# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=408

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 409

---

## [Failed to set monitoring pipeline](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline/309346)

<div class="topic-metadata">

**Author:** [@pabloochoa](https://discuss.elastic.co/u/pabloochoa)\
**Replies:** 0\
**Last updated:** [July 11, 2022, 4:28pm UTC](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline/309346 "2022-07-11T16:28:05Z")

</div>

I am deploying ES v7.16.3 in Docker. I have been deploying ES with this version without mapping /usr/share/elasticsearch/data and haven't been getting errors, but when I have done the mapping I keep getting this errors: …

---

## [Hi Wanted Some Help](https://discuss.elastic.co/t/hi-wanted-some-help/309370)

<div class="topic-metadata">

**Author:** [@Draco\_King](https://discuss.elastic.co/u/Draco_King)\
**Replies:** 6\
**Last updated:** [July 12, 2022, 1:28pm UTC](https://discuss.elastic.co/t/hi-wanted-some-help/309370 "2022-07-12T13:28:58Z")

</div>

The text about {"took":{"total":1,"successful":1,"skipped":1,"failed":1,"max\_score":1,"hits":1},"timed\_out":{"total":false,"successful":false,"skipped":false,"failed":false,"max\_score":false,"hits":false},"\_shards":{"tot…

---

## [Receiving org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed after 7.17.1 to 8.2.3 upgrade](https://discuss.elastic.co/t/receiving-org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-after-7-17-1-to-8-2-3-upgrade/309419)

<div class="topic-metadata">

**Author:** [@newlife007](https://discuss.elastic.co/u/newlife007)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 12:41pm UTC](https://discuss.elastic.co/t/receiving-org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed-after-7-17-1-to-8-2-3-upgrade/309419 "2022-07-12T12:41:47Z")

</div>

Receiving org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed after 7.17.1 to 8.2.3 upgrade. This is causing permission issues in accessing indexes in kibana and API using elastic user statin…

---

## [Elastic - Extract index data based on timestamp using python library](https://discuss.elastic.co/t/elastic-extract-index-data-based-on-timestamp-using-python-library/309409)

<div class="topic-metadata">

**Author:** [@aniketdatir](https://discuss.elastic.co/u/aniketdatir)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 11:15am UTC](https://discuss.elastic.co/t/elastic-extract-index-data-based-on-timestamp-using-python-library/309409 "2022-07-12T11:15:29Z")

</div>

Hi Elastic team, I want to extract index data based on timestamp using python library where I want to provide custom start time and end time. So want to extract index within start & end time. Please suggest how can I r…

---

## [I have installed fleet server and now i want to install elastic agent but it showing me error like this](https://discuss.elastic.co/t/i-have-installed-fleet-server-and-now-i-want-to-install-elastic-agent-but-it-showing-me-error-like-this/309408)

<div class="topic-metadata">

**Author:** [@Nirmal\_Unagar](https://discuss.elastic.co/u/Nirmal_Unagar)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 11:10am UTC](https://discuss.elastic.co/t/i-have-installed-fleet-server-and-now-i-want-to-install-elastic-agent-but-it-showing-me-error-like-this/309408 "2022-07-12T11:10:40Z")

</div>

I have installed fleet server successfully. now i have other windows server and i have created policy for system, elastic endpoint. After downloading elastic agent, it showing me error like this and not able to connect w…

---

## [Java client put logstash pipeline](https://discuss.elastic.co/t/java-client-put-logstash-pipeline/309345)

<div class="topic-metadata">

**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\
**Replies:** 1\
**Last updated:** [July 12, 2022, 10:29am UTC](https://discuss.elastic.co/t/java-client-put-logstash-pipeline/309345 "2022-07-12T10:29:04Z")

</div>

Hi, I'm using the new Java elasticsearch client to PUT a logstash pipeline. client.logstash().putPipeline(b -\> b .id(id) .pipeline(p -\> p …

---

## [Problem with ".transform-internal" and ".kibana\_task\_manager\_" index](https://discuss.elastic.co/t/problem-with-transform-internal-and-kibana-task-manager-index/309393)

