# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=413 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 414 --- ## [Index From Excel (Workplace?)](https://discuss.elastic.co/t/index-from-excel-workplace/308618)
**Author:** [@Cal](https://discuss.elastic.co/u/Cal)\ **Replies:** 3\ **Last updated:** [July 3, 2022, 11:18pm UTC](https://discuss.elastic.co/t/index-from-excel-workplace/308618 "2022-07-03T23:18:32Z")
My team and I have an Excel database that constantly has new entries we need to put in. We want to avoid removing and reuploading the CSV file (replacing the index) each day we make an update. We are wondering if there… --- ## [Removal of mapping types | Elasticsearch Guide \[7.17\] | Elastic](https://discuss.elastic.co/t/removal-of-mapping-types-elasticsearch-guide-7-17-elastic/308657)
**Author:** [@Max\_Pinto](https://discuss.elastic.co/u/Max_Pinto)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 11:50am UTC](https://discuss.elastic.co/t/removal-of-mapping-types-elasticsearch-guide-7-17-elastic/308657 "2022-07-01T11:50:02Z")
POST \_reindex { "source": { "index": "twitter" }, "dest": { "index": "new\_twitter" }, "script": { "source": """ ctx.\_source.type = ctx.\_type; ctx.\_id = ctx.\_type + '-' + ctx.\_id; … --- ## [CVE's in Elasticsearch](https://discuss.elastic.co/t/cves-in-elasticsearch/308669)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 1\ **Last updated:** [July 3, 2022, 11:12pm UTC](https://discuss.elastic.co/t/cves-in-elasticsearch/308669 "2022-07-03T23:12:04Z")
Are there any prebuilt data pipelines / APIs for getting CVE's into elasticsearch? I would like to have a watcher alert me when CVE's of a certain priority are released, and enrich the alert with data from my cluster. Is… --- ## [Complete elasticsearch yml file is not downloaded](https://discuss.elastic.co/t/complete-elasticsearch-yml-file-is-not-downloaded/308706)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 1\ **Last updated:** [July 3, 2022, 11:08pm UTC](https://discuss.elastic.co/t/complete-elasticsearch-yml-file-is-not-downloaded/308706 "2022-07-03T23:08:47Z")
Hi , I have installed Elasticsearch (8.3) with rpm repo and it installed properly. While setting up the authentication I have faced some challenges and i have uninstalled Elasticsearch. command used to remove elasticsea… --- ## [Cross cluster replication](https://discuss.elastic.co/t/cross-cluster-replication/308735)
**Author:** [@Nicole-Ann\_Menezes](https://discuss.elastic.co/u/Nicole-Ann_Menezes)\ **Replies:** 6\ **Last updated:** [July 3, 2022, 4:23pm UTC](https://discuss.elastic.co/t/cross-cluster-replication/308735 "2022-07-03T16:23:36Z")
Exploring CCR. Flow - fluentd----\>Load balancer--'--\>elasticsearch ccr\<---kibana. Cluster A and Cluster B are set up with CCR. As per the documentation-An index has many shards, the follower replicas are in another cl… --- ## [Elasticsearch exception \[type=search\_phase\_execution\_exception, reason=all shards failed\]](https://discuss.elastic.co/t/elasticsearch-exception-type-search-phase-execution-exception-reason-all-shards-failed/308737)
**Author:** [@Pamal\_Jayawickrama](https://discuss.elastic.co/u/Pamal_Jayawickrama)\ **Replies:** 1\ **Last updated:** [July 3, 2022, 2:36pm UTC](https://discuss.elastic.co/t/elasticsearch-exception-type-search-phase-execution-exception-reason-all-shards-failed/308737 "2022-07-03T14:36:16Z")
when I searching this query using simpleQueryStringQuery, GET books/\_search { "query":{ "bool":{ "must":\[ {"bool":{ "should":\[{ "wildcard":{"vault-bpa-ui-url":{"wildcard":"http\*… --- ## [How can I use aggregation value in trigger condition](https://discuss.elastic.co/t/how-can-i-use-aggregation-value-in-trigger-condition/308743)
**Author:** [@puks\_apple](https://discuss.elastic.co/u/puks_apple)\ **Replies:** 0\ **Last updated:** [July 3, 2022, 10:43am UTC](https://discuss.elastic.co/t/how-can-i-use-aggregation-value-in-trigger-condition/308743 "2022-07-03T10:43:09Z")
{ "\_shards": { "total": 1, "failed": 0, "successful": 1, "skipped": 0 }, "hits": { "hits": \[\], "total": { "value": 7, "relation": "eq… --- ## [Cant create enrollment token with own certificates](https://discuss.elastic.co/t/cant-create-enrollment-token-with-own-certificates/308629)
