# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=440 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 441 --- ## [Task cancelled warning message on elastic master node](https://discuss.elastic.co/t/task-cancelled-warning-message-on-elastic-master-node/304838)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 6:59pm UTC](https://discuss.elastic.co/t/task-cancelled-warning-message-on-elastic-master-node/304838 "2022-05-16T18:59:00Z")
Hello guys, My master node is printing the following warning message quite frequently: \[2022-05-16T16:03:39,712\]\[WARN \]\[r.suppressed \] \[loganshrdb03s\] path: /\_xpack/usage, params: {} java.util.concurrent.Ca… --- ## [.NET Client Connection Issue](https://discuss.elastic.co/t/net-client-connection-issue/304830)
**Author:** [@Zee\_Grinch](https://discuss.elastic.co/u/Zee_Grinch)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 3:14pm UTC](https://discuss.elastic.co/t/net-client-connection-issue/304830 "2022-05-16T15:14:17Z")
NEST/Elasticsearch.Net version : 7.17.1 Elasticsearch version : 7.16.2 (standalone instance) .NET runtime version : Framework 4.7.1 Operating system version : Windows 10 ENT (build 19042) Description of the problem i… --- ## [Elasticsearch cluster](https://discuss.elastic.co/t/elasticsearch-cluster/304760)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster/304760 "2022-05-16T15:06:33Z")
Hi, a little confused reading the documentation on creating a cluster https://www.elastic.co/guide/en/elasticsearch/reference/7.17/high-availability-cluster-small-clusters.html#high-availability-cluster-design-two-nodes … --- ## [How are Index Limits Reached?](https://discuss.elastic.co/t/how-are-index-limits-reached/304489)
**Author:** [@ezekiel.buck](https://discuss.elastic.co/u/ezekiel.buck)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 2:08pm UTC](https://discuss.elastic.co/t/how-are-index-limits-reached/304489 "2022-05-16T14:08:11Z")
I'm attempting to estimate a reasonable limit to the index mappings variable and I'm in dire need of knowledge regarding what all contributes to the limit (I've read field/object mappings and field aliases go toward this… --- ## [Fleet Missing API key](https://discuss.elastic.co/t/fleet-missing-api-key/304818)
**Author:** [@Samiul008](https://discuss.elastic.co/u/Samiul008)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 12:26pm UTC](https://discuss.elastic.co/t/fleet-missing-api-key/304818 "2022-05-16T12:26:25Z")
Hello Community! I have been trying to install FLEET server for Elasticsearch 7.14.2 My Elasticsearch is configured with self-signed certificate and is functional with kibana=7.14.2 as well. However, I am unable to ins… --- ## [Exists field not working on a newly added field](https://discuss.elastic.co/t/exists-field-not-working-on-a-newly-added-field/304812)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:14pm UTC](https://discuss.elastic.co/t/exists-field-not-working-on-a-newly-added-field/304812 "2022-05-16T12:14:00Z")
hi, I am using 7.16.3 ES on windows 2012. I added a new date field to existing index. I then ran \_bulk update to add the field on some existing documents. Now, when I when query the individual document, I can see the ne… --- ## [Anomaly registered, but no Alarm Recevied](https://discuss.elastic.co/t/anomaly-registered-but-no-alarm-recevied/304667)
**Author:** [@Shahzaib\_Abid](https://discuss.elastic.co/u/Shahzaib_Abid)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 11:15am UTC](https://discuss.elastic.co/t/anomaly-registered-but-no-alarm-recevied/304667 "2022-05-16T11:15:02Z")
I have an ML job running and for the case below, it registered anomalies but then stopped reading it and thus did not send me an alarm (via watcher which uses averages over a certain time) despite satisfying all the cond… --- ## [Create lifecycle policy with Java API client](https://discuss.elastic.co/t/create-lifecycle-policy-with-java-api-client/304383)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 10:29am UTC](https://discuss.elastic.co/t/create-lifecycle-policy-with-java-api-client/304383 "2022-05-16T10:29:04Z")
