# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=360

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 361

---

## [Elasticsearch version for master and data node](https://discuss.elastic.co/t/elasticsearch-version-for-master-and-data-node/316480)

<div class="topic-metadata">

**Author:** [@Wan\_Nur\_Athirah\_Wan](https://discuss.elastic.co/u/Wan_Nur_Athirah_Wan)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 3:27am UTC](https://discuss.elastic.co/t/elasticsearch-version-for-master-and-data-node/316480 "2022-10-13T03:27:59Z")

</div>

Hai. I have one urgent question where below here is my concern: my client have his own master server where he claimed node and master need to be in same version in order to make Elasticsearch works. do the version nee…

---

## [CircuitBreakingException\[\[fielddata\] Data too large, data for \[\_id\] would be \[3105987990/2.8gb\],](https://discuss.elastic.co/t/circuitbreakingexception-fielddata-data-too-large-data-for-id-would-be-3105987990-2-8gb/316423)

<div class="topic-metadata">

**Author:** [@sasvmware](https://discuss.elastic.co/u/sasvmware)\
**Replies:** 2\
**Last updated:** [October 13, 2022, 2:10am UTC](https://discuss.elastic.co/t/circuitbreakingexception-fielddata-data-too-large-data-for-id-would-be-3105987990-2-8gb/316423 "2022-10-13T02:10:56Z")

</div>

Hi team, Getting below error while executing query through api. But query is working fine with postman and kibana. \[2022-10-12T02:09:20,323\]\[WARN \]\[o.e.i.b.fielddata \] \[cpq-xxxx-xxxmd1.xxxxxx.com\] \[fielddata\] Ne…

---

## [How do I copy and modify a schema?](https://discuss.elastic.co/t/how-do-i-copy-and-modify-a-schema/316477)

<div class="topic-metadata">

**Author:** [@wpm](https://discuss.elastic.co/u/wpm)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 12:59am UTC](https://discuss.elastic.co/t/how-do-i-copy-and-modify-a-schema/316477 "2022-10-13T00:59:06Z")

</div>

I indexed a bunch of documents and let Elastic automatically pick the field types. It got some of them right and some of them wrong. (e.g. a field is keyword when it should be string and vice versa). My documents have ma…

---

## [More like this query term questions](https://discuss.elastic.co/t/more-like-this-query-term-questions/316163)

<div class="topic-metadata">

**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 12:41am UTC](https://discuss.elastic.co/t/more-like-this-query-term-questions/316163 "2022-10-13T00:41:47Z")

</div>

We are using the More like this query and we have some questions about its operation (I have read this page More like this query | Elasticsearch Guide \[8.4\] | Elastic) max\_query\_terms: The maximum number of query terms …

---

## [Unreasonable search returns](https://discuss.elastic.co/t/unreasonable-search-returns/315062)

<div class="topic-metadata">

**Author:** [@Leroy\_Livingston](https://discuss.elastic.co/u/Leroy_Livingston)\
**Replies:** 7\
**Last updated:** [October 12, 2022, 10:43pm UTC](https://discuss.elastic.co/t/unreasonable-search-returns/315062 "2022-10-12T22:43:24Z")

</div>

I'm getting different results for specific search terms where if I search over a large number of fields it returns the correct number of items, but if I search over a smaller number of fields it returns a different numbe…

---

## [Elasticsearch stateless roadmap](https://discuss.elastic.co/t/elasticsearch-stateless-roadmap/316306)

<div class="topic-metadata">

**Author:** [@Nirdoc](https://discuss.elastic.co/u/Nirdoc)\
**Replies:** 0\
**Last updated:** [October 11, 2022, 9:35am UTC](https://discuss.elastic.co/t/elasticsearch-stateless-roadmap/316306 "2022-10-11T09:35:01Z")

</div>

Reading this recently published blog post I wonder how was this indexing improvement achieved. I have two main questions: What kind of storage was used for the stateful cluster? Was it network based storage or local SS…

