# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=406 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 407 --- ## [Update license needs a restart? (Elastic version 6.8.14)](https://discuss.elastic.co/t/update-license-needs-a-restart-elastic-version-6-8-14/309666)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 2\ **Last updated:** [July 15, 2022, 7:30am UTC](https://discuss.elastic.co/t/update-license-needs-a-restart-elastic-version-6-8-14/309666 "2022-07-15T07:30:52Z")
Hi, according the documentation from 7.17 to 8.3: \*\*"Licenses are provided as a JSON file and have an effective date and an expiration date. You cannot install a new license before its effective date. License updates t… --- ## [Get distinct values from "text field" without remapping](https://discuss.elastic.co/t/get-distinct-values-from-text-field-without-remapping/309694)
**Author:** [@lwwalker](https://discuss.elastic.co/u/lwwalker)\ **Replies:** 5\ **Last updated:** [July 15, 2022, 6:23am UTC](https://discuss.elastic.co/t/get-distinct-values-from-text-field-without-remapping/309694 "2022-07-15T06:23:01Z")
I'm querying ~350 TB of documents. Re-indexing is not an option. Performance, within reason, is not a concern. my documents have a field s3\_filename {"type": "text"}. It doesn't have any subfields. Setting fielddata:… --- ## [Version consistency of Elastic products](https://discuss.elastic.co/t/version-consistency-of-elastic-products/309620)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 3\ **Last updated:** [July 15, 2022, 6:03am UTC](https://discuss.elastic.co/t/version-consistency-of-elastic-products/309620 "2022-07-15T06:03:02Z")
I am currently attempting to configure an Elasticsearch cluster. At this time I found the following article According to this article, it is not possible to configure a cluster between different versions of Elasticsea… --- ## [請教如何讓兩台filebeat client各自產生自己的index](https://discuss.elastic.co/t/filebeat-client-index/309699)
**Author:** [@jim220617](https://discuss.elastic.co/u/jim220617)\ **Replies:** 0\ **Last updated:** [July 15, 2022, 3:28am UTC](https://discuss.elastic.co/t/filebeat-client-index/309699 "2022-07-15T03:28:24Z")
我有一台ELK server，收了自己的filebeat log，也收了一台client端filebeat log，想各自產生自己的index。應該要怎樣做? 使用版本: CentOS 7.9 elasticsearch 8.3.1 filebeat 8.3.1 kibana 8.3.1 logstash 8.3.1 謝謝 --- ## [Cannot change omitNorms=false to inconsistent omitNorms=true](https://discuss.elastic.co/t/cannot-change-omitnorms-false-to-inconsistent-omitnorms-true/309361)
**Author:** [@Johnny\_Yang](https://discuss.elastic.co/u/Johnny_Yang)\ **Replies:** 3\ **Last updated:** [July 15, 2022, 1:48am UTC](https://discuss.elastic.co/t/cannot-change-omitnorms-false-to-inconsistent-omitnorms-true/309361 "2022-07-15T01:48:26Z")
I recently used the update\_mapping API to set one of the fields in my index to "norms:false", but then when I try to save new documents to it, it gives error: "{"error":{"root\_cause":\[{"type":"illegal\_argument\_exception"… --- ## [Master not discovered exception](https://discuss.elastic.co/t/master-not-discovered-exception/309677)
**Author:** [@NadyLeez123](https://discuss.elastic.co/u/NadyLeez123)\ **Replies:** 1\ **Last updated:** [July 15, 2022, 1:36am UTC](https://discuss.elastic.co/t/master-not-discovered-exception/309677 "2022-07-15T01:36:57Z")
We have an elasticsearch cluster of 2 masters et 6 data nodes since 2 years. Yesterday, requests became very slow, we started experiencing a time out in elasticsearch and kibana. We then discovered this on one of the tw… --- ## [Sort script input needed](https://discuss.elastic.co/t/sort-script-input-needed/309527)
**Author:** [@ansamHox](https://discuss.elastic.co/u/ansamHox)\ **Replies:** 8\ **Last updated:** [July 14, 2022, 10:40pm UTC](https://discuss.elastic.co/t/sort-script-input-needed/309527 "2022-07-14T22:40:15Z")
I have a dataset like this (sometimes Source field does not exist): Id Source Sender -------------------------------------------------------------------- 1 … --- ## [KIbana not showing kube-state-metrics](https://discuss.elastic.co/t/kibana-not-showing-kube-state-metrics/309689)
**Author:** [@Lucas\_Roberto](https://discuss.elastic.co/u/Lucas_Roberto)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 9:09pm UTC](https://discuss.elastic.co/t/kibana-not-showing-kube-state-metrics/309689 "2022-07-14T21:09:04Z")
Hello, everyone. I'm deploying our monitoring system, with ES, Metricbeat and Kibana. We have a GCP cluster, with some pods to monitor the metrics. I followed the guide provided by Kibana's dashboard Kubernetes metrics,… --- ## [Remove Spaces and text between these \<\> brackets](https://discuss.elastic.co/t/remove-spaces-and-text-between-these-brackets/309683)