Hi, Can someone tell me how to write this lifecycle policy test with the new Java API client? It is completely unclear to me. By the way, is there more extensive documentation on how to use the Java API client? The cod… --- ## [How to pass a parameter to a script attached to a runtime field](https://discuss.elastic.co/t/how-to-pass-a-parameter-to-a-script-attached-to-a-runtime-field/303348)
**Author:** [@frankmontyne](https://discuss.elastic.co/u/frankmontyne)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 10:25am UTC](https://discuss.elastic.co/t/how-to-pass-a-parameter-to-a-script-attached-to-a-runtime-field/303348 "2022-05-16T10:25:04Z")
Hi, Can anyone help me how to pass a parameter to a script attached to a runtime field? With scripted fields 'params' can be used to get to the parameters passed to the script but for runtime fields this does not seem t… --- ## [Anomaly detection record score error](https://discuss.elastic.co/t/anomaly-detection-record-score-error/304403)
**Author:** [@zerojin63](https://discuss.elastic.co/u/zerojin63)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 9:54am UTC](https://discuss.elastic.co/t/anomaly-detection-record-score-error/304403 "2022-05-16T09:54:22Z")
Hi, I've got a question regarding the scoring system of ELK anomaly detection. I've been running a job with 'high\_sum' detector, and there was an anomaly with record score 99 but actual value of the sum of the field wa… --- ## [Elastic search queries working for \_search endpoint are not working for query DSL filter in Kibana](https://discuss.elastic.co/t/elastic-search-queries-working-for-search-endpoint-are-not-working-for-query-dsl-filter-in-kibana/304569)
**Author:** [@Noman\_Saleem](https://discuss.elastic.co/u/Noman_Saleem)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 8:33am UTC](https://discuss.elastic.co/t/elastic-search-queries-working-for-search-endpoint-are-not-working-for-query-dsl-filter-in-kibana/304569 "2022-05-16T08:33:46Z")
Hi, I am trying to run the query on query DSL Kibana but its not working but the same query is working for the \_search endpoint. Here is the query. { "size": 0, "query": { "range": { "timest… --- ## [Cisco IOS logging - help required](https://discuss.elastic.co/t/cisco-ios-logging-help-required/303957)
**Author:** [@yelloyonder](https://discuss.elastic.co/u/yelloyonder)\ **Replies:** 8\ **Last updated:** [May 16, 2022, 7:49am UTC](https://discuss.elastic.co/t/cisco-ios-logging-help-required/303957 "2022-05-16T07:49:30Z")
Hi, I'm trying to ingest IOS switch logs into Elasticsearch, but I feel like I'm missing out on how this all works (I'm not a network engineer which may explain it!) We're using Elastic cloud and Fleets Cisco IOS integ… --- ## [Should inside must for multiple or conditions, not working as expected](https://discuss.elastic.co/t/should-inside-must-for-multiple-or-conditions-not-working-as-expected/304787)
**Author:** [@Daniel\_Garcia](https://discuss.elastic.co/u/Daniel_Garcia)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 7:24am UTC](https://discuss.elastic.co/t/should-inside-must-for-multiple-or-conditions-not-working-as-expected/304787 "2022-05-16T07:24:43Z")
Let me explain my problem through the different cases I have. With this query, with no filters applied, I receive results for both programs (each one belonging to each different index): confess-chrome && http-down-burst… --- ## [How to uninstall Elastic search 8.0 version in windows](https://discuss.elastic.co/t/how-to-uninstall-elastic-search-8-0-version-in-windows/304721)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 4:01am UTC](https://discuss.elastic.co/t/how-to-uninstall-elastic-search-8-0-version-in-windows/304721 "2022-05-16T04:01:33Z")
I want to uninstall Elasticsearch 8.0 version in Windows . Is there a Command that i can use to have it uninstalled completely . Thnks --- ## [ILM Error- Added Delete phase](https://discuss.elastic.co/t/ilm-error-added-delete-phase/304769)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 2:40am UTC](https://discuss.elastic.co/t/ilm-error-added-delete-phase/304769 "2022-05-16T02:40:43Z")
Hello I've updated my logstash policy to include the delete phase but I'm getting an error curl -XGET localhost:9200/\_ilm/policy/logstash-policy?pretty { "logstash-policy" : { "version" : 5, "modified\_date" :… --- ## [Memory locking requested for elasticsearch process but memory is not locked](https://discuss.elastic.co/t/memory-locking-requested-for-elasticsearch-process-but-memory-is-not-locked/304655)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 1:53am UTC](https://discuss.elastic.co/t/memory-locking-requested-for-elasticsearch-process-but-memory-is-not-locked/304655 "2022-05-16T01:53:54Z")
