# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=377 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 378 --- ## [Force merge is taking long time](https://discuss.elastic.co/t/force-merge-is-taking-long-time/312574)
**Author:** [@prasath\_s](https://discuss.elastic.co/u/prasath_s)\ **Replies:** 6\ **Last updated:** [September 9, 2022, 8:14am UTC](https://discuss.elastic.co/t/force-merge-is-taking-long-time/312574 "2022-09-09T08:14:21Z")
After migrating from elastic version 5.2 to 7.16.2 force merge for few indices are taking long time. These indices are around 120GB. In the force merge step we are making total segement as 1. Any help here --- ## [Customising built-in ILM policies](https://discuss.elastic.co/t/customising-built-in-ilm-policies/314037)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 0\ **Last updated:** [September 9, 2022, 8:03am UTC](https://discuss.elastic.co/t/customising-built-in-ilm-policies/314037 "2022-09-09T08:03:26Z")
Following are the ILM policies i see which are created by default/ logs metrics synthetics I would like to delete the data after 90 days from the above ILM policies, is it recommended to update the current ILM policie… --- ## [Elasticsearch async search very slow](https://discuss.elastic.co/t/elasticsearch-async-search-very-slow/314016)
**Author:** [@bonyolult](https://discuss.elastic.co/u/bonyolult)\ **Replies:** 6\ **Last updated:** [September 9, 2022, 7:54am UTC](https://discuss.elastic.co/t/elasticsearch-async-search-very-slow/314016 "2022-09-09T07:54:52Z")
I'm running queries on a 3 node cluster. Simple query\_string query with some wildcards. When i use \_search, it takes about 10-15 ms to execute the query but when using \_async\_search query time goes up to around 300 000 m… --- ## [Unable to configure Elastic , Kibana tool in new environment](https://discuss.elastic.co/t/unable-to-configure-elastic-kibana-tool-in-new-environment/313938)
**Author:** [@Infratech](https://discuss.elastic.co/u/Infratech)\ **Replies:** 10\ **Last updated:** [September 9, 2022, 7:37am UTC](https://discuss.elastic.co/t/unable-to-configure-elastic-kibana-tool-in-new-environment/313938 "2022-09-09T07:37:14Z")
I have logged in but showing below error. I have already assigned Admin, PowerUser role to user.. Please look in to this…. --- ## [Elastic Log data transfer in remote server](https://discuss.elastic.co/t/elastic-log-data-transfer-in-remote-server/314029)
**Author:** [@saifulshihab](https://discuss.elastic.co/u/saifulshihab)\ **Replies:** 0\ **Last updated:** [September 9, 2022, 4:06am UTC](https://discuss.elastic.co/t/elastic-log-data-transfer-in-remote-server/314029 "2022-09-09T04:06:49Z")
I have 3 node cluster all three node have same configuration node.master: true node.data: true so now my storage i filled up almost 800GB. I want to transfer some data for future reference from the path : /var/lib/el… --- ## [LEAK: ByteBuf.release() was not called before it's garbage-collected](https://discuss.elastic.co/t/leak-bytebuf-release-was-not-called-before-its-garbage-collected/313658)
**Author:** [@Orwell-coder](https://discuss.elastic.co/u/Orwell-coder)\ **Replies:** 6\ **Last updated:** [September 9, 2022, 12:44am UTC](https://discuss.elastic.co/t/leak-bytebuf-release-was-not-called-before-its-garbage-collected/313658 "2022-09-09T00:44:48Z")
Hello, everyone. I have a problem I have never encountered, so I need some help. I have a single-type es node , the es node is runing by docker contianer. Host Version: CentOS 8.3 x64. Docker Version: 20.10.5. ES Ve… --- ## [Unable to access Kibana with 500 Internal Server Error](https://discuss.elastic.co/t/unable-to-access-kibana-with-500-internal-server-error/313842)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 5\ **Last updated:** [September 8, 2022, 9:04pm UTC](https://discuss.elastic.co/t/unable-to-access-kibana-with-500-internal-server-error/313842 "2022-09-08T21:04:45Z")
Elastic Cloud version 7.17.6. After I deleted these indices, I could not access to Kibana or Elasticsearch in Elastic Cloud. .apm-agent-configuration .apm-custom-link .async-search .fleet-enrollment-api-keys-7 .fleet-p… --- ## [Permissions error for creating a Enrich (.enrich-\*) index after following docs](https://discuss.elastic.co/t/permissions-error-for-creating-a-enrich-enrich-index-after-following-docs/314014)
