# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=362

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 363

---

## [Script field is automatically deleted from the index pattern](https://discuss.elastic.co/t/script-field-is-automatically-deleted-from-the-index-pattern/316175)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [October 10, 2022, 12:23pm UTC](https://discuss.elastic.co/t/script-field-is-automatically-deleted-from-the-index-pattern/316175 "2022-10-10T12:23:50Z")

</div>

Hi Community, recently we add a custom field that parse the string field to integer field that time it was showing and after 7 days it is deleted. We have added the field by clicking on Add Field.

---

## [Roadmap for "Stateless" Elasticsearch](https://discuss.elastic.co/t/roadmap-for-stateless-elasticsearch/316107)

<div class="topic-metadata">

**Author:** [@benjismith](https://discuss.elastic.co/u/benjismith)\
**Replies:** 8\
**Last updated:** [October 10, 2022, 9:28am UTC](https://discuss.elastic.co/t/roadmap-for-stateless-elasticsearch/316107 "2022-10-10T09:28:46Z")

</div>

I read yesterday's blog post about the future of a "stateless" Elasticsearch architecture, where one of the big benefits is the ability to scale indexing workloads separately from search workloads... I have a 30+ node…

---

## [Disable default secret creating in kubernetes](https://discuss.elastic.co/t/disable-default-secret-creating-in-kubernetes/316196)

<div class="topic-metadata">

**Author:** [@Norsu296](https://discuss.elastic.co/u/Norsu296)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 8:46am UTC](https://discuss.elastic.co/t/disable-default-secret-creating-in-kubernetes/316196 "2022-10-10T08:46:03Z")

</div>

Hi, how can I disable secret creating for elasticsearch? I'm using deployment with Kind: Elasticsearch and I want to use my own password but elastic is still recreating k8s password like elastic: password with name xyz-e…

---

## [Not Able to see Indexes in Kibana, nor in logs of Elastic Search](https://discuss.elastic.co/t/not-able-to-see-indexes-in-kibana-nor-in-logs-of-elastic-search/316178)

<div class="topic-metadata">

**Author:** [@shivamec92](https://discuss.elastic.co/u/shivamec92)\
**Replies:** 0\
**Last updated:** [October 10, 2022, 6:48am UTC](https://discuss.elastic.co/t/not-able-to-see-indexes-in-kibana-nor-in-logs-of-elastic-search/316178 "2022-10-10T06:48:05Z")

</div>

This is the logs that i am getting from Debug mode of Elastic Search Authentication of \[elastic\] using realm \[reserved/reserved\] with token \[UsernamePasswordToken\] was \[AuthenticationResult{status=SUCCESS, value=User\[us…

---

## [Doubts about building a relationship master detail](https://discuss.elastic.co/t/doubts-about-building-a-relationship-master-detail/316170)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 6:27am UTC](https://discuss.elastic.co/t/doubts-about-building-a-relationship-master-detail/316170 "2022-10-10T06:27:09Z")

</div>

Currently, I have an index that collects the logs of a series of control centers, and obtain from them the technical data of their electrical consumption, on and off status, and other kinds of data that allow me to know …

---

## [System.AggregateException: One or more errors occurred. ---\> Elasticsearch.Net.ElasticsearchClientException: The client is unable to verify that the server is Elasticsearch due to an unsuccessful product check call](https://discuss.elastic.co/t/system-aggregateexception-one-or-more-errors-occurred-elasticsearch-net-elasticsearchclientexception-the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-an-unsuccessful-product-check-call/315970)

<div class="topic-metadata">

**Author:** [@arulmani](https://discuss.elastic.co/u/arulmani)\
**Replies:** 2\
**Last updated:** [October 10, 2022, 6:00am UTC](https://discuss.elastic.co/t/system-aggregateexception-one-or-more-errors-occurred-elasticsearch-net-elasticsearchclientexception-the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-an-unsuccessful-product-check-call/315970 "2022-10-10T06:00:25Z")

</div>

The below specified two different errors are logged intermittently during the bulk delete operation on a 3 million data. The cron job to delete the records in bulk runs from 8 seconds to 15 seconds on every 2 minutes in…