i am enabling bootstrap.memory\_lock: true on kubrnetes deployment of elastic multi node cluster. getting below error. Tried with this one #Set memlock limit - name: memlock-limit image: busybox im… --- ## [Data tier between two cluster](https://discuss.elastic.co/t/data-tier-between-two-cluster/304428)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 12:37am UTC](https://discuss.elastic.co/t/data-tier-between-two-cluster/304428 "2022-05-16T00:37:34Z")
maybe you know a method (is it even possible) to merge clusters? so that from the first data center it transfers data to the second cluster as data\_cold? --- ## [Why is the response of the \_analyze API not consistent?](https://discuss.elastic.co/t/why-is-the-response-of-the-analyze-api-not-consistent/304464)
**Author:** [@sandragergawi](https://discuss.elastic.co/u/sandragergawi)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 12:31pm UTC](https://discuss.elastic.co/t/why-is-the-response-of-the-analyze-api-not-consistent/304464 "2022-05-11T12:31:14Z")
Hi! We are using Elasticsearch 7.10.2 and we noticed that the response received when the {indexName}/\_analyze API is called repetitively with the same request, is sometimes different. For instance, given the following … --- ## [Removed support fields on body for POST request for field\_caps API](https://discuss.elastic.co/t/removed-support-fields-on-body-for-post-request-for-field-caps-api/304765)
**Author:** [@Oleksandr\_Priadko](https://discuss.elastic.co/u/Oleksandr_Priadko)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 12:33am UTC](https://discuss.elastic.co/t/removed-support-fields-on-body-for-post-request-for-field-caps-api/304765 "2022-05-16T00:33:07Z")
On ES v 6.4 API like that { "fields" : \["rating"\] } was deprecated and removed on v 7.x Now I have to use only URI fields request GET /\/\_field\_caps?fields=\ POST /\/\_field\_caps?fields=\ **Author:** [@Nishad\_Angre](https://discuss.elastic.co/u/Nishad_Angre)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:32am UTC](https://discuss.elastic.co/t/split-index-api-issues/304551 "2022-05-16T00:32:27Z") Hi, I have done a split index query on one of the filebeat indices. What I observe is, as the documentation mentions (Split index API | Elasticsearch Guide \[8.2\] | Elastic) once the documents are copied into another s… --- ## [Data is imported into ES in batches, and it can be queried after four minutes](https://discuss.elastic.co/t/data-is-imported-into-es-in-batches-and-it-can-be-queried-after-four-minutes/304664)
**Author:** [@halfbook](https://discuss.elastic.co/u/halfbook)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:27am UTC](https://discuss.elastic.co/t/data-is-imported-into-es-in-batches-and-it-can-be-queried-after-four-minutes/304664 "2022-05-16T00:27:24Z")
I'm currently maintaining a project for my company. The project uses a python script to import data into ES every minute. The response of importing data is returned successfully, but the data that is four minutes ago can… --- ## [If I search for more than 30days data getting the below error. Please advise where to change the "Search.max\_buckets" value?](https://discuss.elastic.co/t/if-i-search-for-more-than-30days-data-getting-the-below-error-please-advise-where-to-change-the-search-max-buckets-value/304694)
**Author:** [@ARAVINTH](https://discuss.elastic.co/u/ARAVINTH)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 12:26am UTC](https://discuss.elastic.co/t/if-i-search-for-more-than-30days-data-getting-the-below-error-please-advise-where-to-change-the-search-max-buckets-value/304694 "2022-05-16T00:26:02Z")
{ "request": {}, "response": {}, "body": { "statusCode": 503, "error": "Service Unavailable", "message": "search\_phase\_execution\_exception", "attributes": { "error": { "root\_cause": , "type": "search\_phase\_exec… --- ## [Updating from 6.8 to 7.10](https://discuss.elastic.co/t/updating-from-6-8-to-7-10/304702)
