# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=375 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 376 --- ## [Elasticsearch Installation 8.4](https://discuss.elastic.co/t/elasticsearch-installation-8-4/313601)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 9\ **Last updated:** [September 13, 2022, 5:42pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-8-4/313601 "2022-09-13T17:42:19Z")
Hi Team, I am trying to install elasticsearch-8.4 version on a centos vm. The steps i followed are: Java Installation Creating a repo file Install Elasticsearch Start ES Note: i have not made any changes in yml file.… --- ## [Elasticsearch 6.8.23 on Oracle Linux 8](https://discuss.elastic.co/t/elasticsearch-6-8-23-on-oracle-linux-8/314313)
**Author:** [@spincity57](https://discuss.elastic.co/u/spincity57)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-23-on-oracle-linux-8/314313 "2022-09-13T15:58:30Z")
Hello, I am trying to install elasticsearch 6.8.23 on Oracle Linux 8. I am using openjdk version "11.0.16.1". I have this error at starting elasticsearch : Caused by: java.lang.IllegalArgumentException: none of the ci… --- ## [We couldn't log you in. Please try again](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/314294)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 53\ **Last updated:** [September 13, 2022, 2:49pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/314294 "2022-09-13T14:49:25Z")
After I do the Snapshot, I tried to delete all indices to test the Snapshot and Restore. At first I thought it's working coz' I can see the Kibana is working not until I tried to log in. I can't log in coz' there is mi… --- ## [SSL error when using S3 compatible repository with letsencrypt certificate](https://discuss.elastic.co/t/ssl-error-when-using-s3-compatible-repository-with-letsencrypt-certificate/313791)
**Author:** [@albanm](https://discuss.elastic.co/u/albanm)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 2:49pm UTC](https://discuss.elastic.co/t/ssl-error-when-using-s3-compatible-repository-with-letsencrypt-certificate/313791 "2022-09-13T14:49:06Z")
Hello, I have installed a minio server protected by a certificate issued by letsencrypt to serve as a snapshot repository for my elasticsearch cluster (version 7.17.6). When I try to create the registry (curl -X PUT "lo… --- ## [Copy speciifc data to another index automatically](https://discuss.elastic.co/t/copy-speciifc-data-to-another-index-automatically/314300)
**Author:** [@queried1](https://discuss.elastic.co/u/queried1)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 2:00pm UTC](https://discuss.elastic.co/t/copy-speciifc-data-to-another-index-automatically/314300 "2022-09-13T14:00:15Z")
Hello! Currently I use FIlebeat to send data to Logstash and then to Elasticsearch. There are mostly application logs that contain a lot of data. Everything is sent to an index called filebeat--0000x and is rolled over … --- ## [ElasticsearchClient issue: What is the new equivalent of the old AbstractAggregationBuilder's subAggregation method](https://discuss.elastic.co/t/elasticsearchclient-issue-what-is-the-new-equivalent-of-the-old-abstractaggregationbuilders-subaggregation-method/314228)
**Author:** [@Rudy\_Bonefas](https://discuss.elastic.co/u/Rudy_Bonefas)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearchclient-issue-what-is-the-new-equivalent-of-the-old-abstractaggregationbuilders-subaggregation-method/314228 "2022-09-13T13:23:49Z")
I have inherited some old RestHighLevelClient code (7.16.3) which I wish to upgrade to the new ElasticsearchClient. I am stumped on how to upgrade the following code: AggregationBuilder ab = AggregationBuilders.composi… --- ## [Could Not Index Event to Elasticsearch Error?](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/314188)
**Author:** [@Priyanka4](https://discuss.elastic.co/u/Priyanka4)\ **Replies:** 14\ **Last updated:** [September 13, 2022, 12:42pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/314188 "2022-09-13T12:42:43Z")
message: \[2022-09-12T11:02:46,381\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[2a206be8e9b0598adfe625bef432d5a7f49b90230ff74f12fb3baf9c5024173f\] Could not index event to Elasticsearch. {:status=\>400, :action= --- ## [Does Elastic Cloud have any hard limits on http.max\_content\_length](https://discuss.elastic.co/t/does-elastic-cloud-have-any-hard-limits-on-http-max-content-length/314285)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 12:21pm UTC](https://discuss.elastic.co/t/does-elastic-cloud-have-any-hard-limits-on-http-max-content-length/314285 "2022-09-13T12:21:28Z")
