# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=443 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 444 --- ## [Certificate revocation list checking](https://discuss.elastic.co/t/certificate-revocation-list-checking/303939)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 10:19am UTC](https://discuss.elastic.co/t/certificate-revocation-list-checking/303939 "2022-05-11T10:19:24Z")
Hi, I didn't find any topic that would give me a definitive answer. Also, I'm not that good at how certifications work at this level. I was thinking about creating a new set of certificates for my Elastic cluster and I… --- ## [Adding data to Elasticsearch datastreams using nodejs](https://discuss.elastic.co/t/adding-data-to-elasticsearch-datastreams-using-nodejs/304449)
**Author:** [@Aisha\_Deshmukh](https://discuss.elastic.co/u/Aisha_Deshmukh)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 10:11am UTC](https://discuss.elastic.co/t/adding-data-to-elasticsearch-datastreams-using-nodejs/304449 "2022-05-11T10:11:58Z")
Hi, can someone help me with inserting logs into datastream using nodejs? Thanks in advance. --- ## [Merging 2 log lines into 1](https://discuss.elastic.co/t/merging-2-log-lines-into-1/304370)
**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\ **Replies:** 5\ **Last updated:** [May 11, 2022, 8:31am UTC](https://discuss.elastic.co/t/merging-2-log-lines-into-1/304370 "2022-05-11T08:31:20Z")
Hi, I am looking at 2 indices that have 1 field in common and then different fields. Would it be possible to merge them into 1 log line using the similar field? Using the example above, both lines have the same value… --- ## [Logstash Multi Output and selective Information](https://discuss.elastic.co/t/logstash-multi-output-and-selective-information/304431)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 8:25am UTC](https://discuss.elastic.co/t/logstash-multi-output-and-selective-information/304431 "2022-05-11T08:25:40Z")
input { http { host =\> "0.0.0.0" # default: 0.0.0.0 port =\> 0000 # default: 8080 } } filter { urldecode { all\_fields =\> true } } filter { mutate { gsub =\> \[ "message", "\\\]", "}", "message", "\\\[", "{" \] } … --- ## [\_tier\_preference setting](https://discuss.elastic.co/t/tier-preference-setting/303907)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 8:03am UTC](https://discuss.elastic.co/t/tier-preference-setting/303907 "2022-05-11T08:03:14Z")
Hi Can You explain me why below index showing \_tier\_preference": "data\_cold,data\_warm,data\_hot" after moving from data warm to data cold tier? I need to store such kind of index due to life policy only in particular dat… --- ## [.Net client socket error after many inserts](https://discuss.elastic.co/t/net-client-socket-error-after-many-inserts/304088)
**Author:** [@r03](https://discuss.elastic.co/u/r03)\ **Replies:** 3\ **Last updated:** [May 10, 2022, 3:47pm UTC](https://discuss.elastic.co/t/net-client-socket-error-after-many-inserts/304088 "2022-05-10T15:47:35Z")
I'm trying to create documents in Elastic with the .Net client. (7.17.1 on server 8.1.3) This works, but on the first sync I have many documents and after a lot of successul inserts the elastic client stops working. I … --- ## [Wildcards in Document filters](https://discuss.elastic.co/t/wildcards-in-document-filters/304326)
**Author:** [@Anfo](https://discuss.elastic.co/u/Anfo)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 2:39am UTC](https://discuss.elastic.co/t/wildcards-in-document-filters/304326 "2022-05-11T02:39:01Z")
Hi Everything tells me that simple asterisk should work for a wildcard in a filter, but I'm finding it temperamental. Please see picture below. Sometimes it appears to work, other times ignored. Am I merely structur… --- ## [Deleted documents reappearing in searches, how to write unit tests for this?](https://discuss.elastic.co/t/deleted-documents-reappearing-in-searches-how-to-write-unit-tests-for-this/304396)