**Author:** [@d\_raulf](https://discuss.elastic.co/u/d_raulf)\ **Replies:** 1\ **Last updated:** [July 2, 2022, 9:10pm UTC](https://discuss.elastic.co/t/cant-create-enrollment-token-with-own-certificates/308629 "2022-07-02T21:10:27Z")
Hey, I'm trying to run Elasticsearch with our own CA. Key and Cert are provide by our PKI-Team. Changes in elasticsearch.yml: network.host: 0.0.0.0 xpack.security.http.ssl: enabled: true keystore.path: certs/\ **Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 2\ **Last updated:** [July 2, 2022, 9:06pm UTC](https://discuss.elastic.co/t/default-security-parameters-are-not-coming-in-elasticsearch-default-super-user-password-is-not-set/308709 "2022-07-02T21:06:38Z") Hi , I have installed Elasticsearch 8.3 from RPM repository and it installed properly. started Elasticsearch on linxe machine. but i could see some issue in elasticsearch logs. \[2022-07-02T10:48:00,891\]\[INFO \]\[o.e.x.s.I… --- ## [Whitespace problem in multimatch](https://discuss.elastic.co/t/whitespace-problem-in-multimatch/308710)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 0\ **Last updated:** [July 2, 2022, 7:20am UTC](https://discuss.elastic.co/t/whitespace-problem-in-multimatch/308710 "2022-07-02T07:20:24Z")
Am using elasticsearch dsl with python , am facing a problem where whitespace comes in. for example if I search "dairymilk" without whitespace am not getting the results but am geting results for "dairy milk" with whites… --- ## [Data Node like working Alone](https://discuss.elastic.co/t/data-node-like-working-alone/308697)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 2\ **Last updated:** [July 2, 2022, 6:39am UTC](https://discuss.elastic.co/t/data-node-like-working-alone/308697 "2022-07-02T06:39:21Z")
Hi Everyone, I found something odd in our cluster like this picture below We have quite a lot of data node here actually but i think something's wrong with our cluster. of all existing data nodes, only data-1 has t… --- ## [New Elasticsearch Java client API](https://discuss.elastic.co/t/new-elasticsearch-java-client-api/308695)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 2\ **Last updated:** [July 2, 2022, 5:41am UTC](https://discuss.elastic.co/t/new-elasticsearch-java-client-api/308695 "2022-07-02T05:41:29Z")
I am trying to switch from high level rest client to this new client (Java). I tried a simple matchAll query as follows and I got 2 questions need your help: SearchResponse\ response = esClient.search(s … --- ## [Error: Request error, retrying - connect EMFILE](https://discuss.elastic.co/t/error-request-error-retrying-connect-emfile/308681)
**Author:** [@mcolla](https://discuss.elastic.co/u/mcolla)\ **Replies:** 6\ **Last updated:** [July 1, 2022, 9:54pm UTC](https://discuss.elastic.co/t/error-request-error-retrying-connect-emfile/308681 "2022-07-01T21:54:03Z")
I have 240k requests to insert on Elasticsearch, but i get the error: How can I fix this? --- ## [Unassigned Shards with error 'Failed to create index' - NullPointerException](https://discuss.elastic.co/t/unassigned-shards-with-error-failed-to-create-index-nullpointerexception/308682)
**Author:** [@LisaJ](https://discuss.elastic.co/u/LisaJ)\ **Replies:** 3\ **Last updated:** [July 1, 2022, 6:32pm UTC](https://discuss.elastic.co/t/unassigned-shards-with-error-failed-to-create-index-nullpointerexception/308682 "2022-07-01T18:32:44Z")
I encountered a problem bringing a cluster back from a full cluster restart. The cluster has 3 master, 3 coordinating, 2 hot, 2 warm, and 2 cold nodes. All nodes appear to have rejoined the cluster successfully: ip … --- ## [Search across multiple fields with a query string query](https://discuss.elastic.co/t/search-across-multiple-fields-with-a-query-string-query/308678)
**Author:** [@jheebscs](https://discuss.elastic.co/u/jheebscs)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 4:38pm UTC](https://discuss.elastic.co/t/search-across-multiple-fields-with-a-query-string-query/308678 "2022-07-01T16:38:13Z")
Hi I have a query string query configured to search across multiple fields with type "most\_fields". Unfortunately when the query string consists of more than one word it only matches if all words occur in the same field… --- ## [How to add more nodes to an existing elastic search](https://discuss.elastic.co/t/how-to-add-more-nodes-to-an-existing-elastic-search/306818)
