# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=411 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 412 --- ## [Elasticsearch node crashed](https://discuss.elastic.co/t/elasticsearch-node-crashed/308889)
**Author:** [@catadetest](https://discuss.elastic.co/u/catadetest)\ **Replies:** 4\ **Last updated:** [July 6, 2022, 3:32pm UTC](https://discuss.elastic.co/t/elasticsearch-node-crashed/308889 "2022-07-06T15:32:26Z")
Hello, I am new to elasticsearch and I'm trying to understand why sometimes our elasticsearch cluster breaks. We have 3 nodes in the cluster running on Ubuntu 20.04 LTS, with 8 cores CPU and 32 GB of RAM, out of which … --- ## [I can't access to laoclhost:9200 it ask me username and password](https://discuss.elastic.co/t/i-cant-access-to-laoclhost-9200-it-ask-me-username-and-password/309024)
**Author:** [@Akassh\_Mathur](https://discuss.elastic.co/u/Akassh_Mathur)\ **Replies:** 1\ **Last updated:** [July 6, 2022, 3:01pm UTC](https://discuss.elastic.co/t/i-cant-access-to-laoclhost-9200-it-ask-me-username-and-password/309024 "2022-07-06T15:01:51Z")
--- ## [Hard drive usage for monitoring logs too high](https://discuss.elastic.co/t/hard-drive-usage-for-monitoring-logs-too-high/309017)
**Author:** [@kristofdc](https://discuss.elastic.co/u/kristofdc)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 1:27pm UTC](https://discuss.elastic.co/t/hard-drive-usage-for-monitoring-logs-too-high/309017 "2022-07-06T13:27:56Z")
Our Azure Elasticsearch instance has a hard disk of 60 Gb. On our dev/acc environments, the hard disk took more than 55 Gb of space. Which resulted into a disk usage exceeded flood-stage-watermark, Kibana was not avail… --- ## [ELASTICSEARCH - Update the value of a field to current date](https://discuss.elastic.co/t/elasticsearch-update-the-value-of-a-field-to-current-date/308931)
**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 3\ **Last updated:** [July 6, 2022, 11:06am UTC](https://discuss.elastic.co/t/elasticsearch-update-the-value-of-a-field-to-current-date/308931 "2022-07-06T11:06:53Z")
I'm looking for a way to update the value of a field through update\_by\_query in the field: reviewed\_data in the next document: { "reviewed\_date" : "2022-07-05T09:31:04.742077702Z", "timestamp" : "2022-07… --- ## [Filter nested objects in document (very hard)](https://discuss.elastic.co/t/filter-nested-objects-in-document-very-hard/308999)
**Author:** [@hookenful](https://discuss.elastic.co/u/hookenful)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 9:58am UTC](https://discuss.elastic.co/t/filter-nested-objects-in-document-very-hard/308999 "2022-07-06T09:58:26Z")
Hello there! I am trying to achieve not common thing and I am struggling with it hard. I have such document: { "\_index": "users", "\_type": "\_doc", "\_id": "07e4588c-6102-4be2-9518-cabaa40726e0", "\_score": 1, … --- ## [Cannot set \_id from \_source during reindex](https://discuss.elastic.co/t/cannot-set-id-from-source-during-reindex/308993)
**Author:** [@ghallas](https://discuss.elastic.co/u/ghallas)\ **Replies:** 1\ **Last updated:** [July 6, 2022, 9:13am UTC](https://discuss.elastic.co/t/cannot-set-id-from-source-during-reindex/308993 "2022-07-06T09:13:13Z")
I am trying to reindex an existing index into a new one, while modifying the document \_id in the process. My new \_id needs to be populated from one of the documents' fields. I am using the following reindex request POS… --- ## [ES cluster (single node ) in RED due to unassigned shards](https://discuss.elastic.co/t/es-cluster-single-node-in-red-due-to-unassigned-shards/308292)
**Author:** [@partha.nayak](https://discuss.elastic.co/u/partha.nayak)\ **Replies:** 7\ **Last updated:** [July 6, 2022, 9:12am UTC](https://discuss.elastic.co/t/es-cluster-single-node-in-red-due-to-unassigned-shards/308292 "2022-07-06T09:12:32Z")
ES cluster (single node ) in RED due to unassigned shards Here are some details 1) List of unassigned shards .ds-.logs-deprecation.elasticsearch-default-2022.06.07-000003 0 p UNASSIGNED CLUSTER\_RECOVERED f… --- ## [Could not set the passworkd after enable the security](https://discuss.elastic.co/t/could-not-set-the-passworkd-after-enable-the-security/308967)