**Author:** [@Madhav\_Sharma](https://discuss.elastic.co/u/Madhav_Sharma)\ **Replies:** 2\ **Last updated:** [September 8, 2022, 6:47pm UTC](https://discuss.elastic.co/t/permissions-error-for-creating-a-enrich-enrich-index-after-following-docs/314014 "2022-09-08T18:47:54Z")
I tied using the dev\_tools console to create a .enrich-\* index and i got: "action \[indices:admin/create\] is unauthorized for user \[foo@bar.com\] with roles \[superuser\] on restricted indices \[.enrich-foobar\], this action… --- ## [Elasticsearch get exited and shows unhealthy status in docker container](https://discuss.elastic.co/t/elasticsearch-get-exited-and-shows-unhealthy-status-in-docker-container/313931)
**Author:** [@paris1](https://discuss.elastic.co/u/paris1)\ **Replies:** 14\ **Last updated:** [September 8, 2022, 5:06pm UTC](https://discuss.elastic.co/t/elasticsearch-get-exited-and-shows-unhealthy-status-in-docker-container/313931 "2022-09-08T17:06:49Z")
I Run Elasticsearch on docker production on aws ec2(ubuntu).It was working fine.my elasticsearch got exited today after I updated an index I started again manually.after this the status of the containers changed to unhea… --- ## [Closing index and memory missing warning?](https://discuss.elastic.co/t/closing-index-and-memory-missing-warning/313993)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 2\ **Last updated:** [September 8, 2022, 2:14pm UTC](https://discuss.elastic.co/t/closing-index-and-memory-missing-warning/313993 "2022-09-08T14:14:23Z")
Continuing the discussion from Does close index free up disk or memory: Maybe this warning about losing data ("To reduce the risk of data loss..." Open / Close Index API | Elasticsearch Guide \[6.8\] | Elastic) from 6.8 d… --- ## [Kibana report generate using docker based configuration](https://discuss.elastic.co/t/kibana-report-generate-using-docker-based-configuration/313996)
**Author:** [@maadhav](https://discuss.elastic.co/u/maadhav)\ **Replies:** 0\ **Last updated:** [September 8, 2022, 1:03pm UTC](https://discuss.elastic.co/t/kibana-report-generate-using-docker-based-configuration/313996 "2022-09-08T13:03:14Z")
Hi Team We have Docker based multi-node ES cluster v7.17.4. Kibana also runs as a docker container. When we try to generate a PDF report from Canvas, it shows following error: Error: Max attempts (3) reached for job l… --- ## [Is it possible to join field via conditions?](https://discuss.elastic.co/t/is-it-possible-to-join-field-via-conditions/313952)
**Author:** [@Stanislau\_Karaliou](https://discuss.elastic.co/u/Stanislau_Karaliou)\ **Replies:** 4\ **Last updated:** [September 8, 2022, 12:26pm UTC](https://discuss.elastic.co/t/is-it-possible-to-join-field-via-conditions/313952 "2022-09-08T12:26:59Z")
I have structure { id: 1 name: "Root folder" parent\_id: 0, inherit\_folder\_id: null, inherit\_permission: false, permissions: \[some permissions\] }, { id: 2 name: "Accounts" parent\_id: 1, inherit\_folder… --- ## [Scroll query with slice](https://discuss.elastic.co/t/scroll-query-with-slice/313331)
**Author:** [@philkpler](https://discuss.elastic.co/u/philkpler)\ **Replies:** 1\ **Last updated:** [September 8, 2022, 12:23pm UTC](https://discuss.elastic.co/t/scroll-query-with-slice/313331 "2022-09-08T12:23:45Z")
Hello, Can someone confirm me that when querying using the scroll api, with slices, it will be targeting the same "state/snapshot" of the index ? As far as I know, to simplify, scroll allow to "freeze" a state of the … --- ## [Map / grant roles defined in keycloak to elasticsearch](https://discuss.elastic.co/t/map-grant-roles-defined-in-keycloak-to-elasticsearch/313528)
**Author:** [@Giorgi\_Jambazishvili](https://discuss.elastic.co/u/Giorgi_Jambazishvili)\ **Replies:** 5\ **Last updated:** [September 8, 2022, 12:06pm UTC](https://discuss.elastic.co/t/map-grant-roles-defined-in-keycloak-to-elasticsearch/313528 "2022-09-08T12:06:07Z")
Hello, We've setup the Keycloak Single Sing On (OIDC) integration with Elasticsearch cloud deployment and users are able sign in to the kibana using Keycloak as an authenticator. The problem is that once user is authen… --- ## [Script query started to fail suddenly](https://discuss.elastic.co/t/script-query-started-to-fail-suddenly/313985)
