# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=407

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 408

---

## [Failed to find a X509ExtendedTrustManager in the trust manager factory for \[PKIX\] and truststore \[null\]](https://discuss.elastic.co/t/failed-to-find-a-x509extendedtrustmanager-in-the-trust-manager-factory-for-pkix-and-truststore-null/309547)

<div class="topic-metadata">

**Author:** [@blaked](https://discuss.elastic.co/u/blaked)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 3:14pm UTC](https://discuss.elastic.co/t/failed-to-find-a-x509extendedtrustmanager-in-the-trust-manager-factory-for-pkix-and-truststore-null/309547 "2022-07-13T15:14:38Z")

</div>

I'm using Sonarqube Development Edition on Windows 2019 (I've previously posted this to the SQ forums but only gotten light feedback). Things have worked fine for years with the current config - but when I upgraded to S…

---

## [Add dynapmic alias field if target field exist](https://discuss.elastic.co/t/add-dynapmic-alias-field-if-target-field-exist/309543)

<div class="topic-metadata">

**Author:** [@Denergym](https://discuss.elastic.co/u/Denergym)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 2:15pm UTC](https://discuss.elastic.co/t/add-dynapmic-alias-field-if-target-field-exist/309543 "2022-07-13T14:15:59Z")

</div>

Hi ! I need add alias field if target field exist or string. I do this with dynamic templates and aliases field { "mappings": { "dynamic\_templates": \[ { "add\_alias\_for\_open": { "mat…

---

## [How to return exact match result first then other matches?](https://discuss.elastic.co/t/how-to-return-exact-match-result-first-then-other-matches/309452)

<div class="topic-metadata">

**Author:** [@Jake\_Wong](https://discuss.elastic.co/u/Jake_Wong)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 2:06pm UTC](https://discuss.elastic.co/t/how-to-return-exact-match-result-first-then-other-matches/309452 "2022-07-13T14:06:09Z")

</div>

I am newbie to elastic. I have data in elasticsearch, with field post\_title : Chocolate Hot Homemade I expect to get 'ho' (exact match) as first result when I search 'ho' like this: Homemade Hot chocolate I have t…

---

## [Elasticsearch Data nodes](https://discuss.elastic.co/t/elasticsearch-data-nodes/309517)

<div class="topic-metadata">

**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-data-nodes/309517 "2022-07-13T14:05:27Z")

</div>

Hello I am a beginner in elastic, I want to create an elasticsearch cluster with 3 data nodes, I want to ask can I specify for each data node, the type of logs meaning if I can specify for each data node what is the ty…

---

## [Query for values not present for the last 90 days](https://discuss.elastic.co/t/query-for-values-not-present-for-the-last-90-days/309308)

<div class="topic-metadata">

**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 1:37pm UTC](https://discuss.elastic.co/t/query-for-values-not-present-for-the-last-90-days/309308 "2022-07-13T13:37:05Z")

</div>

Hello forum, I am trying to wrap my head around a query. In order to weed out some users i need to search for values in field "data.authenticationInfo.metadata.identifier.keyword" not present in the last 90 days. Coul…

---

## [Kibana outputs integer values with commas](https://discuss.elastic.co/t/kibana-outputs-integer-values-with-commas/309522)

<div class="topic-metadata">

**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 1:27pm UTC](https://discuss.elastic.co/t/kibana-outputs-integer-values-with-commas/309522 "2022-07-13T13:27:21Z")

</div>

Hi. I don’t remember with which version of elastic, but they began to notice in kibana on graphs or tables the output of integer values with commas. This is data from the database. Why does kibana do this? Has anyone …

---

## [Avoid reinventing a reindexing toolbox](https://discuss.elastic.co/t/avoid-reinventing-a-reindexing-toolbox/309273)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 0\
**Last updated:** [July 10, 2022, 8:43pm UTC](https://discuss.elastic.co/t/avoid-reinventing-a-reindexing-toolbox/309273 "2022-07-10T20:43:05Z")

</div>

Anyone know of a good CLI toolbox for doing reindexing to save #shards? Or should I create my own set of REST API scripts for this from scratch, surely someone else should have had the same issue before :slight\_smile: E…

---

## [Watcher transform bytes to mb](https://discuss.elastic.co/t/watcher-transform-bytes-to-mb/309430)

<div class="topic-metadata">

**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 12:58pm UTC](https://discuss.elastic.co/t/watcher-transform-bytes-to-mb/309430 "2022-07-13T12:58:27Z")

</div>

how i transform bytes to mb ? { "trigger": { "schedule": { "interval": "5m" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": \[ …

---

## [Install Fleet server 8.2.2 fails: Error - could not start the HTTP server for the API: failed to listen on the named pipe](https://discuss.elastic.co/t/install-fleet-server-8-2-2-fails-error-could-not-start-the-http-server-for-the-api-failed-to-listen-on-the-named-pipe/307964)