<div class="topic-metadata">

**Author:** [@Carlos\_Trivino](https://discuss.elastic.co/u/Carlos_Trivino)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 9:28am UTC](https://discuss.elastic.co/t/problem-with-transform-internal-and-kibana-task-manager-index/309393 "2022-07-12T09:28:37Z")

</div>

hello, I have a problem with ".transform-internal" and ".kibana\_task\_manager\_" indexes, they are corrupt when I check the status (/\_cluster/allocation/explain) both show: "current\_state": "unassigned", "unassi…

---

## [Update security certificate with a different CA](https://discuss.elastic.co/t/update-security-certificate-with-a-different-ca/309288)

<div class="topic-metadata">

**Author:** [@rajvel](https://discuss.elastic.co/u/rajvel)\
**Replies:** 1\
**Last updated:** [July 12, 2022, 9:27am UTC](https://discuss.elastic.co/t/update-security-certificate-with-a-different-ca/309288 "2022-07-12T09:27:47Z")

</div>

Hello Team, As per the document , first we need to take a backup of elaticsearch.yml, the elasticsearch.yml file in the current 8 version looks different. Enable security features xpack.security.enabled: true xpack.…

---

## [Adding new node to existing cluster, not being recognized](https://discuss.elastic.co/t/adding-new-node-to-existing-cluster-not-being-recognized/309327)

<div class="topic-metadata">

**Author:** [@Rowan05](https://discuss.elastic.co/u/Rowan05)\
**Replies:** 10\
**Last updated:** [July 12, 2022, 9:21am UTC](https://discuss.elastic.co/t/adding-new-node-to-existing-cluster-not-being-recognized/309327 "2022-07-12T09:21:57Z")

</div>

Hello, I have a server which is running ElasticSearch 7.2 on an Ubuntu virtual machine. This server has limited disk space, so i want to add disk space. I was thinking of two options. Add an hard drive to server and…

---

## [ILM helm, indexes are bigger the 50g](https://discuss.elastic.co/t/ilm-helm-indexes-are-bigger-the-50g/309390)

<div class="topic-metadata">

**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\
**Replies:** 1\
**Last updated:** [July 12, 2022, 9:15am UTC](https://discuss.elastic.co/t/ilm-helm-indexes-are-bigger-the-50g/309390 "2022-07-12T09:15:46Z")

</div>

I thought I set the ILM correctly but indexs keep getting bigger then 50g this is the policy I have, what am I doing wrong ? PUT \_ilm/policy/30-days-default\_alonzon { "policy": { "phases": { "hot": { …

---

## [Logs didn't show in kibana, but there is no relevant error in logs](https://discuss.elastic.co/t/logs-didnt-show-in-kibana-but-there-is-no-relevant-error-in-logs/309385)

<div class="topic-metadata">

**Author:** [@Baguette](https://discuss.elastic.co/u/Baguette)\
**Replies:** 1\
**Last updated:** [July 12, 2022, 8:46am UTC](https://discuss.elastic.co/t/logs-didnt-show-in-kibana-but-there-is-no-relevant-error-in-logs/309385 "2022-07-12T08:46:18Z")

</div>

Hello, I have troubles with my ELK stack for the past few weeks; in fact, logs stop showing in kibana, but i don't have any error on the logs. My stack is composed of logstash - elasticsearch and kibana installed on a …

---

## [Boost score for prefix matches](https://discuss.elastic.co/t/boost-score-for-prefix-matches/309384)

<div class="topic-metadata">

**Author:** [@bogdanjsx](https://discuss.elastic.co/u/bogdanjsx)\
**Replies:** 0\
**Last updated:** [July 12, 2022, 7:43am UTC](https://discuss.elastic.co/t/boost-score-for-prefix-matches/309384 "2022-07-12T07:43:18Z")

</div>

Hello! I'm trying to implement something similar to a store search for products and I'm having a hard time boosting result score to order them in a specific manner. Let's say I have a name field in my documents and I w…

---

## [How to install plugins without restarting the cluster](https://discuss.elastic.co/t/how-to-install-plugins-without-restarting-the-cluster/309367)