**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\ **Replies:** 3\ **Last updated:** [May 11, 2022, 1:48am UTC](https://discuss.elastic.co/t/deleted-documents-reappearing-in-searches-how-to-write-unit-tests-for-this/304396 "2022-05-11T01:48:02Z")
Hello I have a simple CRUD app that reads and writes to Elasticsearch, I am up to writing some unit tests for the app, which involves creating dummy data, checking I can search for the data and then deleting the data. I… --- ## [Can I print all fields in one index?](https://discuss.elastic.co/t/can-i-print-all-fields-in-one-index/304400)
**Author:** [@111418](https://discuss.elastic.co/u/111418)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 1:32am UTC](https://discuss.elastic.co/t/can-i-print-all-fields-in-one-index/304400 "2022-05-11T01:32:13Z")
Can I print all fields in one index in 7.12? I want to know all the name of fields. Thanks --- ## [Unexpected JSON event 'VALUE\_TRUE' instead of '\[KEY\_NAME, VALUE\_STRING\]' on 7.17.3](https://discuss.elastic.co/t/unexpected-json-event-value-true-instead-of-key-name-value-string-on-7-17-3/304398)
**Author:** [@wxh](https://discuss.elastic.co/u/wxh)\ **Replies:** 0\ **Last updated:** [May 11, 2022, 12:38am UTC](https://discuss.elastic.co/t/unexpected-json-event-value-true-instead-of-key-name-value-string-on-7-17-3/304398 "2022-05-11T00:38:20Z")
Hello, Sylvain Wallez, This is to follow up \[JAVA\] Unexpected JSON event 'VALUE\_TRUE' instead of '\[KEY\_NAME, VALUE\_STRING\]' - #12 by swallez which was already closed. Per Serialize DynamicMapping values as booleans ins… --- ## [Reindex data streams "in place"](https://discuss.elastic.co/t/reindex-data-streams-in-place/304365)
**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\ **Replies:** 1\ **Last updated:** [May 10, 2022, 10:20pm UTC](https://discuss.elastic.co/t/reindex-data-streams-in-place/304365 "2022-05-10T22:20:59Z")
Hi, I have many data streams totaling... a lot... of space and I need to change the mapping of a few existing fields. What would be a decent strategy for re-indexing several dozen data streams consisting of several hun… --- ## [New line not parsed in grok processor](https://discuss.elastic.co/t/new-line-not-parsed-in-grok-processor/304285)
**Author:** [@NadyLeez123](https://discuss.elastic.co/u/NadyLeez123)\ **Replies:** 2\ **Last updated:** [May 10, 2022, 9:37pm UTC](https://discuss.elastic.co/t/new-line-not-parsed-in-grok-processor/304285 "2022-05-10T21:37:15Z")
Hi We just upgrade our cluster from 7.6.2 to 7.15.1 and pipeline are not working anymore. For example, this grok pattern was working well with the "\\n" to parse the new line in the message. But now, here is what we… --- ## [Terraform + ec2 discovery (AWS) initial master s](https://discuss.elastic.co/t/terraform-ec2-discovery-aws-initial-master-s/304385)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 0\ **Last updated:** [May 10, 2022, 7:00pm UTC](https://discuss.elastic.co/t/terraform-ec2-discovery-aws-initial-master-s/304385 "2022-05-10T19:00:37Z")
I'd like to create a small ES cluster in AWS with Terraform. Does anybody have prior experience/a working example where Terraform instantiates 3 master nodes that can connect to each other? The problem is that for boot… --- ## [Regarding implementing knn for geo-points](https://discuss.elastic.co/t/regarding-implementing-knn-for-geo-points/304384)
**Author:** [@dido](https://discuss.elastic.co/u/dido)\ **Replies:** 0\ **Last updated:** [May 10, 2022, 6:47pm UTC](https://discuss.elastic.co/t/regarding-implementing-knn-for-geo-points/304384 "2022-05-10T18:47:57Z")
Let's say I have an index of geo-json data of restaurants and another index of geo-json data of pharmacies. If I want to get all pharmacies having restaurant with in 100m, How can I do that. Taking each pharmacies coordi… --- ## [Need to delete Elastic search index after 15 days automatically](https://discuss.elastic.co/t/need-to-delete-elastic-search-index-after-15-days-automatically/304266)
**Author:** [@Sam1231](https://discuss.elastic.co/u/Sam1231)\ **Replies:** 2\ **Last updated:** [May 10, 2022, 5:15pm UTC](https://discuss.elastic.co/t/need-to-delete-elastic-search-index-after-15-days-automatically/304266 "2022-05-10T17:15:15Z")
hi, i need to delete Elasticsearch indices after 15 days of creation date. i need to automate this process using python. is there any script for the same ? im running AWS based Elasticsearch. version 6.4 --- ## [Cannot DELETE Index with Superuser](https://discuss.elastic.co/t/cannot-delete-index-with-superuser/303249)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 2\ **Last updated:** [May 10, 2022, 2:08pm UTC](https://discuss.elastic.co/t/cannot-delete-index-with-superuser/303249 "2022-05-10T14:08:22Z")