**Author:** [@eliumoraes](https://discuss.elastic.co/u/eliumoraes)\ **Replies:** 10\ **Last updated:** [July 1, 2022, 4:09pm UTC](https://discuss.elastic.co/t/how-to-add-more-nodes-to-an-existing-elastic-search/306818 "2022-07-01T16:09:03Z")
Hello guys, I'm new to Elasticsearch and started to work on a company that assigned me a taqsk to add more nodes in an existing environment. We are using the integration between Elastic and Azure in our environment. W… --- ## [Rally esrally.mechanic.mechanic.NodeMechanicActor transport run exception](https://discuss.elastic.co/t/rally-esrally-mechanic-mechanic-nodemechanicactor-transport-run-exception/308489)
**Author:** [@ramzis](https://discuss.elastic.co/u/ramzis)\ **Replies:** 8\ **Last updated:** [July 1, 2022, 3:34pm UTC](https://discuss.elastic.co/t/rally-esrally-mechanic-mechanic-nodemechanicactor-transport-run-exception/308489 "2022-07-01T15:34:45Z")
Hi, trying to run esrally race --distribution-version=8.3.0 --kill-running-processes --track=geonames hangs on ~/.rally/logs/rally.log: ActorAddr-(T|:50500)/PID:8353 esrally.actor INFO Starting node(s) \[0\] on \[127.0.… --- ## [Timezone related issue](https://discuss.elastic.co/t/timezone-related-issue/308596)
**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\ **Replies:** 5\ **Last updated:** [July 1, 2022, 2:19pm UTC](https://discuss.elastic.co/t/timezone-related-issue/308596 "2022-07-01T14:19:54Z")
Hello Again, I am getting as actual data for the attribute(FILE\_CREATION\_DATE) as "2022-06-30 16:34:27" but when I see in the kibana table format; I can see the time has been added exactly two hours. Here is the data i… --- ## [Is it possible to parse ISO 8583 into Elasticsearch using logstash](https://discuss.elastic.co/t/is-it-possible-to-parse-iso-8583-into-elasticsearch-using-logstash/308633)
**Author:** [@Zerra\_Triani](https://discuss.elastic.co/u/Zerra_Triani)\ **Replies:** 1\ **Last updated:** [July 1, 2022, 1:53pm UTC](https://discuss.elastic.co/t/is-it-possible-to-parse-iso-8583-into-elasticsearch-using-logstash/308633 "2022-07-01T13:53:34Z")
I want to monitor a log containing ISO 5853, I have succeeded in parsing the ISO log into single line, then how do I parse it according to ISO 5853 standards? Is there a plugin program or something else that can fit it i… --- ## [Elasticsearch cluster not coming up](https://discuss.elastic.co/t/elasticsearch-cluster-not-coming-up/307439)
**Author:** [@sahanc](https://discuss.elastic.co/u/sahanc)\ **Replies:** 7\ **Last updated:** [July 1, 2022, 10:29am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-not-coming-up/307439 "2022-07-01T10:29:28Z")
Readiness probe failed: Waiting for Elasticsearch cluster to become ready. Cluster is not ready. I'm using a microk8s HA cluster. I can provide details. --- ## [Logstash certificate error issue](https://discuss.elastic.co/t/logstash-certificate-error-issue/308641)
**Author:** [@nairobi](https://discuss.elastic.co/u/nairobi)\ **Replies:** 0\ **Last updated:** [July 1, 2022, 8:58am UTC](https://discuss.elastic.co/t/logstash-certificate-error-issue/308641 "2022-07-01T08:58:47Z")
hi Are therer any relation between cert certificate error and logstash performance? When i restarted logstash it is solved but i can't find any reason. thank you --- ## [2 Nodes crashed, how to get last Node up an running](https://discuss.elastic.co/t/2-nodes-crashed-how-to-get-last-node-up-an-running/308605)
**Author:** [@azeiner](https://discuss.elastic.co/u/azeiner)\ **Replies:** 4\ **Last updated:** [July 1, 2022, 7:26am UTC](https://discuss.elastic.co/t/2-nodes-crashed-how-to-get-last-node-up-an-running/308605 "2022-07-01T07:26:58Z")
I'm running Elastic 7.13.3 in a 3 Node Cluster Environment on Windows at a Customer where within 3-4 hours two SSD's failed to operate and from 3 Nodes only one Node is still up an running although i can not access this … --- ## [Elasticsearch not generating password when started for the first time](https://discuss.elastic.co/t/elasticsearch-not-generating-password-when-started-for-the-first-time/306403)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 3\ **Last updated:** [July 1, 2022, 6:33am UTC](https://discuss.elastic.co/t/elasticsearch-not-generating-password-when-started-for-the-first-time/306403 "2022-07-01T06:33:10Z")