Hi, we are currently running AWS OpenSearch and are hitting some hard limits on http.max\_content\_length. This is a non-configurable 100mb limit. We are using Logstash to process events from Filebeat and hitting an endles… --- ## [Not yet initialized (you may need to run securityadmin)](https://discuss.elastic.co/t/not-yet-initialized-you-may-need-to-run-securityadmin/314280)
**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 10:23am UTC](https://discuss.elastic.co/t/not-yet-initialized-you-may-need-to-run-securityadmin/314280 "2022-09-13T10:23:05Z")
I was trying to enable opendistro security by running security admin tools, but getting below error after enabling configs, es version : 7.10.x command : bash /usr/share/elasticsearch/plugins/opendistro\_security/tools… --- ## [Are replicase required when using external volumes like EBS?](https://discuss.elastic.co/t/are-replicase-required-when-using-external-volumes-like-ebs/314267)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 3\ **Last updated:** [September 13, 2022, 9:26am UTC](https://discuss.elastic.co/t/are-replicase-required-when-using-external-volumes-like-ebs/314267 "2022-09-13T09:26:58Z")
Hi all, We are currently running our Elasticsearch cluster in Kubernetes and use EBS gp3 volumes as storage. We are reading everywhere that during initial load of the data one could disable replicas to speed up indexing… --- ## [Limited read and write speed using Elasticsearch Hadoop](https://discuss.elastic.co/t/limited-read-and-write-speed-using-elasticsearch-hadoop/314180)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 6\ **Last updated:** [September 13, 2022, 8:27am UTC](https://discuss.elastic.co/t/limited-read-and-write-speed-using-elasticsearch-hadoop/314180 "2022-09-13T08:27:25Z")
Hi all, We are experiencing unexpectedly low read and write speed on our ES cluster using the Elasticsearch-Hadoop connector. We have been reading a lot about the different configurations in the connector and tested aro… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/314247)
**Author:** [@khanchand](https://discuss.elastic.co/u/khanchand)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 7:52am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/314247 "2022-09-13T07:52:30Z")
Hi everyone, I am new on Elasticsearch and have created my lab before going to deploy in production. For lab purpose I have deployed all three (elasticsearch, kibana & logstash) on a single centos server. While I am faci… --- ## [Some values in the field is String, some is Integer, though Mapping is Integer](https://discuss.elastic.co/t/some-values-in-the-field-is-string-some-is-integer-though-mapping-is-integer/314253)
**Author:** [@Abhishek\_Soni1](https://discuss.elastic.co/u/Abhishek_Soni1)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 7:52am UTC](https://discuss.elastic.co/t/some-values-in-the-field-is-string-some-is-integer-though-mapping-is-integer/314253 "2022-09-13T07:52:17Z")
I have created a schema config, where I have mapped "Total Number of Changes" field to "Integer". But I can see the values are both number, and string. I have also tried re-indexing but results are same. How can I deal … --- ## [Elasticsearch 7.17.4 hdfs repository plugin with Hadoop 2.10.2](https://discuss.elastic.co/t/elasticsearch-7-17-4-hdfs-repository-plugin-with-hadoop-2-10-2/314258)
**Author:** [@forlianpu](https://discuss.elastic.co/u/forlianpu)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-4-hdfs-repository-plugin-with-hadoop-2-10-2/314258 "2022-09-13T07:42:54Z")
Hi. We have a multi-nodes Elasticsearch 7.17.4 with a Hadoop 2.10.2 in our offline environment. We want to setup the snapshot repository using the "repository-hdfs-7.17.4.zip" plugin. But this plugin is packed with some… --- ## [ES version range comparision is not working as expected semantic version comparison](https://discuss.elastic.co/t/es-version-range-comparision-is-not-working-as-expected-semantic-version-comparison/312904)
**Author:** [@Krishna\_Sailesh](https://discuss.elastic.co/u/Krishna_Sailesh)\ **Replies:** 7\ **Last updated:** [September 13, 2022, 7:30am UTC](https://discuss.elastic.co/t/es-version-range-comparision-is-not-working-as-expected-semantic-version-comparison/312904 "2022-09-13T07:30:31Z")
Hi Folks I have a version mapping field data type with the property name "softwareVersion" in the Elasticsearch index. I have "softwareVersion" property values like Z100, Z300, 6.7, 7.0(3)I7(3), and 6.8.9 when I searc… --- ## [How to take children filed while use sql query it's parent?](https://discuss.elastic.co/t/how-to-take-children-filed-while-use-sql-query-its-parent/314251)
