# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=427

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 428

---

## [Es\_rejected\_execution\_exception - what steps do I need to take?](https://discuss.elastic.co/t/es-rejected-execution-exception-what-steps-do-i-need-to-take/306836)

<div class="topic-metadata">

**Author:** [@corndog](https://discuss.elastic.co/u/corndog)\
**Replies:** 2\
**Last updated:** [June 10, 2022, 1:29am UTC](https://discuss.elastic.co/t/es-rejected-execution-exception-what-steps-do-i-need-to-take/306836 "2022-06-10T01:29:15Z")

</div>

I am using Elasticsearch docker image 7.17.4. I am on a 12 core machine using Python and the helpers.parallel\_bulk() function with the default thread count and queue size. The error I get is elasticsearch.ApiError: Ap…

---

## [Terms are not working with multilevel nested query](https://discuss.elastic.co/t/terms-are-not-working-with-multilevel-nested-query/306428)

<div class="topic-metadata">

**Author:** [@ravee1112](https://discuss.elastic.co/u/ravee1112)\
**Replies:** 6\
**Last updated:** [June 10, 2022, 12:31am UTC](https://discuss.elastic.co/t/terms-are-not-working-with-multilevel-nested-query/306428 "2022-06-10T00:31:58Z")

</div>

Below is my mapping for index: { "properties" : { "solutions" : { "type" : "nested", "properties" : { "deliverySkills" : { "type" : "nested", "properties" : { "m…

---

## [Need help configuring repository-s3 (AWS\_WEB\_IDENTITY\_TOKEN\_FILE ignored?)](https://discuss.elastic.co/t/need-help-configuring-repository-s3-aws-web-identity-token-file-ignored/306607)

<div class="topic-metadata">

**Author:** [@ericsperano](https://discuss.elastic.co/u/ericsperano)\
**Replies:** 2\
**Last updated:** [June 10, 2022, 12:00am UTC](https://discuss.elastic.co/t/need-help-configuring-repository-s3-aws-web-identity-token-file-ignored/306607 "2022-06-10T00:00:24Z")

</div>

Hello, I'm having some difficulties setting up the repository-s3 plugin on Kubernetes (EKS) using ECK. I can confirm that my service account is configured correctly, I can launch a pod running ubuntu with this service …

---

## [NLP Summarizer Model for ES 8.2.2](https://discuss.elastic.co/t/nlp-summarizer-model-for-es-8-2-2/306740)

<div class="topic-metadata">

**Author:** [@sim](https://discuss.elastic.co/u/sim)\
**Replies:** 2\
**Last updated:** [June 9, 2022, 11:17pm UTC](https://discuss.elastic.co/t/nlp-summarizer-model-for-es-8-2-2/306740 "2022-06-09T23:17:45Z")

</div>

I wonder if ES 8.2.2 already supports a PyTorch NLP model for summarization? Eg. sshleifer/distilbart-cnn-12-6 · Hugging Face It's not an option in eland's current supported task types. It is a generative model, ie. g…

---

## [Indexes not rolled over or deleted](https://discuss.elastic.co/t/indexes-not-rolled-over-or-deleted/306796)

<div class="topic-metadata">

**Author:** [@koos](https://discuss.elastic.co/u/koos)\
**Replies:** 1\
**Last updated:** [June 9, 2022, 5:40pm UTC](https://discuss.elastic.co/t/indexes-not-rolled-over-or-deleted/306796 "2022-06-09T17:40:01Z")

</div>

Hello All, I've been stuck with an issue that indexes are not getting deleted after what is defined in the ILM Policy. I have the same issue on various ES clusters, so clearly I'm doing something wrong. I have the foll…

---

## [\[Spring Data Elasticsearch\] Exception during save regardless of success](https://discuss.elastic.co/t/spring-data-elasticsearch-exception-during-save-regardless-of-success/306813)

<div class="topic-metadata">

**Author:** [@Almost\_Familiar](https://discuss.elastic.co/u/Almost_Familiar)\
**Replies:** 1\
**Last updated:** [June 9, 2022, 3:59pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-exception-during-save-regardless-of-success/306813 "2022-06-09T15:59:21Z")

