# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=412 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 413 --- ## [HTTP request from Painless script?](https://discuss.elastic.co/t/http-request-from-painless-script/308884)
**Author:** [@kennyprisjakt](https://discuss.elastic.co/u/kennyprisjakt)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 10:19am UTC](https://discuss.elastic.co/t/http-request-from-painless-script/308884 "2022-07-05T10:19:59Z")
Hey, I'm currently looking for a way to do HTTP requests from a Painless script. Is that possible? Because i have not seen any examples of it when searching for it. Use case: Basically what i'm trying to do is runtim… --- ## [How to translate my sql query into es-sql?](https://discuss.elastic.co/t/how-to-translate-my-sql-query-into-es-sql/308890)
**Author:** [@josephLiu](https://discuss.elastic.co/u/josephLiu)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 9:57am UTC](https://discuss.elastic.co/t/how-to-translate-my-sql-query-into-es-sql/308890 "2022-07-05T09:57:35Z")
I want to query the data I need In SQL Server I can query like this select UniqueAuditRecord from dbo.kibanaLog group by UniqueAuditRecord having count(\*) =1 and MAX(timestamp) \<(select max(timestamp) from dbo.kibana… --- ## [Partial update in a rolled-over index](https://discuss.elastic.co/t/partial-update-in-a-rolled-over-index/308885)
**Author:** [@Robina\_Dhingra1](https://discuss.elastic.co/u/Robina_Dhingra1)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 9:39am UTC](https://discuss.elastic.co/t/partial-update-in-a-rolled-over-index/308885 "2022-07-05T09:39:09Z")
We're using datetime based index with an alias that is rolled over to a new index daily. We managed to achieve this by creating an ingest pipeline that figures out the physical index behind an alias and updates(read repl… --- ## [Elasticsearch Apply filters with results from aggregations](https://discuss.elastic.co/t/elasticsearch-apply-filters-with-results-from-aggregations/308744)
**Author:** [@Eddie\_Vuong](https://discuss.elastic.co/u/Eddie_Vuong)\ **Replies:** 7\ **Last updated:** [July 5, 2022, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-apply-filters-with-results-from-aggregations/308744 "2022-07-05T08:53:37Z")
Is there anyway I can using the results obtained from aggregations to filter out the final hits in the query? I want to obtain a list of users who have more than 2 devices and the list of their devices in the database. … --- ## [Sort ctx.payload using Transformed field](https://discuss.elastic.co/t/sort-ctx-payload-using-transformed-field/308869)
**Author:** [@M.Naim](https://discuss.elastic.co/u/M.Naim)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 7:59am UTC](https://discuss.elastic.co/t/sort-ctx-payload-using-transformed-field/308869 "2022-07-05T07:59:03Z")
I want to sort the email content of watcher based on transformed field,consider "HoursDelayed": from example below Any Idea ? "send\_email": { "transform": { "script": { "source": """ … --- ## [Filebeat include filter](https://discuss.elastic.co/t/filebeat-include-filter/308860)
**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 6:58am UTC](https://discuss.elastic.co/t/filebeat-include-filter/308860 "2022-07-05T06:58:11Z")
Hi i need to send the logs of particular lines to logstash by using filebeat .i have tried by using include filter is not working .can u provide me the solution Eg: 2022-06-30 00:00:07 10.32.13.12 POST /maruvayaparpa… --- ## [Circuit break exception](https://discuss.elastic.co/t/circuit-break-exception/308774)
**Author:** [@Rajesh\_Sahu](https://discuss.elastic.co/u/Rajesh_Sahu)\ **Replies:** 5\ **Last updated:** [July 5, 2022, 6:13am UTC](https://discuss.elastic.co/t/circuit-break-exception/308774 "2022-07-05T06:13:17Z")
Hi all, I have been using Elasticsearch with multiple node setup from last 2 years, but currently all of sudden , got below exception of circuit\_breaking\_exception . \< {"error":{"root\_cause":\[{"type":"circuit\_breaking… --- ## [Huge Difference in the throughput for index](https://discuss.elastic.co/t/huge-difference-in-the-throughput-for-index/308320)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 5:39am UTC](https://discuss.elastic.co/t/huge-difference-in-the-throughput-for-index/308320 "2022-07-05T05:39:15Z")
