# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=418 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 419 --- ## [Changing node roles in an already existing ES environment](https://discuss.elastic.co/t/changing-node-roles-in-an-already-existing-es-environment/307013)
**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\ **Replies:** 3\ **Last updated:** [June 24, 2022, 6:17pm UTC](https://discuss.elastic.co/t/changing-node-roles-in-an-already-existing-es-environment/307013 "2022-06-24T18:17:10Z")
Good morning everybody. As, due to my job, I will have to get a Production ES environment in the future, I decided to create a testing ES environment at home. This environment has three multi-role node. The three of th… --- ## [Update to 8.2.2 showing error in keystore-init](https://discuss.elastic.co/t/update-to-8-2-2-showing-error-in-keystore-init/307076)
**Author:** [@Dxnium](https://discuss.elastic.co/u/Dxnium)\ **Replies:** 4\ **Last updated:** [June 24, 2022, 5:07pm UTC](https://discuss.elastic.co/t/update-to-8-2-2-showing-error-in-keystore-init/307076 "2022-06-24T17:07:09Z")
Currently testing to update elastic from 8.1.3 to 8.2.2, but when i tried to deploy with the latest version I'm getting this error. Also getting the same error with version 8.2.0 I'm using the same cofiguration from 8.… --- ## [How to run FS Crawler in background on Ubuntu 20.04](https://discuss.elastic.co/t/how-to-run-fs-crawler-in-background-on-ubuntu-20-04/308072)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 1:42pm UTC](https://discuss.elastic.co/t/how-to-run-fs-crawler-in-background-on-ubuntu-20-04/308072 "2022-06-24T13:42:38Z")
I tried to run FS Crawler in background on Ubuntu 20.04, and I changed the last line of file bin/fscrawler as following: exec "nohup $JAVA" ${JAVA\_OPTS} -cp "$FS\_CLASSPATH" "fr.pilato.elasticsearch.crawler.fs.cli.FsCraw… --- ## [Backport of a Lucene bugfix (Lucene 9.0/ES 8.0)?](https://discuss.elastic.co/t/backport-of-a-lucene-bugfix-lucene-9-0-es-8-0/308093)
**Author:** [@mhugo](https://discuss.elastic.co/u/mhugo)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 1:23pm UTC](https://discuss.elastic.co/t/backport-of-a-lucene-bugfix-lucene-9-0-es-8-0/308093 "2022-06-24T13:23:37Z")
Hi, We are migrating from ES 6.8 to ES 7.17 and encountered a bug during indexing for some complex shapes. It turns out the issue is a tessellation bug in Lucene that has been fixed in Lucene 9.0 (see \[LUCENE-9580\] Tess… --- ## [Why query ignores slop value?](https://discuss.elastic.co/t/why-query-ignores-slop-value/307953)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 3\ **Last updated:** [June 24, 2022, 12:47pm UTC](https://discuss.elastic.co/t/why-query-ignores-slop-value/307953 "2022-06-24T12:47:59Z")
I'm using elastic search 7.6.2 I have index with the following mapping: "mappings": { "properties": { "content": {"type": "text"}, } } with 3 documents: Distri… --- ## [Issues with clustering on Docker](https://discuss.elastic.co/t/issues-with-clustering-on-docker/308104)
**Author:** [@Wrighty11](https://discuss.elastic.co/u/Wrighty11)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 12:37pm UTC](https://discuss.elastic.co/t/issues-with-clustering-on-docker/308104 "2022-06-24T12:37:51Z")
Hi everyone, having an issue with setting up an elasticsearch cluster over talking over 2 centos machines. Here are my compse files: VM 1 - version: '2.2' services: es-8.2.2: image: docker.elastic.co/elasticsear… --- ## [Unable to multi\_match in php library](https://discuss.elastic.co/t/unable-to-multi-match-in-php-library/308107)
**Author:** [@Jeroen2](https://discuss.elastic.co/u/Jeroen2)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 11:32am UTC](https://discuss.elastic.co/t/unable-to-multi-match-in-php-library/308107 "2022-06-24T11:32:07Z")
I'm trying to use a filter to search multiple fields and query between dates. The PHP looks like this: $params = \[ 'index' =\> $this-\>index . '\*', 'size' =\> self::HITS\_SIZE, 'from' =\> … --- ## [Logstash pipeline currently forwarding logs to elasticsearch](https://discuss.elastic.co/t/logstash-pipeline-currently-forwarding-logs-to-elasticsearch/307197)
