# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=386 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 387 --- ## [Multiple action, each with a condition in Watcher](https://discuss.elastic.co/t/multiple-action-each-with-a-condition-in-watcher/312766)
**Author:** [@Seemant\_Bind](https://discuss.elastic.co/u/Seemant_Bind)\ **Replies:** 0\ **Last updated:** [August 24, 2022, 6:37am UTC](https://discuss.elastic.co/t/multiple-action-each-with-a-condition-in-watcher/312766 "2022-08-24T06:37:10Z")
Hi, I am trying to get multiple action output each with different condition in watcher. For that I have tried to use this example(elasticsearch - how to send email alert to groups based on condition success in kibana wa… --- ## [500 - Internal Server : ErrorRepository\_verification\_exception, nested: RepositoryVerificationException\[\[backup\] a file written by master to the store \[C:\\\\Updates\\\\Backups\\\\ElasticSearch\] cannot be accessed on the node](https://discuss.elastic.co/t/500-internal-server-errorrepository-verification-exception-nested-repositoryverificationexception-backup-a-file-written-by-master-to-the-store-c-updates-backups-elasticsearch-cannot-be-accessed-on-the-node/311106)
**Author:** [@mujtabah](https://discuss.elastic.co/u/mujtabah)\ **Replies:** 9\ **Last updated:** [August 24, 2022, 6:07am UTC](https://discuss.elastic.co/t/500-internal-server-errorrepository-verification-exception-nested-repositoryverificationexception-backup-a-file-written-by-master-to-the-store-c-updates-backups-elasticsearch-cannot-be-accessed-on-the-node/311106 "2022-08-24T06:07:40Z")
I have a cluster of 5 nodes(3master,2 data), i have created directory in each node and included its path as path.repo in all of its yml's. then when i take snapshot its giving this error. command i used PUT \_snapshot/b… --- ## [Connect to elasticsearch cluster](https://discuss.elastic.co/t/connect-to-elasticsearch-cluster/312684)
**Author:** [@skyle52](https://discuss.elastic.co/u/skyle52)\ **Replies:** 2\ **Last updated:** [August 24, 2022, 3:33am UTC](https://discuss.elastic.co/t/connect-to-elasticsearch-cluster/312684 "2022-08-24T03:33:07Z")
Hello all, I have a question about elasticsearch cluster, please advise: I setup 3 nodes elasticsearch cluster with each node have all the default roles. But I don't know how my filebeat or logstash can push log to ela… --- ## [Elasticsearch 8.x installation and configuration problem and elasticsearch service not able to start](https://discuss.elastic.co/t/elasticsearch-8-x-installation-and-configuration-problem-and-elasticsearch-service-not-able-to-start/312745)
**Author:** [@rjoshi28](https://discuss.elastic.co/u/rjoshi28)\ **Replies:** 1\ **Last updated:** [August 23, 2022, 10:48pm UTC](https://discuss.elastic.co/t/elasticsearch-8-x-installation-and-configuration-problem-and-elasticsearch-service-not-able-to-start/312745 "2022-08-23T22:48:18Z")
Hello guys, I have trouble installing and configuring my elasticsearch 8.x on Ubuntu 20.04 with ansible role. I am getting an error of Could not create auto-configuration directory with main ERROR Unable to create file… --- ## [How to count two different message and put the value in an email in Watcher](https://discuss.elastic.co/t/how-to-count-two-different-message-and-put-the-value-in-an-email-in-watcher/312743)
**Author:** [@pshada](https://discuss.elastic.co/u/pshada)\ **Replies:** 0\ **Last updated:** [August 23, 2022, 9:09pm UTC](https://discuss.elastic.co/t/how-to-count-two-different-message-and-put-the-value-in-an-email-in-watcher/312743 "2022-08-23T21:09:06Z")
I have a watcher with query like this { "match\_phrase": { "message": { "query": "INITIAL" } } … --- ## [Master node not trusting node certificate](https://discuss.elastic.co/t/master-node-not-trusting-node-certificate/312606)