---

## [Openshift problem with logstash in other server](https://discuss.elastic.co/t/openshift-problem-with-logstash-in-other-server/316157)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 4\
**Last updated:** [October 9, 2022, 10:21pm UTC](https://discuss.elastic.co/t/openshift-problem-with-logstash-in-other-server/316157 "2022-10-09T22:21:44Z")

</div>

2022-10-09T19:03:48,320\]\[WARN \]\[logstash.outputs.elasticsearch\]\[openshift1\] Attempted to resurrect connection to dead ES instance, but got an error {:url=\>"http://elastichttp2-n-turri-dev.apps.sandbox-m2.ll9k.p1.openshif…

---

## [Upgrade from 7.x to 8.4.1](https://discuss.elastic.co/t/upgrade-from-7-x-to-8-4-1/316027)

<div class="topic-metadata">

**Author:** [@Ravi\_S1](https://discuss.elastic.co/u/Ravi_S1)\
**Replies:** 3\
**Last updated:** [October 9, 2022, 2:36pm UTC](https://discuss.elastic.co/t/upgrade-from-7-x-to-8-4-1/316027 "2022-10-09T14:36:47Z")

</div>

After upgrade from 7.7.1 to 8.4.1, Kibana 8.4.1 is showing down.. "{"statusCode":503,"error":"Service Unavailable","message":"\[No shard available for \[get \[.kibana\_8.4.1\]\[space:default\]: routing \[null\]\]: no\_shard\_availab…

---

## [Elasticsearch Highlight the result of script fields](https://discuss.elastic.co/t/elasticsearch-highlight-the-result-of-script-fields/316121)

<div class="topic-metadata">

**Author:** [@AmirMohammad\_Safari](https://discuss.elastic.co/u/AmirMohammad_Safari)\
**Replies:** 2\
**Last updated:** [October 9, 2022, 2:11pm UTC](https://discuss.elastic.co/t/elasticsearch-highlight-the-result-of-script-fields/316121 "2022-10-09T14:11:19Z")

</div>

I write out an analyzer to remove the HTML tags in my search results, After that I thought I could highlight the results with a common query, But in the highlighting field I got other html contents that you removed with …

---

## [Switching from platinum to basic](https://discuss.elastic.co/t/switching-from-platinum-to-basic/315856)

<div class="topic-metadata">

**Author:** [@heric](https://discuss.elastic.co/u/heric)\
**Replies:** 4\
**Last updated:** [October 9, 2022, 1:32pm UTC](https://discuss.elastic.co/t/switching-from-platinum-to-basic/315856 "2022-10-09T13:32:20Z")

</div>

Hi, Unfortunately our elastic license is going to expired and not going to be extended. Right now i am using some features that is using license such as anomaly detection, SAML authentication and centralized pipeline. …

---

## [Showing only non-cleared events in a visualization](https://discuss.elastic.co/t/showing-only-non-cleared-events-in-a-visualization/316138)

<div class="topic-metadata">

**Author:** [@DirtyRaven](https://discuss.elastic.co/u/DirtyRaven)\
**Replies:** 0\
**Last updated:** [October 8, 2022, 9:27pm UTC](https://discuss.elastic.co/t/showing-only-non-cleared-events-in-a-visualization/316138 "2022-10-08T21:27:53Z")

</div>

I would like to make a visualization that only displays memory, CPU, and file system events. The trick is, I would like the visualization to only display these events if they are still over the threshold, but hosts wher…

---

## [List of Query DSL keywords and additional instructions](https://discuss.elastic.co/t/list-of-query-dsl-keywords-and-additional-instructions/316132)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 4\
**Last updated:** [October 8, 2022, 5:49pm UTC](https://discuss.elastic.co/t/list-of-query-dsl-keywords-and-additional-instructions/316132 "2022-10-08T17:49:22Z")

</div>

Hello, as i understood Query DSL has in line 1 of the Query spezial keywords that are not part of the JSON. JSON starts at line 2 of the Query and is only one JSON-Object accept BULK-Requests, where multiple JSON Object…

