# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=378 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 379 --- ## [Can't collect the logs of cisco router](https://discuss.elastic.co/t/cant-collect-the-logs-of-cisco-router/312318)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 13\ **Last updated:** [September 7, 2022, 8:47pm UTC](https://discuss.elastic.co/t/cant-collect-the-logs-of-cisco-router/312318 "2022-09-07T20:47:34Z")
this is my lab and i want to collect my router logs with syslog to filebeat installed in the same server of elasticsearch i follow this steps but i don't receive the logs my elastic server is a ubuntu server 22.04 , m… --- ## [YML File for Elasticsearch Installed with Home-brew](https://discuss.elastic.co/t/yml-file-for-elasticsearch-installed-with-home-brew/313908)
**Author:** [@ZeroCafe](https://discuss.elastic.co/u/ZeroCafe)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 4:36pm UTC](https://discuss.elastic.co/t/yml-file-for-elasticsearch-installed-with-home-brew/313908 "2022-09-07T16:36:57Z")
Hello, Team! I would like to edit the .yml configuration file for the local instance of Elasticsearch I installed using Home-brew, but I can not find the location of the .yml. This is the second time I’ve run into this.… --- ## [Fail to restore a snapshot of a rollover index without any error message](https://discuss.elastic.co/t/fail-to-restore-a-snapshot-of-a-rollover-index-without-any-error-message/313691)
**Author:** [@rutika\_kamble](https://discuss.elastic.co/u/rutika_kamble)\ **Replies:** 0\ **Last updated:** [September 5, 2022, 1:42pm UTC](https://discuss.elastic.co/t/fail-to-restore-a-snapshot-of-a-rollover-index-without-any-error-message/313691 "2022-09-05T13:42:41Z")
I have two indices in my setup. marimba-000001 & marimba-000002 with alias marimba. Before applying to ILM I created a policy with rollover action. Then, on the existing template, I added that policy, added an alias, … --- ## [Elasticsearch no longer boots](https://discuss.elastic.co/t/elasticsearch-no-longer-boots/313452)
**Author:** [@dw5304](https://discuss.elastic.co/u/dw5304)\ **Replies:** 10\ **Last updated:** [September 7, 2022, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-no-longer-boots/313452 "2022-09-07T14:55:24Z")
came in this morning to find a non working bootable version of elasticsearch. \[2022-09-01T14:02:06,208\]\[ERROR\]\[o.e.b.Elasticsearch \] \[redacted\] fatal exception while booting Elasticsearch java.lang.IllegalArgumentE… --- ## [Lifecycle delete phase question](https://discuss.elastic.co/t/lifecycle-delete-phase-question/313876)
**Author:** [@artax\_sb](https://discuss.elastic.co/u/artax_sb)\ **Replies:** 3\ **Last updated:** [September 7, 2022, 1:22pm UTC](https://discuss.elastic.co/t/lifecycle-delete-phase-question/313876 "2022-09-07T13:22:11Z")
Hi all, I want to make a lifecycle policy to my index I want the conditions are delete after 15days or 25gb but in delete phase it only allows me delete after n days not by n gb too Is there some way to make that? (w… --- ## [ElasticClient.DeleteByQueryAsync method is not waiting as per given Timeout](https://discuss.elastic.co/t/elasticclient-deletebyqueryasync-method-is-not-waiting-as-per-given-timeout/311926)
**Author:** [@ManElastic\_MakSearch](https://discuss.elastic.co/u/ManElastic_MakSearch)\ **Replies:** 2\ **Last updated:** [September 7, 2022, 12:57pm UTC](https://discuss.elastic.co/t/elasticclient-deletebyqueryasync-method-is-not-waiting-as-per-given-timeout/311926 "2022-09-07T12:57:09Z")
I am using Nest version 7.11.1. I am trying to use DeleteByQueryAsync method of ElasticClient. Below is the code I am trying to make working. var settings = await GetConnectionSettings("XYZTenant"); //// This method set… --- ## [Unable to change query paramters in rally](https://discuss.elastic.co/t/unable-to-change-query-paramters-in-rally/313711)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 6\ **Last updated:** [September 7, 2022, 12:47pm UTC](https://discuss.elastic.co/t/unable-to-change-query-paramters-in-rally/313711 "2022-09-07T12:47:41Z")
Hi there, I am generating my own queries for a benchmark, my py code looks like this (adapted from some github repos I found): class QueryParamSource: def \_\_init\_\_(self, track, params, \*\*kwargs): ... def… --- ## [Inconsistent Term and Terms query resolution in filter context](https://discuss.elastic.co/t/inconsistent-term-and-terms-query-resolution-in-filter-context/313884)