**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\ **Replies:** 4\ **Last updated:** [July 6, 2022, 7:38am UTC](https://discuss.elastic.co/t/could-not-set-the-passworkd-after-enable-the-security/308967 "2022-07-06T07:38:37Z")
ElasticSearch version:7.12 After enable the xpack security with the guide： To set password, then get the error: bin/elasticsearch-setup-passwords interactive future versions of Elasticsearch will require Java 11; you… --- ## [Enable soft deletes while restoring snapshots](https://discuss.elastic.co/t/enable-soft-deletes-while-restoring-snapshots/308986)
**Author:** [@DavidZ](https://discuss.elastic.co/u/DavidZ)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 7:24am UTC](https://discuss.elastic.co/t/enable-soft-deletes-while-restoring-snapshots/308986 "2022-07-06T07:24:06Z")
Hi, I have snapshots containing indices whose soft deletes is set to false as default. However, I need to enable it for cross-cluster replication. Is it possible to override index setting by enabling soft deletes while… --- ## [Delete default index](https://discuss.elastic.co/t/delete-default-index/308549)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 2\ **Last updated:** [July 6, 2022, 7:20am UTC](https://discuss.elastic.co/t/delete-default-index/308549 "2022-07-06T07:20:42Z")
Hi all, we have some indexes created by default in elasticsearch, managed by theese ILM: For example, .alerts-ilm-policy have this index: All in hot status: When try to delete older index of these ilm, index … --- ## [Unable to login to localhost:9200](https://discuss.elastic.co/t/unable-to-login-to-localhost-9200/300416)
**Author:** [@csreddy.ennam](https://discuss.elastic.co/u/csreddy.ennam)\ **Replies:** 7\ **Last updated:** [July 6, 2022, 7:08am UTC](https://discuss.elastic.co/t/unable-to-login-to-localhost-9200/300416 "2022-07-06T07:08:09Z")
we were using Elasticsearch from more than 2 years, now we are unable to open localhost:9200 (latest version: Using Elasticsearch 8.1.0 ) --- ## [Wrong date format pattern for origination date in doc?](https://discuss.elastic.co/t/wrong-date-format-pattern-for-origination-date-in-doc/308971)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 3:42am UTC](https://discuss.elastic.co/t/wrong-date-format-pattern-for-origination-date-in-doc/308971 "2022-07-06T03:42:01Z")
Hello . I would like to confirm the pattern used to parse origination date from index name. I am using elasticsearch 7.17.4 . It says, The index name must match the pattern ^.\*-{date\_format}-\\\\d+ , where the date\_… --- ## [Data streams and Indices](https://discuss.elastic.co/t/data-streams-and-indices/308970)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 3:35am UTC](https://discuss.elastic.co/t/data-streams-and-indices/308970 "2022-07-06T03:35:07Z")
Hi Everyone, While doing the Create Policy \> Data streams and indices, I was confused why index name is not showing, only the alias are showing. Is it valid and why only alias are showing not their index? Example: X is… --- ## [Using elasticsearch graph for data lineage analysis](https://discuss.elastic.co/t/using-elasticsearch-graph-for-data-lineage-analysis/308823)
**Author:** [@mengjiann](https://discuss.elastic.co/u/mengjiann)\ **Replies:** 1\ **Last updated:** [July 6, 2022, 2:31am UTC](https://discuss.elastic.co/t/using-elasticsearch-graph-for-data-lineage-analysis/308823 "2022-07-06T02:31:00Z")
Hi, there was a question asked previously: Using Elasticsearch graph for Data lineage Analysis 2 years back. Just wondering if there is any replies now? Thanks --- ## [Stack Monitoring - Elasticsearch Nodes not displayed as monitored with Metricbeat](https://discuss.elastic.co/t/stack-monitoring-elasticsearch-nodes-not-displayed-as-monitored-with-metricbeat/307979)
**Author:** [@AndreiRD](https://discuss.elastic.co/u/AndreiRD)\ **Replies:** 4\ **Last updated:** [July 6, 2022, 1:23am UTC](https://discuss.elastic.co/t/stack-monitoring-elasticsearch-nodes-not-displayed-as-monitored-with-metricbeat/307979 "2022-07-06T01:23:46Z")
Hi, I'm trying to set up Stack Monitoring and I went through all the steps from here: Collecting Elasticsearch monitoring data with Metricbeat | Elasticsearch Guide \[8.2\] | Elastic Enabled the collection of monitoring… --- ## [Updating index.max\_shingle\_diff](https://discuss.elastic.co/t/updating-index-max-shingle-diff/308937)
