# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=380 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 381 --- ## [Cluster stats "Disk Available"](https://discuss.elastic.co/t/cluster-stats-disk-available/313604)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 5\ **Last updated:** [September 4, 2022, 10:10am UTC](https://discuss.elastic.co/t/cluster-stats-disk-available/313604 "2022-09-04T10:10:38Z")
Dear, Does any one have an idea on how /\_cluster/stats computes total disk for the whole cluster ? any specific filter behind the scene on node.roles ? Bellow is the result of cluster stats API, it show disk space less… --- ## [Rename pattern of restoring snapshot API has an unexpected behavior](https://discuss.elastic.co/t/rename-pattern-of-restoring-snapshot-api-has-an-unexpected-behavior/313512)
**Author:** [@kent010341](https://discuss.elastic.co/u/kent010341)\ **Replies:** 2\ **Last updated:** [September 4, 2022, 9:53am UTC](https://discuss.elastic.co/t/rename-pattern-of-restoring-snapshot-api-has-an-unexpected-behavior/313512 "2022-09-04T09:53:46Z")
I'm using Elasticsearch 7.17.4, running with Docker. I have a snapshot containing an index called metricbeat-7.12.0-2022.09.01, and I want it to be renamed with a prefix or a suffix. However, like the image below, its … --- ## [Managing large indices](https://discuss.elastic.co/t/managing-large-indices/313596)
**Author:** [@sssamant](https://discuss.elastic.co/u/sssamant)\ **Replies:** 5\ **Last updated:** [September 4, 2022, 3:15am UTC](https://discuss.elastic.co/t/managing-large-indices/313596 "2022-09-04T03:15:24Z")
I have question about how to manage large indices. The use case is this customer want to keep the data till 10 years for read and now the issue is this our index is keep growing and its size about 4 tb now and we are see… --- ## [No results match your search criteria](https://discuss.elastic.co/t/no-results-match-your-search-criteria/313581)
**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\ **Replies:** 5\ **Last updated:** [September 4, 2022, 1:15am UTC](https://discuss.elastic.co/t/no-results-match-your-search-criteria/313581 "2022-09-04T01:15:45Z")
hi all! Maybe a stupid question, but I couldn't figure it out myself. inaccurate search in Kibana through the search bar in Discovery does not return anything ... if you search by fields, then the pots query works I… --- ## [Can't start elasticsearch service](https://discuss.elastic.co/t/cant-start-elasticsearch-service/313607)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 8\ **Last updated:** [September 3, 2022, 11:36pm UTC](https://discuss.elastic.co/t/cant-start-elasticsearch-service/313607 "2022-09-03T23:36:43Z")
Hello, I am trying to start the elasticsearch service with the command systemctl start elasticsearch but I am getting this message Job for elasticsearch.service failed because the control process exited with error code… --- ## [License question - replace 2 nodes in a cluster of 5 using hot migration](https://discuss.elastic.co/t/license-question-replace-2-nodes-in-a-cluster-of-5-using-hot-migration/313603)
**Author:** [@qbase](https://discuss.elastic.co/u/qbase)\ **Replies:** 1\ **Last updated:** [September 3, 2022, 6:14pm UTC](https://discuss.elastic.co/t/license-question-replace-2-nodes-in-a-cluster-of-5-using-hot-migration/313603 "2022-09-03T18:14:55Z")
Hi All, We have an on-prem cluster of 5 nodes with a Platinum license. We would like to replace 2 nodes in the cluster with newer hardware. However, our license allows us to use max 5 nodes. We think of adding the new… --- ## [Whether CCR and reindex from remote are same?](https://discuss.elastic.co/t/whether-ccr-and-reindex-from-remote-are-same/313106)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 4\ **Last updated:** [September 2, 2022, 7:08pm UTC](https://discuss.elastic.co/t/whether-ccr-and-reindex-from-remote-are-same/313106 "2022-09-02T19:08:44Z")
Whether CCR and reindex from remote are same? --- ## [CCR - 7.14 to 8.0/8.x version](https://discuss.elastic.co/t/ccr-7-14-to-8-0-8-x-version/312644)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 2, 2022, 5:45pm UTC](https://discuss.elastic.co/t/ccr-7-14-to-8-0-8-x-version/312644 "2022-09-02T17:45:52Z")
