# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=405 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 406 --- ## [In ES 7.8 parent breaker is tripping a lot and causing unallocation of shards](https://discuss.elastic.co/t/in-es-7-8-parent-breaker-is-tripping-a-lot-and-causing-unallocation-of-shards/309635)
**Author:** [@sreekanth](https://discuss.elastic.co/u/sreekanth)\ **Replies:** 2\ **Last updated:** [July 18, 2022, 10:58am UTC](https://discuss.elastic.co/t/in-es-7-8-parent-breaker-is-tripping-a-lot-and-causing-unallocation-of-shards/309635 "2022-07-18T10:58:08Z")
We have an 8 node cluster and our load (mainly bulk ingest) is pretty high. Earlier the same load was handled well by 6 nodes in ES6.8. Now after moving to 7.8, we see many replica shards get unallocated during load. al… --- ## [Group by date with aggr and apply sub aggr with group by date in elastic search](https://discuss.elastic.co/t/group-by-date-with-aggr-and-apply-sub-aggr-with-group-by-date-in-elastic-search/309877)
**Author:** [@surendrakandira](https://discuss.elastic.co/u/surendrakandira)\ **Replies:** 0\ **Last updated:** [July 18, 2022, 10:23am UTC](https://discuss.elastic.co/t/group-by-date-with-aggr-and-apply-sub-aggr-with-group-by-date-in-elastic-search/309877 "2022-07-18T10:23:20Z")
I am trying to apply filter with aggregations. c# code , I want to apply this logic in elastic search queryable = queryable.OrderBy(o =\> o.Date).ToList(); var queryable1 = queryable.GroupBy(g =\> g… --- ## [Succeeded to take snapshot of closed Elasticsearch index with ignore\_unavailable=false](https://discuss.elastic.co/t/succeeded-to-take-snapshot-of-closed-elasticsearch-index-with-ignore-unavailable-false/309853)
**Author:** [@amirmono](https://discuss.elastic.co/u/amirmono)\ **Replies:** 2\ **Last updated:** [July 18, 2022, 9:19am UTC](https://discuss.elastic.co/t/succeeded-to-take-snapshot-of-closed-elasticsearch-index-with-ignore-unavailable-false/309853 "2022-07-18T09:19:48Z")
According to the Elasticsearch Create snapshot API documentation , when creating a manual snapshot of a closed index with ignore\_unavailable = false - the snapshot should fail: ignore\_unavailable (Optional, Boolean) If… --- ## [Cannot connect to elastic cluster on VPN machine](https://discuss.elastic.co/t/cannot-connect-to-elastic-cluster-on-vpn-machine/309848)
**Author:** [@Michal\_Bogusz](https://discuss.elastic.co/u/Michal_Bogusz)\ **Replies:** 2\ **Last updated:** [July 18, 2022, 7:43am UTC](https://discuss.elastic.co/t/cannot-connect-to-elastic-cluster-on-vpn-machine/309848 "2022-07-18T07:43:47Z")
Hi, I am new to Elasticsearch. What I managed to do so far is to bring up ElasticSearch container and successfully connect to it using both http connection(via Postman) and using python client. However, now I want to br… --- ## [Duplicate document](https://discuss.elastic.co/t/duplicate-document/309827)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [July 18, 2022, 7:24am UTC](https://discuss.elastic.co/t/duplicate-document/309827 "2022-07-18T07:24:17Z")
I have few servers running metricbeats and all of them sends data to proxy server on port xyz then proxy redirects them to three logstash server in load balance manner. all three logstash runs same configuration via pi… --- ## [Elasticsearch.Net.ElasticsearchClientException: BulkAll halted after failed product check](https://discuss.elastic.co/t/elasticsearch-net-elasticsearchclientexception-bulkall-halted-after-failed-product-check/309076)