**Author:** [@Richa\_B](https://discuss.elastic.co/u/Richa_B)\ **Replies:** 0\ **Last updated:** [September 8, 2022, 11:06am UTC](https://discuss.elastic.co/t/script-query-started-to-fail-suddenly/313985 "2022-09-08T11:06:31Z")
We have had this query for a long time { "size": 50, "query": { "match\_all": {} }, "version": false, "seq\_no\_primary\_term": false, "sort": \[ { "\_script": { "script": { "sour… --- ## [Cluster elasticsearch port](https://discuss.elastic.co/t/cluster-elasticsearch-port/313866)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 6\ **Last updated:** [September 8, 2022, 11:00am UTC](https://discuss.elastic.co/t/cluster-elasticsearch-port/313866 "2022-09-08T11:00:57Z")
Hello, I want to set up a 3-node elasticsearch cluster in production. 2 nodes master & data and one voting-only or data. I would like to know if I can assign a single port per node and not a range. For example : node… --- ## [About Voting Only Nodes](https://discuss.elastic.co/t/about-voting-only-nodes/313948)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 9\ **Last updated:** [September 8, 2022, 10:47am UTC](https://discuss.elastic.co/t/about-voting-only-nodes/313948 "2022-09-08T10:47:44Z")
Hi, With voting configurations is it recommended that, when needed, a minimum of nodes are voting-only? Or is it legitimate to make all nodes voting-only? I ask because we have clusters whose topologies vary. For examp… --- ## [LDAP ELK CLuster](https://discuss.elastic.co/t/ldap-elk-cluster/313979)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [September 8, 2022, 10:26am UTC](https://discuss.elastic.co/t/ldap-elk-cluster/313979 "2022-09-08T10:26:32Z")
Hello! My team wants to connect our elastic to the corporate LDAP, we know how to configure it but we don't know on which nodes we have to configure it. Is this configuration only necessary on master nodes or should it… --- ## [Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/313838)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 10\ **Last updated:** [September 8, 2022, 10:15am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/313838 "2022-09-08T10:15:28Z")
I have elastic cluster, one node removed(automatically) from the cluster and log shows "Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]" elastic version 8.1 --- ## [How to use cardinality add more fields](https://discuss.elastic.co/t/how-to-use-cardinality-add-more-fields/313967)
**Author:** [@githup-DK](https://discuss.elastic.co/u/githup-DK)\ **Replies:** 0\ **Last updated:** [September 8, 2022, 8:50am UTC](https://discuss.elastic.co/t/how-to-use-cardinality-add-more-fields/313967 "2022-09-08T08:50:45Z")
Hi bro I can't upgrade my instance. my instance is 7.9.3. I want to use three field to search .I create a table with three cardinality \`fields\` ,but there is no effective,the data looks like repeated GET /testPrefor… --- ## [Elasticsearch index.blocks.read : true doesn't work with index pattern](https://discuss.elastic.co/t/elasticsearch-index-blocks-read-true-doesnt-work-with-index-pattern/313963)
**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\ **Replies:** 1\ **Last updated:** [September 8, 2022, 9:26am UTC](https://discuss.elastic.co/t/elasticsearch-index-blocks-read-true-doesnt-work-with-index-pattern/313963 "2022-09-08T09:26:59Z")
Hi all, I want to block read on some indices, using index.blocks.read : true, but it doesn't work if you try to read the indices with index pattern like index\_name\_\*. It will return error GET filebeat\*/\_search { "e… --- ## [Is it expected to have different versions in the \`\*\_LuceneXX\_X.\*\` filenames?](https://discuss.elastic.co/t/is-it-expected-to-have-different-versions-in-the-lucenexx-x-filenames/313898)
**Author:** [@vkatsikaros](https://discuss.elastic.co/u/vkatsikaros)\ **Replies:** 2\ **Last updated:** [September 8, 2022, 9:26am UTC](https://discuss.elastic.co/t/is-it-expected-to-have-different-versions-in-the-lucenexx-x-filenames/313898 "2022-09-08T09:26:29Z")
Hi This is mostly out of curiosity and not as a question tied to a specific problem. I was looking at the actual directories and files of some ES indices, I noticed a bunch of lucene files, but what got my attention is… --- ## [How to remove duplicates on 7.9.3Version](https://discuss.elastic.co/t/how-to-remove-duplicates-on-7-9-3version/313964)
