# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=398

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 399

---

## [Downgrading License](https://discuss.elastic.co/t/downgrading-license/310931)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 10\
**Last updated:** [July 28, 2022, 10:52pm UTC](https://discuss.elastic.co/t/downgrading-license/310931 "2022-07-28T22:52:49Z")

</div>

Hi, we have a cluster with Platinium Licence, we are creating a new cluster and want to move the license there, an leave the old cluster with just a basic license. is there a way to downgrade the license to Basic, so the…

---

## [Elastic Memory crossed function](https://discuss.elastic.co/t/elastic-memory-crossed-function/309417)

<div class="topic-metadata">

**Author:** [@Rajesh.Banka](https://discuss.elastic.co/u/Rajesh.Banka)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 7:02pm UTC](https://discuss.elastic.co/t/elastic-memory-crossed-function/309417 "2022-07-28T19:02:24Z")

</div>

Hi Team, I would like to raise a ticket on ELK Watcher, which need to give some alert on the crossed memory function. so, please give an access to do it or help me in raising it.

---

## [How do you extract a Watcher's 'state', 'status' or 'execution\_state' from ctx](https://discuss.elastic.co/t/how-do-you-extract-a-watchers-state-status-or-execution-state-from-ctx/309952)

<div class="topic-metadata">

**Author:** [@ameindel](https://discuss.elastic.co/u/ameindel)\
**Replies:** 3\
**Last updated:** [July 28, 2022, 6:48pm UTC](https://discuss.elastic.co/t/how-do-you-extract-a-watchers-state-status-or-execution-state-from-ctx/309952 "2022-07-28T18:48:54Z")

</div>

Hello there! I'm currently trying to create a Watcher that has a 'condition' that will resolve to true when the Watcher execution fails (checks for a "failed" state). I have a Teams webhook that works, and I would like …

---

## [Question regarding Java High Level REST Client moving forward](https://discuss.elastic.co/t/question-regarding-java-high-level-rest-client-moving-forward/310805)

<div class="topic-metadata">

**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\
**Replies:** 2\
**Last updated:** [July 28, 2022, 5:54pm UTC](https://discuss.elastic.co/t/question-regarding-java-high-level-rest-client-moving-forward/310805 "2022-07-28T17:54:09Z")

</div>

Is this deprecation only for java? I am still a little bit baffled by this change. Is http rest call going to be removed in the future? What about python library? We are running version 7.15 now. We typically upgrad…

---

## [New ELK Setup](https://discuss.elastic.co/t/new-elk-setup/310784)

<div class="topic-metadata">

**Author:** [@schandup](https://discuss.elastic.co/u/schandup)\
**Replies:** 5\
**Last updated:** [July 28, 2022, 5:52pm UTC](https://discuss.elastic.co/t/new-elk-setup/310784 "2022-07-28T17:52:50Z")

</div>

Hi Team, I am a brand new user to elastic community, I'm planning to setup ELK environment in our environment. Before to this I would like to know the different components which we have in ELK observability setup along …

---

## [Parse\_origination\_date definition for this key is missing](https://discuss.elastic.co/t/parse-origination-date-definition-for-this-key-is-missing/310910)

<div class="topic-metadata">

**Author:** [@HeTvaM](https://discuss.elastic.co/u/HeTvaM)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 4:46pm UTC](https://discuss.elastic.co/t/parse-origination-date-definition-for-this-key-is-missing/310910 "2022-07-28T16:46:57Z")

</div>

I am trying to update my template for indexes. But I get the following error: In the last version of this template, I added the parse\_origination\_date parameter, but there was no problem with saving then. Here are t…

---

## [How to manage Elasticsearch data across multiple indices with Filebeat, ILM,](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-across-multiple-indices-with-filebeat-ilm/310901)

<div class="topic-metadata">

**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 3:51pm UTC](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-across-multiple-indices-with-filebeat-ilm/310901 "2022-07-28T15:51:39Z")