Is it possible to have a CCR to new 8.0 elasticsearch cluster from existing 7.14 version elasticsearch cluster (Remote Cluster)? or the existing 7.14 version cluster needs to be upgraded to 7.17 vesrion first? --- ## [Unable to pass Azure snapshot repository Setting "client" in java API](https://discuss.elastic.co/t/unable-to-pass-azure-snapshot-repository-setting-client-in-java-api/313558)
**Author:** [@irene\_ghafari](https://discuss.elastic.co/u/irene_ghafari)\ **Replies:** 0\ **Last updated:** [September 2, 2022, 2:10pm UTC](https://discuss.elastic.co/t/unable-to-pass-azure-snapshot-repository-setting-client-in-java-api/313558 "2022-09-02T14:10:45Z")
Hello :slight\_smile: I want to register an Azure repository for Elasticsearch snapshot restoration, from a client other than default. It mentions in the documentation that I should set the client in repository settings.… --- ## [Multiple ELK Clusters and one Global web FrontEnd](https://discuss.elastic.co/t/multiple-elk-clusters-and-one-global-web-frontend/313473)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 3\ **Last updated:** [September 2, 2022, 2:06pm UTC](https://discuss.elastic.co/t/multiple-elk-clusters-and-one-global-web-frontend/313473 "2022-09-02T14:06:29Z")
Hello there: We have a client, they sell goods globally and wanted to use Elasticsearch as Search Engine. They have their databases in one region but wanted the search performance fast in multiple regions (Europe, Nort… --- ## [Ingest data from Relational DB to Elasticsearch](https://discuss.elastic.co/t/ingest-data-from-relational-db-to-elasticsearch/313376)
**Author:** [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\ **Replies:** 9\ **Last updated:** [September 2, 2022, 1:14pm UTC](https://discuss.elastic.co/t/ingest-data-from-relational-db-to-elasticsearch/313376 "2022-09-02T13:14:49Z")
Hello there: We are building a search engine with Elastic, the source data is on a relational DB. We need to ingest data from the DB to Elasticsearch. We know it is doable using JDBC Input Plugin on Logstash to ingest d… --- ## [Manipulate score by field integer value](https://discuss.elastic.co/t/manipulate-score-by-field-integer-value/313553)
**Author:** [@frankmehlhop.com](https://discuss.elastic.co/u/frankmehlhop.com)\ **Replies:** 0\ **Last updated:** [September 2, 2022, 12:21pm UTC](https://discuss.elastic.co/t/manipulate-score-by-field-integer-value/313553 "2022-09-02T12:21:57Z")
I use Elastic for searching pdf's. One of the fields apart of the pdf-content is doridat, what is a date as integer. The newest documents should get a higher score (higher ranking). This means that the higher the value i… --- ## [Disk Usage problem](https://discuss.elastic.co/t/disk-usage-problem/313543)
**Author:** [@Medel](https://discuss.elastic.co/u/Medel)\ **Replies:** 14\ **Last updated:** [September 2, 2022, 12:20pm UTC](https://discuss.elastic.co/t/disk-usage-problem/313543 "2022-09-02T12:20:48Z")
Hello! I have a strange issue in my elasticsearch cluster So I have 3 nodes, and each node server has 300gb disk space on it But it showed that only 20gb is available. How I can add more space to the nodes? --- ## [Using upsert to update existing record base on value in fields](https://discuss.elastic.co/t/using-upsert-to-update-existing-record-base-on-value-in-fields/313494)
**Author:** [@nookseal](https://discuss.elastic.co/u/nookseal)\ **Replies:** 1\ **Last updated:** [September 2, 2022, 10:15am UTC](https://discuss.elastic.co/t/using-upsert-to-update-existing-record-base-on-value-in-fields/313494 "2022-09-02T10:15:43Z")
Hi all, Currently I'm trying to manage the Elasticsearch records from Filebeat which came from bash script and write to CSV file for each execute, then Filebeat collect log from CSV file. Below are example of header(no… --- ## [One index shows red status](https://discuss.elastic.co/t/one-index-shows-red-status/313128)
**Author:** [@Shashi\_Prakash](https://discuss.elastic.co/u/Shashi_Prakash)\ **Replies:** 5\ **Last updated:** [September 2, 2022, 7:25am UTC](https://discuss.elastic.co/t/one-index-shows-red-status/313128 "2022-09-02T07:25:14Z")
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size red open hft-filebeat 2aHzkG-YRLODjaTR0IAErQ 1 0 Not sure why this shows red although have restarted … --- ## [Update by query not work on linux terminal but work on devtool UI](https://discuss.elastic.co/t/update-by-query-not-work-on-linux-terminal-but-work-on-devtool-ui/313517)