---

## [Conditional IF and ELIF in set processor](https://discuss.elastic.co/t/conditional-if-and-elif-in-set-processor/316123)

<div class="topic-metadata">

**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\
**Replies:** 2\
**Last updated:** [October 8, 2022, 5:34pm UTC](https://discuss.elastic.co/t/conditional-if-and-elif-in-set-processor/316123 "2022-10-08T17:34:01Z")

</div>

I'm setting the value of a field named "customer" depending on the value of field "destination.ip" via ingest pipeline. Currently I'm using two independent Set processors via ingest pipeline for IPv4 and IPv6. But it wou…

---

## [Is Elastic Java Client actually communicating with Query DSL?](https://discuss.elastic.co/t/is-elastic-java-client-actually-communicating-with-query-dsl/316128)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 2\
**Last updated:** [October 8, 2022, 3:31pm UTC](https://discuss.elastic.co/t/is-elastic-java-client-actually-communicating-with-query-dsl/316128 "2022-10-08T15:31:55Z")

</div>

Hello, writing my master thesis. So a) if we are in Kibana we can open the dev console and type Query DSL (formatted in JSON) to send it to Elasticsearch. b) additionally we can send Query DSL (formatted in JSON) fro…

---

## [Elk on openshift server have limit?](https://discuss.elastic.co/t/elk-on-openshift-server-have-limit/316124)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 6\
**Last updated:** [October 8, 2022, 3:00pm UTC](https://discuss.elastic.co/t/elk-on-openshift-server-have-limit/316124 "2022-10-08T15:00:09Z")

</div>

hello i' ve mounted elk vers 7.16.2 but in console i see this logs \[2022-10-08T11:59:14,859\]\[ERROR\]\[logstash.licensechecker.licensereader\] Unable to retrieve license information from license server {:message=\>"No Avail…

---

## [Elastic Search and Python pushing error](https://discuss.elastic.co/t/elastic-search-and-python-pushing-error/316105)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 1\
**Last updated:** [October 8, 2022, 9:07am UTC](https://discuss.elastic.co/t/elastic-search-and-python-pushing-error/316105 "2022-10-08T09:07:33Z")

</div>

elasticsearch.BadRequestError: BadRequestError(400, 'illegal\_argument\_exception', 'Action/metadata line \[1\] contains an unknown parameter \[\_type\]') How do you resolve this error? I'm trying to push the data through my p…

---

## [Unable to Tessellate shape. Possible malformed shape detected](https://discuss.elastic.co/t/unable-to-tessellate-shape-possible-malformed-shape-detected/316122)

<div class="topic-metadata">

**Author:** [@baiwenbo1997](https://discuss.elastic.co/u/baiwenbo1997)\
**Replies:** 0\
**Last updated:** [October 8, 2022, 8:58am UTC](https://discuss.elastic.co/t/unable-to-tessellate-shape-possible-malformed-shape-detected/316122 "2022-10-08T08:58:21Z")

</div>

Why is this polygon judged to be a self-intersecting figure? If it is the accuracy problem that causes the judgment to be self-intersecting, how can I make the judgment during storage, or please tell me what is the accu…

---

## [Machine learning java api](https://discuss.elastic.co/t/machine-learning-java-api/316119)

<div class="topic-metadata">

**Author:** [@ericdwz](https://discuss.elastic.co/u/ericdwz)\
**Replies:** 0\
**Last updated:** [October 8, 2022, 8:05am UTC](https://discuss.elastic.co/t/machine-learning-java-api/316119 "2022-10-08T08:05:21Z")

</div>

Hi there, Is there any document or instruction on how to use the machine learning api in java? For example, how can I convert the following DSL into java POST /\_ml/trained\_models/bert-base-chinese/\_infer { "docs": {…

---

## [Action \[cluster:monitor/nodes/stats\[n\]\] timed out](https://discuss.elastic.co/t/action-cluster-monitor-nodes-stats-n-timed-out/312818)