I am running es-cluster on kubernetes on aws 14i\_16xlarge instance. These below pods are running on different aws instances. track :- nyc\_taxis 1 master 1 data nodes 1 esrally client i am trying to calculate index… --- ## [Unique id for multiple indices having same alias](https://discuss.elastic.co/t/unique-id-for-multiple-indices-having-same-alias/308854)
**Author:** [@suj0](https://discuss.elastic.co/u/suj0)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 5:03am UTC](https://discuss.elastic.co/t/unique-id-for-multiple-indices-having-same-alias/308854 "2022-07-05T05:03:00Z")
Is it possible to set unique id for multiple indices having same alias? for example I have 2 indices A001 and A002 under alias A . A001 have data with id as "1" and A002 dont have data with id "1" and my write index is… --- ## [Statistics of requests' ip](https://discuss.elastic.co/t/statistics-of-requests-ip/306576)
**Author:** [@manropinxu](https://discuss.elastic.co/u/manropinxu)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 2:17am UTC](https://discuss.elastic.co/t/statistics-of-requests-ip/306576 "2022-07-05T02:17:44Z")
Hi all, I would like to get metrics about how many requests does Elasticsearch receive grouped by ip of the request sender. My objective is to find which of my services are querying the most. I checked the stats endpo… --- ## [Shrink and split APIs](https://discuss.elastic.co/t/shrink-and-split-apis/308752)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 4\ **Last updated:** [July 4, 2022, 9:42pm UTC](https://discuss.elastic.co/t/shrink-and-split-apis/308752 "2022-07-04T21:42:57Z")
Hi, I tried the shrink API on a 30GB index and shrinked from 15 shards to 5 shards. What I am not sure about is that this seemed to have happened instantaneously. I checked the \_cat/recovery endpoint and saw that ther… --- ## [Editing a managed policy can break Kibana](https://discuss.elastic.co/t/editing-a-managed-policy-can-break-kibana/308836)
**Author:** [@kmp](https://discuss.elastic.co/u/kmp)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 9:12pm UTC](https://discuss.elastic.co/t/editing-a-managed-policy-can-break-kibana/308836 "2022-07-04T21:12:41Z")
Just upgraded a Cloud deployment to 8.3.1 ... I'm still working on tuning usage, to try to figure out how to ensure that we're using resources efficiently. I've been looking at storage usage, and using lifecycle polici… --- ## [Curl -X GET http://localhost:9200 returns Access Denied](https://discuss.elastic.co/t/curl-x-get-http-localhost-9200-returns-access-denied/308687)
**Author:** [@Alaa\_Omar](https://discuss.elastic.co/u/Alaa_Omar)\ **Replies:** 2\ **Last updated:** [July 4, 2022, 6:35pm UTC](https://discuss.elastic.co/t/curl-x-get-http-localhost-9200-returns-access-denied/308687 "2022-07-04T18:35:03Z")
am trying to install and setup Elasticsearch 8 on Centos 7 server, the service started but when I do curl -x GET HTTP://localhost:9200 , or curl -x GET HTTP://127.0.0.1:9200 or curl -x GET HTTP://(local IP of the host):9… --- ## [Get all spaces dev tools](https://discuss.elastic.co/t/get-all-spaces-dev-tools/308827)
**Author:** [@Gabriel\_Vasconcelos](https://discuss.elastic.co/u/Gabriel_Vasconcelos)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 4:18pm UTC](https://discuss.elastic.co/t/get-all-spaces-dev-tools/308827 "2022-07-04T16:18:12Z")
Hello everyone, I would like to know how to return all my spaces through dev tools. The documentation says it would be GET api/spaces/apace, but when I use this path, it only returns the spaces I created with index api. … --- ## [Enrichment policy based on multiple fields / complex query?](https://discuss.elastic.co/t/enrichment-policy-based-on-multiple-fields-complex-query/308826)
**Author:** [@akb](https://discuss.elastic.co/u/akb)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 4:09pm UTC](https://discuss.elastic.co/t/enrichment-policy-based-on-multiple-fields-complex-query/308826 "2022-07-04T16:09:58Z")
I am investigating a way to normalize / prettify geo data during ingestion. I realize there is a way to normalize by lat / lon, however we don't always have these properties availble. Master geo data: { "country": "… --- ## [AGgregation query not working related to child document](https://discuss.elastic.co/t/aggregation-query-not-working-related-to-child-document/308822)