**Author:** [@dabit\_coder](https://discuss.elastic.co/u/dabit_coder)\ **Replies:** 14\ **Last updated:** [August 23, 2022, 6:41pm UTC](https://discuss.elastic.co/t/master-node-not-trusting-node-certificate/312606 "2022-08-23T18:41:15Z")
Hello, I am writing this post as my previous post was closed by inactivity (here) We are trying to create a cluster with one master node and one data node. So far, we had no success in that regard because we always get… --- ## [GeoIP working strange after update](https://discuss.elastic.co/t/geoip-working-strange-after-update/312505)
**Author:** [@Alexander\_A](https://discuss.elastic.co/u/Alexander_A)\ **Replies:** 2\ **Last updated:** [August 23, 2022, 6:10pm UTC](https://discuss.elastic.co/t/geoip-working-strange-after-update/312505 "2022-08-23T18:10:48Z")
After GeoIP Update using geoip.elastic.co we see strange behavior country for ip 1.1.1.1 not detected and organization\_name became "CLOUDFLARENET" instead of "Cloudflare, Inc". When we use simulate API we get old data (… --- ## [Search sas you type working great, but I need fuzziness / misspell correction](https://discuss.elastic.co/t/search-sas-you-type-working-great-but-i-need-fuzziness-misspell-correction/312729)
**Author:** [@pthreat](https://discuss.elastic.co/u/pthreat)\ **Replies:** 1\ **Last updated:** [August 23, 2022, 6:04pm UTC](https://discuss.elastic.co/t/search-sas-you-type-working-great-but-i-need-fuzziness-misspell-correction/312729 "2022-08-23T18:04:20Z")
This works great, however, I want to also be able to handle mistypes such as pish or fish, should match phish: My Query: { "from": 0, "size": 5, "sort": \[ { "date": { "o… --- ## [Filter range on array of object](https://discuss.elastic.co/t/filter-range-on-array-of-object/312669)
**Author:** [@Jake\_Wong](https://discuss.elastic.co/u/Jake_Wong)\ **Replies:** 10\ **Last updated:** [August 23, 2022, 4:21pm UTC](https://discuss.elastic.co/t/filter-range-on-array-of-object/312669 "2022-08-23T16:21:10Z")
I have a documents with many nested fields and array of objects inside them. So when I perform search, how can I get the age range between 20 to 35? { "company\_name": "abc company", "detail": { "staff": … --- ## [Cannot create index using ElasticSearch.Net](https://discuss.elastic.co/t/cannot-create-index-using-elasticsearch-net/312725)
**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\ **Replies:** 0\ **Last updated:** [August 23, 2022, 3:55pm UTC](https://discuss.elastic.co/t/cannot-create-index-using-elasticsearch-net/312725 "2022-08-23T15:55:21Z")
Hi! I'm trying to create an index using ElasticSearch.Net but it does not work. I have connection to Elastic since if the index exists I can send a query against it and get a result but when I try to create I get a pin… --- ## [How to disable the default index mapping and index documents based on explicit mapping](https://discuss.elastic.co/t/how-to-disable-the-default-index-mapping-and-index-documents-based-on-explicit-mapping/312719)
**Author:** [@Kishan\_Singh](https://discuss.elastic.co/u/Kishan_Singh)\ **Replies:** 0\ **Last updated:** [August 23, 2022, 3:07pm UTC](https://discuss.elastic.co/t/how-to-disable-the-default-index-mapping-and-index-documents-based-on-explicit-mapping/312719 "2022-08-23T15:07:00Z")
The problem statement is this: i want to index documents based only on the fields that i define in my explicit mapping configuration while creating an index. i can see that even if i pass my own index mapping for speci… --- ## [Multi match query or any search query is not working when field data is in Json string format](https://discuss.elastic.co/t/multi-match-query-or-any-search-query-is-not-working-when-field-data-is-in-json-string-format/311527)