Hi, I have installed a fresh instance of Elasticsearch 8.1.0. Configurations I added: cluster.name: elasticsearch-8\_1\_0\_windows\_local\_2 network.host: localhost http.port: 29200 I open cmd on windows machine as an adm… --- ## [Drop ingest pipeline for one host](https://discuss.elastic.co/t/drop-ingest-pipeline-for-one-host/308555)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 2\ **Last updated:** [July 1, 2022, 2:21am UTC](https://discuss.elastic.co/t/drop-ingest-pipeline-for-one-host/308555 "2022-07-01T02:21:41Z")
I am running 7.17 ELS and trying to drop all docs which come from one specific host "drop": { "if" : ("agent.name" == 'ABC') }, I have added this as drop processor in ingest pipeline however it keep… --- ## [Unable to start the elasticsearch.service](https://discuss.elastic.co/t/unable-to-start-the-elasticsearch-service/308065)
**Author:** [@rrrrrrrrrrr](https://discuss.elastic.co/u/rrrrrrrrrrr)\ **Replies:** 5\ **Last updated:** [July 1, 2022, 1:25am UTC](https://discuss.elastic.co/t/unable-to-start-the-elasticsearch-service/308065 "2022-07-01T01:25:25Z")
Hello, I'm trying to start my Elasticsearch servcie on RHEL Environment but I'm unable to start it after N days of not monitoring it. With this, I'm unable to access the Kibana dashboard. \[2022-06-24T09:34:05,594\]\[ERRO… --- ## [Query performance degradation between 7.9.2 & 7.17.2](https://discuss.elastic.co/t/query-performance-degradation-between-7-9-2-7-17-2/307889)
**Author:** [@BobH](https://discuss.elastic.co/u/BobH)\ **Replies:** 6\ **Last updated:** [June 30, 2022, 8:22pm UTC](https://discuss.elastic.co/t/query-performance-degradation-between-7-9-2-7-17-2/307889 "2022-06-30T20:22:56Z")
I recently upgraded one of my Elasticsearch clusters from 7.9.2 to 7.17.2. Immediately, I noticed that performance of my application (a Java app using the REST API) was degraded. So, I've been doing some side-by-side tes… --- ## [Is there a API which can get all beat.hostname in an index?](https://discuss.elastic.co/t/is-there-a-api-which-can-get-all-beat-hostname-in-an-index/308528)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 9\ **Last updated:** [June 30, 2022, 5:13pm UTC](https://discuss.elastic.co/t/is-there-a-api-which-can-get-all-beat-hostname-in-an-index/308528 "2022-06-30T17:13:56Z")
Or some other way... --- ## [Like asciifolding for Mathematical Alphanumeric Symbols](https://discuss.elastic.co/t/like-asciifolding-for-mathematical-alphanumeric-symbols/308522)
**Author:** [@Miguel\_Cabero](https://discuss.elastic.co/u/Miguel_Cabero)\ **Replies:** 1\ **Last updated:** [June 30, 2022, 4:52pm UTC](https://discuss.elastic.co/t/like-asciifolding-for-mathematical-alphanumeric-symbols/308522 "2022-06-30T16:52:25Z")
Hi, How to configure an analyzer so that: 𝐕𝐢𝐧𝐧𝐢 is indexed as Vinni Something like asciifolding for Mathematical Alphanumeric Symbols. Any idea? --- ## [Ingest Pipeline update existing array](https://discuss.elastic.co/t/ingest-pipeline-update-existing-array/307085)
**Author:** [@jhershcopf](https://discuss.elastic.co/u/jhershcopf)\ **Replies:** 0\ **Last updated:** [June 14, 2022, 12:07am UTC](https://discuss.elastic.co/t/ingest-pipeline-update-existing-array/307085 "2022-06-14T00:07:54Z")
I have two indices, one contains event records that contain a timestamp, location, user id and country, the other contains a summary of all the event records. The summary includes last timestamp, last location and last c… --- ## [Generating custom \_id when exporting from hadoop/spark to ES](https://discuss.elastic.co/t/generating-custom-id-when-exporting-from-hadoop-spark-to-es/308486)
**Author:** [@Oriol\_Lopez\_Massague](https://discuss.elastic.co/u/Oriol_Lopez_Massague)\ **Replies:** 1\ **Last updated:** [June 30, 2022, 2:17pm UTC](https://discuss.elastic.co/t/generating-custom-id-when-exporting-from-hadoop-spark-to-es/308486 "2022-06-30T14:17:25Z")
I want to insert data in ES using hadoop/spark but with a custom made \_id field (not the autogerated one). I have seen that there is method using RDDs "saveToEsWithMeta": Is there a way to do the same thing using the… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=412) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=414)