</div>

Hello everyone, we are using version Spring Boot 2.7.0 with Spring Data Elasticsearch, with reactive code. We prefer to make our requests with native queries via the ReactiveElasticsearchOperations interface. For an i…

---

## [How to create index name with date and incremental Number](https://discuss.elastic.co/t/how-to-create-index-name-with-date-and-incremental-number/305923)

<div class="topic-metadata">

**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\
**Replies:** 3\
**Last updated:** [June 9, 2022, 1:33pm UTC](https://discuss.elastic.co/t/how-to-create-index-name-with-date-and-incremental-number/305923 "2022-06-09T13:33:22Z")

</div>

Greetings ..! I want to create index from Logstash. The index name should be (index\_name-2022-05-30-001). And I set a limit to index is 1.5gb, when it exceeds in the same day, the newly created index name should be ind…

---

## [Jira Connector - Version supported](https://discuss.elastic.co/t/jira-connector-version-supported/306801)

<div class="topic-metadata">

**Author:** [@Orlando\_Gonzalez](https://discuss.elastic.co/u/Orlando_Gonzalez)\
**Replies:** 0\
**Last updated:** [June 9, 2022, 1:30pm UTC](https://discuss.elastic.co/t/jira-connector-version-supported/306801 "2022-06-09T13:30:20Z")

</div>

Hi everybody We are trying to configure the Jira connector from an ELK 7.15.0, where the Jira Service Desk is Server Onpremise version 4.9.1. So far we have not been able to configure it, can you tell us if this configu…

---

## [Data size on disk increase 15 times when moved from hive to elasticsearch](https://discuss.elastic.co/t/data-size-on-disk-increase-15-times-when-moved-from-hive-to-elasticsearch/305654)

<div class="topic-metadata">

**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\
**Replies:** 26\
**Last updated:** [June 9, 2022, 1:21pm UTC](https://discuss.elastic.co/t/data-size-on-disk-increase-15-times-when-moved-from-hive-to-elasticsearch/305654 "2022-06-09T13:21:56Z")

</div>

I am using hive-hadoop jar to move data from hive to Elasticsearch. The data size on disk is ~ 35GB which when moved to ES becomes ~600GB. Is this expected behaviour? Or is there that something is missing from our end. R…

---

## [Append an array element to logs coming from Logstash](https://discuss.elastic.co/t/append-an-array-element-to-logs-coming-from-logstash/306794)

<div class="topic-metadata">

**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\
**Replies:** 0\
**Last updated:** [June 9, 2022, 12:27pm UTC](https://discuss.elastic.co/t/append-an-array-element-to-logs-coming-from-logstash/306794 "2022-06-09T12:27:19Z")

</div>

how to append an element to a particular field already containing an array? Actually, I am writing a painless script in the output part of the Logstash conf file. Code inside my conf file is: input { kafka { …

---

## [Permissions for Move to lifecycle step API wrong in docs?](https://discuss.elastic.co/t/permissions-for-move-to-lifecycle-step-api-wrong-in-docs/304691)

<div class="topic-metadata">

**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\
**Replies:** 1\
**Last updated:** [June 9, 2022, 10:23am UTC](https://discuss.elastic.co/t/permissions-for-move-to-lifecycle-step-api-wrong-in-docs/304691 "2022-06-09T10:23:29Z")

</div>

Hello nice people of elastic, I am confused about the permissions required to use the Move to lifecycle step API | Elasticsearch Guide \[8.2\] | Elastic The docs say you must have the manage\_ilm privileges on the indices …

---

## [Set index setting like unassigned.node\_left timeout from ILM](https://discuss.elastic.co/t/set-index-setting-like-unassigned-node-left-timeout-from-ilm/306782)

<div class="topic-metadata">

**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\
**Replies:** 0\
**Last updated:** [June 9, 2022, 10:22am UTC](https://discuss.elastic.co/t/set-index-setting-like-unassigned-node-left-timeout-from-ilm/306782 "2022-06-09T10:22:57Z")

</div>

Hello, I wonder, is there a way to apply settings to indices when transitioning betwen ILM phases? My motivation is that I would like my cold indices to have longer index.unassigned.node\_left.delayed\_timeout than the h…