**Author:** [@errupeshmca](https://discuss.elastic.co/u/errupeshmca)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 7:52pm UTC](https://discuss.elastic.co/t/remove-spaces-and-text-between-these-brackets/309683 "2022-07-14T19:52:11Z")
Hi , I am new to the elasticsearch i have to filter the logs removing larges spaces and less than, greater than signs around the text, \ \ \ \ **Author:** [@paris1](https://discuss.elastic.co/u/paris1)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 7:09pm UTC](https://discuss.elastic.co/t/i-cant-curl-my-elasticsearch-8-on-aws-ec2-ubuntu-20-04/309682 "2022-07-14T19:09:15Z") installed elasticsearch(docker compose) 8.2 on aws ec2(ubuntu 20.04.) Everything is working.My only problem is that I can't reach(curl) it from other instances and my backend server(it is on same vpc). I added my node … --- ## [A question about the Profile API](https://discuss.elastic.co/t/a-question-about-the-profile-api/309680)
**Author:** [@kpachar](https://discuss.elastic.co/u/kpachar)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 5:55pm UTC](https://discuss.elastic.co/t/a-question-about-the-profile-api/309680 "2022-07-14T17:55:31Z")
Hello, I am trying to debug some intermittent slowness in my cluster. I send this simple term query, to a specific shard, which is local to the node. I also enabled the profile option, so that the profile output is ava… --- ## [Value ( 1.0. ) ( Notice the last dot after 0 ) getting stored as type Date in Elastic search](https://discuss.elastic.co/t/value-1-0-notice-the-last-dot-after-0-getting-stored-as-type-date-in-elastic-search/309411)
**Author:** [@ajitw](https://discuss.elastic.co/u/ajitw)\ **Replies:** 4\ **Last updated:** [July 14, 2022, 3:43pm UTC](https://discuss.elastic.co/t/value-1-0-notice-the-last-dot-after-0-getting-stored-as-type-date-in-elastic-search/309411 "2022-07-14T15:43:06Z")
We store logs data in Elasticsearch we have added functionality which makes the JSON logs stored in Elasticsearch as seperate fields. In one of the logs appVersion value was coming as - ( 1.0. ) - Notice the last dot a… --- ## [New ES Java API: Getting index name from alias name](https://discuss.elastic.co/t/new-es-java-api-getting-index-name-from-alias-name/309643)
**Author:** [@ALX\_DM](https://discuss.elastic.co/u/ALX_DM)\ **Replies:** 2\ **Last updated:** [July 14, 2022, 2:26pm UTC](https://discuss.elastic.co/t/new-es-java-api-getting-index-name-from-alias-name/309643 "2022-07-14T14:26:20Z")
I dont really understand how to get index name from alias name looking only at the api code of new elastic Java API. I cannot find any document also. Hope somebody here have tried. Here\`s what I tried so far: final G… --- ## [Transform missing data](https://discuss.elastic.co/t/transform-missing-data/308818)
**Author:** [@rokcarl](https://discuss.elastic.co/u/rokcarl)\ **Replies:** 2\ **Last updated:** [July 14, 2022, 2:12pm UTC](https://discuss.elastic.co/t/transform-missing-data/308818 "2022-07-14T14:12:08Z")
I have a transform that aggregates my stats index data for long-term storage, but the results are no longer correct. My stats index stores each request (one document = one request) and stores the credits used by that re… --- ## [Can't connect node to cluster on another server](https://discuss.elastic.co/t/cant-connect-node-to-cluster-on-another-server/309432)
**Author:** [@dabit\_coder](https://discuss.elastic.co/u/dabit_coder)\ **Replies:** 9\ **Last updated:** [July 14, 2022, 1:34pm UTC](https://discuss.elastic.co/t/cant-connect-node-to-cluster-on-another-server/309432 "2022-07-14T13:34:30Z")
First of all, I want to be clear that I looked at several guides and suggested similar questions before opening this post, but none of them worked for our case, so I am a bit desperate right now. Here is our situation: … --- ## [Nodes didn't discovery in ElasticSearch Cluster](https://discuss.elastic.co/t/nodes-didnt-discovery-in-elasticsearch-cluster/309560)
