# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=416

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 417

---

## [Unable to load config file. access denied (/usr/share/elasticsearch/.aws/config)](https://discuss.elastic.co/t/unable-to-load-config-file-access-denied-usr-share-elasticsearch-aws-config/307583)

<div class="topic-metadata">

**Author:** [@wedas](https://discuss.elastic.co/u/wedas)\
**Replies:** 5\
**Last updated:** [June 28, 2022, 3:04pm UTC](https://discuss.elastic.co/t/unable-to-load-config-file-access-denied-usr-share-elasticsearch-aws-config/307583 "2022-06-28T15:04:53Z")

</div>

I'm setting elk stack with docker-compose. But I'm getting a warning. Does anyone know the cause or can guide me on what wrong step I took? Warning from Terminal{"@timestamp":"2022-06-19T10:40:48.631Z&quo…

---

## [Parse XML out of message section in document](https://discuss.elastic.co/t/parse-xml-out-of-message-section-in-document/307049)

<div class="topic-metadata">

**Author:** [@lpfriedmann](https://discuss.elastic.co/u/lpfriedmann)\
**Replies:** 4\
**Last updated:** [June 28, 2022, 1:27pm UTC](https://discuss.elastic.co/t/parse-xml-out-of-message-section-in-document/307049 "2022-06-28T13:27:29Z")

</div>

Hi Everyone, I have gone through alot of the XML parsing threads and none of them really match what I am wanting to do. So when I search and a document is returned, if there there is an XML associated to the document, w…

---

## [Under rule in exception searching syntax](https://discuss.elastic.co/t/under-rule-in-exception-searching-syntax/308360)

<div class="topic-metadata">

**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\
**Replies:** 0\
**Last updated:** [June 28, 2022, 12:59pm UTC](https://discuss.elastic.co/t/under-rule-in-exception-searching-syntax/308360 "2022-06-28T12:59:29Z")

</div>

I would like to search for exceptions under rule based on fileds like organisation.id etc.. I tried but no luck. I there a specific syntax to search. Pls help, I have posted question in slack channel no response.

---

## [Not able to add a new field (nested) in existing index (ES 7.1)](https://discuss.elastic.co/t/not-able-to-add-a-new-field-nested-in-existing-index-es-7-1/308349)

<div class="topic-metadata">

**Author:** [@Ravip](https://discuss.elastic.co/u/Ravip)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 12:56pm UTC](https://discuss.elastic.co/t/not-able-to-add-a-new-field-nested-in-existing-index-es-7-1/308349 "2022-06-28T12:56:00Z")

</div>

{ "index": "myindex", "body": { "properties": { "tags": { "type": "nested" } } } } Output: Caught exception: type is required for Put { "index": "myindex", "type": "\_doc", "inclu…

---

## [ILM policy not kicking in for index template](https://discuss.elastic.co/t/ilm-policy-not-kicking-in-for-index-template/308355)

<div class="topic-metadata">

**Author:** [@sz7443](https://discuss.elastic.co/u/sz7443)\
**Replies:** 0\
**Last updated:** [June 28, 2022, 12:38pm UTC](https://discuss.elastic.co/t/ilm-policy-not-kicking-in-for-index-template/308355 "2022-06-28T12:38:22Z")

</div>

Hi all, I seek help with problem of ILM not being applied. I am missing a bit of configuration, but I don't see which one. I have: ILM policy that should delete data after 4 hours ILM Policy being applied to the inde…

---

## [Elasticsearch search](https://discuss.elastic.co/t/elasticsearch-search/308315)

<div class="topic-metadata">

**Author:** [@chandramouli\_ravi](https://discuss.elastic.co/u/chandramouli_ravi)\
**Replies:** 5\
**Last updated:** [June 28, 2022, 10:36am UTC](https://discuss.elastic.co/t/elasticsearch-search/308315 "2022-06-28T10:36:54Z")

</div>

Hi, There is a document in this way in ElasticSearch 6.8 Version "\_index": "XYZ-1582934400000", "\_type": "XYZ", "\_id": "bn1top/10006979936515", "\_score": 11.2877655, When i run the below command, its running ok and…