**Author:** [@dawood\_ahmad](https://discuss.elastic.co/u/dawood_ahmad)\ **Replies:** 2\ **Last updated:** [July 18, 2022, 5:09am UTC](https://discuss.elastic.co/t/elasticsearch-net-elasticsearchclientexception-bulkall-halted-after-failed-product-check/309076 "2022-07-18T05:09:23Z")
Unhandled exception. Elasticsearch.Net.ElasticsearchClientException: BulkAll halted after failed product check at Nest.BlockingSubscribeExtensions.WaitOnObservable\[TObservable,TObserve,TObserver\](TObservable observabl… --- ## [What indexes will be used during elastic search?](https://discuss.elastic.co/t/what-indexes-will-be-used-during-elastic-search/309819)
**Author:** [@davecomputertips](https://discuss.elastic.co/u/davecomputertips)\ **Replies:** 7\ **Last updated:** [July 18, 2022, 3:06am UTC](https://discuss.elastic.co/t/what-indexes-will-be-used-during-elastic-search/309819 "2022-07-18T03:06:28Z")
I am confused because this is ambiguous question. Is it asking about inverted index? Or this? My teacher died last week and we haven't got a new teacher yet :frowning: RIP --- ## [How to determine number of master nodes](https://discuss.elastic.co/t/how-to-determine-number-of-master-nodes/309780)
**Author:** [@wisam\_9mol](https://discuss.elastic.co/u/wisam_9mol)\ **Replies:** 10\ **Last updated:** [July 17, 2022, 9:37am UTC](https://discuss.elastic.co/t/how-to-determine-number-of-master-nodes/309780 "2022-07-17T09:37:58Z")
Is there a way to find out how many master nodes I need for a number of data nodes For example If I have 100 data nodes, how many masters nodes do I need? In the case of 12 data nodes Or 18 data nodes --- ## [Is there a way to place one or more elasticsearch shards on a separate disk?](https://discuss.elastic.co/t/is-there-a-way-to-place-one-or-more-elasticsearch-shards-on-a-separate-disk/309797)
**Author:** [@jalustig](https://discuss.elastic.co/u/jalustig)\ **Replies:** 5\ **Last updated:** [July 17, 2022, 8:21am UTC](https://discuss.elastic.co/t/is-there-a-way-to-place-one-or-more-elasticsearch-shards-on-a-separate-disk/309797 "2022-07-17T08:21:52Z")
I have a large elasticsearch index which is stored on an external blob storage device attached to my server, but I also have a large amount of free space on the main hard disk. Id like to put that space to use, if possib… --- ## [Duplicates between rolled over indices](https://discuss.elastic.co/t/duplicates-between-rolled-over-indices/309807)
**Author:** [@wisemandev](https://discuss.elastic.co/u/wisemandev)\ **Replies:** 1\ **Last updated:** [July 17, 2022, 8:04am UTC](https://discuss.elastic.co/t/duplicates-between-rolled-over-indices/309807 "2022-07-17T08:04:59Z")
Hi everyone, I realise this is a fairly common part of the learning curve with implementing ES, I just cant find quite the right info to ease my mind about our indexing strategy. Hoping to get some guidance here. We ha… --- ## [ES and Kibana are working but I can't access it](https://discuss.elastic.co/t/es-and-kibana-are-working-but-i-cant-access-it/309795)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 1\ **Last updated:** [July 17, 2022, 3:57am UTC](https://discuss.elastic.co/t/es-and-kibana-are-working-but-i-cant-access-it/309795 "2022-07-17T03:57:05Z")
Hi there. I installed the latest versions of elasticsearch and kibana. sudo systemctl status elasticsearcrh.service and sudo systemctl status kibana.service When I run them both appear to be working. I am able to m… --- ## [How to use dsl](https://discuss.elastic.co/t/how-to-use-dsl/309718)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [July 16, 2022, 6:29pm UTC](https://discuss.elastic.co/t/how-to-use-dsl/309718 "2022-07-16T18:29:43Z")
Hi all, I want to learn elasticsearch DSL but i dont know what is the use of query , filter. I want practical questions which teach me actual use of particular function. Sorry for this silly question but i want to learn… --- ## [High IOwiats on ELK Linux Instance](https://discuss.elastic.co/t/high-iowiats-on-elk-linux-instance/309597)