<div class="topic-metadata">

**Author:** [@tidenhub](https://discuss.elastic.co/u/tidenhub)\
**Replies:** 2\
**Last updated:** [July 13, 2022, 12:02pm UTC](https://discuss.elastic.co/t/install-fleet-server-8-2-2-fails-error-could-not-start-the-http-server-for-the-api-failed-to-listen-on-the-named-pipe/307964 "2022-07-13T12:02:19Z")

</div>

Hi, I set up Elasticsearch and Kibana via Docker Compose using elasticsearch/docker-compose.yml at 8.2 · elastic/elasticsearch (github.com). I created the agent policy to host Fleet Server. I choose "Quick start" as de…

---

## [Java SearchResponse\<ObjectNode\> serialization](https://discuss.elastic.co/t/java-searchresponse-objectnode-serialization/309523)

<div class="topic-metadata">

**Author:** [@3xil3](https://discuss.elastic.co/u/3xil3)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 11:12am UTC](https://discuss.elastic.co/t/java-searchresponse-objectnode-serialization/309523 "2022-07-13T11:12:36Z")

</div>

it's a simple question, but I can't seem to serialize the SearchResponse back to a json string. What I've tried: final SearchResponse\<ObjectNode\> search1 = client.search( e -\> e.index("myindex") …

---

## [Full warm blocks transition to delete](https://discuss.elastic.co/t/full-warm-blocks-transition-to-delete/309521)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 10:49am UTC](https://discuss.elastic.co/t/full-warm-blocks-transition-to-delete/309521 "2022-07-13T10:49:11Z")

</div>

HI, I have ElasticSearch v"7.17.0" 1st day HOT 2nd day Warm 9nd day Delete the problem is when WARM is full , DELETE phase is not working. Shards are waiting for nodes to move to WARM and age above 9th day despite …

---

## [Foreach Ingest processor + condition](https://discuss.elastic.co/t/foreach-ingest-processor-condition/309435)

<div class="topic-metadata">

**Author:** [@vladislav](https://discuss.elastic.co/u/vladislav)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 9:55am UTC](https://discuss.elastic.co/t/foreach-ingest-processor-condition/309435 "2022-07-13T09:55:04Z")

</div>

Hello! Please advice. I have documents with fields looks like this { "something": "some value", ... "outdated\_products": \[ { "product": "Google Chrome earlier than 101.0.1034.124" } \], "softw…

---

## [Restore Status](https://discuss.elastic.co/t/restore-status/309070)

<div class="topic-metadata">

**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\
**Replies:** 5\
**Last updated:** [July 13, 2022, 9:28am UTC](https://discuss.elastic.co/t/restore-status/309070 "2022-07-13T09:28:55Z")

</div>

Hello Elastic Team, I have a question regarding on Restoring an index. I perform restore and it ask me to close the indices, so I closed the indices mentioned. Then performed Restore, I checked the Status and its says "…

---

## [Count emails that have more than 10 documents (buckets count)](https://discuss.elastic.co/t/count-emails-that-have-more-than-10-documents-buckets-count/307477)

<div class="topic-metadata">

**Author:** [@jack\_daniels00](https://discuss.elastic.co/u/jack_daniels00)\
**Replies:** 3\
**Last updated:** [July 13, 2022, 8:58am UTC](https://discuss.elastic.co/t/count-emails-that-have-more-than-10-documents-buckets-count/307477 "2022-07-13T08:58:07Z")

</div>

Hi! I have documents in elastic like: { "email": "user@example.com", "subject": "Email subject", "body": "Email body" } And I'm trying to count all unique emails that have more than 10 documents. I can re…

---

## [Failed to start Elasticsearch(/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled)](https://discuss.elastic.co/t/failed-to-start-elasticsearch-usr-lib-systemd-system-elasticsearch-service-disabled-vendor-preset-disabled/309514)

<div class="topic-metadata">

**Author:** [@sagar\_hukre](https://discuss.elastic.co/u/sagar_hukre)\
**Replies:** 1\
**Last updated:** [July 13, 2022, 8:43am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-usr-lib-systemd-system-elasticsearch-service-disabled-vendor-preset-disabled/309514 "2022-07-13T08:43:08Z")

</div>

● elasticsearch.service - Elasticsearch Loaded: loaded \`(/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled)\` Active: failed (Result: exit-code) since Wed 2022-07-13 14:05:42 IST; 1min…

---

## [Is combined\_script required or not in scripted\_metric?](https://discuss.elastic.co/t/is-combined-script-required-or-not-in-scripted-metric/309502)

<div class="topic-metadata">

**Author:** [@angelo\_c](https://discuss.elastic.co/u/angelo_c)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 7:54am UTC](https://discuss.elastic.co/t/is-combined-script-required-or-not-in-scripted-metric/309502 "2022-07-13T07:54:54Z")