**Author:** [@SilasMuniz1](https://discuss.elastic.co/u/SilasMuniz1)\ **Replies:** 5\ **Last updated:** [July 14, 2022, 12:36pm UTC](https://discuss.elastic.co/t/nodes-didnt-discovery-in-elasticsearch-cluster/309560 "2022-07-14T12:36:46Z")
Hello, I am setting up one cluster with two nodes to elasticsearch. I am using virtualbox with ubuntu 22.04 image. I already configurated all nodes with these elasticsearch.yml: Node1: root@osboxes:/var/log/elasticse… --- ## [I have installed File beat 7.17.3 version on a Windows server, it is not getting the logs to the ELK Server](https://discuss.elastic.co/t/i-have-installed-file-beat-7-17-3-version-on-a-windows-server-it-is-not-getting-the-logs-to-the-elk-server/309075)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 1\ **Last updated:** [July 14, 2022, 11:55am UTC](https://discuss.elastic.co/t/i-have-installed-file-beat-7-17-3-version-on-a-windows-server-it-is-not-getting-the-logs-to-the-elk-server/309075 "2022-07-14T11:55:12Z")
We re trying to send data from Filebeat to ELastic search directly .. but it is not going .. it says it needs kibana connections and dashboards not loaded ###################### Filebeat Configuration Example ##########… --- ## [Java 17 support for elasticsearch 6.6.0](https://discuss.elastic.co/t/java-17-support-for-elasticsearch-6-6-0/309605)
**Author:** [@gilh](https://discuss.elastic.co/u/gilh)\ **Replies:** 3\ **Last updated:** [July 14, 2022, 11:44am UTC](https://discuss.elastic.co/t/java-17-support-for-elasticsearch-6-6-0/309605 "2022-07-14T11:44:35Z")
Hi. I'm using elasticsearch version 6.6.0. Now I want to upgrade from java 8 to java 17. Can I expect this version to work fine with java 17? Or I would need to upgrade my elasticsearch client before moving to java 17? … --- ## [Ingesting surricata logs](https://discuss.elastic.co/t/ingesting-surricata-logs/309437)
**Author:** [@username82](https://discuss.elastic.co/u/username82)\ **Replies:** 12\ **Last updated:** [July 14, 2022, 9:12am UTC](https://discuss.elastic.co/t/ingesting-surricata-logs/309437 "2022-07-14T09:12:26Z")
Hi, I am trying to ingest surricata logs into ElasticStack. The architecture is as follows, Suricata\>\>\>FileBeat\>\>\>ElasticSearch\>\>\>Kibana I have followed this guide to letter. How To Build A SIEM with Suricata and Elas… --- ## [Watcher payload entries group together in the index](https://discuss.elastic.co/t/watcher-payload-entries-group-together-in-the-index/309622)
**Author:** [@Jacky\_Kwok](https://discuss.elastic.co/u/Jacky_Kwok)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 9:12am UTC](https://discuss.elastic.co/t/watcher-payload-entries-group-together-in-the-index/309622 "2022-07-14T09:12:23Z")
I have used the transform which the output looks like this. "payload": { "\_doc": { "TransactionAmount": \[ 50000, 565 \], "CompanyName"… --- ## [Connection refused in cluster configuration](https://discuss.elastic.co/t/connection-refused-in-cluster-configuration/309293)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [July 14, 2022, 9:03am UTC](https://discuss.elastic.co/t/connection-refused-in-cluster-configuration/309293 "2022-07-14T09:03:33Z")
I am using elasticsearch and have outgrown one server. Therefore, I would like to create a cluster configuration of two elasticsearch servers with the following manual. I have deployed elasticsearch on two servers, bu… --- ## [Alternate to multi-terms aggregation in transform](https://discuss.elastic.co/t/alternate-to-multi-terms-aggregation-in-transform/309344)
**Author:** [@Robina\_Dhingra1](https://discuss.elastic.co/u/Robina_Dhingra1)\ **Replies:** 5\ **Last updated:** [July 14, 2022, 8:10am UTC](https://discuss.elastic.co/t/alternate-to-multi-terms-aggregation-in-transform/309344 "2022-07-14T08:10:46Z")
Hello Team ES, We have a use case where this transform works well for us.- PUT \_transform/tradebystatus { "source": { "index": \[ "latest-transactions" \] }, "pivot": { "group\_by": { "tradeD… --- ## [Vector-Based search using cosineSimilarity](https://discuss.elastic.co/t/vector-based-search-using-cosinesimilarity/307672)
**Author:** [@Biplab](https://discuss.elastic.co/u/Biplab)\ **Replies:** 3\ **Last updated:** [July 14, 2022, 8:08am UTC](https://discuss.elastic.co/t/vector-based-search-using-cosinesimilarity/307672 "2022-07-14T08:08:46Z")
Hi, I am indexing text and vector in Elasticsearch, working on an use case where I am using cosineSimilarity to get the result. The query search is returning the list of documents with decreasing Confidence Scores with t… --- ## [Script painless inline Method too large: method\_too\_large\_exception compile error on update](https://discuss.elastic.co/t/script-painless-inline-method-too-large-method-too-large-exception-compile-error-on-update/309611)
