# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=396 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 397 --- ## [Action:ReadOnly appears to set index.blocks.write not index.blocks.read\_only](https://discuss.elastic.co/t/action-readonly-appears-to-set-index-blocks-write-not-index-blocks-read-only/311070)
**Author:** [@Stef\_Nestor](https://discuss.elastic.co/u/Stef_Nestor)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 8:30pm UTC](https://discuss.elastic.co/t/action-readonly-appears-to-set-index-blocks-write-not-index-blocks-read-only/311070 "2022-08-02T20:30:00Z")
:wave: howdy! I think I'm reading the doc poorly but can't tell intended intended action to request a doc update. Can y'all check this for me, please? ILM ReadOnly states Makes the index read-only; writes and metadata… --- ## [Optimize the latency for 1k OR clauses](https://discuss.elastic.co/t/optimize-the-latency-for-1k-or-clauses/311084)
**Author:** [@Aditya\_Verma2](https://discuss.elastic.co/u/Aditya_Verma2)\ **Replies:** 3\ **Last updated:** [August 2, 2022, 5:21pm UTC](https://discuss.elastic.co/t/optimize-the-latency-for-1k-or-clauses/311084 "2022-08-02T17:21:53Z")
Hey, i want to query on a specific field with 1000 clauses separated by OR. But the latencies that i am getting are very high. Is there any setting in elastic to set cache policy for values of a field so that the values … --- ## [Unable to setup Elasticsearch python instance on https](https://discuss.elastic.co/t/unable-to-setup-elasticsearch-python-instance-on-https/311018)
**Author:** [@Edinpain](https://discuss.elastic.co/u/Edinpain)\ **Replies:** 7\ **Last updated:** [August 2, 2022, 5:05pm UTC](https://discuss.elastic.co/t/unable-to-setup-elasticsearch-python-instance-on-https/311018 "2022-08-02T17:05:27Z")
Sweet lord it's been a long day. Ubuntu newb, ~0 zero knowledge in cryptography certificates. Creating a flask project and want to follow this tutorial to use elastic to index my postgres + sqlalchemy database. Python: … --- ## [Ingest Response to different address for error handling of fire-and-forget bulk ingesting](https://discuss.elastic.co/t/ingest-response-to-different-address-for-error-handling-of-fire-and-forget-bulk-ingesting/311229)
**Author:** [@RoelandWu](https://discuss.elastic.co/u/RoelandWu)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 3:16pm UTC](https://discuss.elastic.co/t/ingest-response-to-different-address-for-error-handling-of-fire-and-forget-bulk-ingesting/311229 "2022-08-02T15:16:28Z")
Hi there, I'm trying to figure out if there is a way to use fire-and-forget ingesting with ElasticSearch. I am developing an application that (among other things) ingests data into Elasticsearch via the bulk api. What … --- ## [Security rules over remote clusters](https://discuss.elastic.co/t/security-rules-over-remote-clusters/311217)
**Author:** [@Enrico\_Pasqualotto](https://discuss.elastic.co/u/Enrico_Pasqualotto)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 2:37pm UTC](https://discuss.elastic.co/t/security-rules-over-remote-clusters/311217 "2022-08-02T14:37:17Z")
Hello, I've setup an infrastructure with a central Elastic cluster and other remote connected using "Remote clusters" feature. When I create detection rules I set the index pattern like :filebeat to match events also fr… --- ## [Configuration Prometheus data in ElasticSearch via Metricbeats](https://discuss.elastic.co/t/configuration-prometheus-data-in-elasticsearch-via-metricbeats/310222)
**Author:** [@tgkumarmca](https://discuss.elastic.co/u/tgkumarmca)\ **Replies:** 7\ **Last updated:** [August 2, 2022, 2:33pm UTC](https://discuss.elastic.co/t/configuration-prometheus-data-in-elasticsearch-via-metricbeats/310222 "2022-08-02T14:33:02Z")
Sub: We are looking for a solution to push the Prometheus data to Elasticsearch for long term storage. We have deployed Elasticsearch, Metric Beat, prometheus and Grafana on a kubernetes cluster. We need to push prometh… --- ## [Transform - List the unique values](https://discuss.elastic.co/t/transform-list-the-unique-values/311132)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 4\ **Last updated:** [August 2, 2022, 1:30pm UTC](https://discuss.elastic.co/t/transform-list-the-unique-values/311132 "2022-08-02T13:30:50Z")
Hi, I'm using a Transform to group logs related to the same event. An event can have multiple IP. A simple aggregation like this: "test\_agg": { "terms": { "field": "vm\_ip" } }, Will list all the possible IP … --- ## [Kibana 8.2.0-Discover page response taking more time compared to query time](https://discuss.elastic.co/t/kibana-8-2-0-discover-page-response-taking-more-time-compared-to-query-time/310843)