</div>

Hi there, I was reading the documentation for scripted\_metric aggregation here, but I feel it is a bit confusing. I report what written there: map\_script Executed once per document collected. This is a required scrip…

---

## [Writing to wrong data stream's backing index after rollover](https://discuss.elastic.co/t/writing-to-wrong-data-streams-backing-index-after-rollover/309505)

<div class="topic-metadata">

**Author:** [@NejcK](https://discuss.elastic.co/u/NejcK)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 8:11am UTC](https://discuss.elastic.co/t/writing-to-wrong-data-streams-backing-index-after-rollover/309505 "2022-07-13T08:11:32Z")

</div>

Hi. I have a strange problem with data stream and filebeat. I've updated a mapping table and wanted to see if the new mappings work so I ran a manual rollup on the (test) data stream with POST robobeat-ds-sim-01-7.17/\_…

---

## [Failed to process cluster event (index-aliases) within 30s](https://discuss.elastic.co/t/failed-to-process-cluster-event-index-aliases-within-30s/309504)

<div class="topic-metadata">

**Author:** [@Anca\_Muresan](https://discuss.elastic.co/u/Anca_Muresan)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 8:09am UTC](https://discuss.elastic.co/t/failed-to-process-cluster-event-index-aliases-within-30s/309504 "2022-07-13T08:09:54Z")

</div>

Hello everyone , I get this error very frequently Elasticsearch\\Common\\Exceptions\\ServerErrorResponseException: {"error":{"root\_cause":\[{"type":"process\_cluster\_event\_timeout\_exception","reason":"failed to process clus…

---

## [Invalid Index Error in Elastic Search - querying against multiple indexes](https://discuss.elastic.co/t/invalid-index-error-in-elastic-search-querying-against-multiple-indexes/309462)

<div class="topic-metadata">

**Author:** [@bigalbunayan](https://discuss.elastic.co/u/bigalbunayan)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 10:49pm UTC](https://discuss.elastic.co/t/invalid-index-error-in-elastic-search-querying-against-multiple-indexes/309462 "2022-07-12T22:49:36Z")

</div>

When I run the below code I'm running the following in error in Elasticsearch: Invalid alias name \[...\] must not contain the following characters \[ , \\", \*, \\\\, \<, |, ,, \>, /, ?\] It doesn't like that I'm using index1,i…

---

## [Error on starting elasticsearch](https://discuss.elastic.co/t/error-on-starting-elasticsearch/309493)

<div class="topic-metadata">

**Author:** [@fransrampai](https://discuss.elastic.co/u/fransrampai)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 7:13am UTC](https://discuss.elastic.co/t/error-on-starting-elasticsearch/309493 "2022-07-13T07:13:05Z")

</div>

Hi I am having error when start elasticsearch.8.3.2, please see my logs: Jul 13 09:06:22 rnb03-sbices1 systemd-entrypoint\[22381\]: /usr/share/elasticsearch/bin/systemd-entrypoint: line 7: my\_pwd\_file.tmp: No such file or…

---

## [Watcher fails to send email](https://discuss.elastic.co/t/watcher-fails-to-send-email/309490)

<div class="topic-metadata">

**Author:** [@Jacky\_Kwok](https://discuss.elastic.co/u/Jacky_Kwok)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 7:05am UTC](https://discuss.elastic.co/t/watcher-fails-to-send-email/309490 "2022-07-13T07:05:08Z")

</div>

Hi. I am currently using the trial version of elastic cloud. I have setup a watch alert which will send email daily. I have whitelisted my email address. But still, it shows execution failing. My actual mail address i…

---

## [Query two Indexes, only get results which match in both indexes](https://discuss.elastic.co/t/query-two-indexes-only-get-results-which-match-in-both-indexes/309480)

<div class="topic-metadata">

**Author:** [@manoj-manoharan](https://discuss.elastic.co/u/manoj-manoharan)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 6:41am UTC](https://discuss.elastic.co/t/query-two-indexes-only-get-results-which-match-in-both-indexes/309480 "2022-07-13T06:41:07Z")

</div>

I have a use case in Elasticsearch. I want to search two indexes containing different schemas and get result which matches the query An example of what i want to achieve is here : Query Multiple Indexes, but apply queri…

---

## [How to compare data to find missing one](https://discuss.elastic.co/t/how-to-compare-data-to-find-missing-one/308924)

<div class="topic-metadata">

**Author:** [@josephLiu](https://discuss.elastic.co/u/josephLiu)\
**Replies:** 15\
**Last updated:** [July 13, 2022, 6:37am UTC](https://discuss.elastic.co/t/how-to-compare-data-to-find-missing-one/308924 "2022-07-13T06:37:31Z")