**Author:** [@siwapong.cha](https://discuss.elastic.co/u/siwapong.cha)\ **Replies:** 1\ **Last updated:** [September 2, 2022, 8:21am UTC](https://discuss.elastic.co/t/update-by-query-not-work-on-linux-terminal-but-work-on-devtool-ui/313517 "2022-09-02T08:21:48Z")
I'm doing the update by query and it's work well on the devtool UI Screenshot below But when I did the same thing on linux terminal curl -X POST -k -u myusername:mypassword "https://localhost:9200/my-index/\_update\_… --- ## [Kafka Implementation](https://discuss.elastic.co/t/kafka-implementation/313241)
**Author:** [@Sarala\_C](https://discuss.elastic.co/u/Sarala_C)\ **Replies:** 2\ **Last updated:** [September 2, 2022, 6:12am UTC](https://discuss.elastic.co/t/kafka-implementation/313241 "2022-09-02T06:12:57Z")
We are Trying to Implement Kafka in our environment. So right now our Set up is like: Syslog Server(Logstash) --\> Event Hub --\> Azure VM Logstash --\> Azure VM Elasticsearch --\> Azure VM kibana. We want to place Kafka i… --- ## [Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/313467)
**Author:** [@Technolust](https://discuss.elastic.co/u/Technolust)\ **Replies:** 4\ **Last updated:** [September 1, 2022, 8:22pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/313467 "2022-09-01T20:22:27Z")
I'm not able to get kibana to present username password continuously shows: 10.141.0.171:5601 Kibana server is not ready yet. kibana.log shows: "ecs":{"version":"8.4.0"},"@timestamp":"2022-09-01T13:03:37.022-04:00","… --- ## [Connecting to Elasticsearch Cluster Node|| Nodes via Javascript client](https://discuss.elastic.co/t/connecting-to-elasticsearch-cluster-node-nodes-via-javascript-client/313481)
**Author:** [@whizyrel](https://discuss.elastic.co/u/whizyrel)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 8:10pm UTC](https://discuss.elastic.co/t/connecting-to-elasticsearch-cluster-node-nodes-via-javascript-client/313481 "2022-09-01T20:10:40Z")
I have a quick dumb question, I have an elasticsearch self-managed cluster in compose, the question is how should I connect: by specifying a node or mandatorily specifying all nodes? I appreciate the feedback, thank you … --- ## [Query latency/service time are always identical](https://discuss.elastic.co/t/query-latency-service-time-are-always-identical/313477)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 2\ **Last updated:** [September 1, 2022, 8:07pm UTC](https://discuss.elastic.co/t/query-latency-service-time-are-always-identical/313477 "2022-09-01T20:07:45Z")
Hi, in all my benchmarks, these values are always the same: | 50th percentile latency | replay-listing-query | 4.3336 | ms | | … --- ## [How to Grok hexidecimals to Human Readable Values](https://discuss.elastic.co/t/how-to-grok-hexidecimals-to-human-readable-values/313380)
**Author:** [@DominicS](https://discuss.elastic.co/u/DominicS)\ **Replies:** 5\ **Last updated:** [September 1, 2022, 6:58pm UTC](https://discuss.elastic.co/t/how-to-grok-hexidecimals-to-human-readable-values/313380 "2022-09-01T18:58:34Z")
Hello, I am a Grok newbie , this is my first post i need to know how to grok hex values into a grok pattern for the purpose of creating a logstash pipeline.I have googled for a while but found nothing helpful this i… --- ## [Delay logs Paloalto](https://discuss.elastic.co/t/delay-logs-paloalto/313367)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 15\ **Last updated:** [September 1, 2022, 5:24pm UTC](https://discuss.elastic.co/t/delay-logs-paloalto/313367 "2022-09-01T17:24:30Z")
Hello, I am completely new to ELK, in my case someone installed this tool but it is no longer in my organization and I am putting a lot of effort into trying to keep the ELK solution working. Excuse my English as I'm u… --- ## [Issue using Terms Lookup query inside Percolator](https://discuss.elastic.co/t/issue-using-terms-lookup-query-inside-percolator/312513)
**Author:** [@patricio.gorin](https://discuss.elastic.co/u/patricio.gorin)\ **Replies:** 3\ **Last updated:** [September 1, 2022, 4:37pm UTC](https://discuss.elastic.co/t/issue-using-terms-lookup-query-inside-percolator/312513 "2022-09-01T16:37:40Z")
Hi! I'm facing a problem using a terms lookup query inside a percolator query. The actual problem is that the terms are not re-fetched until I reindex the document with the percolator query. I was expecting that, if I u… --- ## [Sub Aggregation in new JAVA Api Client](https://discuss.elastic.co/t/sub-aggregation-in-new-java-api-client/313447)