**Author:** [@sona](https://discuss.elastic.co/u/sona)\ **Replies:** 1\ **Last updated:** [August 23, 2022, 11:01am UTC](https://discuss.elastic.co/t/multi-match-query-or-any-search-query-is-not-working-when-field-data-is-in-json-string-format/311527 "2022-08-23T11:01:53Z")
Hi, One of the field in my index is in json string format but I am not able to perform multi match search query on this. For example if I am passing query as my\_full\_name I am not getting any output. Below is the query … --- ## [Nest BulkAll - Error: 'BulkAll halted after receiving failures that can not be retried from \_bulk'](https://discuss.elastic.co/t/nest-bulkall-error-bulkall-halted-after-receiving-failures-that-can-not-be-retried-from-bulk/304949)
**Author:** [@dumstattd](https://discuss.elastic.co/u/dumstattd)\ **Replies:** 5\ **Last updated:** [August 23, 2022, 9:47am UTC](https://discuss.elastic.co/t/nest-bulkall-error-bulkall-halted-after-receiving-failures-that-can-not-be-retried-from-bulk/304949 "2022-08-23T09:47:45Z")
I am currently using a foreach to index through a pipeline using the nest client. This is slow and highly inefficient. But works. For that same dataset, I tried using the BulkAll command as follows to push the same data… --- ## [Do aarch64-architecture support x-pack？](https://discuss.elastic.co/t/do-aarch64-architecture-support-x-pack/311985)
**Author:** [@calvin\_zhang1206](https://discuss.elastic.co/u/calvin_zhang1206)\ **Replies:** 11\ **Last updated:** [August 23, 2022, 9:41am UTC](https://discuss.elastic.co/t/do-aarch64-architecture-support-x-pack/311985 "2022-08-23T09:41:52Z")
Hi: My server CPU architecture is aarch64, my elasticsearch version is 6.2.4，now I want to use x-pack for security, Do aarch64-architecture support x-pack？ please help me ,thank you --- ## [How to restart data nodes with outdated data?](https://discuss.elastic.co/t/how-to-restart-data-nodes-with-outdated-data/312363)
**Author:** [@Sylmarch](https://discuss.elastic.co/u/Sylmarch)\ **Replies:** 2\ **Last updated:** [August 23, 2022, 7:55am UTC](https://discuss.elastic.co/t/how-to-restart-data-nodes-with-outdated-data/312363 "2022-08-23T07:55:09Z")
Hi, we have an Elasticsearch 7 cluster in production with 3 physical machines. Each machines hosts 3 nodes: 1 node: master-eligible + data 2 nodes: data only Cluster is configured so that replica shards are copied o… --- ## [Can I create two or more clusters in ElasticSearch](https://discuss.elastic.co/t/can-i-create-two-or-more-clusters-in-elasticsearch/312681)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 0\ **Last updated:** [August 23, 2022, 7:37am UTC](https://discuss.elastic.co/t/can-i-create-two-or-more-clusters-in-elasticsearch/312681 "2022-08-23T07:37:38Z")
Hi, I want to create two clusters in elasticsearch. 1 cluster will hold different indices and another cluster will hold different indices. Can I do that in Elasticsearch and if yes then how to do that?? --- ## [Elastic best Practice](https://discuss.elastic.co/t/elastic-best-practice/312671)
**Author:** [@vnovotny98](https://discuss.elastic.co/u/vnovotny98)\ **Replies:** 7\ **Last updated:** [August 23, 2022, 7:03am UTC](https://discuss.elastic.co/t/elastic-best-practice/312671 "2022-08-23T07:03:15Z")
Hello, I am indexing 1mil logs per 15 minutes in one index and I need about 10 000 of them to visualize in Grafana and make reports on it. Is it good practice to separate these 10 000/15 mins to another index? Will sear… --- ## [Kubernetes pods are not ready in a Cluster with xpack.security.enabled: true after the pod restart](https://discuss.elastic.co/t/kubernetes-pods-are-not-ready-in-a-cluster-with-xpack-security-enabled-true-after-the-pod-restart/312670)