**Author:** [@lhmzhou](https://discuss.elastic.co/u/lhmzhou)\ **Replies:** 5\ **Last updated:** [June 24, 2022, 11:28am UTC](https://discuss.elastic.co/t/logstash-pipeline-currently-forwarding-logs-to-elasticsearch/307197 "2022-06-24T11:28:50Z")
Hi, Currently, I have a logstash pipeline that is forwarding logs to Elasticsearch. I am planning to send logfiles to S3 as a batch using the aws s3 cli. What are some drawbacks to this approach? Is it possible to accou… --- ## [How to add a Runtime Field for doc ingest time?](https://discuss.elastic.co/t/how-to-add-a-runtime-field-for-doc-ingest-time/305793)
**Author:** [@ykara84](https://discuss.elastic.co/u/ykara84)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 11:15am UTC](https://discuss.elastic.co/t/how-to-add-a-runtime-field-for-doc-ingest-time/305793 "2022-06-24T11:15:08Z")
Hi, i'm trying to add a Runtime Field to an index-pattern which will add a new field to each doc as it arrives into the index, the new field is to contain the date/time the doc was added to the index, a field called some… --- ## [Time taken by ELK stack to create indices](https://discuss.elastic.co/t/time-taken-by-elk-stack-to-create-indices/307836)
**Author:** [@Divyank\_Garg](https://discuss.elastic.co/u/Divyank_Garg)\ **Replies:** 7\ **Last updated:** [June 24, 2022, 10:36am UTC](https://discuss.elastic.co/t/time-taken-by-elk-stack-to-create-indices/307836 "2022-06-24T10:36:13Z")
How much time does it take to create indices using ELK services via docker-compose file? We process total 450 files of total size of 4.6GB to create 450 indices. All these files are basically the log files. It takes aro… --- ## [Need-Help-On-elasticsearch in complex scenario](https://discuss.elastic.co/t/need-help-on-elasticsearch-in-complex-scenario/308074)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 8:54am UTC](https://discuss.elastic.co/t/need-help-on-elasticsearch-in-complex-scenario/308074 "2022-06-24T08:54:48Z")
Hi team, I need your help with a very complex scenario. We have a user management system, which has a user index, which stores various attributes of user, and a user action log index, which records what the user has don… --- ## [Is there away to get a random word/words from a document?](https://discuss.elastic.co/t/is-there-away-to-get-a-random-word-words-from-a-document/307470)
**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\ **Replies:** 3\ **Last updated:** [June 24, 2022, 8:37am UTC](https://discuss.elastic.co/t/is-there-away-to-get-a-random-word-words-from-a-document/307470 "2022-06-24T08:37:27Z")
I want to display some random words on the screen which are present in the document. I'm using Elasticsearch 7.12. --- ## [Elastic Search Index Refresh Interval elastic.yaml file in Kubernetes](https://discuss.elastic.co/t/elastic-search-index-refresh-interval-elastic-yaml-file-in-kubernetes/308041)
**Author:** [@krishnav1](https://discuss.elastic.co/u/krishnav1)\ **Replies:** 1\ **Last updated:** [June 24, 2022, 7:58am UTC](https://discuss.elastic.co/t/elastic-search-index-refresh-interval-elastic-yaml-file-in-kubernetes/308041 "2022-06-24T07:58:43Z")
I am new to Elasticsearch. I have a 3 data node and 3 master node elastic cluster deployed in Kubernetes. It was working well until recently there is a large intake of data. Now, I am in a stage where I need to apply ind… --- ## [Elasticsearch stopwords at query time](https://discuss.elastic.co/t/elasticsearch-stopwords-at-query-time/308084)
**Author:** [@theju0805](https://discuss.elastic.co/u/theju0805)\ **Replies:** 1\ **Last updated:** [June 24, 2022, 7:03am UTC](https://discuss.elastic.co/t/elasticsearch-stopwords-at-query-time/308084 "2022-06-24T07:03:59Z")
Hi , We are using Elasticsearch 7.10 which is an opensearch and we are trying to enable stopwords at search time, when the file gets updated. There is a stopword file in AWS s3 bucket and when stopword file has been mo… --- ## [Fixed interval in date histogram error](https://discuss.elastic.co/t/fixed-interval-in-date-histogram-error/308071)
**Author:** [@yeylatte](https://discuss.elastic.co/u/yeylatte)\ **Replies:** 0\ **Last updated:** [June 24, 2022, 3:21am UTC](https://discuss.elastic.co/t/fixed-interval-in-date-histogram-error/308071 "2022-06-24T03:21:51Z")
Elasticsearch Version 7.17.4 Java Version 1.8.0 OS Version Linux Problem Description I use date\_histogram aggregation from Elasticsearch with fixed\_interval of 7d in time range from 2022-06-18 to 2022-07-01(14days… --- ## [Slow speed of ANN dense vector search using \_knn\_search](https://discuss.elastic.co/t/slow-speed-of-ann-dense-vector-search-using-knn-search/307448)