**Author:** [@githup-DK](https://discuss.elastic.co/u/githup-DK)\ **Replies:** 0\ **Last updated:** [September 8, 2022, 8:31am UTC](https://discuss.elastic.co/t/how-to-remove-duplicates-on-7-9-3version/313964 "2022-09-08T08:31:54Z")
I want to use multi-field to remove duplicates datas,I gave it a try , but it didn't work . \* I want to know how to use it on 7.9.3Version. please help me . GET /test\_2022\_9/\_search { "query": { "bool": { "f… --- ## [Stop Token Filter Language Customization Not Working in Java](https://discuss.elastic.co/t/stop-token-filter-language-customization-not-working-in-java/313949)
**Author:** [@green12](https://discuss.elastic.co/u/green12)\ **Replies:** 0\ **Last updated:** [September 8, 2022, 6:34am UTC](https://discuss.elastic.co/t/stop-token-filter-language-customization-not-working-in-java/313949 "2022-09-08T06:34:05Z")
Hi everyone, I'm trying to create a customized Indonesian language stop token filter using the Java package. The following json is how the configuration looks like when using curl (which works just fine): "filter": { … --- ## [How do I update data across indexes](https://discuss.elastic.co/t/how-do-i-update-data-across-indexes/313945)
**Author:** [@chihao9332](https://discuss.elastic.co/u/chihao9332)\ **Replies:** 0\ **Last updated:** [September 8, 2022, 6:11am UTC](https://discuss.elastic.co/t/how-do-i-update-data-across-indexes/313945 "2022-09-08T06:11:11Z")
问题描述：索引B中新增加了两个字段，现需要从索引A中获取这两个字段的值并赋值给B 详细情况： 1.索引A中部分字段：pro\_id, tran\_id, app\_id, type ....... 2.索引B中部分字段：app\_id, type ....... 3. 现 索引B中新增 pro\_id和tran\_id字段，要求将存量数据与索引A中数据同步 4. 即：当 满足 A.app\_id=B.app\_id 和 A.type=B.ty… --- ## [What is the best way to change the dims for a dense\_vector in an index?](https://discuss.elastic.co/t/what-is-the-best-way-to-change-the-dims-for-a-dense-vector-in-an-index/313920)
**Author:** [@reisner](https://discuss.elastic.co/u/reisner)\ **Replies:** 1\ **Last updated:** [September 8, 2022, 4:01am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-change-the-dims-for-a-dense-vector-in-an-index/313920 "2022-09-08T04:01:18Z")
I have an index with a dense\_vector field with 256 dimensions. I want to change to a new embedding model that uses a different number of dimensions. I dont mind losing the data in the old field. What's the best way to ke… --- ## [SSL certificate verify failed when connecting using Route53 CNAME records](https://discuss.elastic.co/t/ssl-certificate-verify-failed-when-connecting-using-route53-cname-records/313648)
**Author:** [@r-uehara0219](https://discuss.elastic.co/u/r-uehara0219)\ **Replies:** 2\ **Last updated:** [September 8, 2022, 3:12am UTC](https://discuss.elastic.co/t/ssl-certificate-verify-failed-when-connecting-using-route53-cname-records/313648 "2022-09-08T03:12:18Z")
using version Elasticsearch 7.16.1 curl 7.74.0 detail I configured traffic filters using AWS PrivateLink. (Configured with reference to the official documentation.) I have created 2 VPC endpoints, and 2 CNAME records … --- ## [Reset Elasticsearch Internal User Password](https://discuss.elastic.co/t/reset-elasticsearch-internal-user-password/313837)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 8\ **Last updated:** [September 8, 2022, 1:31am UTC](https://discuss.elastic.co/t/reset-elasticsearch-internal-user-password/313837 "2022-09-08T01:31:49Z")
Hi, Does anyone know how to reset or change Elasticsearch internal user password? --- ## [Elasticsearch Super Slow and using low CPU](https://discuss.elastic.co/t/elasticsearch-super-slow-and-using-low-cpu/313922)
**Author:** [@abr4xc](https://discuss.elastic.co/u/abr4xc)\ **Replies:** 5\ **Last updated:** [September 8, 2022, 1:23am UTC](https://discuss.elastic.co/t/elasticsearch-super-slow-and-using-low-cpu/313922 "2022-09-08T01:23:48Z")
After gone offline for a day the elastic cluster started to be too slow, check of possible misconfigurations and could not fine anything to make it faster, the cluster is on green and there is not unassing shards, howeve… --- ## [How to list users that uses Elasticsearch/Kibana?](https://discuss.elastic.co/t/how-to-list-users-that-uses-elasticsearch-kibana/313934)
**Author:** [@Ggarcia](https://discuss.elastic.co/u/Ggarcia)\ **Replies:** 1\ **Last updated:** [September 8, 2022, 1:03am UTC](https://discuss.elastic.co/t/how-to-list-users-that-uses-elasticsearch-kibana/313934 "2022-09-08T01:03:53Z")
All, I am working in a project to try replace Splunk by ELK. I would like to list the users that logged in Elasticsearch/Kibana per day. Is there any internal index to audit users? Thank you in advanced, Gerson Garci… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=376) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=378)