# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=374 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 375 --- ## ["latest" continuous transform destination index does not have all unique key docs consistently/continually](https://discuss.elastic.co/t/latest-continuous-transform-destination-index-does-not-have-all-unique-key-docs-consistently-continually/314414)
**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\ **Replies:** 6\ **Last updated:** [September 15, 2022, 9:27am UTC](https://discuss.elastic.co/t/latest-continuous-transform-destination-index-does-not-have-all-unique-key-docs-consistently-continually/314414 "2022-09-15T09:27:38Z")
I have the following latest continuous transform running. The source index has 10 unique key values. The destination index, at various times, will have between 1 and 10 docs in it when I view (and repeatedly refresh) th… --- ## [Snapshot - no space left on device](https://discuss.elastic.co/t/snapshot-no-space-left-on-device/314486)
**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\ **Replies:** 0\ **Last updated:** [September 15, 2022, 9:11am UTC](https://discuss.elastic.co/t/snapshot-no-space-left-on-device/314486 "2022-09-15T09:11:27Z")
Hi all, Today we run out of disk space for snapshots. The major problem is that it's impossible to delete old snapshots when there is no space left. I faced this problem in the past and was able to manage it by doing … --- ## [How to search for specific word and exact match in Elasticsearch](https://discuss.elastic.co/t/how-to-search-for-specific-word-and-exact-match-in-elasticsearch/314471)
**Author:** [@Amitav](https://discuss.elastic.co/u/Amitav)\ **Replies:** 1\ **Last updated:** [September 15, 2022, 5:49am UTC](https://discuss.elastic.co/t/how-to-search-for-specific-word-and-exact-match-in-elasticsearch/314471 "2022-09-15T05:49:10Z")
sample data for title actiontype test booleanTest test-demo test\_demo Test new account object sync accounts data test default Mapping for title "title": { "type": "text", "fields": { "keyword… --- ## [Error 7024 windows 10 pro](https://discuss.elastic.co/t/error-7024-windows-10-pro/313812)
**Author:** [@David\_Dudi\_Hefer](https://discuss.elastic.co/u/David_Dudi_Hefer)\ **Replies:** 15\ **Last updated:** [September 15, 2022, 5:41am UTC](https://discuss.elastic.co/t/error-7024-windows-10-pro/313812 "2022-09-15T05:41:39Z")
The Elasticsearch 7.16.3 (elasticsearch-service-x64) service terminated with the following service-specific error: Incorrect function. can't browse localhost:9200 please help !! --- ## [SHA256 GPG Key](https://discuss.elastic.co/t/sha256-gpg-key/314426)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 2:38pm UTC](https://discuss.elastic.co/t/sha256-gpg-key/314426 "2022-09-14T14:38:38Z")
Installing logstash on Rocky Linux 9 is failing with this error message: "Key import failed (code 2)" I'm not 100% sure, but I think the problem may be that RHEL 9 has deprecated SHA-1. Is there a SHA256 or SHA521 vers… --- ## [Executing a search query with 30K+ clauses](https://discuss.elastic.co/t/executing-a-search-query-with-30k-clauses/314441)
**Author:** [@tnitave](https://discuss.elastic.co/u/tnitave)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 8:29pm UTC](https://discuss.elastic.co/t/executing-a-search-query-with-30k-clauses/314441 "2022-09-14T20:29:38Z")
I am interested in executing an Elasticsearch search query with 5000+ terms across 5 different fields which leads to 25K+ clauses. According to documentation default max\_clause\_count limit is set to 1024 and updating thi… --- ## [Snapshot contents](https://discuss.elastic.co/t/snapshot-contents/313576)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 5:30pm UTC](https://discuss.elastic.co/t/snapshot-contents/313576 "2022-09-14T17:30:37Z")
Whether snapshot will copy the apm and watcher indices as well? --- ## [I cannot see local rules](https://discuss.elastic.co/t/i-cannot-see-local-rules/314227)