<div class="topic-metadata">

**Author:** [@eom3835](https://discuss.elastic.co/u/eom3835)\
**Replies:** 1\
**Last updated:** [July 12, 2022, 5:58am UTC](https://discuss.elastic.co/t/how-to-install-plugins-without-restarting-the-cluster/309367 "2022-07-12T05:58:23Z")

</div>

I am using the modified plugin. I always have to restart to apply my modified plugin to ES. I can't stop nodes that are currently live, so I have to increase the server and copy the data. And I need to reinstall the p…

---

## [How do I do Case Sensitive Match Query in Elastic Search?](https://discuss.elastic.co/t/how-do-i-do-case-sensitive-match-query-in-elastic-search/309348)

<div class="topic-metadata">

**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\
**Replies:** 5\
**Last updated:** [July 12, 2022, 5:53am UTC](https://discuss.elastic.co/t/how-do-i-do-case-sensitive-match-query-in-elastic-search/309348 "2022-07-12T05:53:47Z")

</div>

I'm trying to do a match query that is case sensitive such that it only returns words where the html field contains the string. Here is the query I have so far: POST data/\_search { "track\_total\_hits": true, "query"…

---

## [Copy\_to vs appending all terms in a string : Are the search results going to be the same?](https://discuss.elastic.co/t/copy-to-vs-appending-all-terms-in-a-string-are-the-search-results-going-to-be-the-same/308385)

<div class="topic-metadata">

**Author:** [@ano](https://discuss.elastic.co/u/ano)\
**Replies:** 2\
**Last updated:** [July 12, 2022, 3:09am UTC](https://discuss.elastic.co/t/copy-to-vs-appending-all-terms-in-a-string-are-the-search-results-going-to-be-the-same/308385 "2022-07-12T03:09:14Z")

</div>

Hi, I'm building an e-commerce search engine, and I want to do a full text search on product name, category, and a few other fields. I'm currently using copy\_to to copy all the individual fields into 1 single field (cal…

---

## [Permission denied error when starting Elasticsearch as Singularity container](https://discuss.elastic.co/t/permission-denied-error-when-starting-elasticsearch-as-singularity-container/309228)

<div class="topic-metadata">

**Author:** [@lucasl](https://discuss.elastic.co/u/lucasl)\
**Replies:** 1\
**Last updated:** [July 11, 2022, 8:10pm UTC](https://discuss.elastic.co/t/permission-denied-error-when-starting-elasticsearch-as-singularity-container/309228 "2022-07-11T20:10:13Z")

</div>

Hello, I am trying to run single node Elasticsearch instance on a HPC cluster. To do this, I am converting the Elasticsearch docker container as a singularity container. When I launch the container itself I get the foll…

---

## [Index template pattern error](https://discuss.elastic.co/t/index-template-pattern-error/309351)

<div class="topic-metadata">

**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\
**Replies:** 0\
**Last updated:** [July 11, 2022, 5:58pm UTC](https://discuss.elastic.co/t/index-template-pattern-error/309351 "2022-07-11T17:58:36Z")

</div>

Hi guys, I am trying to create a new index template but for some reason elasticsearch is assuming that there is already one index template with the index pattern requested... { "error" : { "root\_cause" : \[ …

---

## [Update\_by\_query with proceed does not return failure](https://discuss.elastic.co/t/update-by-query-with-proceed-does-not-return-failure/309338)

<div class="topic-metadata">

**Author:** [@Paul\_Le\_Tilly](https://discuss.elastic.co/u/Paul_Le_Tilly)\
**Replies:** 0\
**Last updated:** [July 11, 2022, 3:48pm UTC](https://discuss.elastic.co/t/update-by-query-with-proceed-does-not-return-failure/309338 "2022-07-11T15:48:19Z")

</div>

HI all, So I was reading a bit about the documentation for the api update\_by\_query. From my understanding of the conflict, parameter. You can have 2 behaviours Abort, that will stop at the first issue and report on…