**Author:** [@robocon20x](https://discuss.elastic.co/u/robocon20x)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 7:03am UTC](https://discuss.elastic.co/t/how-to-take-children-filed-while-use-sql-query-its-parent/314251 "2022-09-13T07:03:10Z")
i everyone, i have an parent child index with format like this parent\_child ES doc. "customer\_segment": { "type": "join", "eager\_global\_ordinals": true, "relations": { "customer": … --- ## [After provide time format I get; (elastic: Error 400 (Bad Request): all shards failed \[type=search\_phase\_execution\_exception\] ) error](https://discuss.elastic.co/t/after-provide-time-format-i-get-elastic-error-400-bad-request-all-shards-failed-type-search-phase-execution-exception-error/314243)
**Author:** [@golofetuk](https://discuss.elastic.co/u/golofetuk)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 7:18am UTC](https://discuss.elastic.co/t/after-provide-time-format-i-get-elastic-error-400-bad-request-all-shards-failed-type-search-phase-execution-exception-error/314243 "2022-09-13T07:18:44Z")
Please use the following questions as a guideline to help me answer your issue/question without further inquiry. Thank you. Which version of Elastic are you using? \[ v\] elastic.v7 (for Elasticsearch 7.x) Please descri… --- ## [How to do Bulk API iteration from JSON lines using Python?](https://discuss.elastic.co/t/how-to-do-bulk-api-iteration-from-json-lines-using-python/314218)
**Author:** [@Ramu\_Kakaji](https://discuss.elastic.co/u/Ramu_Kakaji)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 6:11pm UTC](https://discuss.elastic.co/t/how-to-do-bulk-api-iteration-from-json-lines-using-python/314218 "2022-09-12T18:11:33Z")
Hi All, i have json data like this json\_data = { "title": "Rush", "year": 2013, "budget":500000, "earning":300000,"genere":"action"} { "title": "Jurrasic", "year": 2014,"budget":1500000, "earning":2300000,"genere":"ac… --- ## [Elasticsearch 7 // Log4j configuration SocketAppender](https://discuss.elastic.co/t/elasticsearch-7-log4j-configuration-socketappender/314249)
**Author:** [@CrKontrol](https://discuss.elastic.co/u/CrKontrol)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 6:44am UTC](https://discuss.elastic.co/t/elasticsearch-7-log4j-configuration-socketappender/314249 "2022-09-13T06:44:50Z")
Hello, I'm using Elasticsearch 7.17 under basic licence with the security features. Since Elasticsearch does not support syslog appender on log4j anymore (still the case ?), i'm trying to use SocketAppender but it seem… --- ## [Hardware requirements - good resilency - Elastic 8.4](https://discuss.elastic.co/t/hardware-requirements-good-resilency-elastic-8-4/314090)
**Author:** [@elkstack1](https://discuss.elastic.co/u/elkstack1)\ **Replies:** 4\ **Last updated:** [September 13, 2022, 4:23am UTC](https://discuss.elastic.co/t/hardware-requirements-good-resilency-elastic-8-4/314090 "2022-09-13T04:23:42Z")
I would like the hardware requirements for good resiliency - Elastic 8.4 I looked on the documentation and didnt find any info pertaining to hardware specs. We currently have 3 master nodes and 17 data nodes - 13 warm … --- ## [BCFKS: mac check in CCM failed](https://discuss.elastic.co/t/bcfks-mac-check-in-ccm-failed/314235)
**Author:** [@untangled-duplicate](https://discuss.elastic.co/u/untangled-duplicate)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 9:26pm UTC](https://discuss.elastic.co/t/bcfks-mac-check-in-ccm-failed/314235 "2022-09-12T21:26:47Z")
Hello: I am running into issues with using BouncyCastle keystores and truststores. The error being returned is: Error finalising cipher data: mac check in CCM failed. Any help with understanding this error and how to … --- ## [Unable to perform Fuzzy search for search query template](https://discuss.elastic.co/t/unable-to-perform-fuzzy-search-for-search-query-template/314226)
**Author:** [@pratikshatiwari](https://discuss.elastic.co/u/pratikshatiwari)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 8:07pm UTC](https://discuss.elastic.co/t/unable-to-perform-fuzzy-search-for-search-query-template/314226 "2022-09-12T20:07:50Z")
Hello Team I am trying to create search query template to allow fuzzy search to search even incomplete values from field, After following the elastic document tried to create search query but it is not working. Using b… --- ## [There is insufficient memory for the Java Runtime Environment to continue](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/313926)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 7\ **Last updated:** [September 12, 2022, 8:01pm UTC](https://discuss.elastic.co/t/there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/313926 "2022-09-12T20:01:10Z")
