# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=445 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 446 --- ## [Elasticsearch nodejs client 8.2 msearch error](https://discuss.elastic.co/t/elasticsearch-nodejs-client-8-2-msearch-error/304132)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 2:02pm UTC](https://discuss.elastic.co/t/elasticsearch-nodejs-client-8-2-msearch-error/304132 "2022-05-06T14:02:35Z")
We have been using elastic node js client version 8.1.0 and updated to @elastic/Elasticsearch@8.2.0. Suddently our msearch query stopped working with ResponseError: illegal\_argument\_exception: \[illegal\_argument\_except… --- ## [Password cannot be changed because it contains quotes](https://discuss.elastic.co/t/password-cannot-be-changed-because-it-contains-quotes/304111)
**Author:** [@frankmehlhop](https://discuss.elastic.co/u/frankmehlhop)\ **Replies:** 4\ **Last updated:** [May 6, 2022, 12:59pm UTC](https://discuss.elastic.co/t/password-cannot-be-changed-because-it-contains-quotes/304111 "2022-05-06T12:59:26Z")
When I generate elastic I got a password which includes quotes. ( like 'xxxxx"xxxx' ) This is hard to use in code (C#) so I like to change the password. But there I get exception because the quotes too. How can I chan… --- ## [S3 snapshot and restore](https://discuss.elastic.co/t/s3-snapshot-and-restore/303988)
**Author:** [@askadityav](https://discuss.elastic.co/u/askadityav)\ **Replies:** 5\ **Last updated:** [May 6, 2022, 7:04am UTC](https://discuss.elastic.co/t/s3-snapshot-and-restore/303988 "2022-05-06T07:04:37Z")
Hello All, I am making use of Elasticsearch version 7.10.2 and i did install the s3-client plugin and provided the credentials as mentioned in the documentations and i am able to take the snapshots, restore it as well. … --- ## [Dictionary decompounder: only longest match doesn't work](https://discuss.elastic.co/t/dictionary-decompounder-only-longest-match-doesnt-work/303598)
**Author:** [@Arisara\_Pornwattanav](https://discuss.elastic.co/u/Arisara_Pornwattanav)\ **Replies:** 2\ **Last updated:** [May 6, 2022, 5:29am UTC](https://discuss.elastic.co/t/dictionary-decompounder-only-longest-match-doesnt-work/303598 "2022-05-06T05:29:34Z")
Hi I have problem with analyzer: dictionary decompounder. I need the analyzer output as the longest word that match the dictionary. So, I set the word\_list: theredapple, redapple, apple and I also set only\_longest\_matc… --- ## [OCR highlighter for Alto or hOCR formats](https://discuss.elastic.co/t/ocr-highlighter-for-alto-or-hocr-formats/304051)
**Author:** [@evelix](https://discuss.elastic.co/u/evelix)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 4:49am UTC](https://discuss.elastic.co/t/ocr-highlighter-for-alto-or-hocr-formats/304051 "2022-05-06T04:49:31Z")
We use an OCR software to extract the fulltext from scanned images in Alto or hOCR format. These formats basically know the coordinates of each word on the scanned image. When doing a search against the fulltext, a requ… --- ## [What does this alert mean and how to prevent it?](https://discuss.elastic.co/t/what-does-this-alert-mean-and-how-to-prevent-it/304060)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 2\ **Last updated:** [May 6, 2022, 12:46am UTC](https://discuss.elastic.co/t/what-does-this-alert-mean-and-how-to-prevent-it/304060 "2022-05-06T00:46:54Z")
Every day there is this alert: I then click on the Allocate missing replica shards which takes me to the Indices view (e.g. Monitoring/Indices). It says Unassigned Shards: 0, which makes sense since the alert says th… --- ## [Get consolidated schema of multiple indices in ES](https://discuss.elastic.co/t/get-consolidated-schema-of-multiple-indices-in-es/304061)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 8:25pm UTC](https://discuss.elastic.co/t/get-consolidated-schema-of-multiple-indices-in-es/304061 "2022-05-05T20:25:38Z")
Hello, I've multiple indices in Elasticsearch that has similar data. But, each index has new properties added/removed over the period of time. Is there any way to fetch union of all indices schema using KQL? For exampl… --- ## [Document contains at least one immense term error](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-error/304057)