---

## [Access inner\_hits response in Apache Hadoop Spark](https://discuss.elastic.co/t/access-inner-hits-response-in-apache-hadoop-spark/309320)

<div class="topic-metadata">

**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\
**Replies:** 1\
**Last updated:** [July 11, 2022, 1:42pm UTC](https://discuss.elastic.co/t/access-inner-hits-response-in-apache-hadoop-spark/309320 "2022-07-11T13:42:24Z")

</div>

I have an Elasticsearch query that is giving me a response with standard \_source data and some additional response that is inner\_hits matching the nested document of the index. The response is something like below { "…

---

## [Unable to set trackTotalHits to true in Java RestHighLevelClient](https://discuss.elastic.co/t/unable-to-set-tracktotalhits-to-true-in-java-resthighlevelclient/309284)

<div class="topic-metadata">

**Author:** [@shashi-bhushan](https://discuss.elastic.co/u/shashi-bhushan)\
**Replies:** 1\
**Last updated:** [July 11, 2022, 1:25pm UTC](https://discuss.elastic.co/t/unable-to-set-tracktotalhits-to-true-in-java-resthighlevelclient/309284 "2022-07-11T13:25:45Z")

</div>

Hi, I'm unable to make use of track\_total\_hits flag when using Java RestHighLevelClient. I was checking Elastic code a bit and it looks like the RequestConverters#addSearchRequestParams method is adding only certain par…

---

## [Question About Removing A Node From A Production ELK Stack](https://discuss.elastic.co/t/question-about-removing-a-node-from-a-production-elk-stack/308589)

<div class="topic-metadata">

**Author:** [@NJMitchell](https://discuss.elastic.co/u/NJMitchell)\
**Replies:** 2\
**Last updated:** [July 11, 2022, 1:23pm UTC](https://discuss.elastic.co/t/question-about-removing-a-node-from-a-production-elk-stack/308589 "2022-07-11T13:23:30Z")

</div>

Hello, I have a question about removing a node from a production ELK Stack. We are removing a server from the stack to repurpose it for another use. After moving shards from the node that we are targeting for removal fr…

---

## [Node left the cluster caused few Primary unassigned left](https://discuss.elastic.co/t/node-left-the-cluster-caused-few-primary-unassigned-left/309312)

<div class="topic-metadata">

**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\
**Replies:** 3\
**Last updated:** [July 11, 2022, 12:52pm UTC](https://discuss.elastic.co/t/node-left-the-cluster-caused-few-primary-unassigned-left/309312 "2022-07-11T12:52:26Z")

</div>

Node suddenly left the cluster because of issue, some of the primary shards left unassigned, because of below issue : slight\_smile: can\_allocate" : "no\_valid\_shard\_copy", "allocate\_explanation" : "cannot allocate becau…

---

## [Transform for predefined fields](https://discuss.elastic.co/t/transform-for-predefined-fields/309261)

<div class="topic-metadata">

**Author:** [@Robina\_Dhingra1](https://discuss.elastic.co/u/Robina_Dhingra1)\
**Replies:** 8\
**Last updated:** [July 11, 2022, 11:27am UTC](https://discuss.elastic.co/t/transform-for-predefined-fields/309261 "2022-07-11T11:27:22Z")

</div>

Hi Team elastic, We have a use case, where we created a continuous pivot transform on a source index to get count of status of transactions. If status of any of the transaction changes, the same document appears in dest…

---

## [Elastic8 java client allocation.max\_retries exception](https://discuss.elastic.co/t/elastic8-java-client-allocation-max-retries-exception/308868)

<div class="topic-metadata">

**Author:** [@Idorasi\_Paul](https://discuss.elastic.co/u/Idorasi_Paul)\
**Replies:** 5\
**Last updated:** [July 11, 2022, 10:30am UTC](https://discuss.elastic.co/t/elastic8-java-client-allocation-max-retries-exception/308868 "2022-07-11T10:30:04Z")

</div>

Hello, currently using elasticsearch-java 8.1.3 client to communicate with my es cluster. Index settings looks like this: "settings": { "index": { "number\_of\_shards": 1, "number\_of\_replicas": 7, "…