</div>

https://www.elastic.co/blog/how-to-manage-elasticsearch-data-multiple-indices-filebeat-ilm-data-stream I have read this through but cannot seem to get it to work. My current issue is that logs are being written but the…

---

## [Getting unusual data during aggregation and curation in Elasticsearch](https://discuss.elastic.co/t/getting-unusual-data-during-aggregation-and-curation-in-elasticsearch/310899)

<div class="topic-metadata">

**Author:** [@Anika\_Sultana](https://discuss.elastic.co/u/Anika_Sultana)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 3:41pm UTC](https://discuss.elastic.co/t/getting-unusual-data-during-aggregation-and-curation-in-elasticsearch/310899 "2022-07-28T15:41:28Z")

</div>

Hi, I am using Elasticsearch 7.4. I noticed some unexpected scenarios during data aggregation and data curation. Let me explain the scenario. I have 100 user\_id and among them are AA, AB, AC, and AD. Now if I try to ag…

---

## [Difference between discover section queries and search requests by CONSOLE](https://discuss.elastic.co/t/difference-between-discover-section-queries-and-search-requests-by-console/310897)

<div class="topic-metadata">

**Author:** [@Purnima\_J](https://discuss.elastic.co/u/Purnima_J)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 3:38pm UTC](https://discuss.elastic.co/t/difference-between-discover-section-queries-and-search-requests-by-console/310897 "2022-07-28T15:38:05Z")

</div>

Hi, Does the queries that I run in discover as filters retrieve the results in a way of cache? I mean does it not hit the elasticsearch indices like a normal search requests in CONSOLE section? Thanks, Purnima

---

## [Failed to obtain node locks when starting elasticsearch](https://discuss.elastic.co/t/failed-to-obtain-node-locks-when-starting-elasticsearch/310892)

<div class="topic-metadata">

**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 3:06pm UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-when-starting-elasticsearch/310892 "2022-07-28T15:06:21Z")

</div>

Some background: I had an elasticsearch installed in my CentOS with yum. After I uninstalled that with yum remove. Right now, I want to run elasticsearch in the same machine, but the error below appears when I run sudo s…

---

## [Eland error after upgrading Elastic](https://discuss.elastic.co/t/eland-error-after-upgrading-elastic/310858)

<div class="topic-metadata">

**Author:** [@mruiter](https://discuss.elastic.co/u/mruiter)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 11:25am UTC](https://discuss.elastic.co/t/eland-error-after-upgrading-elastic/310858 "2022-07-28T11:25:48Z")

</div>

After upgrading ElasticSearch from version 8.3.1 to 8.3.2 none of my Eland/Pandas code seems to work anymore. The thing that seems to cause the error is converting the Eland object to Pandas using .to\_pandas() import el…

---

## [How to use BulkProcessor in Version 8.x.x?](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-version-8-x-x/309708)

<div class="topic-metadata">

**Author:** [@Enomine](https://discuss.elastic.co/u/Enomine)\
**Replies:** 2\
**Last updated:** [July 28, 2022, 11:54am UTC](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-version-8-x-x/309708 "2022-07-28T11:54:23Z")

</div>

Hello, in this Video: "Introduction into the Java HTTP Elasticsearch REST client- April 23, 2020 Elastic Meetup" from Official Elastic Community at Timeindex 17:23 it is showing the BulkProcessor. How to…

---

## [Changing elasticsearch FS repository path](https://discuss.elastic.co/t/changing-elasticsearch-fs-repository-path/310658)

<div class="topic-metadata">

**Author:** [@amirmono](https://discuss.elastic.co/u/amirmono)\
**Replies:** 4\
**Last updated:** [July 28, 2022, 11:26am UTC](https://discuss.elastic.co/t/changing-elasticsearch-fs-repository-path/310658 "2022-07-28T11:26:15Z")

</div>

I'm using elastiSearch 8.3 on a windows machine, and created a shared file system repository - my\_repo: PUT \_snapshot/my\_repo { "type": "fs", "settings": { "location": "relative\_path" …