<div class="topic-metadata">

**Author:** [@dukewrz](https://discuss.elastic.co/u/dukewrz)\
**Replies:** 8\
**Last updated:** [October 8, 2022, 6:56am UTC](https://discuss.elastic.co/t/action-cluster-monitor-nodes-stats-n-timed-out/312818 "2022-10-08T06:56:41Z")

</div>

I can't take the log file out. Logs says: Received response for a request that as timed out, sent \[xxx/xxx\] ago..... tells that a timeout occurred when the master tries to collecting node stats info from one particu…

---

## [Upgrading from ES 6.8 to 7.17 and got MasterNotDiscoveredException](https://discuss.elastic.co/t/upgrading-from-es-6-8-to-7-17-and-got-masternotdiscoveredexception/316108)

<div class="topic-metadata">

**Author:** [@jayp-glb](https://discuss.elastic.co/u/jayp-glb)\
**Replies:** 0\
**Last updated:** [October 7, 2022, 10:07pm UTC](https://discuss.elastic.co/t/upgrading-from-es-6-8-to-7-17-and-got-masternotdiscoveredexception/316108 "2022-10-07T22:07:02Z")

</div>

Hello community, In my Elasticsearch upgrade crazyness, I was finally able to reindex my old ES 5.0 cluster into 6.8, though with lots of adjustments because of the only one mapping per index rule, but I digress. I hav…

---

## [Is it possible for Elasticsearch to integration with sophos and watchguard firewall?](https://discuss.elastic.co/t/is-it-possible-for-elasticsearch-to-integration-with-sophos-and-watchguard-firewall/315518)

<div class="topic-metadata">

**Author:** [@vyom](https://discuss.elastic.co/u/vyom)\
**Replies:** 0\
**Last updated:** [September 30, 2022, 6:00am UTC](https://discuss.elastic.co/t/is-it-possible-for-elasticsearch-to-integration-with-sophos-and-watchguard-firewall/315518 "2022-09-30T06:00:06Z")

</div>

Hello everyone, I am working on a project "Elastic integration with sophis and watchguard firewall". And i am very confuse about how the logs will come to the elastic. Can someone guide me to this???

---

## [FORCE index rollover](https://discuss.elastic.co/t/force-index-rollover/315958)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 5\
**Last updated:** [October 7, 2022, 5:33pm UTC](https://discuss.elastic.co/t/force-index-rollover/315958 "2022-10-07T17:33:40Z")

</div>

Hello, I sheep logs from multiples servers via the winlogbeat agent that are stored with index name ecs-agent-windows. This index is managed by a test0 policy (ILM) and configured with the agent-wingbeat template. The …

---

## [Switch from Watchers to Rules and Connectors](https://discuss.elastic.co/t/switch-from-watchers-to-rules-and-connectors/316088)

<div class="topic-metadata">

**Author:** [@federica.forti](https://discuss.elastic.co/u/federica.forti)\
**Replies:** 0\
**Last updated:** [October 7, 2022, 2:05pm UTC](https://discuss.elastic.co/t/switch-from-watchers-to-rules-and-connectors/316088 "2022-10-07T14:05:40Z")

</div>

Hi, we would like to move from watchers to rules (Rule and connectors section). In particular, in the past, we have defined a watcher that performs the following queries / aggregations: { "query": { "bool": { …

---

## [Failed to create query: maxClauseCount is set to 1024](https://discuss.elastic.co/t/failed-to-create-query-maxclausecount-is-set-to-1024/316089)

<div class="topic-metadata">

**Author:** [@GuillermoDelaGala](https://discuss.elastic.co/u/GuillermoDelaGala)\
**Replies:** 1\
**Last updated:** [October 7, 2022, 2:51pm UTC](https://discuss.elastic.co/t/failed-to-create-query-maxclausecount-is-set-to-1024/316089 "2022-10-07T14:51:32Z")

</div>

Hi everyone, first of all, saying that I'm quite new with Elasticsearch. I was diving into other similar issues related with my problem, but none of the solutions worked for me. My code has a query which says: failed…

---

## [Elasticsearch 8 Java Client ResponseException status line \[HTTP/1.1 404 Not Found\] {"statusCode":404,"error":"Not Found","message":"Not Found"}](https://discuss.elastic.co/t/elasticsearch-8-java-client-responseexception-status-line-http-1-1-404-not-found-statuscode-404-error-not-found-message-not-found/316019)