**Author:** [@robertasg](https://discuss.elastic.co/u/robertasg)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 12:45pm UTC](https://discuss.elastic.co/t/inconsistent-term-and-terms-query-resolution-in-filter-context/313884 "2022-09-07T12:45:53Z")
According to Elasticsearch docs it says that TermsQuery is the same as a TermQuery but can be operate with multiple values. The terms query is the same as the term query, except you can search for multiple values. Ho… --- ## [How to implement query termsAgregation to get the documents for each of the buckets that the query generates. I am using java spring boot](https://discuss.elastic.co/t/how-to-implement-query-termsagregation-to-get-the-documents-for-each-of-the-buckets-that-the-query-generates-i-am-using-java-spring-boot/313883)
**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-implement-query-termsagregation-to-get-the-documents-for-each-of-the-buckets-that-the-query-generates-i-am-using-java-spring-boot/313883 "2022-09-07T12:31:05Z")
Hi, I am trying to get each of the elements that the elasticsearch group by generates. What I get now is the key and the amount of elements for each of the buckets, my interest is to get each of those elements that conta… --- ## [Query regarding scoring of ES8. 2](https://discuss.elastic.co/t/query-regarding-scoring-of-es8-2/312687)
**Author:** [@sajeeda](https://discuss.elastic.co/u/sajeeda)\ **Replies:** 3\ **Last updated:** [September 7, 2022, 9:10am UTC](https://discuss.elastic.co/t/query-regarding-scoring-of-es8-2/312687 "2022-09-07T09:10:54Z")
Hi All, I am trying to upgrade from ES6.3 to ES8.2. I am new to Elasticsearch and wanted to understand how the scoring is done on text search in both the versions. scores and the result set is all different when compa… --- ## [Find the number of search requests per day hitting ES Cluster](https://discuss.elastic.co/t/find-the-number-of-search-requests-per-day-hitting-es-cluster/313865)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 0\ **Last updated:** [September 7, 2022, 8:57am UTC](https://discuss.elastic.co/t/find-the-number-of-search-requests-per-day-hitting-es-cluster/313865 "2022-09-07T08:57:52Z")
Is there a way to know the (average) number of search requests per day hitting the Elasticsearch cluster? If my ES cluster contains day-wise indices and I want find the no of search requests that hit ES cluster in last … --- ## [Auto\_expand\_replicas not working on enrich index](https://discuss.elastic.co/t/auto-expand-replicas-not-working-on-enrich-index/313569)
**Author:** [@ddolcimascolo](https://discuss.elastic.co/u/ddolcimascolo)\ **Replies:** 31\ **Last updated:** [September 7, 2022, 8:38am UTC](https://discuss.elastic.co/t/auto-expand-replicas-not-working-on-enrich-index/313569 "2022-09-07T08:38:03Z")
Hi guys, Our enrich indices are not replicated on our production cluster, and I don't understand why... Can you help to troubleshoot the issue? Context ES 7.17.1 3 Nodes Many various data indices Many ingest pipeline… --- ## [Reverting Index Logging Settings](https://discuss.elastic.co/t/reverting-index-logging-settings/313770)
**Author:** [@nutcno](https://discuss.elastic.co/u/nutcno)\ **Replies:** 1\ **Last updated:** [September 7, 2022, 5:50am UTC](https://discuss.elastic.co/t/reverting-index-logging-settings/313770 "2022-09-07T05:50:15Z")
I want to add new index settings for all indices to add some additional configs to debug/info/warn and trace. So like below I have this curl command - curl -XPUT 'http://localhost:9200/\_all/\_settings?preserve\_existing=… --- ## [Xpack.security.transport.ssl setup issue](https://discuss.elastic.co/t/xpack-security-transport-ssl-setup-issue/313757)
**Author:** [@cheching](https://discuss.elastic.co/u/cheching)\ **Replies:** 3\ **Last updated:** [September 7, 2022, 2:50am UTC](https://discuss.elastic.co/t/xpack-security-transport-ssl-setup-issue/313757 "2022-09-07T02:50:09Z")
Hi Team, Need yours assist to look into below issue, I'm using self hosted Kibana & Elasticsearch as well. But I have an error after I generated the certificates and copy it into the etc/elasticsearch/certs path. And af… --- ## [Import CA Cert as PrivateKeyEntry to HTTP Keystore - Solve Unable to create enrollment token Error](https://discuss.elastic.co/t/import-ca-cert-as-privatekeyentry-to-http-keystore-solve-unable-to-create-enrollment-token-error/313780)