---

## [How to sort buckets in Elasticsearch on their first occurrence in a search](https://discuss.elastic.co/t/how-to-sort-buckets-in-elasticsearch-on-their-first-occurrence-in-a-search/306776)

<div class="topic-metadata">

**Author:** [@Peter\_Dewachtere](https://discuss.elastic.co/u/Peter_Dewachtere)\
**Replies:** 0\
**Last updated:** [June 9, 2022, 9:24am UTC](https://discuss.elastic.co/t/how-to-sort-buckets-in-elasticsearch-on-their-first-occurrence-in-a-search/306776 "2022-06-09T09:24:29Z")

</div>

I have an Elasticsearch query (version 7) that returns a paged result of products. The query has a specific sort on multiple fields: Product A - image 1 Product B - image 1 Product C - image 2 Product D - image 2 Prod…

---

## [Why does elasticsearch assign shards to cold nodes?](https://discuss.elastic.co/t/why-does-elasticsearch-assign-shards-to-cold-nodes/306774)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 0\
**Last updated:** [June 9, 2022, 9:04am UTC](https://discuss.elastic.co/t/why-does-elasticsearch-assign-shards-to-cold-nodes/306774 "2022-06-09T09:04:19Z")

</div>

elk: 7.17.3 01-03 nodes I want to use for hot data search and storage and 04-05 nodes as cold and frozen nodes. I have read the es documentation. By default, the data of the collector will be sent to the data\_content n…

---

## [Elastic Search nodes spitting Unrecognized SSL message error](https://discuss.elastic.co/t/elastic-search-nodes-spitting-unrecognized-ssl-message-error/306720)

<div class="topic-metadata">

**Author:** [@krishnav1](https://discuss.elastic.co/u/krishnav1)\
**Replies:** 3\
**Last updated:** [June 9, 2022, 7:34am UTC](https://discuss.elastic.co/t/elastic-search-nodes-spitting-unrecognized-ssl-message-error/306720 "2022-06-09T07:34:43Z")

</div>

Hello, I have Elasticsearch installed along with Fluentbit and Kibana in our kubernetes cluster. Of late, We have a heavy loss of logs from the kubernetes nodes to the elastic indices and there by Kibana. I have been n…

---

## [Need help with special character search](https://discuss.elastic.co/t/need-help-with-special-character-search/306692)

<div class="topic-metadata">

**Author:** [@Kapil.Lanjewar](https://discuss.elastic.co/u/Kapil.Lanjewar)\
**Replies:** 8\
**Last updated:** [June 9, 2022, 7:12am UTC](https://discuss.elastic.co/t/need-help-with-special-character-search/306692 "2022-06-09T07:12:14Z")

</div>

I have difficulties searching the special characters from my documents. One of the attribute of the document - "phrase" - contains special characters. Its value is -\> "The 2 QUICK Brown-Foxes jumped over the lazy dog's…

---

## [Snapshot Estimate](https://discuss.elastic.co/t/snapshot-estimate/306742)

<div class="topic-metadata">

**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 9:50pm UTC](https://discuss.elastic.co/t/snapshot-estimate/306742 "2022-06-08T21:50:55Z")

</div>

Hi all , In order to take snapshot of index whose size is around 2 TB , how should i set { Chunk size max\_restore\_bytes\_per\_sec max\_snapshot\_bytes\_per\_sec } these parameters to get optimal and maximum performance …

---

## [Active - Active Cross Cluster Replication](https://discuss.elastic.co/t/active-active-cross-cluster-replication/306298)

<div class="topic-metadata">

**Author:** [@cagdasalagoz](https://discuss.elastic.co/u/cagdasalagoz)\
**Replies:** 4\
**Last updated:** [June 9, 2022, 6:30am UTC](https://discuss.elastic.co/t/active-active-cross-cluster-replication/306298 "2022-06-09T06:30:03Z")

</div>

Hello World! I am trying to come up with a configuration for disaster recovery for our elastic stack. We have two data-centers(DC1 and DC2) in separate cities and both will be up and running at the same time. If a prob…

---

## [Can i recover cert folder in elastic search?](https://discuss.elastic.co/t/can-i-recover-cert-folder-in-elastic-search/306602)