<div class="topic-metadata">

**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\
**Replies:** 3\
**Last updated:** [October 7, 2022, 2:44pm UTC](https://discuss.elastic.co/t/elasticsearch-8-java-client-responseexception-status-line-http-1-1-404-not-found-statuscode-404-error-not-found-message-not-found/316019 "2022-10-07T14:44:11Z")

</div>

Hello, this is Michael from germany and i am reaching out to you because i have to finish my master thesis before 31.10.2022. I had working code in july 2022 which i didn't touch since then. I used the online 2 weeks t…

---

## [“The file could not be processed due to error: “Gateway Timeout”"](https://discuss.elastic.co/t/the-file-could-not-be-processed-due-to-error-gateway-timeout/316079)

<div class="topic-metadata">

**Author:** [@Veera\_V](https://discuss.elastic.co/u/Veera_V)\
**Replies:** 2\
**Last updated:** [October 7, 2022, 1:46pm UTC](https://discuss.elastic.co/t/the-file-could-not-be-processed-due-to-error-gateway-timeout/316079 "2022-10-07T13:46:55Z")

</div>

Hi Team, Getting "Gateway Timeout" while importing ES 6.3 dashboard file to OS 1.3, Can any one help here is the time out is due to large json file size ?

---

## [Aggregate whole groups when search machtes only a few items of that group](https://discuss.elastic.co/t/aggregate-whole-groups-when-search-machtes-only-a-few-items-of-that-group/316082)

<div class="topic-metadata">

**Author:** [@lanwin](https://discuss.elastic.co/u/lanwin)\
**Replies:** 0\
**Last updated:** [October 7, 2022, 1:30pm UTC](https://discuss.elastic.co/t/aggregate-whole-groups-when-search-machtes-only-a-few-items-of-that-group/316082 "2022-10-07T13:30:02Z")

</div>

Hi, i am looking for a solution of the following problem. I have 20 million "Item" objects. Each Item Object have a GroupId property where 1-5000 Items a grouped together. Each Item has some other properties we can use …

---

## [ILM index rollover error](https://discuss.elastic.co/t/ilm-index-rollover-error/315938)

<div class="topic-metadata">

**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\
**Replies:** 6\
**Last updated:** [October 7, 2022, 1:10pm UTC](https://discuss.elastic.co/t/ilm-index-rollover-error/315938 "2022-10-07T13:10:06Z")

</div>

Hi everyone, Hope you will be able to help me another time. I have an elasticsearch cluster with an ILM Policy to manage the index rollover. The rollover is based on the index size. Everything was running well. The c…

---

## [Cluster state has not been recovered yet, cannot write to the \[null\] index](https://discuss.elastic.co/t/cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index/315945)

<div class="topic-metadata">

**Author:** [@iLucas.Bechlte.exe](https://discuss.elastic.co/u/iLucas.Bechlte.exe)\
**Replies:** 1\
**Last updated:** [October 7, 2022, 1:00pm UTC](https://discuss.elastic.co/t/cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index/315945 "2022-10-07T13:00:24Z")

</div>

Hi, i try to run an elastic stack with the localhost as the only node. I followed the official installation guide, but when I get to the running check it shows me this error after entering the password: {"error":{"root…

---

## [Multi-node backup and restore to GCS bucket](https://discuss.elastic.co/t/multi-node-backup-and-restore-to-gcs-bucket/316064)

<div class="topic-metadata">

**Author:** [@mohan\_s\_b](https://discuss.elastic.co/u/mohan_s_b)\
**Replies:** 0\
**Last updated:** [October 7, 2022, 11:06am UTC](https://discuss.elastic.co/t/multi-node-backup-and-restore-to-gcs-bucket/316064 "2022-10-07T11:06:19Z")

</div>

Hi All, I have deployed multi-node elasticsearch cluster in kubernetes and i wanted to take backup and restore. Since i have multi nodes i am not sure where to install google plugins and to upload service account.

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=361)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=363)