---

## [Group regex while search](https://discuss.elastic.co/t/group-regex-while-search/316461)

<div class="topic-metadata">

**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Replies:** 0\
**Last updated:** [October 12, 2022, 6:09pm UTC](https://discuss.elastic.co/t/group-regex-while-search/316461 "2022-10-12T18:09:27Z")

</div>

Hi I have log file that contain lines like this: 08:00:00.032 user parameter: A\[0\]B\[0\]C: Action successful. How can i extract A value, B value while searching with regular expression. FYI:i don't want to change a…

---

## [Best solution for Aggregation SUM without losing precision](https://discuss.elastic.co/t/best-solution-for-aggregation-sum-without-losing-precision/316448)

<div class="topic-metadata">

**Author:** [@SooperTee](https://discuss.elastic.co/u/SooperTee)\
**Replies:** 0\
**Last updated:** [October 12, 2022, 3:35pm UTC](https://discuss.elastic.co/t/best-solution-for-aggregation-sum-without-losing-precision/316448 "2022-10-12T15:35:44Z")

</div>

Hi All, I think maybe similar subject was brought up here before, however, I was not able to find a satisfactory answer from the past posts in this forum. So I create a post of my own. I would like to state the constra…

---

## [Performance bottleneck enriching documents due to only a single node processing the ingest pipelines](https://discuss.elastic.co/t/performance-bottleneck-enriching-documents-due-to-only-a-single-node-processing-the-ingest-pipelines/315950)

<div class="topic-metadata">

**Author:** [@JvSPV](https://discuss.elastic.co/u/JvSPV)\
**Replies:** 6\
**Last updated:** [October 12, 2022, 3:24pm UTC](https://discuss.elastic.co/t/performance-bottleneck-enriching-documents-due-to-only-a-single-node-processing-the-ingest-pipelines/315950 "2022-10-12T15:24:03Z")

</div>

We have a cluster of 4 nodes: A, B, C, and D. All four have all default roles assigned, including the ingest role. We also have a separate master node. We have recently put new ingest pipelines into use with which we en…

---

## [Enrich execution takes long time (about 3 min)](https://discuss.elastic.co/t/enrich-execution-takes-long-time-about-3-min/316390)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 2\
**Last updated:** [October 12, 2022, 2:15pm UTC](https://discuss.elastic.co/t/enrich-execution-takes-long-time-about-3-min/316390 "2022-10-12T14:15:02Z")

</div>

We use elasticsearch 7.5.0 version, and we use enrich pipelint to join two index every 15 min. However, enrich execution time takes about 3-5 min. It's so long time... I don't know the exact cause. What is the altern…

---

## [Warning : regular expression has redundant nested repeat operator](https://discuss.elastic.co/t/warning-regular-expression-has-redundant-nested-repeat-operator/316436)

<div class="topic-metadata">

**Author:** [@PM75](https://discuss.elastic.co/u/PM75)\
**Replies:** 0\
**Last updated:** [October 12, 2022, 12:26pm UTC](https://discuss.elastic.co/t/warning-regular-expression-has-redundant-nested-repeat-operator/316436 "2022-10-12T12:26:51Z")

</div>

Hello, After an update to version 8.4.3, I have this warning: regular expression has redundant nested repeat operator I took the time to search for it, but no post was found: \[ES 7.6\] regular expression has redundant…

---

## [I can't use the bulk function on my centos8](https://discuss.elastic.co/t/i-cant-use-the-bulk-function-on-my-centos8/316361)

<div class="topic-metadata">

**Author:** [@Vitoria\_De\_Lara](https://discuss.elastic.co/u/Vitoria_De_Lara)\
**Replies:** 1\
**Last updated:** [October 12, 2022, 12:17pm UTC](https://discuss.elastic.co/t/i-cant-use-the-bulk-function-on-my-centos8/316361 "2022-10-12T12:17:47Z")

</div>

{ "error" : { "root\_cause" : \[ { "type" : "illegal\_argument\_exception", "reason" : "Malformed action/metadata line \[3\], expected START\_OBJECT or END\_OBJECT but found \[VALUE\_STRING\]" } \], "type" : "illegal\_argumen…