**Author:** [@prathibha](https://discuss.elastic.co/u/prathibha)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 12:12pm UTC](https://discuss.elastic.co/t/kibana-8-2-0-discover-page-response-taking-more-time-compared-to-query-time/310843 "2022-08-02T12:12:22Z")
Hello Team, We are upgraded ELK components from 7.16.1 to 8.2.0 and noticed an increase in response time while checking from Discover page. This response is already compressed and still getting delay to get response and… --- ## [Some logs not work with elasticsearch](https://discuss.elastic.co/t/some-logs-not-work-with-elasticsearch/311182)
**Author:** [@White\_Hat](https://discuss.elastic.co/u/White_Hat)\ **Replies:** 5\ **Last updated:** [August 2, 2022, 12:09pm UTC](https://discuss.elastic.co/t/some-logs-not-work-with-elasticsearch/311182 "2022-08-02T12:09:45Z")
I have two logs: {"message":"hello","context":{"user\_id":"xxxxxx","error":{"ERROR":"Invalid x or y"}},"level":400,"level\_name":"ERROR","channel":"production","datetime":"2022-08-02T11:59:02.238022+04:30","extra":{}} an… --- ## [ERROR: Unable to create an enrollment token. Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificateociated certificate is a CA certificate](https://discuss.elastic.co/t/error-unable-to-create-an-enrollment-token-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificateociated-certificate-is-a-ca-certificate/311045)
**Author:** [@huzaifa224](https://discuss.elastic.co/u/huzaifa224)\ **Replies:** 2\ **Last updated:** [August 2, 2022, 7:10am UTC](https://discuss.elastic.co/t/error-unable-to-create-an-enrollment-token-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificateociated-certificate-is-a-ca-certificate/311045 "2022-08-02T07:10:24Z")
I have installed the elasticsearch and configure the all certificated as mentioned in document but when i tried to generate a token it give the error. However i have already added the Keystore by using the command './b… --- ## [Cluster monitoring using Elastic Agent](https://discuss.elastic.co/t/cluster-monitoring-using-elastic-agent/311173)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 3:51am UTC](https://discuss.elastic.co/t/cluster-monitoring-using-elastic-agent/311173 "2022-08-02T03:51:15Z")
Hi Team, I have a 2 production cluster at 7.16.2v, now I want to do a cluster monitoring using elastic agent. I want to know which will be the good approach for doing cluster monitoring. Cluster monitoring using metr… --- ## [Caused by: java.io.StreamCorruptedException: invalid internal transport message format, got (0,0,0,28);](https://discuss.elastic.co/t/caused-by-java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-0-0-0-28/311071)
**Author:** [@kingjianle](https://discuss.elastic.co/u/kingjianle)\ **Replies:** 11\ **Last updated:** [August 2, 2022, 3:22am UTC](https://discuss.elastic.co/t/caused-by-java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-0-0-0-28/311071 "2022-08-02T03:22:59Z")
Elasticsearch version (6.8.0): Plugins installed: \[elasticsearch-analysis-ik\]6.8.0 JVM version (java version "1.8.0\_333"): OS version (uname -a if on a Unix-like system):Linux localhost.localdomain 3.10.0-1160.el7.x86… --- ## [Number of latitude and longitude in geo\_polygon search](https://discuss.elastic.co/t/number-of-latitude-and-longitude-in-geo-polygon-search/311096)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 4\ **Last updated:** [August 2, 2022, 2:54am UTC](https://discuss.elastic.co/t/number-of-latitude-and-longitude-in-geo-polygon-search/311096 "2022-08-02T02:54:52Z")
When I perform a geo\_polygon query, we usually need to give a set of latitude and longitude, and query documents whose geo points are within the geographic polygon. We are considering limiting the number of latitudes an… --- ## [Proper way to dump indices from Elasticsearch and import to another Elasticsearch instance](https://discuss.elastic.co/t/proper-way-to-dump-indices-from-elasticsearch-and-import-to-another-elasticsearch-instance/310938)
**Author:** [@kent010341](https://discuss.elastic.co/u/kent010341)\ **Replies:** 7\ **Last updated:** [August 2, 2022, 2:50am UTC](https://discuss.elastic.co/t/proper-way-to-dump-indices-from-elasticsearch-and-import-to-another-elasticsearch-instance/310938 "2022-08-02T02:50:17Z")
I have a ELK stack deployed with docker container in a private network, and I have to export some of the indices to a device (such as a laptop) and import them to another Elasticsearch instance in another private network… --- ## [Multi-node cluster doesn't see old data](https://discuss.elastic.co/t/multi-node-cluster-doesnt-see-old-data/311092)