---

## [A way to ensure additional field will be with correct type inside index](https://discuss.elastic.co/t/a-way-to-ensure-additional-field-will-be-with-correct-type-inside-index/310770)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 4\
**Last updated:** [July 28, 2022, 11:11am UTC](https://discuss.elastic.co/t/a-way-to-ensure-additional-field-will-be-with-correct-type-inside-index/310770 "2022-07-28T11:11:20Z")

</div>

Hello, I was using the scripted field to get a date field from system.uptime.duration.ms field value. I used below painless script. String val = "system.uptime.duration.ms"; if (doc\[val\] != null){ if (doc\[val\]…

---

## [Not able to trigger email from connector](https://discuss.elastic.co/t/not-able-to-trigger-email-from-connector/309672)

<div class="topic-metadata">

**Author:** [@desai.aditya12](https://discuss.elastic.co/u/desai.aditya12)\
**Replies:** 17\
**Last updated:** [July 28, 2022, 10:13am UTC](https://discuss.elastic.co/t/not-able-to-trigger-email-from-connector/309672 "2022-07-28T10:13:47Z")

</div>

I am configuring a connector to send emails when server is down. for that i have done gmail configuration in elasticsearch.yml xpack.notification.email.account: gmail\_account: profile: gmail smtp: auth: true startt…

---

## [Any help to solve these C# NEST (ElasticSearch) errors?](https://discuss.elastic.co/t/any-help-to-solve-these-c-nest-elasticsearch-errors/310772)

<div class="topic-metadata">

**Author:** [@ahmadmd](https://discuss.elastic.co/u/ahmadmd)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 10:09am UTC](https://discuss.elastic.co/t/any-help-to-solve-these-c-nest-elasticsearch-errors/310772 "2022-07-28T10:09:57Z")

</div>

Hello, Recently, I have started to work on C# NEST (ElasticSearch), and having some problems: Error Message: No route taking 1 parameters {index}/\_doc/{id} when using await ESClient.GetAsync(DocumentPath\<TModel\>.Id…

---

## [Index rollover malfunctioning](https://discuss.elastic.co/t/index-rollover-malfunctioning/310838)

<div class="topic-metadata">

**Author:** [@AbilashKrishnan](https://discuss.elastic.co/u/AbilashKrishnan)\
**Replies:** 1\
**Last updated:** [July 28, 2022, 9:34am UTC](https://discuss.elastic.co/t/index-rollover-malfunctioning/310838 "2022-07-28T09:34:30Z")

</div>

Hi Team, We are running cron job for index rollover. We have the condition of max\_age set to 1d as shown below , however it is not working as expected. The rollover is working but the index is not generated everyday, we…

---

## [Synthetic Monitoring in 7.12 version](https://discuss.elastic.co/t/synthetic-monitoring-in-7-12-version/310506)

<div class="topic-metadata">

**Author:** [@Baishali](https://discuss.elastic.co/u/Baishali)\
**Replies:** 2\
**Last updated:** [July 28, 2022, 7:33am UTC](https://discuss.elastic.co/t/synthetic-monitoring-in-7-12-version/310506 "2022-07-28T07:33:54Z")

</div>

I have installed Elasticsearch ver:7.12.1, Kibana ver:7.12.1, Heartbeat ver:7.17 I want to add Synthetic monitoring for a URL. Tried a sample inline code but it was not working. Steps followed: Installed Elasticsearc…

---

## [Unable to Start Elasticserach](https://discuss.elastic.co/t/unable-to-start-elasticserach/310811)

<div class="topic-metadata">

**Author:** [@Zerra\_Triani](https://discuss.elastic.co/u/Zerra_Triani)\
**Replies:** 3\
**Last updated:** [July 28, 2022, 6:57am UTC](https://discuss.elastic.co/t/unable-to-start-elasticserach/310811 "2022-07-28T06:57:48Z")