**Author:** [@VV1002](https://discuss.elastic.co/u/VV1002)\ **Replies:** 2\ **Last updated:** [May 5, 2022, 8:25pm UTC](https://discuss.elastic.co/t/document-contains-at-least-one-immense-term-error/304057 "2022-05-05T20:25:25Z")
Hi, I am trying to add some data to ES using javascript client, I am getting this error ResponseError: illegal\_argument\_exception: \[illegal\_argument\_exception\] Reason: Document contains at least one immense term in fi… --- ## [Query regarding split function and conditionality](https://discuss.elastic.co/t/query-regarding-split-function-and-conditionality/303944)
**Author:** [@ianrobo](https://discuss.elastic.co/u/ianrobo)\ **Replies:** 7\ **Last updated:** [May 5, 2022, 7:06pm UTC](https://discuss.elastic.co/t/query-regarding-split-function-and-conditionality/303944 "2022-05-05T19:06:06Z")
Hi, I am a fairly new user to elastic and trying to develop an ingest pipeline to process Cisco logs. The format of the log is that the log.source.address is 1.1.1.1: I am using the split function to delimit on : and … --- ## [Update/Upgrade?](https://discuss.elastic.co/t/update-upgrade/304059)
**Author:** [@jumpie](https://discuss.elastic.co/u/jumpie)\ **Replies:** 5\ **Last updated:** [May 5, 2022, 5:55pm UTC](https://discuss.elastic.co/t/update-upgrade/304059 "2022-05-05T17:55:57Z")
I don't see directions on how to update/upgrade Elastic. I see 8.2 came out for Linux. --- ## [ILM not deleting upcoming indices(ILM not working)](https://discuss.elastic.co/t/ilm-not-deleting-upcoming-indices-ilm-not-working/303009)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 4\ **Last updated:** [May 5, 2022, 5:35pm UTC](https://discuss.elastic.co/t/ilm-not-deleting-upcoming-indices-ilm-not-working/303009 "2022-05-05T17:35:06Z")
Hi, I am using elk 8.0.0v in windows. Data deletion of upcoming indices is not happening for the time duration setted in ILM (ex:5mints (for testing purpose)).I have created ILM template and assigned metricbeat 8.0.0. T… --- ## [setCustomContext not showing data after upgrade from 7.9 to 8.1.2](https://discuss.elastic.co/t/setcustomcontext-not-showing-data-after-upgrade-from-7-9-to-8-1-2/304004)
**Author:** [@hertzden](https://discuss.elastic.co/u/hertzden)\ **Replies:** 0\ **Last updated:** [May 5, 2022, 7:56am UTC](https://discuss.elastic.co/t/setcustomcontext-not-showing-data-after-upgrade-from-7-9-to-8-1-2/304004 "2022-05-05T07:56:10Z")
We have setup custom context to fetch session FCP data for all our apps, last month we upgraded elastic version from 7.9 to 8.1.2 on 11th April, 2022. Since that date we are not able to see data in console while running … --- ## [Use Ingestion Pipeline to split between two indexes](https://discuss.elastic.co/t/use-ingestion-pipeline-to-split-between-two-indexes/303958)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 9\ **Last updated:** [May 5, 2022, 3:34pm UTC](https://discuss.elastic.co/t/use-ingestion-pipeline-to-split-between-two-indexes/303958 "2022-05-05T15:34:02Z")
I have documents containing the field "Status", this can have three values "Draft", "In Progress", or "Approved". I am trying to pass this document through a ingest pipeline, and if the status is equal to "Approved" then… --- ## [Rollup job - should and minimum\_should\_match not working](https://discuss.elastic.co/t/rollup-job-should-and-minimum-should-match-not-working/303829)
**Author:** [@hunsw](https://discuss.elastic.co/u/hunsw)\ **Replies:** 5\ **Last updated:** [May 5, 2022, 3:23pm UTC](https://discuss.elastic.co/t/rollup-job-should-and-minimum-should-match-not-working/303829 "2022-05-05T15:23:05Z")
When querying rollup jobs minimum\_should\_match is not working (v7.17) making should clauses useless. Is there a fix/workaround for this? The rollup job limitations page lists compound queries explicitly as allowed ones… --- ## [Using Regex in Kibana Query DSL](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl/303991)
**Author:** [@CaMaNi](https://discuss.elastic.co/u/CaMaNi)\ **Replies:** 4\ **Last updated:** [May 5, 2022, 3:18pm UTC](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl/303991 "2022-05-05T15:18:09Z")
Good day everyone, I am relatively new to the use of Kibana. And I have the following problem: I want to filter out all numbers and special characters like "\_" or "-" in a field in Discover mode, so that I only have Le… --- ## [ILM, Fielddata memory error on Warm nodes](https://discuss.elastic.co/t/ilm-fielddata-memory-error-on-warm-nodes/303916)