**Author:** [@jalustig](https://discuss.elastic.co/u/jalustig)\ **Replies:** 7\ **Last updated:** [June 24, 2022, 2:40am UTC](https://discuss.elastic.co/t/slow-speed-of-ann-dense-vector-search-using-knn-search/307448 "2022-06-24T02:40:03Z")
I'm building out a vector search application with 384 dimensional vectors. So far I have about 3 million documents in my Elasticsearch database using with a dense\_vector field. There are currently 8 shards (I am expectin… --- ## [How to ship logs from filebeat to elasticsearch](https://discuss.elastic.co/t/how-to-ship-logs-from-filebeat-to-elasticsearch/308039)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 2\ **Last updated:** [June 24, 2022, 12:10am UTC](https://discuss.elastic.co/t/how-to-ship-logs-from-filebeat-to-elasticsearch/308039 "2022-06-24T00:10:26Z")
Hi Everyone, I am trying to form a setup where my cisco devices syslog to be sent to filebeat and then filebeat will send it to elasticsearch so that it can be viewed on kibana. Problem: Filebeat error is The requested… --- ## [Connect azure](https://discuss.elastic.co/t/connect-azure/308058)
**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 9:37pm UTC](https://discuss.elastic.co/t/connect-azure/308058 "2022-06-23T21:37:50Z")
Hi all , Is there a way to add azure account to snapshot repository from kibana console I tried this query but it turns out it does not work PUT /\_snapshot/repo\_with\_features { "type": "azure", "settings": { … --- ## [Elasticsearch index settings locked due to unsupported setting](https://discuss.elastic.co/t/elasticsearch-index-settings-locked-due-to-unsupported-setting/308053)
**Author:** [@bren\_x](https://discuss.elastic.co/u/bren_x)\ **Replies:** 0\ **Last updated:** [June 23, 2022, 7:19pm UTC](https://discuss.elastic.co/t/elasticsearch-index-settings-locked-due-to-unsupported-setting/308053 "2022-06-23T19:19:33Z")
Hi, We are trying to upgrade our elasticsearch cluster from version 6.1 to version 6.8. While upgrading, we noticed that the index settings seem to be locked. Any command to change any index setting results in: { "er… --- ## [Cannot view single document however index exists](https://discuss.elastic.co/t/cannot-view-single-document-however-index-exists/308043)
**Author:** [@GloomOff](https://discuss.elastic.co/u/GloomOff)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 4:49pm UTC](https://discuss.elastic.co/t/cannot-view-single-document-however-index-exists/308043 "2022-06-23T16:49:42Z")
Hello. I receive nginx logs from filebeat. Search works well. But in kibana in the expanded view, click View single document I get error: Cannot run search filebeat-7.9.2-2022.06.23-001859 is missing. \[Please ensure … --- ## [What is "Query Length"?](https://discuss.elastic.co/t/what-is-query-length/307835)
**Author:** [@minzeycat](https://discuss.elastic.co/u/minzeycat)\ **Replies:** 9\ **Last updated:** [June 23, 2022, 4:18pm UTC](https://discuss.elastic.co/t/what-is-query-length/307835 "2022-06-23T16:18:22Z")
Hi all, I'm wondering what query length is referring to in this limit guide (it is set to 128)? Limits | Elastic App Search Documentation \[8.2\] | Elastic I am having a hard time understanding what part of the query is l… --- ## [Elastic Stack Architecture and Requirements](https://discuss.elastic.co/t/elastic-stack-architecture-and-requirements/307930)
**Author:** [@Analyst](https://discuss.elastic.co/u/Analyst)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 3:34pm UTC](https://discuss.elastic.co/t/elastic-stack-architecture-and-requirements/307930 "2022-06-23T15:34:23Z")
Hi Guys, I need to create an ELK architecture but I don't know how many servers and requirements (CPU, RAM,Disk space) I will need for large organization deployment. I will need to send syslog and logfiles from 7000 se… --- ## [{"expected:'\[', actual:'{', at offset:2058"}](https://discuss.elastic.co/t/expected-actual-at-offset-2058/308012)
**Author:** [@Zedson.Sagar](https://discuss.elastic.co/u/Zedson.Sagar)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 3:31pm UTC](https://discuss.elastic.co/t/expected-actual-at-offset-2058/308012 "2022-06-23T15:31:45Z")
Hi, I'm new to elastic and FSCrawler. I have an index created using FSCrawler. It has only a single document which looks like below - { "content" : """MotorColour - CoatingColor - CSV """, … --- ## [How to Improve ELK Performance](https://discuss.elastic.co/t/how-to-improve-elk-performance/307092)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 8\ **Last updated:** [June 23, 2022, 3:07pm UTC](https://discuss.elastic.co/t/how-to-improve-elk-performance/307092 "2022-06-23T15:07:44Z")