**Author:** [@Giovanni\_Memoli](https://discuss.elastic.co/u/Giovanni_Memoli)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 4:53pm UTC](https://discuss.elastic.co/t/i-cannot-see-local-rules/314227 "2022-09-14T16:53:15Z")
Hi, an old colleague created a local rule on an old Wazuh server and it worked. Now I created a new wazuh server and copy & paste the rule, under local rule, but I cannot see it under discovery session. Rule is: \ **Author:** [@samjpv](https://discuss.elastic.co/u/samjpv)\ **Replies:** 5\ **Last updated:** [September 8, 2022, 6:10pm UTC](https://discuss.elastic.co/t/new-data-stream-backing-index-dropping-logs/313913 "2022-09-08T18:10:07Z") I currently have microservice logs going from kubernetes -\> confluent kafka -\> elastic via sink connector (I have confirmed that they are reaching kafka but not elastic). On elastic I have a corresponding data stream tha… --- ## [Check a field contains string using script](https://discuss.elastic.co/t/check-a-field-contains-string-using-script/314424)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 2:34pm UTC](https://discuss.elastic.co/t/check-a-field-contains-string-using-script/314424 "2022-09-14T14:34:11Z")
I would like to run a query to check if a field is substring of a query string parameter. if yes , I want to return 1. I am new to scripting and below code is not working. Blockquote GET testspan/\_search { "size": … --- ## [ES 6.4.2 - MapperParsingException when performing Bulk requests](https://discuss.elastic.co/t/es-6-4-2-mapperparsingexception-when-performing-bulk-requests/314057)
**Author:** [@JPS\_23](https://discuss.elastic.co/u/JPS_23)\ **Replies:** 3\ **Last updated:** [September 14, 2022, 1:54pm UTC](https://discuss.elastic.co/t/es-6-4-2-mapperparsingexception-when-performing-bulk-requests/314057 "2022-09-14T13:54:40Z")
Hi! I have been experiencing a MapperParsingException when performing Bulk requests on the Elastic Search 6.4.2 instance. This issue is happening on all the environments (development, qa, production). The weird thing is… --- ## [Restrict Concurrent Users getting same results for same search creiteria](https://discuss.elastic.co/t/restrict-concurrent-users-getting-same-results-for-same-search-creiteria/314373)
**Author:** [@anish\_a\_nair](https://discuss.elastic.co/u/anish_a_nair)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 12:18pm UTC](https://discuss.elastic.co/t/restrict-concurrent-users-getting-same-results-for-same-search-creiteria/314373 "2022-09-14T12:18:56Z")
Hi, I have requirement to restrict the concurrent users viewing same results if they use same search criteria. The example of my use case is listed below let's assume i have below numbers in a field called "Numbers" 8… --- ## [Get a private key from http\_ca.crt](https://discuss.elastic.co/t/get-a-private-key-from-http-ca-crt/314408)
**Author:** [@elkuser1234](https://discuss.elastic.co/u/elkuser1234)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 12:18pm UTC](https://discuss.elastic.co/t/get-a-private-key-from-http-ca-crt/314408 "2022-09-14T12:18:31Z")
Hi How i can get a private key from /etc/elasticsearch/certs/http\_ca.crt file ? I need that key to create cert for logstash ./bin/elasticsearch-certutil cert --name logstash --ca-cert /etc/elasticsearch/certs/http\_ca… --- ## [Elastic search response capped to 10k records](https://discuss.elastic.co/t/elastic-search-response-capped-to-10k-records/314192)
**Author:** [@Deepanshu\_Rai](https://discuss.elastic.co/u/Deepanshu_Rai)\ **Replies:** 4\ **Last updated:** [September 14, 2022, 12:07pm UTC](https://discuss.elastic.co/t/elastic-search-response-capped-to-10k-records/314192 "2022-09-14T12:07:16Z")
I am trying to query my index which has more then 500k records but i am only able to extract 10k records at a time. now i understand this has to do with performance of the application but how can i do bulk extract? with… --- ## [Help for my first open source contribution](https://discuss.elastic.co/t/help-for-my-first-open-source-contribution/314322)
**Author:** [@Akshay\_Bhadange](https://discuss.elastic.co/u/Akshay_Bhadange)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 12:03pm UTC](https://discuss.elastic.co/t/help-for-my-first-open-source-contribution/314322 "2022-09-14T12:03:02Z")
I want to contribute to this project so i just want to know is my laptop specs sufficient enough for running this project and its a windows machine Specs: Os : windows 10 Ram : 8 gb Ssd : 120 Thanks in advance , lo… --- ## [Difference b/w Normal DBs vs Elasticsearch](https://discuss.elastic.co/t/difference-b-w-normal-dbs-vs-elasticsearch/314207)