**Author:** [@benoitp](https://discuss.elastic.co/u/benoitp)\ **Replies:** 3\ **Last updated:** [May 5, 2022, 2:30pm UTC](https://discuss.elastic.co/t/ilm-fielddata-memory-error-on-warm-nodes/303916 "2022-05-05T14:30:06Z")
Hello I'm trying to understand something in the logic of Elasticsearch. Here is my setup : Graylog 4.2 cluster for ingesting logs Connected to an ES 7.10 cluster The Graylog cluster knows the ES Cluster by the Maste… --- ## [Creating processor \[set\_security\_user\] (tag \[null\]) on field \[\_security\] but authentication is not currently enabled](https://discuss.elastic.co/t/creating-processor-set-security-user-tag-null-on-field-security-but-authentication-is-not-currently-enabled/304020)
**Author:** [@elephant](https://discuss.elastic.co/u/elephant)\ **Replies:** 2\ **Last updated:** [May 5, 2022, 2:31pm UTC](https://discuss.elastic.co/t/creating-processor-set-security-user-tag-null-on-field-security-but-authentication-is-not-currently-enabled/304020 "2022-05-05T14:31:54Z")
Hi, I get this WARN in loop in our elastic logs. How can I disable them? We are inside dockers and don't want/need to enable authentication. {"@timestamp":"2022-05-05T10:24:53.093Z", "log.level": "WARN", "message":"Cre… --- ## [Connection to localhost:9200 refused](https://discuss.elastic.co/t/connection-to-localhost-9200-refused/304040)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 6\ **Last updated:** [May 5, 2022, 2:28pm UTC](https://discuss.elastic.co/t/connection-to-localhost-9200-refused/304040 "2022-05-05T14:28:10Z")
Hello all, I am running a three node cluster with version 8.0.0. I start Elasticsearch nodes, they start without any errors. but when I load data from Logstash it gives me following errors. \[2022-05-04T14:54:41,780\]\[I… --- ## [Search large amounts of data as quickly as possible](https://discuss.elastic.co/t/search-large-amounts-of-data-as-quickly-as-possible/304021)
**Author:** [@error\_701](https://discuss.elastic.co/u/error_701)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 1:48pm UTC](https://discuss.elastic.co/t/search-large-amounts-of-data-as-quickly-as-possible/304021 "2022-05-05T13:48:05Z")
hey, i think i need ur help: the following use case: Monitor IDS, I receive about 300 million records of IP addresses every day, I need to search them for every single unique IP address as the last entry. (event) My… --- ## [Kibana watcher sending alert cpu utilisation more than 90%](https://discuss.elastic.co/t/kibana-watcher-sending-alert-cpu-utilisation-more-than-90/303824)
**Author:** [@sanjaychahar](https://discuss.elastic.co/u/sanjaychahar)\ **Replies:** 2\ **Last updated:** [May 5, 2022, 1:24pm UTC](https://discuss.elastic.co/t/kibana-watcher-sending-alert-cpu-utilisation-more-than-90/303824 "2022-05-05T13:24:27Z")
Hi I have configured Kibana watcher to monitor cpu utilisation and its sending alert to out monitoring team stating cpu utilisation ec2 instance(Worker node) more than 90% but when I have checked in AWS CloudWatch cpu u… --- ## [How to query multiple hosts using in elasticsearch using wildcard](https://discuss.elastic.co/t/how-to-query-multiple-hosts-using-in-elasticsearch-using-wildcard/303913)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 12:43pm UTC](https://discuss.elastic.co/t/how-to-query-multiple-hosts-using-in-elasticsearch-using-wildcard/303913 "2022-05-05T12:43:42Z")
hey all iam new to elk , iam trying to get all the hosts in the Elasticsearch db , i tried using a wildcard and "wild\_card": "hosts", "query": { "host.keyword": "test\*", "severity.keyword": "err" }, consider there … --- ## [How to simulate small frequent updates parallel to constant queries](https://discuss.elastic.co/t/how-to-simulate-small-frequent-updates-parallel-to-constant-queries/303918)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 11:59am UTC](https://discuss.elastic.co/t/how-to-simulate-small-frequent-updates-parallel-to-constant-queries/303918 "2022-05-05T11:59:35Z")
Hi, when I am benchmarking my querying with Rally, I would like to simulate also the fact that I get some frequent but small updates. Not sure what would be the best way to achieve this? Say I want to have a throughput… --- ## [Sizing question](https://discuss.elastic.co/t/sizing-question/304014)