**Author:** [@AmarKolhapuri](https://discuss.elastic.co/u/AmarKolhapuri)\ **Replies:** 2\ **Last updated:** [July 16, 2022, 12:34am UTC](https://discuss.elastic.co/t/high-iowiats-on-elk-linux-instance/309597 "2022-07-16T00:34:23Z")
Hi All, We have a Weblogic server and other applications/servers(HTTP server) that write logs to the Logs mount. In order to monitor the performance of the application, this mount is shared with the ELK stack. After re… --- ## [Elasticsearch 8.3 Heap Memory Sizing Confusion](https://discuss.elastic.co/t/elasticsearch-8-3-heap-memory-sizing-confusion/309771)
**Author:** [@afarley](https://discuss.elastic.co/u/afarley)\ **Replies:** 1\ **Last updated:** [July 16, 2022, 12:32am UTC](https://discuss.elastic.co/t/elasticsearch-8-3-heap-memory-sizing-confusion/309771 "2022-07-16T00:32:08Z")
Hello all, I'm a little confused with the new sizing documentation that was written for the 8.3 release. It mentions leaving 1kb Heap available per field in an index. Does this mean 1kb heap should be available per fiel… --- ## [Anomaly detection score details](https://discuss.elastic.co/t/anomaly-detection-score-details/309704)
**Author:** [@Amit\_Thombre](https://discuss.elastic.co/u/Amit_Thombre)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 9:13pm UTC](https://discuss.elastic.co/t/anomaly-detection-score-details/309704 "2022-07-15T21:13:04Z")
PFA the image showing 2 anomalies. The first has got a score of 55 but it is written that it is 2 times higher and second is with score 29 but it is more than 3 time higher. Questions is why is the anomaly with 3 ti… --- ## [Error: \[o.e.b.Elasticsearch \] fatal exception while booting Elasticsearchorg.elasticsearch.bootstrap.StartupException: org.elasticsearch.ElasticsearchSecurityException:](https://discuss.elastic.co/t/error-o-e-b-elasticsearch-fatal-exception-while-booting-elasticsearchorg-elasticsearch-bootstrap-startupexception-org-elasticsearch-elasticsearchsecurityexception/308685)
**Author:** [@kkumar.e](https://discuss.elastic.co/u/kkumar.e)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 8:44pm UTC](https://discuss.elastic.co/t/error-o-e-b-elasticsearch-fatal-exception-while-booting-elasticsearchorg-elasticsearch-bootstrap-startupexception-org-elasticsearch-elasticsearchsecurityexception/308685 "2022-07-15T20:44:15Z")
Hi All, I am running into an ssl certificate issue when trying to form a cluster with 2 Elasticsearch nodes created on 2 AWS EC2 servers spread across 2 subnets. I followed the steps in the below ref link to generate CA… --- ## [Getting {"error":"no handler found for uri \[/\_security/api\_key\] and method \[POST\]"}](https://discuss.elastic.co/t/getting-error-no-handler-found-for-uri-security-api-key-and-method-post/309757)
**Author:** [@Suman\_Thota](https://discuss.elastic.co/u/Suman_Thota)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 8:39pm UTC](https://discuss.elastic.co/t/getting-error-no-handler-found-for-uri-security-api-key-and-method-post/309757 "2022-07-15T20:39:28Z")
Getting {"error":"no handler found for uri \[/\_security/api\_key\] and method \[POST\]"} when following instructions in Create API key API | Elasticsearch Guide \[8.3\] | Elastic to create an api key. Elasticsearch version: 8.… --- ## [Can cross cluster can be spread across multicloud?](https://discuss.elastic.co/t/can-cross-cluster-can-be-spread-across-multicloud/309660)