**Author:** [@Karan\_Koya](https://discuss.elastic.co/u/Karan_Koya)\ **Replies:** 8\ **Last updated:** [September 14, 2022, 10:27am UTC](https://discuss.elastic.co/t/difference-b-w-normal-dbs-vs-elasticsearch/314207 "2022-09-14T10:27:45Z")
I have recently started exploring Elastic Stack and came across your Beginner's series which has solved many doubts about Elasticsearch but I am still not sure why we not use Database and prefer Elasticsearch, and why/ho… --- ## [Preprocessing of alerts to be send using httppost](https://discuss.elastic.co/t/preprocessing-of-alerts-to-be-send-using-httppost/313627)
**Author:** [@Pratik1](https://discuss.elastic.co/u/Pratik1)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 10:25am UTC](https://discuss.elastic.co/t/preprocessing-of-alerts-to-be-send-using-httppost/313627 "2022-09-14T10:25:30Z")
I am using a tool called Kapacitor to send alerts using httppost method to elasticsearch. However, in one list I am getting both time and value column with datatypes date and float respectively. This is causing exceptio… --- ## [Minimal ES server version to work with elasticsearch-py](https://discuss.elastic.co/t/minimal-es-server-version-to-work-with-elasticsearch-py/314385)
**Author:** [@Naams](https://discuss.elastic.co/u/Naams)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 8:30am UTC](https://discuss.elastic.co/t/minimal-es-server-version-to-work-with-elasticsearch-py/314385 "2022-09-14T08:30:53Z")
Hi, I know that UnsupportedProductError is raised by elasticsearch-py package since version 7.14 when ES server is "too old". The two solutions I have to keep using this package are : Downgrade my python package to \<7… --- ## [Hot/warm architecture](https://discuss.elastic.co/t/hot-warm-architecture/314382)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 8:52am UTC](https://discuss.elastic.co/t/hot-warm-architecture/314382 "2022-09-14T08:52:47Z")
Hi there, I'd like to ask. if an index enters a warm state, can it still perform write operations? i read this blog but didn't found the information i need Thanks --- ## [Runtime field Create Nested Object](https://discuss.elastic.co/t/runtime-field-create-nested-object/312316)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 4\ **Last updated:** [September 14, 2022, 8:47am UTC](https://discuss.elastic.co/t/runtime-field-create-nested-object/312316 "2022-09-14T08:47:19Z")
Hello, I'm trying to create a run-time field which creates an array. I've been doing simple things like creating strings based on a conditional field but I can't seem to get the right syntax for a multi-value string obj… --- ## [Unable to Join New node to existing cluster](https://discuss.elastic.co/t/unable-to-join-new-node-to-existing-cluster/314353)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 7:15am UTC](https://discuss.elastic.co/t/unable-to-join-new-node-to-existing-cluster/314353 "2022-09-14T07:15:39Z")
Hi, I'm using Elasticsearch 8.4 version. I was able to install Elasticsearch and Kibana. Then I tried to install on 2nd node. I followed the steps in https://www.elastic.co/guide/en/elasticsearch/reference/current/rp… --- ## [PDF, jpeg/jpg and other file types ingests](https://discuss.elastic.co/t/pdf-jpeg-jpg-and-other-file-types-ingests/313860)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 15\ **Last updated:** [September 14, 2022, 7:08am UTC](https://discuss.elastic.co/t/pdf-jpeg-jpg-and-other-file-types-ingests/313860 "2022-09-14T07:08:19Z")
Hello There! I am looking for a tutorial how can I ingest/parse/analyze files like \*.pdf or .jpeg/.jpg and other types. I have found this article but I don't use docker/k8s. Could you be so kind and show me other tuto… --- ## [Unable to start Elastic.service 'setting \[cluster.initial\_master\_nodes\] is not allowed when \[discovery.type\] is set to \[single-node\]'](https://discuss.elastic.co/t/unable-to-start-elastic-service-setting-cluster-initial-master-nodes-is-not-allowed-when-discovery-type-is-set-to-single-node/314375)
**Author:** [@Neophyte](https://discuss.elastic.co/u/Neophyte)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 6:59am UTC](https://discuss.elastic.co/t/unable-to-start-elastic-service-setting-cluster-initial-master-nodes-is-not-allowed-when-discovery-type-is-set-to-single-node/314375 "2022-09-14T06:59:35Z")
I am trying to set up a SIEM HOME LAB environment and install the latest Elastic and kibana on Ubuntu, but the service is not starting up, and am receiving the following errors: messi@fifa:~/Desktop$ sudo systemctl rest… --- ## [Elastic unable to start after turning it off](https://discuss.elastic.co/t/elastic-unable-to-start-after-turning-it-off/313532)