**Author:** [@marek\_duciuc](https://discuss.elastic.co/u/marek_duciuc)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 11:01am UTC](https://discuss.elastic.co/t/sizing-question/304014 "2022-05-05T11:01:09Z")
Elasticsearch recommendations is as follows: Maximum of 32 GB heap 20 shards per 1 GB of heap 40 to 60 GB of data per shard this gives approximately 25TB to 39TB of data per node. Is this only theoretical or would… --- ## [Docs count delay - docs added regularly, but docs count 0](https://discuss.elastic.co/t/docs-count-delay-docs-added-regularly-but-docs-count-0/303740)
**Author:** [@jb79](https://discuss.elastic.co/u/jb79)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 10:38am UTC](https://discuss.elastic.co/t/docs-count-delay-docs-added-regularly-but-docs-count-0/303740 "2022-05-05T10:38:35Z")
Hi, Docs added regularly, but the count (after all added) could be verified after several minutes : Added docs ( @timestamp from logstash): Transport traffic Indexing rate: Docs count Seems that sth wr… --- ## [Data migrate from one cluster to another Elasticsearch](https://discuss.elastic.co/t/data-migrate-from-one-cluster-to-another-elasticsearch/304001)
**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 9:14am UTC](https://discuss.elastic.co/t/data-migrate-from-one-cluster-to-another-elasticsearch/304001 "2022-05-05T09:14:08Z")
Need to Migrate one index data from AWS elastic to Azure Elasticsearch. Which one is the best way 1: Reindex 2: logstash : input as AWS elastic and output as Azure elastic. Any input much appreciated, Thanks in Advan… --- ## [How to refresh/stop shrink action](https://discuss.elastic.co/t/how-to-refresh-stop-shrink-action/303733)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 3\ **Last updated:** [May 5, 2022, 8:31am UTC](https://discuss.elastic.co/t/how-to-refresh-stop-shrink-action/303733 "2022-05-05T08:31:35Z")
HI Can You help me out how I can refresh and disable shrink for indices? during, from the devtool console I didn't find any onging actoin, but it seems that a few a indices are hanging on that steps? Such state doe… --- ## [ELK reindex - no input realtime data](https://discuss.elastic.co/t/elk-reindex-no-input-realtime-data/303928)
**Author:** [@Next\_generation](https://discuss.elastic.co/u/Next_generation)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 9:33pm UTC](https://discuss.elastic.co/t/elk-reindex-no-input-realtime-data/303928 "2022-05-04T21:33:15Z")
how to assign template to specific elk index i created the correct index template and migrated the data from the old index but it is not written further in real time How to make it write? (used by fluentd) --- ## [Filebeat to elasticsearch using ingest pipeline](https://discuss.elastic.co/t/filebeat-to-elasticsearch-using-ingest-pipeline/303341)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 5\ **Last updated:** [May 5, 2022, 7:45am UTC](https://discuss.elastic.co/t/filebeat-to-elasticsearch-using-ingest-pipeline/303341 "2022-05-05T07:45:04Z")
Dear Team, need a advise we are ingesting data from filebeat to ES using the ingest pipeline in ES I have created an ingest pipeline and also created an index template in that defined the ingest pipeline "PUT \_ingest/… --- ## [Want to send this logs to Elasticsearch without logstash](https://discuss.elastic.co/t/want-to-send-this-logs-to-elasticsearch-without-logstash/303990)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 5:28am UTC](https://discuss.elastic.co/t/want-to-send-this-logs-to-elasticsearch-without-logstash/303990 "2022-05-05T05:28:58Z")
Hello Every One I have Following Logs I want sent this logs using script (Powershell) to Elasticsearch without using logstash no need mediator any one can help How can I ? { "Id": "4280", "AppKey": "StoreSearchAPIUR… --- ## [ELK Issue while enabling x-pack](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656)
**Author:** [@anubhav.bss](https://discuss.elastic.co/u/anubhav.bss)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:27am UTC](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656 "2022-05-05T02:27:15Z")
Hi Friends, I am facing issue with ELK stack deployed on AWS ECS. Whenever I am trying to connect enable x-pack feature, Elasticsearch and Kibana containers are not coming up. EC2 instance is behind Application load ba… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=444) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=446)