**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 2:38pm UTC](https://discuss.elastic.co/t/aggregation-query-not-working-related-to-child-document/308822 "2022-07-04T14:38:24Z")
"aggregations": { "terms\_parent\_id": { "terms": { "field": "user\_id", "size": 10000, "min\_doc\_count": 1, "shard\_min\_doc\_count": 0, "show\_term\_doc\_count\_error": false, … --- ## [Average search latency increase 900% from 7.4 to 7.10](https://discuss.elastic.co/t/average-search-latency-increase-900-from-7-4-to-7-10/308760)
**Author:** [@fgarsombke](https://discuss.elastic.co/u/fgarsombke)\ **Replies:** 2\ **Last updated:** [July 4, 2022, 2:07pm UTC](https://discuss.elastic.co/t/average-search-latency-increase-900-from-7-4-to-7-10/308760 "2022-07-04T14:07:47Z")
We recently did an upgrade from 7.4 to 7.10 and have seen over a 900% increase in search latency. Before the upgrade our average search latency was about 0.5ms and after the upgrade our average search latency is now at … --- ## [How to set TimeStamp from java?](https://discuss.elastic.co/t/how-to-set-timestamp-from-java/308812)
**Author:** [@Enomine](https://discuss.elastic.co/u/Enomine)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 12:01pm UTC](https://discuss.elastic.co/t/how-to-set-timestamp-from-java/308812 "2022-07-04T12:01:37Z")
Hi, i am using the elasticsearch-java-Client: \ \co.elastic.clients\ \elasticsearch-java\ \8.2.0\ \ and connecte… --- ## [Migrating java application to Elasticsearch 8.x from ES 7.17.5](https://discuss.elastic.co/t/migrating-java-application-to-elasticsearch-8-x-from-es-7-17-5/308809)
**Author:** [@Swati\_Jain1](https://discuss.elastic.co/u/Swati_Jain1)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 10:46am UTC](https://discuss.elastic.co/t/migrating-java-application-to-elasticsearch-8-x-from-es-7-17-5/308809 "2022-07-04T10:46:51Z")
We are using Elasticsearch 7.17.5 which is used by a Java 8 application. We are planning to upgrade to Elasticsearch 8.x. Since High-level Rest Client is now deprecated I am unable to resolve dependencies in order to us… --- ## [Unable to initialize central management for Elastic Agents](https://discuss.elastic.co/t/unable-to-initialize-central-management-for-elastic-agents/308311)
**Author:** [@xynobob](https://discuss.elastic.co/u/xynobob)\ **Replies:** 8\ **Last updated:** [July 4, 2022, 10:36am UTC](https://discuss.elastic.co/t/unable-to-initialize-central-management-for-elastic-agents/308311 "2022-07-04T10:36:46Z")
I am new to Elasticsearch and was trying to use Fleet and Elastic Agent. It was fine initially as everything was working perfectly fine; managed to pipe logs to ES, etc, but now when I try to navigate to the Fleet page, … --- ## [Unable to connect to Elastic-Search Server](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-server/308804)
**Author:** [@Shobhit\_Jain1](https://discuss.elastic.co/u/Shobhit_Jain1)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 9:52am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elastic-search-server/308804 "2022-07-04T09:52:38Z")
A few months back, I deployed the Elastic-Search(version - 8.0.1) on Kubernetes as a service as External load balancer using this guide. Now, I am unable to perform any read or write operation on ES. I checked the logs,… --- ## [Elasticsearch, Multiple Filebeat, Logstash](https://discuss.elastic.co/t/elasticsearch-multiple-filebeat-logstash/308791)
**Author:** [@balasani\_sri](https://discuss.elastic.co/u/balasani_sri)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 8:24am UTC](https://discuss.elastic.co/t/elasticsearch-multiple-filebeat-logstash/308791 "2022-07-04T08:24:32Z")
Hello does anyone knows if is it possible to have multiple beats pointing to the same input port and then having single index output. Basically I need to identify which beat arrives and then how to find if any beat went … --- ## [Run aggregation on collapsed result](https://discuss.elastic.co/t/run-aggregation-on-collapsed-result/308171)
**Author:** [@Nowrin\_Hossain](https://discuss.elastic.co/u/Nowrin_Hossain)\ **Replies:** 8\ **Last updated:** [July 4, 2022, 8:08am UTC](https://discuss.elastic.co/t/run-aggregation-on-collapsed-result/308171 "2022-07-04T08:08:42Z")
Hello, I have an issue that, first I need to collapse data by a field after sorting by another field then I need to perform some complex aggregation on that output. How to do that ? can anyone help ? --- ## [Elasticsearch recovery tools](https://discuss.elastic.co/t/elasticsearch-recovery-tools/308739)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 2\ **Last updated:** [July 4, 2022, 8:05am UTC](https://discuss.elastic.co/t/elasticsearch-recovery-tools/308739 "2022-07-04T08:05:16Z")