**Author:** [@luciana](https://discuss.elastic.co/u/luciana)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:23am UTC](https://discuss.elastic.co/t/updating-from-6-8-to-7-10/304702 "2022-05-16T00:23:37Z")
I'm about to upgrade my elastic stack from 6.8 to 7.10 and I have a question for which I can't find the answer to online. Should I check all the breaking changes from all the minor versions between these two, or should I… --- ## [Failed to determine the health of the cluster running](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster-running/304748)
**Author:** [@111273](https://discuss.elastic.co/u/111273)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:19am UTC](https://discuss.elastic.co/t/failed-to-determine-the-health-of-the-cluster-running/304748 "2022-05-16T00:19:27Z")
Hi I have error master\_discovery\_exception and change password bundle user. Please have solution this case. Elasticsearch.yml cluster.name: rpa-Elasticsearch-test http.port: 9200 node.data: true node.master: true … --- ## [Terms query vs lot of term queries](https://discuss.elastic.co/t/terms-query-vs-lot-of-term-queries/304762)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 0\ **Last updated:** [May 15, 2022, 9:27pm UTC](https://discuss.elastic.co/t/terms-query-vs-lot-of-term-queries/304762 "2022-05-15T21:27:54Z")
Does a terms query with n terms ORd together takes less computational resource than n separate term query? Or does ES / Lucene? internally rewrites the ORd terms to n term query? Ty! --- ## [Elastic-Agent - metricbeat x509 certificate signed by unknown authority](https://discuss.elastic.co/t/elastic-agent-metricbeat-x509-certificate-signed-by-unknown-authority/304735)
**Author:** [@KelvUK](https://discuss.elastic.co/u/KelvUK)\ **Replies:** 1\ **Last updated:** [May 15, 2022, 5:04pm UTC](https://discuss.elastic.co/t/elastic-agent-metricbeat-x509-certificate-signed-by-unknown-authority/304735 "2022-05-15T17:04:13Z")
I've elastic-agent running as a docker container configured as the fleet-server. The fleet-server registers without issue and can receive policy updates. However I'm getting no data from the metricbeat component of the… --- ## [Elasticsearch pod stuck when node scale down and up](https://discuss.elastic.co/t/elasticsearch-pod-stuck-when-node-scale-down-and-up/304200)
**Author:** [@devopsdymyr](https://discuss.elastic.co/u/devopsdymyr)\ **Replies:** 1\ **Last updated:** [May 15, 2022, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-pod-stuck-when-node-scale-down-and-up/304200 "2022-05-15T15:31:41Z")
Hi team, I have installed elasticsearch in my EKS cluster using helm chart with PVC (gp2)and worked fine and tried to scaling down EKS nodegroup and scale up Nodegroup . all my pods went to pending state (base) devops@… --- ## [Elasticsearch query on specific key](https://discuss.elastic.co/t/elasticsearch-query-on-specific-key/304731)
**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\ **Replies:** 7\ **Last updated:** [May 14, 2022, 5:44pm UTC](https://discuss.elastic.co/t/elasticsearch-query-on-specific-key/304731 "2022-05-14T17:44:25Z")
Suppose I have these 3 docs in Elasticsearch { id: "1", eventName: "ShipmentLoaded" }, { id: "1", eventName: "ShipmentPlanned" }, { id: "2", eventName: "ShipmentLoaded" } I want to retrieve the … --- ## [Match query](https://discuss.elastic.co/t/match-query/304310)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 10\ **Last updated:** [May 14, 2022, 4:07pm UTC](https://discuss.elastic.co/t/match-query/304310 "2022-05-14T16:07:30Z")
Can we add fields to match query like multi\_match , I can't add fuzziness to multi\_match with type phrase. I need to know how to add fields in match , if it can I can easily add fuzziness to fields in match query. --- ## [How to Parse Log to Get IP Address](https://discuss.elastic.co/t/how-to-parse-log-to-get-ip-address/304690)
**Author:** [@Dhia\_Saibi](https://discuss.elastic.co/u/Dhia_Saibi)\ **Replies:** 10\ **Last updated:** [May 14, 2022, 2:35pm UTC](https://discuss.elastic.co/t/how-to-parse-log-to-get-ip-address/304690 "2022-05-14T14:35:24Z")
Hello I've been stuck in a problem for 3 days now..I am trying to alert on new IP address but the format of log file is not helping me so I've used a pipeline to parse the log with grok %{NUMBER:bytes} %{IP:client}… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=439) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=441)