**Author:** [@jay224](https://discuss.elastic.co/u/jay224)\ **Replies:** 3\ **Last updated:** [July 15, 2022, 7:53pm UTC](https://discuss.elastic.co/t/can-cross-cluster-can-be-spread-across-multicloud/309660 "2022-07-15T19:53:06Z")
Can cross cluster replication be spread across multi cloud environment? Need it to create multi-cloud solution that can be kept in sync. --- ## [Transform data mismatch with source index](https://discuss.elastic.co/t/transform-data-mismatch-with-source-index/309659)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 7:07pm UTC](https://discuss.elastic.co/t/transform-data-mismatch-with-source-index/309659 "2022-07-15T19:07:23Z")
Hi, I'm using transforms to aggregate our access logs to a daily aggregate, e.g. "customer A had 500 requests totalling 1000 credits". Problem The problem that I now have is that I want to verify that the transformed … --- ## [Scripted Field Painless](https://discuss.elastic.co/t/scripted-field-painless/309328)
**Author:** [@FKarraz](https://discuss.elastic.co/u/FKarraz)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 6:18pm UTC](https://discuss.elastic.co/t/scripted-field-painless/309328 "2022-07-15T18:18:19Z")
Good morning. I am having problems when generating a scripted field. The situation is as follows. Inside my index, I have "field1" and "field2", if "field1" = 0, "field2" does not exist, if "field1" = 1, "field2" contain… --- ## [\[C# NEST\] Query results with special characters not mapping properly](https://discuss.elastic.co/t/c-nest-query-results-with-special-characters-not-mapping-properly/309749)
**Author:** [@jleonapl](https://discuss.elastic.co/u/jleonapl)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 4:28pm UTC](https://discuss.elastic.co/t/c-nest-query-results-with-special-characters-not-mapping-properly/309749 "2022-07-15T16:28:55Z")
When performing queries on indices that have field names with special characters, they are not correctly mapped to the provided model. Example index: { "\_index" : "my-index-with-special-characters", "\_i… --- ## [Elastalert2 reaalert every 5 minutes and group the number of hits](https://discuss.elastic.co/t/elastalert2-reaalert-every-5-minutes-and-group-the-number-of-hits/309710)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 3:50pm UTC](https://discuss.elastic.co/t/elastalert2-reaalert-every-5-minutes-and-group-the-number-of-hits/309710 "2022-07-15T15:50:21Z")
Seeking your advice and help. Currently my Heartbeat will monitor system health for every 5 minutes. Then, it will save the data to Elasticsearch. My Elastalert2 will retrieve the date from Elasticsearch. I have 2 syst… --- ## [Add a new node to ES cluster v 8.1](https://discuss.elastic.co/t/add-a-new-node-to-es-cluster-v-8-1/309743)
**Author:** [@pcb1](https://discuss.elastic.co/u/pcb1)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 1:46pm UTC](https://discuss.elastic.co/t/add-a-new-node-to-es-cluster-v-8-1/309743 "2022-07-15T13:46:47Z")
Hello, I have ES -8,1 cluster working . The only change I made to the existing nodes in the cluster is : xpack.security.http.ssl: enabled: false Now , I want to add new data node but getting errors here are my steps… --- ## [How to implement with complicate wording (hero hero hero)](https://discuss.elastic.co/t/how-to-implement-with-complicate-wording-hero-hero-hero/309722)
**Author:** [@Ch\_Corporate](https://discuss.elastic.co/u/Ch_Corporate)\ **Replies:** 10\ **Last updated:** [July 15, 2022, 1:00pm UTC](https://discuss.elastic.co/t/how-to-implement-with-complicate-wording-hero-hero-hero/309722 "2022-07-15T13:00:58Z")
My data is Doc 1 hero hero hero Doc 2 hero hero Doc 3 hero We would have Result is Doc 3:"hero" How do I implement this case use regular expression or wild card --- ## [NEST C# Client - Bulk Partial update of a Nested List by condition](https://discuss.elastic.co/t/nest-c-client-bulk-partial-update-of-a-nested-list-by-condition/309733)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 12:17pm UTC](https://discuss.elastic.co/t/nest-c-client-bulk-partial-update-of-a-nested-list-by-condition/309733 "2022-07-15T12:17:28Z")