**Author:** [@Gaganpreet\_Xornor](https://discuss.elastic.co/u/Gaganpreet_Xornor)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 7:33am UTC](https://discuss.elastic.co/t/script-painless-inline-method-too-large-method-too-large-exception-compile-error-on-update/309611 "2022-07-14T07:33:23Z")
script painless inline Method too large: method\_too\_large\_exception compile error on update --- ## [How does pagination work with LTR plugin](https://discuss.elastic.co/t/how-does-pagination-work-with-ltr-plugin/309608)
**Author:** [@Mayank\_Tripathi](https://discuss.elastic.co/u/Mayank_Tripathi)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 6:31am UTC](https://discuss.elastic.co/t/how-does-pagination-work-with-ltr-plugin/309608 "2022-07-14T06:31:07Z")
How does pagination work with LTR plugins ? as per my understanding ranking plugin executes after document fetching takes place. If we have specified the from and to parameter. will LTR model still rank all of the docume… --- ## [How to run curl with Basic Security ( TLS / HTTPS )](https://discuss.elastic.co/t/how-to-run-curl-with-basic-security-tls-https/309479)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 2\ **Last updated:** [July 14, 2022, 1:38am UTC](https://discuss.elastic.co/t/how-to-run-curl-with-basic-security-tls-https/309479 "2022-07-14T01:38:17Z")
I have configured elasticsearch 7.17 to use TLS and HTTPS and trying to run curl commands to get index stats. The response i get is curl: (52) Empty reply from server. I am debugging an issue wherein post TLS implementa… --- ## [JAVA API Runtime mappings bug?](https://discuss.elastic.co/t/java-api-runtime-mappings-bug/309588)
**Author:** [@nicole.oresme](https://discuss.elastic.co/u/nicole.oresme)\ **Replies:** 0\ **Last updated:** [July 14, 2022, 12:29am UTC](https://discuss.elastic.co/t/java-api-runtime-mappings-bug/309588 "2022-07-14T00:29:48Z")
I'm trying to set runtime mappings using the java api. My setup is something like: new SearchRequest.Builder() .runtimeMappings("abc", java.util.Arrays.asList( new RuntimeField.Builder() … --- ## [Elasticsearch symlink does not start the service if installed from archive](https://discuss.elastic.co/t/elasticsearch-symlink-does-not-start-the-service-if-installed-from-archive/309574)
**Author:** [@marius03](https://discuss.elastic.co/u/marius03)\ **Replies:** 1\ **Last updated:** [July 13, 2022, 7:10pm UTC](https://discuss.elastic.co/t/elasticsearch-symlink-does-not-start-the-service-if-installed-from-archive/309574 "2022-07-13T19:10:56Z")
I installed Elasticsearch & Kibana in Linux Mint 20.3 localhost with archive option because installation from Debian Package does not work as expected: Install Elasticsearch from archive on Linux or MacOS | Elasticsearch… --- ## [Authentication of \[kibana\_system\] was terminated by realm \[reserved\] - failed to authenticate user \[kibana\_system\]](https://discuss.elastic.co/t/authentication-of-kibana-system-was-terminated-by-realm-reserved-failed-to-authenticate-user-kibana-system/309395)
**Author:** [@grillo](https://discuss.elastic.co/u/grillo)\ **Replies:** 5\ **Last updated:** [July 13, 2022, 5:33pm UTC](https://discuss.elastic.co/t/authentication-of-kibana-system-was-terminated-by-realm-reserved-failed-to-authenticate-user-kibana-system/309395 "2022-07-13T17:33:42Z")
Hello everyone, I have my two node cluster (8.3.2.1) - working. I generated the certificates of each element (elastic-vm-1, elastic-vm2, kibana, logstash) including DNS and IP for each certificate. Kibana - that when I… --- ## [My ELK stack the /dev/mapper/centos-root directory is getting full (95%)](https://discuss.elastic.co/t/my-elk-stack-the-dev-mapper-centos-root-directory-is-getting-full-95/309544)
**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\ **Replies:** 1\ **Last updated:** [July 13, 2022, 2:57pm UTC](https://discuss.elastic.co/t/my-elk-stack-the-dev-mapper-centos-root-directory-is-getting-full-95/309544 "2022-07-13T14:57:16Z")
Hello All, Trying to figure out how, but still no luck. If someone can help me out here in this. My Elasticsearch node is getting full \[root@srvde432 nodes\]# df -h Filesystem Size Used Avail Use% Mount… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=405) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=407)