---

## [How to properly close a connection in a Java API Client?](https://discuss.elastic.co/t/how-to-properly-close-a-connection-in-a-java-api-client/314995)

<div class="topic-metadata">

**Author:** [@jacksparrow414](https://discuss.elastic.co/u/jacksparrow414)\
**Replies:** 5\
**Last updated:** [October 12, 2022, 11:58am UTC](https://discuss.elastic.co/t/how-to-properly-close-a-connection-in-a-java-api-client/314995 "2022-10-12T11:58:10Z")

</div>

Configuration Sample Code @ApplicationScoped public class ElasticSearchConfiguration { private static ElasticsearchClient client; private static synchronized void connectElasticSearchCluster() { if (Ob…

---

## [Lucene query for string containing # (hash symbol)](https://discuss.elastic.co/t/lucene-query-for-string-containing-hash-symbol/316429)

<div class="topic-metadata">

**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\
**Replies:** 0\
**Last updated:** [October 12, 2022, 11:28am UTC](https://discuss.elastic.co/t/lucene-query-for-string-containing-hash-symbol/316429 "2022-10-12T11:28:42Z")

</div>

How to query in Lucene for strings containing special characters such as @ and # for example #rescheduled i.e. it has to have the # in front of the word and not just the word itself, currently getting: Tried all sorts o…

---

## [Enrich processor time range](https://discuss.elastic.co/t/enrich-processor-time-range/316070)

<div class="topic-metadata">

**Author:** [@Marcin\_Frankiewicz](https://discuss.elastic.co/u/Marcin_Frankiewicz)\
**Replies:** 4\
**Last updated:** [October 12, 2022, 11:02am UTC](https://discuss.elastic.co/t/enrich-processor-time-range/316070 "2022-10-12T11:02:51Z")

</div>

Hi, i have a pipeline with enrich processor. When enriching is called.. what time range is used for enrich? All documents in index(defined in enrich policy) will be scanned? or maybe from last 15minutes? Elasticsearc…

---

## [Debug slow search query](https://discuss.elastic.co/t/debug-slow-search-query/316265)

<div class="topic-metadata">

**Author:** [@Icy\_Goose](https://discuss.elastic.co/u/Icy_Goose)\
**Replies:** 1\
**Last updated:** [October 12, 2022, 10:45am UTC](https://discuss.elastic.co/t/debug-slow-search-query/316265 "2022-10-12T10:45:35Z")

</div>

Hi everyone, I'm trying to debug a slow search query in Elasticsearch. Per-shard activities seems healthy but total amount to complete the request is surprisingly high. As I understand, the profile API does not include t…

---

## [Missing Data Nodes on Cluster Monitoring of Kibana](https://discuss.elastic.co/t/missing-data-nodes-on-cluster-monitoring-of-kibana/314546)

<div class="topic-metadata">

**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\
**Replies:** 10\
**Last updated:** [October 12, 2022, 10:11am UTC](https://discuss.elastic.co/t/missing-data-nodes-on-cluster-monitoring-of-kibana/314546 "2022-10-12T10:11:10Z")

</div>

A pleasant day everyone! I have this issue on my Kibana Cluster Monitoring, it happens that my data nodes are missing and only the monitoring nodes is there. I checked the config xpack.monitoring.collection.enabled : tr…

---

## [Is any Java client V7 working with ES V8?](https://discuss.elastic.co/t/is-any-java-client-v7-working-with-es-v8/316325)

<div class="topic-metadata">

**Author:** [@Eduardo\_Montes](https://discuss.elastic.co/u/Eduardo_Montes)\
**Replies:** 3\
**Last updated:** [October 12, 2022, 6:56am UTC](https://discuss.elastic.co/t/is-any-java-client-v7-working-with-es-v8/316325 "2022-10-12T06:56:26Z")

</div>

Hello, I'm trying to make upgrade from ES V6 to V8. Unfortunately I have to use Java 8 only (on client side). I found out that compatible (it means supported) Java 8 client (TransportClient) for ES V8 is also V7.17.6. …

---

## [Policy is not getting applied to the particular index in elastic](https://discuss.elastic.co/t/policy-is-not-getting-applied-to-the-particular-index-in-elastic/316399)