Hi, I have an index which has nested list object. I need to only update certain values based on a condition. List of history with dates and values I need to update only values matching with dates. In the below example … --- ## [Creating type in ES](https://discuss.elastic.co/t/creating-type-in-es/308666)
**Author:** [@smitak](https://discuss.elastic.co/u/smitak)\ **Replies:** 23\ **Last updated:** [July 15, 2022, 12:13pm UTC](https://discuss.elastic.co/t/creating-type-in-es/308666 "2022-07-15T12:13:18Z")
Hello , I am new to Elasticsearch. I have created index. And Now adding type and document. But getting error. {"error":"no handler found for uri \[/my\_first\_index/message\] and method \[POST\]"} Entering this command c… --- ## [I need to query restaurants scoring by match +distance](https://discuss.elastic.co/t/i-need-to-query-restaurants-scoring-by-match-distance/308746)
**Author:** [@Ch\_Corporate](https://discuss.elastic.co/u/Ch_Corporate)\ **Replies:** 5\ **Last updated:** [July 15, 2022, 8:41am UTC](https://discuss.elastic.co/t/i-need-to-query-restaurants-scoring-by-match-distance/308746 "2022-07-15T08:41:31Z")
I need to query restaurants scoring by match +distance here is what I want Example Data field “restaurant name”:burger(nearest) , BurgerA Case 1 if in put is “burger” The result must be 1.Burger (Nearest) 2.Burger A … --- ## [How to analyze data in ES？](https://discuss.elastic.co/t/how-to-analyze-data-in-es/309719)
**Author:** [@wentao\_Xiong](https://discuss.elastic.co/u/wentao_Xiong)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 8:11am UTC](https://discuss.elastic.co/t/how-to-analyze-data-in-es/309719 "2022-07-15T08:11:22Z")
Environment Description: Rocky Linux 8 JDK 1.8 elasticsearch-7.17.5, logstash-7.17.5, kibana-7.17.5, filebeat-7.17.5 Statement of needs: The log data has been collected into ELK, and now it is necessary to analyze t… --- ## [Setting dynamic\_templates mapping field from Java using RestHighLevelClient 7.17 for ES v8.2](https://discuss.elastic.co/t/setting-dynamic-templates-mapping-field-from-java-using-resthighlevelclient-7-17-for-es-v8-2/309715)
**Author:** [@CamiloPDL](https://discuss.elastic.co/u/CamiloPDL)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 7:55am UTC](https://discuss.elastic.co/t/setting-dynamic-templates-mapping-field-from-java-using-resthighlevelclient-7-17-for-es-v8-2/309715 "2022-07-15T07:55:29Z")
Hello community! I am trying to use RestHighLevelClient (RHLC) 7.17 with compatibility mode to create indices on an ES cluster running version 8.2. I know RHLC is deprecated but at this moment we cannot afford to migrat… --- ## [Determine search fields dynamically based on user input - native Elastic solution?](https://discuss.elastic.co/t/determine-search-fields-dynamically-based-on-user-input-native-elastic-solution/309711)
**Author:** [@seb.sch](https://discuss.elastic.co/u/seb.sch)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 7:37am UTC](https://discuss.elastic.co/t/determine-search-fields-dynamically-based-on-user-input-native-elastic-solution/309711 "2022-07-15T07:37:43Z")
Hello, let's assume my index looks like the following: "mappings" : { "properties" : { "id" : { "type" : "text" }, "mail" : { "type" : "text" }, "fullName" : { "type" : "text" }, "dateOfBirth" : { … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=404) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=406)