Hello, I have a problem on my Elasticsearch, i cannot delete an index with a superuser : I have some .reporting index, and i want to apply an ILM to this index because i dont need the old .reportng index. After changi… --- ## [Query with multiple Should nested](https://discuss.elastic.co/t/query-with-multiple-should-nested/304324)
**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 1\ **Last updated:** [May 10, 2022, 12:30pm UTC](https://discuss.elastic.co/t/query-with-multiple-should-nested/304324 "2022-05-10T12:30:40Z")
Hello, I am trying to get a query where I can make a nested should without using nested fields. Example: GET index1/\_search { "query": { "bool": { "should": \[ {"term": {"name": "mike"}}, {… --- ## [Create scrpit to add field calling API](https://discuss.elastic.co/t/create-scrpit-to-add-field-calling-api/303921)
**Author:** [@wdffw](https://discuss.elastic.co/u/wdffw)\ **Replies:** 2\ **Last updated:** [May 10, 2022, 10:11am UTC](https://discuss.elastic.co/t/create-scrpit-to-add-field-calling-api/303921 "2022-05-10T10:11:35Z")
Hello, I wand a add a field by a painless (or another scripting language) to call an API data and show the result in the field by emit for example ??? To be more clearly exactly, for example i have an API http://xxx.xx… --- ## [Check Point Elastic Agent](https://discuss.elastic.co/t/check-point-elastic-agent/304295)
**Author:** [@elasticnoobie](https://discuss.elastic.co/u/elasticnoobie)\ **Replies:** 2\ **Last updated:** [May 10, 2022, 8:58am UTC](https://discuss.elastic.co/t/check-point-elastic-agent/304295 "2022-05-10T08:58:44Z")
I'm working on setting up an elastic installation and forwarding all Check Point logs via Elastic Agent integration. I have setup Fleet, created the Agent Policy and installed the Elastic Agent on the Check Point managem… --- ## [Joining 2 index patterns into 1](https://discuss.elastic.co/t/joining-2-index-patterns-into-1/304140)
**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\ **Replies:** 2\ **Last updated:** [May 10, 2022, 8:42am UTC](https://discuss.elastic.co/t/joining-2-index-patterns-into-1/304140 "2022-05-10T08:42:33Z")
Hi, If I have 2 separate index patterns, is it possible to merge them into 1 index pattern that contains both/all the data. Or if that is not possible, is there a way to take the data contained in both and create a new… --- ## [Elasticsearch index mapping causing unhashable type: 'HTMLNode'](https://discuss.elastic.co/t/elasticsearch-index-mapping-causing-unhashable-type-htmlnode/304263)
**Author:** [@elasticeror](https://discuss.elastic.co/u/elasticeror)\ **Replies:** 3\ **Last updated:** [May 10, 2022, 8:00am UTC](https://discuss.elastic.co/t/elasticsearch-index-mapping-causing-unhashable-type-htmlnode/304263 "2022-05-10T08:00:16Z")
I've created Elasticsearch index which works fine on it's own. But, for some reason, as soon as i specify mapping, the error appears when i click on the link. When Elasticsearch is off, or when index doesn't have map… --- ## [How to use the same Elastic Search Index in Multiple Environments in same server](https://discuss.elastic.co/t/how-to-use-the-same-elastic-search-index-in-multiple-environments-in-same-server/304220)
**Author:** [@Leo\_Lawrence](https://discuss.elastic.co/u/Leo_Lawrence)\ **Replies:** 11\ **Last updated:** [May 10, 2022, 7:46am UTC](https://discuss.elastic.co/t/how-to-use-the-same-elastic-search-index-in-multiple-environments-in-same-server/304220 "2022-05-10T07:46:20Z")
Im having 2 environments(Dev and Test) in a same server. I want to use the same set of Indices in both dev and Test. How to achieve this in Elasticsearch --- ## [Can anyone help me with fuzziness](https://discuss.elastic.co/t/can-anyone-help-me-with-fuzziness/304311)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 0\ **Last updated:** [May 10, 2022, 6:51am UTC](https://discuss.elastic.co/t/can-anyone-help-me-with-fuzziness/304311 "2022-05-10T06:51:50Z")