**Author:** [@freeman999](https://discuss.elastic.co/u/freeman999)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 2:03am UTC](https://discuss.elastic.co/t/multi-node-cluster-doesnt-see-old-data/311092 "2022-08-02T02:03:58Z")
Hello everyone! I'm just new here. I already have a single-node cluster with Docker. I have two containers: docker ps CONTAINER ID IMAGE COMMAND C… --- ## [Runtime field pitfall](https://discuss.elastic.co/t/runtime-field-pitfall/311155)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 1:47am UTC](https://discuss.elastic.co/t/runtime-field-pitfall/311155 "2022-08-02T01:47:09Z")
If you have a runtime field that references a field, be sure to define the mapping for the referenced field. I was using an ECS field that was "always" present in my indices... until there was an ingest problem. When I… --- ## [Elasticsearch Disaster Recovery](https://discuss.elastic.co/t/elasticsearch-disaster-recovery/311080)
**Author:** [@hjsroldan](https://discuss.elastic.co/u/hjsroldan)\ **Replies:** 7\ **Last updated:** [August 1, 2022, 10:32pm UTC](https://discuss.elastic.co/t/elasticsearch-disaster-recovery/311080 "2022-08-01T22:32:04Z")
Hi, Does anyone know how to perform/setup Elasticsearch Disaster Recovery? --- ## [Json for setting up new indices](https://discuss.elastic.co/t/json-for-setting-up-new-indices/311135)
**Author:** [@jhop](https://discuss.elastic.co/u/jhop)\ **Replies:** 7\ **Last updated:** [August 1, 2022, 10:09pm UTC](https://discuss.elastic.co/t/json-for-setting-up-new-indices/311135 "2022-08-01T22:09:30Z")
Sorry for the simple question but the documentation was not clear to me. I am using python to send data to elasticsearch. Should we always define an index before using json specifying this index to populate elasticsearc… --- ## [Installation Failed GCS Repo, Exception in thread "main" java.net.ConnectException: Connection timed out](https://discuss.elastic.co/t/installation-failed-gcs-repo-exception-in-thread-main-java-net-connectexception-connection-timed-out/310673)
**Author:** [@adilusmani](https://discuss.elastic.co/u/adilusmani)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 8:55pm UTC](https://discuss.elastic.co/t/installation-failed-gcs-repo-exception-in-thread-main-java-net-connectexception-connection-timed-out/310673 "2022-08-01T20:55:32Z")
Hello, I am getting below error while installing Elasticsearch GCS plugin I am running the following command sudo ES\_JAVA\_OPTS="-Dhttp.proxyHost=\*\*\*\* -Dhttp.proxyPort=9200 Dhttps.proxyHost=\*\*\*\* -Dhttps.proxyPort=9200"… --- ## [Reinstall Elasticsearch 8.x (mistakes were made)](https://discuss.elastic.co/t/reinstall-elasticsearch-8-x-mistakes-were-made/311146)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 6:02pm UTC](https://discuss.elastic.co/t/reinstall-elasticsearch-8-x-mistakes-were-made/311146 "2022-08-01T18:02:21Z")
noobish question: I am relearning elastic after a hiatus of a couple years. I downloaded the 8.3.3 tarball, uncompressed it and started elasticsearch, (I'm on linux) but I forgot to properly configure elasticsearch.yml… --- ## [Is there a way to write a query where x must be true AND y must be a + b, OR c + d?](https://discuss.elastic.co/t/is-there-a-way-to-write-a-query-where-x-must-be-true-and-y-must-be-a-b-or-c-d/311020)
**Author:** [@ccsisko](https://discuss.elastic.co/u/ccsisko)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 6:00pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-write-a-query-where-x-must-be-true-and-y-must-be-a-b-or-c-d/311020 "2022-08-01T18:00:22Z")
Hello! We're writing a query where a couple fields must be true, while another field must equal something OR something else. More specifically, we're querying for a document that has a status of X, and the amount value … --- ## [GDAL not able to connect to Elastic Search](https://discuss.elastic.co/t/gdal-not-able-to-connect-to-elastic-search/308601)
**Author:** [@Purnima\_J](https://discuss.elastic.co/u/Purnima_J)\ **Replies:** 5\ **Last updated:** [August 1, 2022, 5:22pm UTC](https://discuss.elastic.co/t/gdal-not-able-to-connect-to-elastic-search/308601 "2022-08-01T17:22:38Z")
I am pretty new to Elasticsearch. I have installed both Elasticsearch and kibana. I am able to connect to Elasticsearch by https://localhost:9200. I am trying to ingest geospatial data as mentioned in this blog - How to… --- ## [Elasticsearch delete data for more than 2 mohts in multiple index](https://discuss.elastic.co/t/elasticsearch-delete-data-for-more-than-2-mohts-in-multiple-index/311144)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 4:44pm UTC](https://discuss.elastic.co/t/elasticsearch-delete-data-for-more-than-2-mohts-in-multiple-index/311144 "2022-08-01T16:44:19Z")