---

## [Curator is not working](https://discuss.elastic.co/t/curator-is-not-working/309219)

<div class="topic-metadata">

**Author:** [@sandeepbisht](https://discuss.elastic.co/u/sandeepbisht)\
**Replies:** 5\
**Last updated:** [July 11, 2022, 9:35am UTC](https://discuss.elastic.co/t/curator-is-not-working/309219 "2022-07-11T09:35:55Z")

</div>

Hi All, I was trying to setup curator for auto removal of my old indices but i am getting below error. Please someone help me on this. I have also attached screenshot of my curator and action file with it's output. o…

---

## [Unable to install a specific version of Elastic Stack software (Ubuntu 20.04 LTS)](https://discuss.elastic.co/t/unable-to-install-a-specific-version-of-elastic-stack-software-ubuntu-20-04-lts/309305)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 0\
**Last updated:** [July 11, 2022, 9:28am UTC](https://discuss.elastic.co/t/unable-to-install-a-specific-version-of-elastic-stack-software-ubuntu-20-04-lts/309305 "2022-07-11T09:28:39Z")

</div>

Hi, I have Ubuntu 20.04 LTS with the latest updates. root@pk-elk1:/etc/kibana# uname -a Linux pk-elk1 5.13.0-1028-azure #33~20.04.1-Ubuntu SMP Fri Jun 3 15:13:34 UTC 2022 x86\_64 x86\_64 x86\_64 GNU/Linux On this Ubuntu,…

---

## [Cluster in two data centers](https://discuss.elastic.co/t/cluster-in-two-data-centers/309302)

<div class="topic-metadata">

**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\
**Replies:** 1\
**Last updated:** [July 11, 2022, 9:25am UTC](https://discuss.elastic.co/t/cluster-in-two-data-centers/309302 "2022-07-11T09:25:42Z")

</div>

Hi All, I do have an Elasticsearch cluster where some of the nodes are in an east-US datacenter (the master nodes are located here) and some of them are in a west-US datacenter. I have requested the connections 9200 an…

---

## [Heap memory overflow master nodes (continuous GC)](https://discuss.elastic.co/t/heap-memory-overflow-master-nodes-continuous-gc/308465)

<div class="topic-metadata">

**Author:** [@Balaji\_Arun](https://discuss.elastic.co/u/Balaji_Arun)\
**Replies:** 3\
**Last updated:** [July 11, 2022, 8:25am UTC](https://discuss.elastic.co/t/heap-memory-overflow-master-nodes-continuous-gc/308465 "2022-07-11T08:25:25Z")

</div>

Hi everyone, Recently, encountered increases in the heap memory usage in the master nodes (heap memory overflow master nodes continuous garbage collection). I try to debug the root cause using the heap dump saved in the…

---

## [Multi Match Phrase query](https://discuss.elastic.co/t/multi-match-phrase-query/309290)

<div class="topic-metadata">

**Author:** [@Sahil5](https://discuss.elastic.co/u/Sahil5)\
**Replies:** 0\
**Last updated:** [July 11, 2022, 6:47am UTC](https://discuss.elastic.co/t/multi-match-phrase-query/309290 "2022-07-11T06:47:33Z")

</div>

Hi Team, Does elasticsearch multi\_match phrase query supports custom synonyms in search time? Below is the query { "multi\_match": { "query": "add new document", …

---

## [Feasibility to upsert the documents using Bulk operation](https://discuss.elastic.co/t/feasibility-to-upsert-the-documents-using-bulk-operation/309289)

<div class="topic-metadata">

**Author:** [@bkantu](https://discuss.elastic.co/u/bkantu)\
**Replies:** 0\
**Last updated:** [July 11, 2022, 6:35am UTC](https://discuss.elastic.co/t/feasibility-to-upsert-the-documents-using-bulk-operation/309289 "2022-07-11T06:35:36Z")

</div>

Hi Team, Is there a way to insert a document if the document doesn't exist or else update the document in Elasticsearch using BulkAll? How can we handle not duplicating the records if we do the import twice?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=407)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=409)