</div>

Hi I can't turn on elasticsearch services after enabling xpack.security.enable : true and changing master account password. And I tried to disable the xpack but elasticsearch still can't run Here's the journalctl -xe -…

---

## [Illegal\_argument\_exception: index.lifecycle.rollover\_alias \[cisco-switch\] does not point to index \[cisco-switch-2022.07.27\]](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-cisco-switch-does-not-point-to-index-cisco-switch-2022-07-27/310719)

<div class="topic-metadata">

**Author:** [@MADxHAWK](https://discuss.elastic.co/u/MADxHAWK)\
**Replies:** 7\
**Last updated:** [July 28, 2022, 6:26am UTC](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-cisco-switch-does-not-point-to-index-cisco-switch-2022-07-27/310719 "2022-07-28T06:26:19Z")

</div>

Hello, after trying to figure out some stuff about ILM i need some help now. I have about 400 Cisco-Devices sending their logs to a syslog-ng server from where they are send to Elasticsearch via Filebeat / Logstash. T…

---

## [Elasticsearch 8 new Java client - How to convert UpdateResponse to POJO](https://discuss.elastic.co/t/elasticsearch-8-new-java-client-how-to-convert-updateresponse-to-pojo/310810)

<div class="topic-metadata">

**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\
**Replies:** 0\
**Last updated:** [July 28, 2022, 2:47am UTC](https://discuss.elastic.co/t/elasticsearch-8-new-java-client-how-to-convert-updateresponse-to-pojo/310810 "2022-07-28T02:47:58Z")

</div>

I am using the new Java client (v8.3.1) for Elasticsearch 8, and I could not find a way to convert the update response (UpdataResponse) to a POJO. The example code is as following: UpdateResponse response = esClient.upd…

---

## [Pass extra params in url while using elasticsearch ui](https://discuss.elastic.co/t/pass-extra-params-in-url-while-using-elasticsearch-ui/310711)

<div class="topic-metadata">

**Author:** [@manojxumulus](https://discuss.elastic.co/u/manojxumulus)\
**Replies:** 2\
**Last updated:** [July 28, 2022, 4:01am UTC](https://discuss.elastic.co/t/pass-extra-params-in-url-while-using-elasticsearch-ui/310711 "2022-07-28T04:01:31Z")

</div>

Hello, I want to pass some extra parameters to the Elasticsearch UI app, the passed parameter will not have any effect on the filter, and those parameters are for some extra requirements. if anyone can help then it wil…

---

## [Query to determine http.max\_content\_length prior to sending?](https://discuss.elastic.co/t/query-to-determine-http-max-content-length-prior-to-sending/310803)

<div class="topic-metadata">

**Author:** [@matty\_r](https://discuss.elastic.co/u/matty_r)\
**Replies:** 3\
**Last updated:** [July 28, 2022, 12:15am UTC](https://discuss.elastic.co/t/query-to-determine-http-max-content-length-prior-to-sending/310803 "2022-07-28T00:15:24Z")

</div>

Hi all, Is there a query to return the http.max\_content\_length prior to sending data? Cheers

---

## [Elasticsearch nodes not running after reboot linux](https://discuss.elastic.co/t/elasticsearch-nodes-not-running-after-reboot-linux/308975)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 8\
**Last updated:** [July 27, 2022, 6:31pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes-not-running-after-reboot-linux/308975 "2022-07-27T18:31:57Z")

</div>

Hi every one I have a problem with elasticsearch cluster. when the nodes of elasticsearch turned off, i turned on again, the elasticsearch service state is ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib…

---

## [Elasticsearch 8.3.2 docker org.elasticsearch.gateway.CorruptStateException](https://discuss.elastic.co/t/elasticsearch-8-3-2-docker-org-elasticsearch-gateway-corruptstateexception/310765)