**Author:** [@Benjamin1](https://discuss.elastic.co/u/Benjamin1)\ **Replies:** 4\ **Last updated:** [July 5, 2022, 9:12pm UTC](https://discuss.elastic.co/t/updating-index-max-shingle-diff/308937 "2022-07-05T21:12:47Z")
When I try to create an index I get this message: ServerError: Type: illegal\_argument\_exception Reason: "In Shingle TokenFilter the difference between max\_shingle\_size and min\_shingle\_size (and +1 if outputting unigrams… --- ## [Curl: (77) error setting certificate verify locations:](https://discuss.elastic.co/t/curl-77-error-setting-certificate-verify-locations/308945)
**Author:** [@CBrad](https://discuss.elastic.co/u/CBrad)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 5:38pm UTC](https://discuss.elastic.co/t/curl-77-error-setting-certificate-verify-locations/308945 "2022-07-05T17:38:05Z")
I am installing Elasticsearch on Amazon Linux 2 EC2 instances, and using the latest version of ES 8.2.3. When I run: sudo systemctl status elasticsearch.service ES shows as running on all three, but when I check: $ cu… --- ## [Update errors to version 8.3.1](https://discuss.elastic.co/t/update-errors-to-version-8-3-1/308808)
**Author:** [@PM75](https://discuss.elastic.co/u/PM75)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 3:41pm UTC](https://discuss.elastic.co/t/update-errors-to-version-8-3-1/308808 "2022-07-05T15:41:57Z")
Hello, I would like to specify that I am French and that my English is not my best. Following the security alert : I have just tried to update from 8.2.0 to 8.3.1 by following the instructions: Since then, I have t… --- ## [Node discovery on ECS FARGATE - nodes see each other but won't join up](https://discuss.elastic.co/t/node-discovery-on-ecs-fargate-nodes-see-each-other-but-wont-join-up/308933)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 3:27pm UTC](https://discuss.elastic.co/t/node-discovery-on-ecs-fargate-nodes-see-each-other-but-wont-join-up/308933 "2022-07-05T15:27:56Z")
I'm running a Service in ECS that has two small elasticsearch tasks. It uses service discovery, so both are registered under A records in Route 53 hosted zones. I've configured elasticsearch to use the route 53 dns as t… --- ## [Spark write to es thrown 'FORBIDDEN/12/index read-only'](https://discuss.elastic.co/t/spark-write-to-es-thrown-forbidden-12-index-read-only/308923)
**Author:** [@jimi\_feng](https://discuss.elastic.co/u/jimi_feng)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 2:22pm UTC](https://discuss.elastic.co/t/spark-write-to-es-thrown-forbidden-12-index-read-only/308923 "2022-07-05T14:22:41Z")
Hi team, i meet some problem, when i write data from spark streaming to elasticsearch, there throw \[FORBIDDEN/12/index read-only / allow delete (api)\], i though may caused by low disk space, so i chekced node stat: http… --- ## [Installing Mapper Size Plugin on Elastic Cloud](https://discuss.elastic.co/t/installing-mapper-size-plugin-on-elastic-cloud/308872)
**Author:** [@pablo\_diez](https://discuss.elastic.co/u/pablo_diez)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 2:12pm UTC](https://discuss.elastic.co/t/installing-mapper-size-plugin-on-elastic-cloud/308872 "2022-07-05T14:12:27Z")
Good morning, I am trying to install the Mapper Size Plugin on ElasticSearch Cloud, but I dont know where or how to begin since the server is managed by Elastic directly. Is there any way to install it through Kibana o… --- ## [How to iterate through multiple records and create notification for each record?](https://discuss.elastic.co/t/how-to-iterate-through-multiple-records-and-create-notification-for-each-record/308887)
**Author:** [@chsasm](https://discuss.elastic.co/u/chsasm)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 9:44am UTC](https://discuss.elastic.co/t/how-to-iterate-through-multiple-records-and-create-notification-for-each-record/308887 "2022-07-05T09:44:12Z")
Hi All, I am trying to implement a Watcher alert for error scenarios. I have a use-case where the 1st search query will retrieve all the failure records from Kibana index. I would like to iterate through each retrieve… --- ## [Count API with track\_total\_hits](https://discuss.elastic.co/t/count-api-with-track-total-hits/308912)
**Author:** [@James\_Conkling](https://discuss.elastic.co/u/James_Conkling)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 12:54pm UTC](https://discuss.elastic.co/t/count-api-with-track-total-hits/308912 "2022-07-05T12:54:07Z")
While the search API has the track\_total\_hits optimization to approximate search hit count, I noticed the count API does not. If I am only looking for the approximate hit count, is it more performant to use the search A… --- ## [Configuration ingest from file](https://discuss.elastic.co/t/configuration-ingest-from-file/308910)