---

## [ANN Search: Performance / Setup](https://discuss.elastic.co/t/ann-search-performance-setup/307129)

<div class="topic-metadata">

**Author:** [@SbstnErhrdt](https://discuss.elastic.co/u/SbstnErhrdt)\
**Replies:** 5\
**Last updated:** [June 28, 2022, 10:31am UTC](https://discuss.elastic.co/t/ann-search-performance-setup/307129 "2022-06-28T10:31:44Z")

</div>

I recently wrote this post to report some issues with the ANN Search / Set-Up. ANN Search Timeouts - #8 by Julie\_Tibshirani The main take-away for me was to use the: "index.refresh\_interval": "-1" setting and run a fir…

---

## [Unable to fetch data from elasticsearch for alerts from Grafana](https://discuss.elastic.co/t/unable-to-fetch-data-from-elasticsearch-for-alerts-from-grafana/308328)

<div class="topic-metadata">

**Author:** [@jay\_bamaniya](https://discuss.elastic.co/u/jay_bamaniya)\
**Replies:** 4\
**Last updated:** [June 28, 2022, 7:13am UTC](https://discuss.elastic.co/t/unable-to-fetch-data-from-elasticsearch-for-alerts-from-grafana/308328 "2022-06-28T07:13:50Z")

</div>

I am unable to get the field (hostname, message) from elasticsearch to grafana for setting up my alerts. I wanted to get hostname as well as event message in my alerts so that it will easy for me to identify errors. I ha…

---

## [How to delete elasticsearch from ubuntu 22.04 completely to install it again](https://discuss.elastic.co/t/how-to-delete-elasticsearch-from-ubuntu-22-04-completely-to-install-it-again/308243)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 9:41am UTC](https://discuss.elastic.co/t/how-to-delete-elasticsearch-from-ubuntu-22-04-completely-to-install-it-again/308243 "2022-06-28T09:41:31Z")

</div>

how to delete elasticsearch from ubuntu 22.04 completely to install it again

---

## [Can i configure ubuntu server that i will install in it elasticsearch with static ip from my home wifi to make this address to elasticsearch configuration or i will let the ubuntu server have an address rom the dhcp wifi what's the recommanded ? thanks](https://discuss.elastic.co/t/can-i-configure-ubuntu-server-that-i-will-install-in-it-elasticsearch-with-static-ip-from-my-home-wifi-to-make-this-address-to-elasticsearch-configuration-or-i-will-let-the-ubuntu-server-have-an-address-rom-the-dhcp-wifi-whats-the-recommanded-thanks/308219)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 9:28am UTC](https://discuss.elastic.co/t/can-i-configure-ubuntu-server-that-i-will-install-in-it-elasticsearch-with-static-ip-from-my-home-wifi-to-make-this-address-to-elasticsearch-configuration-or-i-will-let-the-ubuntu-server-have-an-address-rom-the-dhcp-wifi-whats-the-recommanded-thanks/308219 "2022-06-28T09:28:43Z")

</div>

can i configure ubuntu server that i will install in it elasticsearch with static ip from my home wifi to make this address to elasticsearch configuration or i will let the ubuntu server have an address rom the dhcp wifi…

---

## [TLS transport in single node cluster](https://discuss.elastic.co/t/tls-transport-in-single-node-cluster/308336)

<div class="topic-metadata">

**Author:** [@kannengi](https://discuss.elastic.co/u/kannengi)\
**Replies:** 0\
**Last updated:** [June 28, 2022, 9:13am UTC](https://discuss.elastic.co/t/tls-transport-in-single-node-cluster/308336 "2022-06-28T09:13:58Z")

</div>

Hi, (Elasticsearch Version 7.12) I'm securing my single-node ES cluster with TLS. network.host: \_site\_ discovery.type: single-node I've already successfully configured TLS over http for communication from outside wit…