**Author:** [@sandeep\_kumar5](https://discuss.elastic.co/u/sandeep_kumar5)\ **Replies:** 0\ **Last updated:** [August 23, 2022, 4:50am UTC](https://discuss.elastic.co/t/kubernetes-pods-are-not-ready-in-a-cluster-with-xpack-security-enabled-true-after-the-pod-restart/312670 "2022-08-23T04:50:32Z")
I have created an elasticsearch in Kubernetes using helm charts(helm version 3) by enabling xpack.security. It was working fine and did not find any issues but when i am restarting the pod or putting any update it is giv… --- ## [Update Reindex Data](https://discuss.elastic.co/t/update-reindex-data/312667)
**Author:** [@xynobob](https://discuss.elastic.co/u/xynobob)\ **Replies:** 0\ **Last updated:** [August 23, 2022, 3:28am UTC](https://discuss.elastic.co/t/update-reindex-data/312667 "2022-08-23T03:28:56Z")
So I reindex one of my ".kibana" index to a new index called "kibana-detections" as shown below POST \_reindex { "source": { "index": ".kibana", "query": { "bool": { "must": \[\], "filter": … --- ## [Parsing JSON from Elastic Search query](https://discuss.elastic.co/t/parsing-json-from-elastic-search-query/312666)
**Author:** [@Chandana\_P](https://discuss.elastic.co/u/Chandana_P)\ **Replies:** 0\ **Last updated:** [August 23, 2022, 3:23am UTC](https://discuss.elastic.co/t/parsing-json-from-elastic-search-query/312666 "2022-08-23T03:23:18Z")
How do I parse JSON object from a URL painless or any other scripting language from the Elastic Search query? --- ## [Bucket size control for sub-aggregation](https://discuss.elastic.co/t/bucket-size-control-for-sub-aggregation/312193)
**Author:** [@lzz118](https://discuss.elastic.co/u/lzz118)\ **Replies:** 2\ **Last updated:** [August 23, 2022, 3:21am UTC](https://discuss.elastic.co/t/bucket-size-control-for-sub-aggregation/312193 "2022-08-23T03:21:49Z")
Hi there, I am using multi-level sub-aggregations in my application and I noticed that the size/shard size parameter does not seems to be used during the runtime to control the bucket size of the secondary or deeper lev… --- ## [Snapshot and restore - 7.14 version to 8.0/8.x](https://discuss.elastic.co/t/snapshot-and-restore-7-14-version-to-8-0-8-x/312645)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [August 23, 2022, 1:07am UTC](https://discuss.elastic.co/t/snapshot-and-restore-7-14-version-to-8-0-8-x/312645 "2022-08-23T01:07:57Z")
I do see that for upgrade from 7.14 to 8.0 requires upgrading first to 7.17 version then to 8.0 to have the compatibility of the indices. Is this applicable for "Snapshot and restore" as well, where 7.14 cluster (Remote… --- ## [Recovering from a crash](https://discuss.elastic.co/t/recovering-from-a-crash/312649)
**Author:** [@duckasylum](https://discuss.elastic.co/u/duckasylum)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 10:09pm UTC](https://discuss.elastic.co/t/recovering-from-a-crash/312649 "2022-08-22T22:09:55Z")
Hi Not sure if this is more of an ES or Kibana topic but I will start with the ES part. I am running a single node cluster for development projects (official docker containers on Podman). After consecutive power failure… --- ## [New java client bug in GeoCentroidAggregation?](https://discuss.elastic.co/t/new-java-client-bug-in-geocentroidaggregation/312612)
**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 3:27pm UTC](https://discuss.elastic.co/t/new-java-client-bug-in-geocentroidaggregation/312612 "2022-08-22T15:27:17Z")
Hi, I believe I ran into a bug with the new Java Client (v8.3.3) I'm trying a GeoCentroidAggregation which returns 0 results. In that case I get an exception: POST /dataset/\_search?typed\_keys=true {"\_source":{"exclude… --- ## [Array Sort Script to sort array by index](https://discuss.elastic.co/t/array-sort-script-to-sort-array-by-index/312617)