<div class="topic-metadata">

**Author:** [@akshay\_bhardwaj](https://discuss.elastic.co/u/akshay_bhardwaj)\
**Replies:** 6\
**Last updated:** [June 9, 2022, 4:22am UTC](https://discuss.elastic.co/t/can-i-recover-cert-folder-in-elastic-search/306602 "2022-06-09T04:22:44Z")

</div>

By mistake i deleted the cert folder present in config folder of Elasticsearch is there any command so i can recover below certificates:- transport.p12 http.p12

---

## [How to query multiple fileds in Kibana](https://discuss.elastic.co/t/how-to-query-multiple-fileds-in-kibana/306611)

<div class="topic-metadata">

**Author:** [@dev9](https://discuss.elastic.co/u/dev9)\
**Replies:** 22\
**Last updated:** [June 9, 2022, 12:41am UTC](https://discuss.elastic.co/t/how-to-query-multiple-fileds-in-kibana/306611 "2022-06-09T00:41:10Z")

</div>

Hi, I am trying to query kibana for multiple fields where the servicename is serviceworker and the correlationId is one of many. My understanding is using terms is the best option here but I cannot get this query to wo…

---

## [Elastic search snapshot size estimate](https://discuss.elastic.co/t/elastic-search-snapshot-size-estimate/306553)

<div class="topic-metadata">

**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\
**Replies:** 0\
**Last updated:** [June 7, 2022, 10:39am UTC](https://discuss.elastic.co/t/elastic-search-snapshot-size-estimate/306553 "2022-06-07T10:39:27Z")

</div>

Continuing the discussion from Elasticsearch Snapshot repository size estimates: Continuing the discussion can someone with experience comment on this ? How much memory should I have assuming my data grows from 200 gb …

---

## [Elasticsearch 6.3.2 rolling upgrade to 6.8.22, should the application elasticsearch-rest-high-level-client be upgraded to 6.8.22](https://discuss.elastic.co/t/elasticsearch-6-3-2-rolling-upgrade-to-6-8-22-should-the-application-elasticsearch-rest-high-level-client-be-upgraded-to-6-8-22/306645)

<div class="topic-metadata">

**Author:** [@qiuxb](https://discuss.elastic.co/u/qiuxb)\
**Replies:** 1\
**Last updated:** [June 8, 2022, 11:55pm UTC](https://discuss.elastic.co/t/elasticsearch-6-3-2-rolling-upgrade-to-6-8-22-should-the-application-elasticsearch-rest-high-level-client-be-upgraded-to-6-8-22/306645 "2022-06-08T23:55:18Z")

</div>

Refer to an official article： The 6.0 client is able to communicate with any 6.x Elasticsearch node, while the 6.1 client is for sure able to communicate with 6.1, 6.2 and any later 6.x version, but there may be incomp…

---

## [Repository verification exception while using S3 repo](https://discuss.elastic.co/t/repository-verification-exception-while-using-s3-repo/306649)

<div class="topic-metadata">

**Author:** [@Pallavi\_Chaudhari](https://discuss.elastic.co/u/Pallavi_Chaudhari)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 7:51am UTC](https://discuss.elastic.co/t/repository-verification-exception-while-using-s3-repo/306649 "2022-06-08T07:51:23Z")

</div>

Hi All, I am trying to use s3 plugin for backup and restore, please find the details below I have create IBM COS bucket which is s3 compatible and created access and secret key I have added s3.client.default.endpoint …

---

## [Getting this error java.lang.ClassNotFoundException: jakarta.json.JsonException](https://discuss.elastic.co/t/getting-this-error-java-lang-classnotfoundexception-jakarta-json-jsonexception/306734)

<div class="topic-metadata">

**Author:** [@Bhavya\_Dawar](https://discuss.elastic.co/u/Bhavya_Dawar)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 5:55pm UTC](https://discuss.elastic.co/t/getting-this-error-java-lang-classnotfoundexception-jakarta-json-jsonexception/306734 "2022-06-08T17:55:49Z")

</div>

Failed to instantiate \[co.elastic.clients.Elasticsearch.ElasticsearchClient\]: Factory method 'client' threw exception; nested exception is java.lang.NoClassDefFoundError: jakarta/json/JsonException @Bean public Elastic…