---

## [Slice dense vector contents?](https://discuss.elastic.co/t/slice-dense-vector-contents/307972)

<div class="topic-metadata">

**Author:** [@lz-mn](https://discuss.elastic.co/u/lz-mn)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 8:39am UTC](https://discuss.elastic.co/t/slice-dense-vector-contents/307972 "2022-06-28T08:39:25Z")

</div>

Hi, I have about a million documents indexed with a dense vector. I am trying to add a new field to each document with a slice of its vector, e.g. the first 700 elements only. What is the best way to do this please? Th…

---

## [How to clear disk usage](https://discuss.elastic.co/t/how-to-clear-disk-usage/307738)

<div class="topic-metadata">

**Author:** [@willam\_boss](https://discuss.elastic.co/u/willam_boss)\
**Replies:** 7\
**Last updated:** [June 28, 2022, 7:53am UTC](https://discuss.elastic.co/t/how-to-clear-disk-usage/307738 "2022-06-28T07:53:42Z")

</div>

health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open sks QcmAeW2sToa3nqbPF7EVzQ 30 1 3101816690 1219212661 16.8…

---

## [Elastic CCR using Create Follower API](https://discuss.elastic.co/t/elastic-ccr-using-create-follower-api/308226)

<div class="topic-metadata">

**Author:** [@abhishekgupta31986](https://discuss.elastic.co/u/abhishekgupta31986)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/elastic-ccr-using-create-follower-api/308226 "2022-06-28T07:52:25Z")

</div>

Hi, I'm setting up CCR in ES. As per documentation it's necessary to setup appropriate roles in remote and local cluster, and then create a user in local cluster with the created role. However i dont see how this role …

---

## [How to split nested json list into different document](https://discuss.elastic.co/t/how-to-split-nested-json-list-into-different-document/308261)

<div class="topic-metadata">

**Author:** [@Giulia](https://discuss.elastic.co/u/Giulia)\
**Replies:** 3\
**Last updated:** [June 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/how-to-split-nested-json-list-into-different-document/308261 "2022-06-28T07:52:17Z")

</div>

Hello! I would to split a nested json array into different unique json document. For example, I have this document { "beginTimeSeconds": 1655886958, "endTimeS…

---

## [While scrolling, does the scroll id change](https://discuss.elastic.co/t/while-scrolling-does-the-scroll-id-change/308239)

<div class="topic-metadata">

**Author:** [@sfaxianovic](https://discuss.elastic.co/u/sfaxianovic)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 7:10am UTC](https://discuss.elastic.co/t/while-scrolling-does-the-scroll-id-change/308239 "2022-06-28T07:10:46Z")

</div>

Hi all, In the documentation in the loop while the scrollId is erased each time My question is why this is done like that ? are the scrollId changes each time ? and if so why only clearing the last one? Regards

---

## [Snapshot s3: The specified key does not exist](https://discuss.elastic.co/t/snapshot-s3-the-specified-key-does-not-exist/308280)

<div class="topic-metadata">

**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 7:07am UTC](https://discuss.elastic.co/t/snapshot-s3-the-specified-key-does-not-exist/308280 "2022-06-28T07:07:38Z")

</div>

Hello, I am currently testing s3 compatible solution from Scaleway. Creating my repository, my bucket contains a test directory tests-kedvHECeQhmY6kvkArb8AA but it seems that elasticsearch cannot delete this directory.…

---

## [I am using elk stack repo locally and using filebeat, i have configured filebeat but still saying "hosting provider type not detected"](https://discuss.elastic.co/t/i-am-using-elk-stack-repo-locally-and-using-filebeat-i-have-configured-filebeat-but-still-saying-hosting-provider-type-not-detected/308247)

<div class="topic-metadata">

**Author:** [@Tech\_Byte](https://discuss.elastic.co/u/Tech_Byte)\
**Replies:** 6\
**Last updated:** [June 28, 2022, 6:26am UTC](https://discuss.elastic.co/t/i-am-using-elk-stack-repo-locally-and-using-filebeat-i-have-configured-filebeat-but-still-saying-hosting-provider-type-not-detected/308247 "2022-06-28T06:26:24Z")