Hi Team, My flow is, JSON Logs files will be processed from FileBeat \> Logstash \> Elasticsearch. But it skips some data. In thread\_pool It shows below many rejected write requests. node-1 write 0 0 0 … --- ## [Setting mapping limits using java api in 8.2 fails due to wrong config name creation](https://discuss.elastic.co/t/setting-mapping-limits-using-java-api-in-8-2-fails-due-to-wrong-config-name-creation/305107)
**Author:** [@Rodrigo\_Kapobel](https://discuss.elastic.co/u/Rodrigo_Kapobel)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 2:24pm UTC](https://discuss.elastic.co/t/setting-mapping-limits-using-java-api-in-8-2-fails-due-to-wrong-config-name-creation/305107 "2022-06-23T14:24:37Z")
Hi, I'm currently using the new version of java api 8.2 with also ES 8.2 in a dockerized instance. I'm creating indexes through the API and using IndexSettings to add custom setting. One of them is the total fields limi… --- ## [Missing documents during bulk insert](https://discuss.elastic.co/t/missing-documents-during-bulk-insert/307802)
**Author:** [@EsraKahraman](https://discuss.elastic.co/u/EsraKahraman)\ **Replies:** 4\ **Last updated:** [June 23, 2022, 2:02pm UTC](https://discuss.elastic.co/t/missing-documents-during-bulk-insert/307802 "2022-06-23T14:02:29Z")
Hi there, I am using bulk API to load data in Elasticsearch. I need to load millions of documents to an elastic index; my ETL job breaks the whole set down to 10K record chunks. And then, it splits each chunk into the JS… --- ## [NOT Queries documents returning no highlight fragment](https://discuss.elastic.co/t/not-queries-documents-returning-no-highlight-fragment/308016)
**Author:** [@jcmiron](https://discuss.elastic.co/u/jcmiron)\ **Replies:** 4\ **Last updated:** [June 23, 2022, 1:46pm UTC](https://discuss.elastic.co/t/not-queries-documents-returning-no-highlight-fragment/308016 "2022-06-23T13:46:58Z")
If I do a query like "NOT (CANADA)" or something like that it'll return the documents that don't include that word in it, but not return any highlight fragment. Is this the default behavior for a query like that? --- ## [Not able to download track](https://discuss.elastic.co/t/not-able-to-download-track/305712)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 10\ **Last updated:** [June 23, 2022, 1:15pm UTC](https://discuss.elastic.co/t/not-able-to-download-track/305712 "2022-06-23T13:15:59Z")
Hi i am using below script to download track https://raw.githubusercontent.com/elastic/rally-tracks/master/download.sh i am able to download tracks on ubuntu 20.04 Cloning into '/home/user/.rally/benchmarks/tracks/def… --- ## [Unable to verify that the server is ElasticSearch due to unsuccesful product check call](https://discuss.elastic.co/t/unable-to-verify-that-the-server-is-elasticsearch-due-to-unsuccesful-product-check-call/308000)
**Author:** [@charlot\_Attard](https://discuss.elastic.co/u/charlot_Attard)\ **Replies:** 2\ **Last updated:** [June 23, 2022, 1:20pm UTC](https://discuss.elastic.co/t/unable-to-verify-that-the-server-is-elasticsearch-due-to-unsuccesful-product-check-call/308000 "2022-06-23T13:20:31Z")
Hello, We have an application connecting with NEST to ES Version 7.17. Intermitently we are facing this issue Unable to verify that the server is ElasticSearch due to unsuccesful product check call. Some functionality … --- ## [Empty output when extracting field](https://discuss.elastic.co/t/empty-output-when-extracting-field/307514)
**Author:** [@sigizmynd](https://discuss.elastic.co/u/sigizmynd)\ **Replies:** 6\ **Last updated:** [June 23, 2022, 12:24pm UTC](https://discuss.elastic.co/t/empty-output-when-extracting-field/307514 "2022-06-23T12:24:17Z")
Hello I want to extract some value from my log: { "\_index": ".ds-filebeat-8.2.2-2022.06.14-000002", "\_id": "veGbcYEBr3mqBf4wJF1j", "\_version": 1, "\_score": null, "fields": { "host.os.name.text": \[ "AlmaLinux" \]… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=417) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=419)