.co/t/custom-text-analyzer-for-url-encoded-logs/316499 "2022-10-13T07:45:12Z")

</div>

Hi, I am ingesting log files to Elasticsearch(v7.17.1) and using Kibana(v7.17.1) to search the logs. Some of my log lines have url encoded strings like below. I am trying to use custom text analyzers to be able to sear…

---

## [Bucket aggregation with java api and export in csv](https://discuss.elastic.co/t/bucket-aggregation-with-java-api-and-export-in-csv/314935)

<div class="topic-metadata">

**Author:** [@Rain\_Water](https://discuss.elastic.co/u/Rain_Water)\
**Replies:** 0\
**Last updated:** [September 22, 2022, 11:04am UTC](https://discuss.elastic.co/t/bucket-aggregation-with-java-api-and-export-in-csv/314935 "2022-09-22T11:04:50Z")

</div>

I have query below which i want to buckets result, i created the query with the help of grafana but im not able to convert it into java program. GET /\_search { "query": { "bool": { "filter": \[ { …

---

## [Is it possible to get matched\_queries in filter or post\_filter](https://discuss.elastic.co/t/is-it-possible-to-get-matched-queries-in-filter-or-post-filter/316495)

<div class="topic-metadata">

**Author:** [@Shreyas\_Bangramanjes](https://discuss.elastic.co/u/Shreyas_Bangramanjes)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 7:10am UTC](https://discuss.elastic.co/t/is-it-possible-to-get-matched-queries-in-filter-or-post-filter/316495 "2022-10-13T07:10:45Z")

</div>

{ "\_index" : "testing1", "\_type" : "\_doc", "\_id" : "Ru6Yz4MBTaJ23jzlvcOg", "\_score" : 0.10535768, "\_source" : { "contentH1" : "300 Frågor och svar om Entreprenadjur…

---

## ['cluster:admin/xpack/monitoring/bulk' privilege for beats\_system](https://discuss.elastic.co/t/cluster-admin-xpack-monitoring-bulk-privilege-for-beats-system/315753)

<div class="topic-metadata">

**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 6:51am UTC](https://discuss.elastic.co/t/cluster-admin-xpack-monitoring-bulk-privilege-for-beats-system/315753 "2022-10-13T06:51:56Z")

</div>

On my Elasticsearch 7.x cluster, the beats\_system role has the cluster privileges monitor and cluster:admin/xpack/monitoring/bulk. The cluster:admin/xpack/monitoring/bulk privilege is not mentioned on Security privilege…

---

## ['monitor' privilege for beats\_system](https://discuss.elastic.co/t/monitor-privilege-for-beats-system/315754)

<div class="topic-metadata">

**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 6:40am UTC](https://discuss.elastic.co/t/monitor-privilege-for-beats-system/315754 "2022-10-13T06:40:10Z")

</div>

On my Elasticsearch 7.x cluster, the beats\_system role has the cluster privileges monitor and cluster:admin/xpack/monitoring/bulk. According to Grant privileges and roles needed for monitoring | Filebeat Reference \[7.17…

---

## [Update a filed with script, there's error caused by "unsupported\_operation\_exception: null"](https://discuss.elastic.co/t/update-a-filed-with-script-theres-error-caused-by-unsupported-operation-exception-null/316491)

<div class="topic-metadata">

**Author:** [@chocolateBlack](https://discuss.elastic.co/u/chocolateBlack)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 6:19am UTC](https://discuss.elastic.co/t/update-a-filed-with-script-theres-error-caused-by-unsupported-operation-exception-null/316491 "2022-10-13T06:19:56Z")

</div>

using script update object field , unsupported\_operation\_exception occors. elasticsearch version 7.10. PUT script\_test/ { "mappings" : { "dynamic" : "strict", "properties" : { "batch\_name" : { …

---

## [\[SOLVED\]\[ES 8.4.3\] Monitoring metricbeat - Unable to find the cluster in the selected time range](https://discuss.elastic.co/t/solved-es-8-4-3-monitoring-metricbeat-unable-to-find-the-cluster-in-the-selected-time-range/316247)

<div class="topic-metadata">

**Author:** [@mib](https://discuss.elastic.co/u/mib)\
**Replies:** 2\
**Last updated:** [October 13, 2022, 6:04am UTC](https://discuss.elastic.co/t/solved-es-8-4-3-monitoring-metricbeat-unable-to-find-the-cluster-in-the-selected-time-range/316247 "2022-10-13T06:04:12Z")

</div>

Hi, I'm having a problem displaying monitoring on an Elasticsearch cluster (3 nodes), with the error message "Unable to find the cluster in the selected time range. UUID: 1xTxMsopToqNnvd\_mbmcHw HTTP 404" when I visit th…

---

## [Enable audit logging (deployment complains about format)](https://discuss.elastic.co/t/enable-audit-logging-deployment-complains-about-format/314478)

<div class="topic-metadata">

**Author:** [@Giorgi\_Jambazishvili](https://discuss.elastic.co/u/Giorgi_Jambazishvili)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 4:10am UTC](https://discuss.elastic.co/t/enable-audit-logging-deployment-complains-about-format/314478 "2022-10-13T04:10:35Z")

</div>

I try to enable logging on elastic cloud deployment. For this I change the cluster configuration and my yml looks like this: This configuration complains about the fact that "include" should be type of "text" (" \* Elast…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=358)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=360)