Hi friends, I have 3 index. how can i delete data form these index if it is more than 2 months. I know can use ILM policy but my index is created from elastalert whereby i cant use ILM policy as it wont append timestamp… --- ## [Installing custom Elasticsearch plugins in Elastic Cloud](https://discuss.elastic.co/t/installing-custom-elasticsearch-plugins-in-elastic-cloud/311032)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 8\ **Last updated:** [August 1, 2022, 4:44pm UTC](https://discuss.elastic.co/t/installing-custom-elasticsearch-plugins-in-elastic-cloud/311032 "2022-08-01T16:44:14Z")
Hello, I'm a trial user of Elastic cloud, and I can see it's technically possible to install custom plugins in Elasticsearch nodes: However, as you can see, I'm not allowed to use this feature for my "subscription l… --- ## [I want best matching result comes first with fuzziness: AUTO on](https://discuss.elastic.co/t/i-want-best-matching-result-comes-first-with-fuzziness-auto-on/311085)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 1:33pm UTC](https://discuss.elastic.co/t/i-want-best-matching-result-comes-first-with-fuzziness-auto-on/311085 "2022-08-01T13:33:06Z")
{ "size":1000, "query":{ "multi\_match":{ "query":"monsoon", "type": "best\_fields", "fields":\["EntityType^4", "Title","Title.\_2gram","Title.\_3gram","Title.\_index\_pre… --- ## [Where is my data of fortinet?](https://discuss.elastic.co/t/where-is-my-data-of-fortinet/311009)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 27\ **Last updated:** [August 1, 2022, 1:20pm UTC](https://discuss.elastic.co/t/where-is-my-data-of-fortinet/311009 "2022-08-01T13:20:03Z")
Hello, I installed Elasticsearch and kibana and filebeat in ubuntu 22.04 VM and i installed FortiGate 7.2.0 in other VM in VMware workstation, I follow the steps to upload the Fortinet logs in elastic and kibana as the … --- ## [Get exact complete phonetic match](https://discuss.elastic.co/t/get-exact-complete-phonetic-match/311095)
**Author:** [@mkoch1](https://discuss.elastic.co/u/mkoch1)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 9:29am UTC](https://discuss.elastic.co/t/get-exact-complete-phonetic-match/311095 "2022-08-01T09:29:07Z")
I have a document with the field "familyname" with a phonetic analyzer. The content can be something like "von meier schmidt". Is there a possibility to only get a match, if I search for "von meyer schmidt" or "von meie… --- ## [Unique count after aggregation "painless](https://discuss.elastic.co/t/unique-count-after-aggregation-painless/311088)
**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 7:26am UTC](https://discuss.elastic.co/t/unique-count-after-aggregation-painless/311088 "2022-08-01T07:26:14Z")
Hello everybody, Could someone please give me an example of a unique count after an aggregation of one field using the painless scripting ? Thanks in advance Best regards --- ## [Random exits every few weeks - Native controller process has stopped - no new native processes can be started](https://discuss.elastic.co/t/random-exits-every-few-weeks-native-controller-process-has-stopped-no-new-native-processes-can-be-started/311076)
**Author:** [@wintercounter](https://discuss.elastic.co/u/wintercounter)\ **Replies:** 0\ **Last updated:** [August 1, 2022, 5:54am UTC](https://discuss.elastic.co/t/random-exits-every-few-weeks-native-controller-process-has-stopped-no-new-native-processes-can-be-started/311076 "2022-08-01T05:54:37Z")
Hi all, I'm having a single node Docker instance which stops for some reason every few weeks. I'd like to find out the root cause and how to fix it. Last few logs: 2022-07-31T01:38:00.006473091Z {"@timestamp":"2022-07… --- ## [Composite aggregation query with bucket\_sort does not work properly](https://discuss.elastic.co/t/composite-aggregation-query-with-bucket-sort-does-not-work-properly/311055)
**Author:** [@fabiobozzo](https://discuss.elastic.co/u/fabiobozzo)\ **Replies:** 0\ **Last updated:** [July 31, 2022, 10:51am UTC](https://discuss.elastic.co/t/composite-aggregation-query-with-bucket-sort-does-not-work-properly/311055 "2022-07-31T10:51:07Z")
I have an index to store financial transactions: { "mappings": { "\_doc": { "properties": { "amount": { "type": "long" }, "currencyCode": { "type": "keyword" … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=395) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=397)