</div>

here is my configuration output.elasticsearch: # Array of hosts to connect to. hosts: \["localhost:9200", "localhost:5601"\] # Protocol - either \`http\` (default) or \`https\`. #protocol: "https" # Authenticati…

---

## [Unable to get Term Aggregations using Java RestHighLevelClient](https://discuss.elastic.co/t/unable-to-get-term-aggregations-using-java-resthighlevelclient/308246)

<div class="topic-metadata">

**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\
**Replies:** 2\
**Last updated:** [June 28, 2022, 4:43am UTC](https://discuss.elastic.co/t/unable-to-get-term-aggregations-using-java-resthighlevelclient/308246 "2022-06-28T04:43:38Z")

</div>

I'm using Java 8 and Elasticsearch 7.12.0 I want term aggregations, as I want all the words and the doc\_count, of all the words available in indexed documents. I did it using kibana, but i'm unable to do it using Java. …

---

## [Multiple snapshot in multiple containers](https://discuss.elastic.co/t/multiple-snapshot-in-multiple-containers/308249)

<div class="topic-metadata">

**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\
**Replies:** 6\
**Last updated:** [June 28, 2022, 5:42am UTC](https://discuss.elastic.co/t/multiple-snapshot-in-multiple-containers/308249 "2022-06-28T05:42:22Z")

</div>

Hi all , We know currently ElasticSearch doesn't allow taking multiple snapshot at same time for the some container it is configured with. Let's say i have 2-3 index , i configure unique new repository for each of my i…

---

## [ELK stack installables](https://discuss.elastic.co/t/elk-stack-installables/308312)

<div class="topic-metadata">

**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\
**Replies:** 4\
**Last updated:** [June 28, 2022, 4:23am UTC](https://discuss.elastic.co/t/elk-stack-installables/308312 "2022-06-28T04:23:30Z")

</div>

Hi Team, I am bit confused with ELK installable. Just want to clarify before I start using it in our environment. in lower environments i have used RPM repository option to install ELK stack but in production we don't ha…

---

## [Why do I have wrap "filter" inside "bool" when I'm only filtering for a single field?](https://discuss.elastic.co/t/why-do-i-have-wrap-filter-inside-bool-when-im-only-filtering-for-a-single-field/308306)

<div class="topic-metadata">

**Author:** [@thomas708](https://discuss.elastic.co/u/thomas708)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 2:45am UTC](https://discuss.elastic.co/t/why-do-i-have-wrap-filter-inside-bool-when-im-only-filtering-for-a-single-field/308306 "2022-06-28T02:45:38Z")

</div>

In ElasticSearch 7.10 this query works { "query": { "bool": { "filter": { "term": { "field1": "value1" } } } } } but t…

---

## [Adding Elasticsearch aggregation keys](https://discuss.elastic.co/t/adding-elasticsearch-aggregation-keys/308220)

<div class="topic-metadata">

**Author:** [@111505](https://discuss.elastic.co/u/111505)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 1:07am UTC](https://discuss.elastic.co/t/adding-elasticsearch-aggregation-keys/308220 "2022-06-28T01:07:45Z")

</div>

I want to aggregate the CPU values of the PODs in the group. However, if the aggregation API is based on the POD, which POD is shown in the Key, but it is not known which group the POD belongs to. Is there a way to incl…

---

## [Scheduled cross-cluster \_reindex](https://discuss.elastic.co/t/scheduled-cross-cluster-reindex/308230)

<div class="topic-metadata">

**Author:** [@CrystalDesignDR](https://discuss.elastic.co/u/CrystalDesignDR)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 12:52am UTC](https://discuss.elastic.co/t/scheduled-cross-cluster-reindex/308230 "2022-06-28T00:52:46Z")

</div>

Hi, we have various elastic cloud deployments where we would need to copy data from one cluster to another (with filters). We found that we can do this with POST \_reindex Now to my question: Is there a way to schedul…

---

## [Index gets deleted right after it was created](https://discuss.elastic.co/t/index-gets-deleted-right-after-it-was-created/308242)