**Author:** [@aold619](https://discuss.elastic.co/u/aold619)\ **Replies:** 3\ **Last updated:** [September 7, 2022, 2:48am UTC](https://discuss.elastic.co/t/import-ca-cert-as-privatekeyentry-to-http-keystore-solve-unable-to-create-enrollment-token-error/313780 "2022-09-07T02:48:40Z")
Problem Yesterday I installed Elasticsearch for the first time, and after I configured the security manully according to the docs: Basic Security / Basic Security plus HTTPS, I try to generate token for Kibana, and I met… --- ## [Upgrade steps 8.3 - 8.4](https://discuss.elastic.co/t/upgrade-steps-8-3-8-4/313716)
**Author:** [@ymoriarty](https://discuss.elastic.co/u/ymoriarty)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 11:35pm UTC](https://discuss.elastic.co/t/upgrade-steps-8-3-8-4/313716 "2022-09-06T23:35:57Z")
Where are the instructions to upgrade Elasticsearch, Kibana and Enterprise Search from 8.3 to 8.4.x? I am running this on prem on a single host with the basic license. I have search all over your site and do not find a… --- ## [Asciifolding analyzer doesn't seem to be working](https://discuss.elastic.co/t/asciifolding-analyzer-doesnt-seem-to-be-working/313830)
**Author:** [@Chris\_Grim](https://discuss.elastic.co/u/Chris_Grim)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:17pm UTC](https://discuss.elastic.co/t/asciifolding-analyzer-doesnt-seem-to-be-working/313830 "2022-09-06T21:17:56Z")
Hi All, I am trying to setup asciifolding so a word like séance will appear when someone types in seance. In my mapping I have $mapping-\>search\_as\_you\_type('name', \['analyzer' =\> 'standard\_asciifolding'\]); … --- ## [How to sum across all intermediate aggregate buckets?](https://discuss.elastic.co/t/how-to-sum-across-all-intermediate-aggregate-buckets/313829)
**Author:** [@davidgAID](https://discuss.elastic.co/u/davidgAID)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:07pm UTC](https://discuss.elastic.co/t/how-to-sum-across-all-intermediate-aggregate-buckets/313829 "2022-09-06T21:07:21Z")
I have an index like this (simplified): { "entity\_id": {"type": "keyword"}, "attr1": { "properties": { "attr1\_id": {"type": "keyword"}, "attr1\_type": {"type": "keyword"}, … --- ## [Reindex to data streams](https://discuss.elastic.co/t/reindex-to-data-streams/313818)
**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 6:51pm UTC](https://discuss.elastic.co/t/reindex-to-data-streams/313818 "2022-09-06T18:51:41Z")
I'm using the following to reindex to a data stream, although it completes right way... The source index has 262394 documents. POST \_reindex { "source": { "index": "syslog-prod-2021.09.07" }, "dest": { "in… --- ## [Elastic Java Client: Problem with GeoPointProperty - unknown field 'index'](https://discuss.elastic.co/t/elastic-java-client-problem-with-geopointproperty-unknown-field-index/313799)
**Author:** [@CodingMax](https://discuss.elastic.co/u/CodingMax)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 3:36pm UTC](https://discuss.elastic.co/t/elastic-java-client-problem-with-geopointproperty-unknown-field-index/313799 "2022-09-06T15:36:25Z")
Hi, according the Documentation I can use the parameter index for the field-type geo\_point. I use the Java-Client in Version 8.3.3 and a mapping like this (only a snippet): "location": { "type": "geo\_point", "inde… --- ## [Shrink shard max recommended size?](https://discuss.elastic.co/t/shrink-shard-max-recommended-size/313806)
**Author:** [@Todd\_Lyons](https://discuss.elastic.co/u/Todd_Lyons)\ **Replies:** 3\ **Last updated:** [September 6, 2022, 4:07pm UTC](https://discuss.elastic.co/t/shrink-shard-max-recommended-size/313806 "2022-09-06T16:07:56Z")
Is there a max recommended size for shrunk shards? We are on a 7.17.4 ES cluster with 10 data nodes and large volumes. We have one index that's kinda busy so we have an index template that defines 10/1 shards/replicas.… --- ## [Hot\_threads per interpretation](https://discuss.elastic.co/t/hot-threads-per-interpretation/313809)
**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 3:57pm UTC](https://discuss.elastic.co/t/hot-threads-per-interpretation/313809 "2022-09-06T15:57:36Z")
Hello, I would like to know how to read the hot threads information for a particular node and track the operations that cause high CPU usage. Below is a sample: {field1}{field2}{field3}{IP1}{IP2:port}{di}{rack\_ud=1, ra… --- ## [L2 & L3 SW Integration](https://discuss.elastic.co/t/l2-l3-sw-integration/313472)