**Author:** [@mololkin.kirill.mol](https://discuss.elastic.co/u/mololkin.kirill.mol)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 12:53pm UTC](https://discuss.elastic.co/t/configuration-ingest-from-file/308910 "2022-07-05T12:53:06Z")
Hello is there an opportunity for configuration ingest pipelines with elasticsearch.yaml? --- ## [Get list of current hot indexes in elasticSearch](https://discuss.elastic.co/t/get-list-of-current-hot-indexes-in-elasticsearch/308870)
**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 12:42pm UTC](https://discuss.elastic.co/t/get-list-of-current-hot-indexes-in-elasticsearch/308870 "2022-07-05T12:42:41Z")
Hi, Currently I am getting list of current hot indexes through Low Level Client: Request request = new Request("GET", "/\_cat/aliases/" + ALIAS\_NAME+ "?format=json&s=is\_write\_index:desc,"); Is there a way to get list… --- ## [Can we use wildcard in the field\_name or Can we apply condition in fields block inside query\_string](https://discuss.elastic.co/t/can-we-use-wildcard-in-the-field-name-or-can-we-apply-condition-in-fields-block-inside-query-string/308904)
**Author:** [@deepak\_prem](https://discuss.elastic.co/u/deepak_prem)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 11:56am UTC](https://discuss.elastic.co/t/can-we-use-wildcard-in-the-field-name-or-can-we-apply-condition-in-fields-block-inside-query-string/308904 "2022-07-05T11:56:30Z")
Hi friends, I have the following questions related to the Elasticsearch:- I want to know Can we use the wildcard in the fields name in term block in the query, if not is there any alternate way to achieve this.like In … --- ## [Help me to parse a string to fields (grok)](https://discuss.elastic.co/t/help-me-to-parse-a-string-to-fields-grok/308903)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 11:53am UTC](https://discuss.elastic.co/t/help-me-to-parse-a-string-to-fields-grok/308903 "2022-07-05T11:53:05Z")
Hi folks, I have following key: key = "value1/value2/value3" or key = "value1/value2/value3/value4" I want to split this to following structure: key1: value1 key2: value2 key3: value3 This would be easy by using a… --- ## [Authentication of my Python Script Elasticsearch 8.3](https://discuss.elastic.co/t/authentication-of-my-python-script-elasticsearch-8-3/308901)
**Author:** [@V\_o](https://discuss.elastic.co/u/V_o)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 11:40am UTC](https://discuss.elastic.co/t/authentication-of-my-python-script-elasticsearch-8-3/308901 "2022-07-05T11:40:46Z")
Hello, since Elasticsearch version 8... my Python scrips, which are sending Data to Elasticsearch are no longer working. I tried solving this Problem by using this code. client = Elasticsearch( "https://localhost:… --- ## [Http Request from painless script not working](https://discuss.elastic.co/t/http-request-from-painless-script-not-working/308876)
**Author:** [@mukesh\_154](https://discuss.elastic.co/u/mukesh_154)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 9:05am UTC](https://discuss.elastic.co/t/http-request-from-painless-script-not-working/308876 "2022-07-05T09:05:20Z")
I want to create a runtime field based on some conditions. And i have a query which is working fine on kibana console. I implemented the same query on java code but is not working. There is a method in SearchRequest run… --- ## [Very uncommon things happening with 7.17.0 ELK Cluster](https://discuss.elastic.co/t/very-uncommon-things-happening-with-7-17-0-elk-cluster/308664)
**Author:** [@Ravi\_S1](https://discuss.elastic.co/u/Ravi_S1)\ **Replies:** 6\ **Last updated:** [July 5, 2022, 11:05am UTC](https://discuss.elastic.co/t/very-uncommon-things-happening-with-7-17-0-elk-cluster/308664 "2022-07-05T11:05:07Z")
I have been observing that ELK 7.17.0 version is playing with my time & efforts. As i can observe, after changes happen in heap memory of ELK pods, have been observed that all thread pools are automatically consuming hi… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=410) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=412)