<div class="topic-metadata">

**Author:** [@moor](https://discuss.elastic.co/u/moor)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 12:47am UTC](https://discuss.elastic.co/t/index-gets-deleted-right-after-it-was-created/308242 "2022-06-28T00:47:21Z")

</div>

Hi there, I am running a single-node ES v. 7.17.3 instance in an environment not accessible from internet. I also have a full text crawler service (heritrix) that populates an index. Right after the crawling job finish…

---

## [Elasticsearch shutdowns every few days with this error](https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271)

<div class="topic-metadata">

**Author:** [@Harshil\_Narielwala](https://discuss.elastic.co/u/Harshil_Narielwala)\
**Replies:** 1\
**Last updated:** [June 28, 2022, 12:41am UTC](https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271 "2022-06-28T00:41:04Z")

</div>

My elasticsearch instance is connected to an application server I.e Liferay as a search engine. I am getting the below error randomly every few days. Can anyone explain what this means and how can I solve this? \[2022-…

---

## [Using custom pytorch model in ES8](https://discuss.elastic.co/t/using-custom-pytorch-model-in-es8/308297)

<div class="topic-metadata">

**Author:** [@jyang](https://discuss.elastic.co/u/jyang)\
**Replies:** 0\
**Last updated:** [June 27, 2022, 9:54pm UTC](https://discuss.elastic.co/t/using-custom-pytorch-model-in-es8/308297 "2022-06-27T21:54:30Z")

</div>

Hi, I would like to understand what it takes to deploy/use a custom pytorch model in elasticsearch 8. The desired usage would be to get text embedding for the input text from a custom SentenceTransformer model, using an…

---

## [Elastic search query to check if property is empty/non-empty](https://discuss.elastic.co/t/elastic-search-query-to-check-if-property-is-empty-non-empty/308290)

<div class="topic-metadata">

**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\
**Replies:** 1\
**Last updated:** [June 27, 2022, 9:12pm UTC](https://discuss.elastic.co/t/elastic-search-query-to-check-if-property-is-empty-non-empty/308290 "2022-06-27T21:12:14Z")

</div>

Hello, I was trying to find out all my documents which has property with empty value or non-empty value. The type of this property is "keyword". I'm using ES 6.8.1 version. I couldn't find anything in the documentation…

---

## [Unable to launch elasticsearch from bat file in windows 10](https://discuss.elastic.co/t/unable-to-launch-elasticsearch-from-bat-file-in-windows-10/308197)

<div class="topic-metadata">

**Author:** [@Halim\_Dris](https://discuss.elastic.co/u/Halim_Dris)\
**Replies:** 2\
**Last updated:** [June 27, 2022, 8:50pm UTC](https://discuss.elastic.co/t/unable-to-launch-elasticsearch-from-bat-file-in-windows-10/308197 "2022-06-27T20:50:17Z")

</div>

elasticsearch-8.2.3 Running elasticsearch with echo on. D:\\Elastic\\elasticsearch-8.2.3\\bin\>elasticsearch D:\\Elastic\\elasticsearch-8.2.3\\bin\>setlocal enabledelayedexpansion D:\\Elastic\\elasticsearch-8.2.3\\bin\>setlo…

---

## [How to create auto rollover index names without "-\\\\d+$" pattern at the end?](https://discuss.elastic.co/t/how-to-create-auto-rollover-index-names-without-d-pattern-at-the-end/308284)

<div class="topic-metadata">

**Author:** [@thomas708](https://discuss.elastic.co/u/thomas708)\
**Replies:** 1\
**Last updated:** [June 27, 2022, 6:10pm UTC](https://discuss.elastic.co/t/how-to-create-auto-rollover-index-names-without-d-pattern-at-the-end/308284 "2022-06-27T18:10:54Z")

</div>

I'm using ILM to create daily auto rollover indices with dates in the index names. If bootstrap the initial index with following then it works. The next index auto created will be "test-2022.06.17-000002", then "test-2…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=415)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=417)