<div class="topic-metadata">

**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\
**Replies:** 3\
**Last updated:** [July 27, 2022, 11:39pm UTC](https://discuss.elastic.co/t/elasticsearch-8-3-2-docker-org-elasticsearch-gateway-corruptstateexception/310765 "2022-07-27T23:39:14Z")

</div>

Installed ES 8.3.2 using docker on my local dev machine. Before this installation I had ES 6.3.2 running and I had deleted all my test indices in 6.3.2 before installing 8.3.2 so that I would avoid any v6 issues with 8 o…

---

## [Backward pagination with search\_after when sorting value is null](https://discuss.elastic.co/t/backward-pagination-with-search-after-when-sorting-value-is-null/310799)

<div class="topic-metadata">

**Author:** [@M\_L](https://discuss.elastic.co/u/M_L)\
**Replies:** 0\
**Last updated:** [July 27, 2022, 8:48pm UTC](https://discuss.elastic.co/t/backward-pagination-with-search-after-when-sorting-value-is-null/310799 "2022-07-27T20:48:01Z")

</div>

Hello, I have an application which has a dashboard, basically a table with hundreds of thousands of records. This table has up to 50 different columns. These columns have different types in mapping: keyword, text, bool…

---

## [Does min\_doc\_count impact the documents returned?](https://discuss.elastic.co/t/does-min-doc-count-impact-the-documents-returned/310787)

<div class="topic-metadata">

**Author:** [@mattkallo](https://discuss.elastic.co/u/mattkallo)\
**Replies:** 0\
**Last updated:** [July 27, 2022, 6:32pm UTC](https://discuss.elastic.co/t/does-min-doc-count-impact-the-documents-returned/310787 "2022-07-27T18:32:59Z")

</div>

Hi - I have 2 questions regarding term aggregations min\_doc\_count setting. Will min\_doc\_count limit the documents returned or just the bucket/term in aggregation? Say I have 200 documents and 120 of them have the te…

---

## [To identify the elastic search breakup pricing for each resources](https://discuss.elastic.co/t/to-identify-the-elastic-search-breakup-pricing-for-each-resources/310782)

<div class="topic-metadata">

**Author:** [@Aravind1](https://discuss.elastic.co/u/Aravind1)\
**Replies:** 1\
**Last updated:** [July 27, 2022, 6:04pm UTC](https://discuss.elastic.co/t/to-identify-the-elastic-search-breakup-pricing-for-each-resources/310782 "2022-07-27T18:04:14Z")

</div>

Hello, We are from Virtusasystem LLC . We have been utilizing the Elasticsearch facility for quite a while now where we are utilizing approximately around 37 or more operating systems. We are looking for a breakdown of …

---

## [JVM Pressure on Cluster Nodes with too many indices](https://discuss.elastic.co/t/jvm-pressure-on-cluster-nodes-with-too-many-indices/310695)

<div class="topic-metadata">

**Author:** [@saelastic](https://discuss.elastic.co/u/saelastic)\
**Replies:** 3\
**Last updated:** [July 27, 2022, 4:36pm UTC](https://discuss.elastic.co/t/jvm-pressure-on-cluster-nodes-with-too-many-indices/310695 "2022-07-27T16:36:23Z")

</div>

My current ES stack(7.17.4) deployment size is 2 nodes across 2 zones with 240 GB disk and 8 GB RAM with 2 CPU's each. I have about 4000 shards present in total in the cluster. This count put the ES hot/data nodes i…

---

## [Script query for child document not working](https://discuss.elastic.co/t/script-query-for-child-document-not-working/310752)

<div class="topic-metadata">

**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\
**Replies:** 3\
**Last updated:** [July 27, 2022, 1:52pm UTC](https://discuss.elastic.co/t/script-query-for-child-document-not-working/310752 "2022-07-27T13:52:51Z")

</div>

{ "script": { "script": { "source": "doc\['tr\_billed'\].value == doc\['tr\_bill\_discount'\].value", "lang": "painless" }, "boost": 1 } …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=397)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=399)