**Author:** [@Sarthak\_Agarwal](https://discuss.elastic.co/u/Sarthak_Agarwal)\ **Replies:** 1\ **Last updated:** [September 1, 2022, 4:29pm UTC](https://discuss.elastic.co/t/sub-aggregation-in-new-java-api-client/313447 "2022-09-01T16:29:34Z")
TermsAggregationBuilder term = AggregationBuilders.terms("agg1").field("test"); term.size(100); FilterAggregationBuilder filterAgg = new FilterAggregationBuilder("agg2", new MatchAllQueryBuilder()).subAggregation(term);… --- ## [querqy/SMUI Elastic Search connection support](https://discuss.elastic.co/t/querqy-smui-elastic-search-connection-support/313391)
**Author:** [@luis13](https://discuss.elastic.co/u/luis13)\ **Replies:** 6\ **Last updated:** [September 1, 2022, 4:22pm UTC](https://discuss.elastic.co/t/querqy-smui-elastic-search-connection-support/313391 "2022-09-01T16:22:06Z")
I have querqy/SMUI installed and i'm trying to connect it to Elastic Search but i haven't success so far, is there any information about if this tool is actually supported by Elastic Search or even more how to get connec… --- ## [Problem with the time in elastic](https://discuss.elastic.co/t/problem-with-the-time-in-elastic/312810)
**Author:** [@yosi\_herschkovitz](https://discuss.elastic.co/u/yosi_herschkovitz)\ **Replies:** 9\ **Last updated:** [September 1, 2022, 3:08pm UTC](https://discuss.elastic.co/t/problem-with-the-time-in-elastic/312810 "2022-09-01T15:08:42Z")
hi i have elasticsearch-7.10.1 and kibana-7.10.1 and filebeat-7.10.1 and i cant configure the time for israel in the Discover i see the timestamp and log\_date are different. how i can fix that the both time are Will b… --- ## [ElasticSearch Java API client - connection reset by peer](https://discuss.elastic.co/t/elasticsearch-java-api-client-connection-reset-by-peer/313454)
**Author:** [@ch\_mohansai](https://discuss.elastic.co/u/ch_mohansai)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 2:29pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client-connection-reset-by-peer/313454 "2022-09-01T14:29:29Z")
I have noticed that after upgrading my service to Java api client it is giving random connection reset by peer error, where the 1 st request always failed , later it worked and after 10 minutes this happens again. My ser… --- ## [CI builds of NEST not being updated](https://discuss.elastic.co/t/ci-builds-of-nest-not-being-updated/313449)
**Author:** [@knafve](https://discuss.elastic.co/u/knafve)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 1:44pm UTC](https://discuss.elastic.co/t/ci-builds-of-nest-not-being-updated/313449 "2022-09-01T13:44:52Z")
We are currently using Elasticsearch 6 and are trying to follow the below guidance on upgrading to Elasticsearch 8: NEST and Elasticsearch.Net; upgrading your Elasticsearch server and codebase | Elastic Blog In the blo… --- ## [Headless or GUI](https://discuss.elastic.co/t/headless-or-gui/313407)
**Author:** [@Technolust](https://discuss.elastic.co/u/Technolust)\ **Replies:** 2\ **Last updated:** [September 1, 2022, 12:31pm UTC](https://discuss.elastic.co/t/headless-or-gui/313407 "2022-09-01T12:31:29Z")
Setting up an Elastic Cluster using Rocky Linux 9. I have three servers planned to start. 1 Elasticsearch, 1 Kibana, 1 Logstash. The question I can’t find an answer to is do I need to install Rocky Server with GUI on any… --- ## [Performance issues when indexing data](https://discuss.elastic.co/t/performance-issues-when-indexing-data/313187)
**Author:** [@Sadia\_Mukhtar](https://discuss.elastic.co/u/Sadia_Mukhtar)\ **Replies:** 6\ **Last updated:** [September 1, 2022, 12:29pm UTC](https://discuss.elastic.co/t/performance-issues-when-indexing-data/313187 "2022-09-01T12:29:46Z")
Hi there, In our application we decided to use elasticsearch create a daily snapshot of some critical application data for visualizations. We have about 700K documents that will inserted into one of our index on daily … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=379) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=381)