---

## [Deloy on AKS Elastic stack](https://discuss.elastic.co/t/deloy-on-aks-elastic-stack/306731)

<div class="topic-metadata">

**Author:** [@vladimir\_petukhov](https://discuss.elastic.co/u/vladimir_petukhov)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 5:40pm UTC](https://discuss.elastic.co/t/deloy-on-aks-elastic-stack/306731 "2022-06-08T17:40:13Z")

</div>

I tried to deploy on Azure Kubernetes Elastic stack following this example ELASTIC.IO.I want to get logs from mine.Net6 WebApi.For logger I use Serilog. I was made docker-compose to run the elastic stack on the local doc…

---

## [Fscrawler \_settings.yaml nodes settings](https://discuss.elastic.co/t/fscrawler-settings-yaml-nodes-settings/306717)

<div class="topic-metadata">

**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 2:47pm UTC](https://discuss.elastic.co/t/fscrawler-settings-yaml-nodes-settings/306717 "2022-06-08T14:47:54Z")

</div>

We have a cluster of 7 nodes (ES 7.10). We run 5 Fscrawlers on 2 other separate servers. In the nodes section of \_settings.yaml At present we have the 7 IP addresses of the 7 nodes listed in ascending order on each of…

---

## [PIT on alias with filter](https://discuss.elastic.co/t/pit-on-alias-with-filter/306715)

<div class="topic-metadata">

**Author:** [@mhugo](https://discuss.elastic.co/u/mhugo)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 2:42pm UTC](https://discuss.elastic.co/t/pit-on-alias-with-filter/306715 "2022-06-08T14:42:28Z")

</div>

Hi, I am trying to understand the resource demand for pagination queries over large datasets using search\_after and a Point-In-Time. The application I work on exposes "datasets" to its customers. These datasets may be …

---

## [esrally.exceptions.LaunchError: Daemon startup failed with exit code \[1\] on Elasticsearch post 8.0.0 version](https://discuss.elastic.co/t/esrally-exceptions-launcherror-daemon-startup-failed-with-exit-code-1-on-elasticsearch-post-8-0-0-version/306714)

<div class="topic-metadata">

**Author:** [@Gsqsf](https://discuss.elastic.co/u/Gsqsf)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 2:40pm UTC](https://discuss.elastic.co/t/esrally-exceptions-launcherror-daemon-startup-failed-with-exit-code-1-on-elasticsearch-post-8-0-0-version/306714 "2022-06-08T14:40:08Z")

</div>

Similar to the problem esrally.exceptions.LaunchError: Daemon startup failed with exit code \[1\] I had the error code esrally.exceptions.LaunchError: Daemon startup failed with exit code \[1\] with the command: esrally ra…

---

## [Are these reasonable/expected metrics for an idle cluster?](https://discuss.elastic.co/t/are-these-reasonable-expected-metrics-for-an-idle-cluster/306644)

<div class="topic-metadata">

**Author:** [@AS11](https://discuss.elastic.co/u/AS11)\
**Replies:** 0\
**Last updated:** [June 8, 2022, 7:30am UTC](https://discuss.elastic.co/t/are-these-reasonable-expected-metrics-for-an-idle-cluster/306644 "2022-06-08T07:30:16Z")

</div>

For an idle 3-node cluster (7.17.4), where all nodes are masters, i.e. listed under initial\_master\_nodes, is it normal that: Documents merged rate, red-bordered on the image below, would be on the order of 1000/s on a…

---

## [Remove documents with existing value in given field](https://discuss.elastic.co/t/remove-documents-with-existing-value-in-given-field/306572)

<div class="topic-metadata">

**Author:** [@fran\_hernandez](https://discuss.elastic.co/u/fran_hernandez)\
**Replies:** 4\
**Last updated:** [June 8, 2022, 1:09pm UTC](https://discuss.elastic.co/t/remove-documents-with-existing-value-in-given-field/306572 "2022-06-08T13:09:33Z")

</div>

Hello, I am trying to delete or pipe (Delete), an event that already has the same indexed value for a given field. The scenario is as follows: I have a fleet server and an agent to fetch logs from AD Server, Windows f…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=426)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=428)