q = Q( 'bool', must=\[Q('match', text\_\_lyric={"query":query,"fuzziness":"AUTO"}), Q('match', code=query)\], minimum\_should\_match=20, … --- ## [Cross cluster search](https://discuss.elastic.co/t/cross-cluster-search/303484)
**Author:** [@InJong\_Park](https://discuss.elastic.co/u/InJong_Park)\ **Replies:** 6\ **Last updated:** [May 10, 2022, 6:50am UTC](https://discuss.elastic.co/t/cross-cluster-search/303484 "2022-05-10T06:50:18Z")
Hello. I’m InJong. I have a short question. Is it possible connect es-7.2.1(self) to es-7.17(elastic-cloud) for cross cluster search. --- ## [Am getting an error ' resource\_already\_exists\_exception' but locally everything runs fine](https://discuss.elastic.co/t/am-getting-an-error-resource-already-exists-exception-but-locally-everything-runs-fine/304306)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 1\ **Last updated:** [May 10, 2022, 5:42am UTC](https://discuss.elastic.co/t/am-getting-an-error-resource-already-exists-exception-but-locally-everything-runs-fine/304306 "2022-05-10T05:42:01Z")
everything runs fine in locally but when I run search\_index --rebuild in server , am getting resource\_already\_exists\_exception. how can I resolve this. --- ## [Fail to install elasticsearch-8.2.0 on Ubuntu machine](https://discuss.elastic.co/t/fail-to-install-elasticsearch-8-2-0-on-ubuntu-machine/304257)
**Author:** [@namespace-Pt](https://discuss.elastic.co/u/namespace-Pt)\ **Replies:** 10\ **Last updated:** [May 10, 2022, 5:26am UTC](https://discuss.elastic.co/t/fail-to-install-elasticsearch-8-2-0-on-ubuntu-machine/304257 "2022-05-10T05:26:47Z")
I downloaded the .tar.gz file on a Ubuntu 16.04.1 LTS machine, and shasum output OK. After unzipping the file and running ./bin/elasticsearch, the following error happens: \[0.001s\]\[warning\]\[os,container\] Duplicate cpuse… --- ## [Enabling X-Pack on Elasticsearch Cluster Defaults](https://discuss.elastic.co/t/enabling-x-pack-on-elasticsearch-cluster-defaults/304076)
**Author:** [@pushert](https://discuss.elastic.co/u/pushert)\ **Replies:** 5\ **Last updated:** [May 10, 2022, 4:53am UTC](https://discuss.elastic.co/t/enabling-x-pack-on-elasticsearch-cluster-defaults/304076 "2022-05-10T04:53:12Z")
Hi, When enabling X-Pack to an existing cluster does this automatically enable the security features ? Do I need to disable the security features so the cluster doesn't requirement TLS connection ? Thank You, --- ## [Checking CPU load after installing a plugin](https://discuss.elastic.co/t/checking-cpu-load-after-installing-a-plugin/304128)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 1\ **Last updated:** [May 10, 2022, 12:35am UTC](https://discuss.elastic.co/t/checking-cpu-load-after-installing-a-plugin/304128 "2022-05-10T00:35:31Z")
I have created an Elasticsearch plugin. I want to check the Elasticsearch CPU load/usage after installing the Elasticsearch plugin and indexing some documents. I am pretty new to performance and data monitoring in Elasti… --- ## [Is there a Way Fetch Data From Multiple Indexes](https://discuss.elastic.co/t/is-there-a-way-fetch-data-from-multiple-indexes/304219)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 1\ **Last updated:** [May 10, 2022, 12:27am UTC](https://discuss.elastic.co/t/is-there-a-way-fetch-data-from-multiple-indexes/304219 "2022-05-10T00:27:43Z")
Is there a Way Fetch Data From Multiple Indexes , like using scroll api ? --- ## [Adding a new and different ElasticSearch node to Kibana](https://discuss.elastic.co/t/adding-a-new-and-different-elasticsearch-node-to-kibana/304277)
**Author:** [@leonardof131](https://discuss.elastic.co/u/leonardof131)\ **Replies:** 3\ **Last updated:** [May 10, 2022, 12:23am UTC](https://discuss.elastic.co/t/adding-a-new-and-different-elasticsearch-node-to-kibana/304277 "2022-05-10T00:23:56Z")
I've seen some similar posts on the forum but none of them quite represents my issue. I've got an Elasticsearch instance running receiving some logs, and Kibana in a separete instance pointed to it. Everything works gre… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=442) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=444)