One issue that seem to be problematic (and reoccurring) is that there isn't much information in the error messages when things like "NODE\_LEFT" / "no\_valid\_shard\_copy" populate error messages when performing things like … --- ## [ES rolling upgrade from 6.3.2 to 6.8.22, ES plug-in version should be upgraded to 6.8.22?](https://discuss.elastic.co/t/es-rolling-upgrade-from-6-3-2-to-6-8-22-es-plug-in-version-should-be-upgraded-to-6-8-22/308325)
**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\ **Replies:** 7\ **Last updated:** [July 4, 2022, 7:51am UTC](https://discuss.elastic.co/t/es-rolling-upgrade-from-6-3-2-to-6-8-22-es-plug-in-version-should-be-upgraded-to-6-8-22/308325 "2022-07-04T07:51:11Z")
In order to fix the log4j2 vulnerability, we plan to upgrade the ES version from 6.3.2 to 6.8.22, and 7.x to 7.16.2. When reading the rolling upgrade document, the rolling upgrade document for 7.16.2 mentioned that the p… --- ## [Elasticsearch NEST FunctionScoreQuery](https://discuss.elastic.co/t/elasticsearch-nest-functionscorequery/308602)
**Author:** [@Hristo\_Hristov](https://discuss.elastic.co/u/Hristo_Hristov)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 7:02am UTC](https://discuss.elastic.co/t/elasticsearch-nest-functionscorequery/308602 "2022-07-04T07:02:49Z")
Hi, I am using Elasticsearch NEST (7.17.4) with ElasticSearch 8.2.3 to build search request. After added FunctionScoreQuery with Functions param i received exception "Can not write function score json for FunctionScore… --- ## [Java Client Custom tokenizer Cannot map type](https://discuss.elastic.co/t/java-client-custom-tokenizer-cannot-map-type/308770)
**Author:** [@Huyueeer](https://discuss.elastic.co/u/Huyueeer)\ **Replies:** 0\ **Last updated:** [July 4, 2022, 3:44am UTC](https://discuss.elastic.co/t/java-client-custom-tokenizer-cannot-map-type/308770 "2022-07-04T03:44:59Z")
I looked through the previous problem records, and my question should be: does the latest javaapi support custom tokenizer Excuse me, I have some questions about the Java client. I need to register setting in elastic th… --- ## [ERROR WHILE RELOADING THE LOCALHOST:9200 and says Unsecured and the CONNECTION GETS CLOSED AUTOMATICALLY](https://discuss.elastic.co/t/error-while-reloading-the-localhost-9200-and-says-unsecured-and-the-connection-gets-closed-automatically/308765)
**Author:** [@Tarun\_Kumar\_Yerra](https://discuss.elastic.co/u/Tarun_Kumar_Yerra)\ **Replies:** 7\ **Last updated:** [July 4, 2022, 1:19am UTC](https://discuss.elastic.co/t/error-while-reloading-the-localhost-9200-and-says-unsecured-and-the-connection-gets-closed-automatically/308765 "2022-07-04T01:19:11Z")
Hello Team, I have installed the kibana on windows by extracting the zip files. Everything seems to be running well but when I try to connect through the python script it says the error with SSL CERTIFICATE ERRO… --- ## [Snapshot and Restore Considerations](https://discuss.elastic.co/t/snapshot-and-restore-considerations/308741)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 2\ **Last updated:** [July 4, 2022, 3:25am UTC](https://discuss.elastic.co/t/snapshot-and-restore-considerations/308741 "2022-07-04T03:25:16Z")
Hi Everyone, just want to hear from you guys these scenarios if Elasticsearch Snapshot and Restore can consider the situation. Happy to hear your answer :slight\_smile: 1.) Is there an email notifications when snapshot i… --- ## [Searchable Snapshot vs Restore Snapshot](https://discuss.elastic.co/t/searchable-snapshot-vs-restore-snapshot/308726)
**Author:** [@tomiko](https://discuss.elastic.co/u/tomiko)\ **Replies:** 1\ **Last updated:** [July 3, 2022, 11:24pm UTC](https://discuss.elastic.co/t/searchable-snapshot-vs-restore-snapshot/308726 "2022-07-03T23:24:11Z")
As written in the docs of searchable snapshot : "Mounting and relocating the shards of searchable snapshot indices involves copying the shard contents from the snapshot repository". So how it's different from restore th… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=411) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=413)