</div>

I need to use ES to realize an automatic function of detecting lost logs，Company don't want to write extra code The method is as follows： Through filebeat, log is continuously sent to two indexes from different source…

---

## [Mapper\_parsing\_Exception\\", \\"reason\\"=\>\\"failed to parse field \[service\] of type \[text\] in document](https://discuss.elastic.co/t/mapper-parsing-exception-reason-failed-to-parse-field-service-of-type-text-in-document/309476)

<div class="topic-metadata">

**Author:** [@skumarp7](https://discuss.elastic.co/u/skumarp7)\
**Replies:** 0\
**Last updated:** [July 13, 2022, 5:47am UTC](https://discuss.elastic.co/t/mapper-parsing-exception-reason-failed-to-parse-field-service-of-type-text-in-document/309476 "2022-07-13T05:47:28Z")

</div>

Hi Team, Elasticsearch is throwing mapper\_parsing\_exception when we try to push logs to an index from different applications. As different applications generates logs with same field \[whose type might differ\], there are…

---

## [How many Log's supports Elasticsearch version Free](https://discuss.elastic.co/t/how-many-logs-supports-elasticsearch-version-free/309466)

<div class="topic-metadata">

**Author:** [@Javier\_Alberto\_Ameli](https://discuss.elastic.co/u/Javier_Alberto_Ameli)\
**Replies:** 1\
**Last updated:** [July 12, 2022, 11:38pm UTC](https://discuss.elastic.co/t/how-many-logs-supports-elasticsearch-version-free/309466 "2022-07-12T23:38:57Z")

</div>

How many machines sending log's simultaneously, does Elasticksearch Stack support the Free version, not licensed?

---

## [Elasticsearch.service failing on Debian](https://discuss.elastic.co/t/elasticsearch-service-failing-on-debian/309366)

<div class="topic-metadata">

**Author:** [@kamie](https://discuss.elastic.co/u/kamie)\
**Replies:** 21\
**Last updated:** [July 12, 2022, 9:25pm UTC](https://discuss.elastic.co/t/elasticsearch-service-failing-on-debian/309366 "2022-07-12T21:25:07Z")

</div>

My operating system is Debian 11 (Bullseye), it runs on a Pentium E5800 I've installed JDK/Java 11 (and set the path), apt-transport-https, the Elasticsearch keys and repo, and have updated my system multiple times. I'v…

---

## [Do applications need login info in config to log to Elasticsearch in 7.17 and later](https://discuss.elastic.co/t/do-applications-need-login-info-in-config-to-log-to-elasticsearch-in-7-17-and-later/309457)

<div class="topic-metadata">

**Author:** [@wes.campbell](https://discuss.elastic.co/u/wes.campbell)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 7:57pm UTC](https://discuss.elastic.co/t/do-applications-need-login-info-in-config-to-log-to-elasticsearch-in-7-17-and-later/309457 "2022-07-12T19:57:19Z")

</div>

Do applications need login info in config to log to Elasticsearch in 7.17 and later

---

## [Downsize Elastic Cluster](https://discuss.elastic.co/t/downsize-elastic-cluster/309454)

<div class="topic-metadata">

**Author:** [@marshall99](https://discuss.elastic.co/u/marshall99)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 6:44pm UTC](https://discuss.elastic.co/t/downsize-elastic-cluster/309454 "2022-07-12T18:44:10Z")

</div>

We have a 6 node elastic cluster on bare metal that was installed by way of helm 7.10.0 We are looking to downsize the cluster from 6 nodes to 3. The 3 that are being decommissioned have the master pods on them along wi…

---

## [How to force a node to become master?](https://discuss.elastic.co/t/how-to-force-a-node-to-become-master/309444)

<div class="topic-metadata">

**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 5:44pm UTC](https://discuss.elastic.co/t/how-to-force-a-node-to-become-master/309444 "2022-07-12T17:44:47Z")

</div>

I upgrades a cluster from version 7.17.5 to 8.3.2 and I'm having issues with master discovery. The node that is set to be the master continues to log this: \[2022-07-12T17:39:00,115\]\[WARN \]\[o.e.c.c.ClusterFormationFailur…

---

## [Using cosineSimilarity function inside aggregation scripts](https://discuss.elastic.co/t/using-cosinesimilarity-function-inside-aggregation-scripts/308046)

<div class="topic-metadata">

**Author:** [@lonewolf](https://discuss.elastic.co/u/lonewolf)\
**Replies:** 2\
**Last updated:** [July 12, 2022, 5:10pm UTC](https://discuss.elastic.co/t/using-cosinesimilarity-function-inside-aggregation-scripts/308046 "2022-07-12T17:10:16Z")

</div>

I am trying to use cosineSimilarity function inside in aggregation script but getting Unknown call \[cosine Similarity\] with \[2\] arguments { "query": { "match\_all": {} }, "aggs": { "group":…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=406)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=408)