**Author:** [@pabloochoa](https://discuss.elastic.co/u/pabloochoa)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 6:37am UTC](https://discuss.elastic.co/t/elastic-unable-to-start-after-turning-it-off/313532 "2022-09-14T06:37:43Z")
Hello, I have a cluster of 3 ES nodes that use 7.16.3. All of them are both masters and data (as I am trying to deploy a minimal ES cluster that is resistant to the failure of one of the nodes). Maybe this is not a good… --- ## [Upgrading Elastic Stack from 7.7.0 to 7.17.6](https://discuss.elastic.co/t/upgrading-elastic-stack-from-7-7-0-to-7-17-6/314224)
**Author:** [@ozonshak](https://discuss.elastic.co/u/ozonshak)\ **Replies:** 3\ **Last updated:** [September 14, 2022, 6:27am UTC](https://discuss.elastic.co/t/upgrading-elastic-stack-from-7-7-0-to-7-17-6/314224 "2022-09-14T06:27:24Z")
Hello. It has been over 2 years since I last installed the Elastic stack locally in our environment (Kibana, Elasticsearch, Logstash, FileBeat). The version we are on right now is 7.7.0 for all products. I'm not sure … --- ## [Selective deletion of indices](https://discuss.elastic.co/t/selective-deletion-of-indices/314370)
**Author:** [@newbie2022](https://discuss.elastic.co/u/newbie2022)\ **Replies:** 1\ **Last updated:** [September 14, 2022, 6:13am UTC](https://discuss.elastic.co/t/selective-deletion-of-indices/314370 "2022-09-14T06:13:42Z")
I have a ruby web app with a search function that is enabled by Elasticsearch. There are 2 types of content Content A which should be searchable indefinitely Content B which is time-sensitive and no longer relevant af… --- ## [How to handle more than 32 filter in elasticseacrh UI](https://discuss.elastic.co/t/how-to-handle-more-than-32-filter-in-elasticseacrh-ui/314362)
**Author:** [@manojxumulus](https://discuss.elastic.co/u/manojxumulus)\ **Replies:** 2\ **Last updated:** [September 14, 2022, 5:21am UTC](https://discuss.elastic.co/t/how-to-handle-more-than-32-filter-in-elasticseacrh-ui/314362 "2022-09-14T05:21:28Z")
Hello, I have one issue related to the limit on filters applied to results in Elasticsearch UI, I would like to know how I can handle more than 32 filters or add any error boundary in the app for handling the error. Lo… --- ## [Unassigned shards on data-streams indices following upgrade to 7.17.5](https://discuss.elastic.co/t/unassigned-shards-on-data-streams-indices-following-upgrade-to-7-17-5/314130)
**Author:** [@nadler](https://discuss.elastic.co/u/nadler)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 5:08am UTC](https://discuss.elastic.co/t/unassigned-shards-on-data-streams-indices-following-upgrade-to-7-17-5/314130 "2022-09-14T05:08:42Z")
Hey, Recently i have upgraded a few of our clusters from 7.12.0 to 7.17.5. After the upgrade two indices were created: .ds-.logs-deprecation.elasticsearch-default-2022.09.07-000001 and .ds-ilm-history-5-2022.09.07-000… --- ## [Can I display search box and search results in separate React components](https://discuss.elastic.co/t/can-i-display-search-box-and-search-results-in-separate-react-components/314364)
**Author:** [@Sheng111](https://discuss.elastic.co/u/Sheng111)\ **Replies:** 0\ **Last updated:** [September 14, 2022, 5:04am UTC](https://discuss.elastic.co/t/can-i-display-search-box-and-search-results-in-separate-react-components/314364 "2022-09-14T05:04:32Z")
I am thinking to create a search box with Elastic search UI library, my requirements are display search box in header of all the website, but search results will display in a different React components as a part of the p… --- ## [Urgent : How to get the IOPS logs from Windows Server 2003](https://discuss.elastic.co/t/urgent-how-to-get-the-iops-logs-from-windows-server-2003/314335)
**Author:** [@zaheernew](https://discuss.elastic.co/u/zaheernew)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 8:10pm UTC](https://discuss.elastic.co/t/urgent-how-to-get-the-iops-logs-from-windows-server-2003/314335 "2022-09-13T20:10:13Z")
Hi Community, I'm new to the community and I need an urgent support. I have a windows server 2003 R2 based couple of DB servers. My questions is how can I collect the IOPS log and monitor via Kibana interface. Note: … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=373) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=375)