Hello all, I am using ELK 8.4.1. I have a cluster setup with 3 nodes. But when I tried to Ingest data through Logstash it gave me following errors. OpenJDK 64-Bit Server VM warning: INFO: os::commit\_memory(0x00000000c… --- ## [Elasticsearch docker container shows "unhealthy"](https://discuss.elastic.co/t/elasticsearch-docker-container-shows-unhealthy/314220)
**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-container-shows-unhealthy/314220 "2022-09-12T18:27:49Z")
my elasticsearchdocker container shows "unhealthy status" on ec2 ubuntu 1e6908aa941e docker.elastic.co/elasticsearch/elasticsearch:8.3.2 "/bin/tini -- /usr/l…" 7 weeks ago Up 7 weeks (unhealthy) 9200/tcp, 93… --- ## [Proximity and close match in the same search?](https://discuss.elastic.co/t/proximity-and-close-match-in-the-same-search/314214)
**Author:** [@cas4](https://discuss.elastic.co/u/cas4)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 5:50pm UTC](https://discuss.elastic.co/t/proximity-and-close-match-in-the-same-search/314214 "2022-09-12T17:50:29Z")
I'm using c# and Nest to interact with our Elasticearch instance. I'm passing a query string to a query container using the following code: return queryContainer .Bool(bq =\> bq … --- ## [Internal rally queue in throughput-throttled mode](https://discuss.elastic.co/t/internal-rally-queue-in-throughput-throttled-mode/314083)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 2\ **Last updated:** [September 12, 2022, 5:42pm UTC](https://discuss.elastic.co/t/internal-rally-queue-in-throughput-throttled-mode/314083 "2022-09-12T17:42:41Z")
Hi I have a question regarding latency and ES thread pool queues...I am running rally in throughput-throttled mode, targeting a throughput higher than ES will achieve in benchmarking mode. Some numbers I get are: | … --- ## [How to search for a bracket using simple\_query\_string?](https://discuss.elastic.co/t/how-to-search-for-a-bracket-using-simple-query-string/314096)
**Author:** [@reisner](https://discuss.elastic.co/u/reisner)\ **Replies:** 4\ **Last updated:** [September 12, 2022, 4:14pm UTC](https://discuss.elastic.co/t/how-to-search-for-a-bracket-using-simple-query-string/314096 "2022-09-12T16:14:33Z")
I'm trying to search for documents that contain a bracket in the text using simple\_query\_string. The documentation here says that "To use one of these characters literally, escape it with a preceding backslash ()." Howe… --- ## [Upgrade Elasticsearch from 6.8.23 to 8.4.1](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-8-23-to-8-4-1/314126)
**Author:** [@Taby](https://discuss.elastic.co/u/Taby)\ **Replies:** 4\ **Last updated:** [September 12, 2022, 3:07pm UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-from-6-8-23-to-8-4-1/314126 "2022-09-12T15:07:41Z")
Hi. I've few questions regarding a possible upgrade of Elasticsearch from 6.8.23 to 8.4.1. Our application is based on Java 8 build using SBT play framework, currently running and using Elasticsearch 6.8.23 on Mac, Red… --- ## [Data Streams vs "Traditionally" Elastic Indexes](https://discuss.elastic.co/t/data-streams-vs-traditionally-elastic-indexes/313980)
**Author:** [@huowen](https://discuss.elastic.co/u/huowen)\ **Replies:** 6\ **Last updated:** [September 12, 2022, 3:03pm UTC](https://discuss.elastic.co/t/data-streams-vs-traditionally-elastic-indexes/313980 "2022-09-12T15:03:21Z")
I have recently upgraded my ELK stack and deployed in a kubernetes cluster and wanted to optimise the way I'm using it. Use Case: Many developer teams push their logs to a logstash pipeline which then outputs into elas… --- ## [Watcher -\> How to return a value in a transform](https://discuss.elastic.co/t/watcher-how-to-return-a-value-in-a-transform/314194)
**Author:** [@StephaneRodier](https://discuss.elastic.co/u/StephaneRodier)\ **Replies:** 0\ **Last updated:** [September 12, 2022, 12:39pm UTC](https://discuss.elastic.co/t/watcher-how-to-return-a-value-in-a-transform/314194 "2022-09-12T12:39:01Z")
Hello, I am trying to return a mathematical result with the number of hits of two input chains which would return a percentage, but I am unable to get the value and use it in the actions email. It always returns a "0". A… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=374) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=376)