<div class="topic-metadata">

**Author:** [@AnandRajalingam](https://discuss.elastic.co/u/AnandRajalingam)\
**Replies:** 0\
**Last updated:** [October 12, 2022, 6:39am UTC](https://discuss.elastic.co/t/policy-is-not-getting-applied-to-the-particular-index-in-elastic/316399 "2022-10-12T06:39:08Z")

</div>

We have upgraded our elastic from 6.xxx to 7.17.15 version recently. Our elastic policy was working fine in the old instances but not working in the new server. Please find below steps which are performed while creating…

---

## [Is Rolling restart documentation correct?](https://discuss.elastic.co/t/is-rolling-restart-documentation-correct/316338)

<div class="topic-metadata">

**Author:** [@landychev](https://discuss.elastic.co/u/landychev)\
**Replies:** 2\
**Last updated:** [October 12, 2022, 6:33am UTC](https://discuss.elastic.co/t/is-rolling-restart-documentation-correct/316338 "2022-10-12T06:33:05Z")

</div>

I have read the documentation for rolling restart at. and more about cluster.routing.allocation.enable What i am confused about is step 7, Re-enable shard allocation . Why would you set it to null when the default v…

---

## [Full Text Search Force Find All Tokens](https://discuss.elastic.co/t/full-text-search-force-find-all-tokens/316215)

<div class="topic-metadata">

**Author:** [@Saeed\_Mozaffari](https://discuss.elastic.co/u/Saeed_Mozaffari)\
**Replies:** 4\
**Last updated:** [October 12, 2022, 6:24am UTC](https://discuss.elastic.co/t/full-text-search-force-find-all-tokens/316215 "2022-10-12T06:24:22Z")

</div>

I try to implement full text search. I have a question related to this subject. I want to at search time, when i search a text, for example "Hello Saeed", return result only when all tokens of that text exist in a mess…

---

## [Documentation for Monitoring Elasticsearch with Metricbeat is outdated](https://discuss.elastic.co/t/documentation-for-monitoring-elasticsearch-with-metricbeat-is-outdated/315804)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 1\
**Last updated:** [October 12, 2022, 2:54am UTC](https://discuss.elastic.co/t/documentation-for-monitoring-elasticsearch-with-metricbeat-is-outdated/315804 "2022-10-12T02:54:20Z")

</div>

Hello, I've created a new production cluster on 8.4 and a new monitoring cluster as well, following the documentation to configure monitoring using metricbeat there is this step: Set xpack.monitoring.collection.enable…

---

## [Monitoring indexes size is increasing](https://discuss.elastic.co/t/monitoring-indexes-size-is-increasing/315935)

<div class="topic-metadata">

**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\
**Replies:** 1\
**Last updated:** [October 12, 2022, 2:52am UTC](https://discuss.elastic.co/t/monitoring-indexes-size-is-increasing/315935 "2022-10-12T02:52:19Z")

</div>

HI Team, I am facing disk slowness issue in our non prod environment when we process some huge data. when i verified indexes. .monitoring index is also increasing continuously whenever we insert data into actual index. …

---

## [Must\_not with exists query on nested object returns excluded field](https://discuss.elastic.co/t/must-not-with-exists-query-on-nested-object-returns-excluded-field/316289)

<div class="topic-metadata">

**Author:** [@myx](https://discuss.elastic.co/u/myx)\
**Replies:** 1\
**Last updated:** [October 12, 2022, 2:45am UTC](https://discuss.elastic.co/t/must-not-with-exists-query-on-nested-object-returns-excluded-field/316289 "2022-10-12T02:45:36Z")

</div>

Hi all, I am querying using search API and tried a query using must\_not exists to get documents where there is no list of emails in a group within a class. However, it still returns documents with email\_list inside the g…

---

## [Aggregation is not working occasionally](https://discuss.elastic.co/t/aggregation-is-not-working-occasionally/316392)