**Author:** [@zaheernew](https://discuss.elastic.co/u/zaheernew)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 3:44pm UTC](https://discuss.elastic.co/t/l2-l3-sw-integration/313472 "2022-09-06T15:44:05Z")
Dear All, I'm new to the community and I have a small question also. how do integrate L2 and L3 switches to elasticsearch to monitor via kibana? Looking for your answers. Thanks --- ## [Issues with new search query](https://discuss.elastic.co/t/issues-with-new-search-query/313804)
**Author:** [@rzaal](https://discuss.elastic.co/u/rzaal)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 2:21pm UTC](https://discuss.elastic.co/t/issues-with-new-search-query/313804 "2022-09-06T14:21:38Z")
Hi i have recently been busy reworking our old and outdated ES now um running 8.4 and im trying to create a similar query to what i had in the old one. But i have a hard time finding examples or the right documentation T… --- ## [Is there a time limit for Filebeat or Logstash to attempt to retransmit?](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 5\ **Last updated:** [September 6, 2022, 12:19pm UTC](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721 "2022-09-06T12:19:30Z")
I am using Filebeat, Logstash, and Elasticsearch to collect logs. I have received a query that some logs are not being captured by Elasticsearch. Is it possible to lose logs in this ELK server configuration? For examp… --- ## [Data migration: ClickHouse to Elasticsearch, Any connectors](https://discuss.elastic.co/t/data-migration-clickhouse-to-elasticsearch-any-connectors/313784)
**Author:** [@bilal\_abdu](https://discuss.elastic.co/u/bilal_abdu)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 11:20am UTC](https://discuss.elastic.co/t/data-migration-clickhouse-to-elasticsearch-any-connectors/313784 "2022-09-06T11:20:32Z")
Hi All, Do we have connector for data migration from ClickHouse to Elastic Search. --- ## [Transferring documents from different ES servers](https://discuss.elastic.co/t/transferring-documents-from-different-es-servers/313773)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:38am UTC](https://discuss.elastic.co/t/transferring-documents-from-different-es-servers/313773 "2022-09-06T09:38:42Z")
I'm trying to transfer some documents from a source server to a destination server. Both have the same settings, and indices associated to those documents. The documents have an object data field, that inherits from an … --- ## [Migration from AWS opensearch to elasticsearch](https://discuss.elastic.co/t/migration-from-aws-opensearch-to-elasticsearch/313763)
**Author:** [@mkgupta](https://discuss.elastic.co/u/mkgupta)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 9:21am UTC](https://discuss.elastic.co/t/migration-from-aws-opensearch-to-elasticsearch/313763 "2022-09-06T09:21:08Z")
Hi , I want to migrate indices of aws opensearch version 1.2 to Elasticsearch version 7.10. Is it possible to migrate or not? I am facing the version issue when trying to migrate. --- ## [Timeseries data with ILM and out of sequence write/delete of older data](https://discuss.elastic.co/t/timeseries-data-with-ilm-and-out-of-sequence-write-delete-of-older-data/313459)
**Author:** [@kk123](https://discuss.elastic.co/u/kk123)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 9:06am UTC](https://discuss.elastic.co/t/timeseries-data-with-ilm-and-out-of-sequence-write-delete-of-older-data/313459 "2022-09-06T09:06:19Z")
Hi, this question is a follow on from a Previous post. I am looking to merge many indices into 1 and using ILM to manage index size etc. However what happens if I have to update or delete a document in an index that is … --- ## [TImezone in Elasticsearch logs](https://discuss.elastic.co/t/timezone-in-elasticsearch-logs/313540)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 6\ **Last updated:** [September 6, 2022, 8:49am UTC](https://discuss.elastic.co/t/timezone-in-elasticsearch-logs/313540 "2022-09-06T08:49:00Z")
Hello There! I see that my logs for Elasticsearch have different timezone that my server. For my server I have got set timezone: 'pią' is shortcut for 'piątek' that means 'Friday' in Polish. My logs however got UTC… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=377) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=379)