**Author:** [@Dakshay\_Agarwal](https://discuss.elastic.co/u/Dakshay_Agarwal)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 12:50pm UTC](https://discuss.elastic.co/t/array-sort-script-to-sort-array-by-index/312617 "2022-08-22T12:50:04Z")
PUT /my-index-000001/\_doc/1?refresh { "product": "chocolate", "salesManager" :\["a","z","r"\] } PUT /my-index-000001/\_doc/2?refresh { "product": "chocolate", "salesManager" :\["v","f","d"\] } PUT /my-index-0000… --- ## [How to automatically create a new Elasticsearch cluster (via Terraform and user-data scripts)?](https://discuss.elastic.co/t/how-to-automatically-create-a-new-elasticsearch-cluster-via-terraform-and-user-data-scripts/312619)
**Author:** [@burnersk](https://discuss.elastic.co/u/burnersk)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 12:19pm UTC](https://discuss.elastic.co/t/how-to-automatically-create-a-new-elasticsearch-cluster-via-terraform-and-user-data-scripts/312619 "2022-08-22T12:19:19Z")
I am about to create a small Terraform script for an Elastic Stack "training" (not an actual training, just infrastructure description for a playground cluster), which setups Elasticsearch using a Cloud-init user-data sc… --- ## [Syntax for running async search in PHP client?](https://discuss.elastic.co/t/syntax-for-running-async-search-in-php-client/312464)
**Author:** [@me24](https://discuss.elastic.co/u/me24)\ **Replies:** 2\ **Last updated:** [August 22, 2022, 11:40am UTC](https://discuss.elastic.co/t/syntax-for-running-async-search-in-php-client/312464 "2022-08-22T11:40:14Z")
Hi, I'm trying to fire multiple search requests in parallel (same input but different queries) to save on execution time - running them in series seems wasteful. I'm using PHP 7.4 and ES 7.5.2 at the moment, running "re… --- ## [Super-long wildcard query (must be a better way!)](https://discuss.elastic.co/t/super-long-wildcard-query-must-be-a-better-way/312605)
**Author:** [@Richie\_Jarvis](https://discuss.elastic.co/u/Richie_Jarvis)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 11:35am UTC](https://discuss.elastic.co/t/super-long-wildcard-query-must-be-a-better-way/312605 "2022-08-22T11:35:41Z")
Hi All, I am playing with some flight data at the moment, and wanted to view the Eastbourne Airshow data I have captured with my aerial & dump1090 integration. To this end, I want to exclude all commercial flights from… --- ## [Nodes disconnected randomly](https://discuss.elastic.co/t/nodes-disconnected-randomly/312599)
**Author:** [@c48105fb5be692da920e](https://discuss.elastic.co/u/c48105fb5be692da920e)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 10:31am UTC](https://discuss.elastic.co/t/nodes-disconnected-randomly/312599 "2022-08-22T10:31:26Z")
I'm running Elasticsearch cluster (7.10.2) with 8 nodes of cluster (3 master, 3 data, and 2 client node). It was running smoothly till now , now the nodes began to disconnect from the cluster one node at a day , when I… --- ## [Index template shows a policy that doesn't exist](https://discuss.elastic.co/t/index-template-shows-a-policy-that-doesnt-exist/312598)
**Author:** [@salmuhammady](https://discuss.elastic.co/u/salmuhammady)\ **Replies:** 0\ **Last updated:** [August 22, 2022, 10:24am UTC](https://discuss.elastic.co/t/index-template-shows-a-policy-that-doesnt-exist/312598 "2022-08-22T10:24:55Z")
Index Template is showing a policy lifecycle that doesn't exist. any idea how come this happens? GET /index-name/\_ilm/explain?pretty { "indices" : { ".ds-index-name-2022.01.12-000001" : { "index" : ".ds-ind… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=385) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=387)