<div class="topic-metadata">

**Author:** [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Replies:** 0\
**Last updated:** [October 12, 2022, 2:01am UTC](https://discuss.elastic.co/t/aggregation-is-not-working-occasionally/316392 "2022-10-12T02:01:15Z")

</div>

Hi, I'm using Elasticsearch 7.16.2 and posting query by Dev Tools of Kibana 7.16.2. I got strange results from an aggregation query. When I repeat completely the same query: GET ss-mix2\_omp-01\_active/\_search { "siz…

---

## [Elasticsearch, Kibana, Apache-Nifi](https://discuss.elastic.co/t/elasticsearch-kibana-apache-nifi/316382)

<div class="topic-metadata">

**Author:** [@sytherin](https://discuss.elastic.co/u/sytherin)\
**Replies:** 0\
**Last updated:** [October 11, 2022, 8:49pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-apache-nifi/316382 "2022-10-11T20:49:35Z")

</div>

Hi! so I am trying to build a log with Apache Nifi and send it to Elasticsearch, and Kibana on ubuntu. After downloading the Apache Nifi, i ran the \<gpg --import KEYS\> to verify he integrity of the files, i got \<gpg: ca…

---

## [Elasticsearch Search Query](https://discuss.elastic.co/t/elasticsearch-search-query/316372)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 0\
**Last updated:** [October 11, 2022, 7:09pm UTC](https://discuss.elastic.co/t/elasticsearch-search-query/316372 "2022-10-11T19:09:49Z")

</div>

Hi Team, I have written a DSL Query as shown below: GET metricbeat\*/\_search { "size": 0, "aggs": { "hosts": { "terms": { "field": "agent.hostname", "size": "100", "order": { "memory": "desc" } }, "aggs": { …

---

## [How to set the max file size to unlimited in windows 10?](https://discuss.elastic.co/t/how-to-set-the-max-file-size-to-unlimited-in-windows-10/316366)

<div class="topic-metadata">

**Author:** [@JamesD\_7](https://discuss.elastic.co/u/JamesD_7)\
**Replies:** 0\
**Last updated:** [October 11, 2022, 6:30pm UTC](https://discuss.elastic.co/t/how-to-set-the-max-file-size-to-unlimited-in-windows-10/316366 "2022-10-11T18:30:03Z")

</div>

I'm ingesting a single CSV file in ES 8.4 using Kibana, but I found I hit the maximum size limit of 100k rows and had to split the file in two. I saw in the docs that you can set this file: /etc/security/limits.conf usi…

---

## [org.elasticsearch.action.admin.indices.exists.indices.IndicesExistsResponse deprecated in 8.x](https://discuss.elastic.co/t/org-elasticsearch-action-admin-indices-exists-indices-indicesexistsresponse-deprecated-in-8-x/316332)

<div class="topic-metadata">

**Author:** [@Pachidermus](https://discuss.elastic.co/u/Pachidermus)\
**Replies:** 2\
**Last updated:** [October 11, 2022, 5:16pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-admin-indices-exists-indices-indicesexistsresponse-deprecated-in-8-x/316332 "2022-10-11T17:16:34Z")

</div>

Hi, org.elasticsearch.action.admin.indices.exists.indices.IndicesExistsResponse was available in 7.x but no longer in 8.x. What is the replacement for this API (needed to update a plugin to support 8.x)? Thanks.

---

## [Spring + ElasticSearch - How to bulk create or update document with autogenerated string \_id/id](https://discuss.elastic.co/t/spring-elasticsearch-how-to-bulk-create-or-update-document-with-autogenerated-string-id-id/316352)

<div class="topic-metadata">

**Author:** [@Java2avaj](https://discuss.elastic.co/u/Java2avaj)\
**Replies:** 1\
**Last updated:** [October 11, 2022, 4:49pm UTC](https://discuss.elastic.co/t/spring-elasticsearch-how-to-bulk-create-or-update-document-with-autogenerated-string-id-id/316352 "2022-10-11T16:49:00Z")

</div>

currently, we are forcing the \_id of the Elasticsearch documents by setting the id field. This simplifies the design, as it allows to perform updates and/or creation of new documents without previously knowing whether a …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=359)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=361)
