# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=446

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 447

---

## [Elasticsearch pod going into crashloopbackoff state due to no space left on the device](https://discuss.elastic.co/t/elasticsearch-pod-going-into-crashloopbackoff-state-due-to-no-space-left-on-the-device/303719)

<div class="topic-metadata">

**Author:** [@ayushsharma191](https://discuss.elastic.co/u/ayushsharma191)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 2:25am UTC](https://discuss.elastic.co/t/elasticsearch-pod-going-into-crashloopbackoff-state-due-to-no-space-left-on-the-device/303719 "2022-05-05T02:25:40Z")

</div>

Caused by: org.Elasticsearch.gateway.WriteStateException: failed to write state to the first location tmp file /usr/share/Elasticsearch/data/nodes/0/node-1.st.tmp", "at org.Elasticsearch.gateway.MetaDataStateFormat.writ…

---

## [Elasticsearch check if key exist in document](https://discuss.elastic.co/t/elasticsearch-check-if-key-exist-in-document/303816)

<div class="topic-metadata">

**Author:** [@Hovo\_Baghdasaryan](https://discuss.elastic.co/u/Hovo_Baghdasaryan)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 2:23am UTC](https://discuss.elastic.co/t/elasticsearch-check-if-key-exist-in-document/303816 "2022-05-05T02:23:48Z")

</div>

Hi All. I have key "field1" in the document of Elasticsearch. With mapping, a field is an object. sometimes field does not exist, sometimes the field exists but is empty (\[\]), sometimes the field has the correct value -…

---

## [Is it possible to pass multiple hosts in scroll api](https://discuss.elastic.co/t/is-it-possible-to-pass-multiple-hosts-in-scroll-api/303919)

<div class="topic-metadata">

**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 2:13am UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-multiple-hosts-in-scroll-api/303919 "2022-05-05T02:13:59Z")

</div>

hi all , is it possible to pass multiple hosts in scroll api , i want to get multiple logs from multiple hosts using scroll request url = '{0}/{1}/\_search?scroll=1m&ignore\_unavailable=true'.format( …

---

## [Vector Tile API: Updated mvt\_sample error](https://discuss.elastic.co/t/vector-tile-api-updated-mvt-sample-error/303291)

<div class="topic-metadata">

**Author:** [@Joseph\_Parish](https://discuss.elastic.co/u/Joseph_Parish)\
**Replies:** 2\
**Last updated:** [May 5, 2022, 1:59am UTC](https://discuss.elastic.co/t/vector-tile-api-updated-mvt-sample-error/303291 "2022-05-05T01:59:14Z")

</div>

The latest update to the mvt\_sample throws this ResponseError: x\_content\_parse\_exception: \[x\_content\_parse\_exception\] Reason: \[1:36\] \[vector-tile\] unknown field \[grid\_agg\] did you mean \[grid\_type\]? If the grid\_agg field …

---

## [All shards failed across multiple indexes](https://discuss.elastic.co/t/all-shards-failed-across-multiple-indexes/301033)

<div class="topic-metadata">

**Author:** [@adowney-lm](https://discuss.elastic.co/u/adowney-lm)\
**Replies:** 5\
**Last updated:** [May 5, 2022, 1:30am UTC](https://discuss.elastic.co/t/all-shards-failed-across-multiple-indexes/301033 "2022-05-05T01:30:29Z")

</div>

We are using 7.7.1 ELK and have a simple, single node, setup with a couple of dozen indexes. I'm finding a very large number of "all shards failed" messages in the logs, and have seen a connection failure for a minute o…

---

## [How to grant a plugin permissions for updating indices and index templates](https://discuss.elastic.co/t/how-to-grant-a-plugin-permissions-for-updating-indices-and-index-templates/303868)

<div class="topic-metadata">

**Author:** [@kved](https://discuss.elastic.co/u/kved)\
**Replies:** 3\
**Last updated:** [May 5, 2022, 1:24am UTC](https://discuss.elastic.co/t/how-to-grant-a-plugin-permissions-for-updating-indices-and-index-templates/303868 "2022-05-05T01:24:05Z")

</div>

I created a plugin to manage index templates and index settings, however I'm seeing an error that action \[indices:admin/template/get\] is unauthorized for user \[\_system\] I tried adding the superuser role to the \_system …

---

## [ElasticSearch FIPS (BouncyCastle)](https://discuss.elastic.co/t/elasticsearch-fips-bouncycastle/303298)

<div class="topic-metadata">

**Author:** [@datencio](https://discuss.elastic.co/u/datencio)\
**Replies:** 11\
**Last updated:** [May 5, 2022, 1:19am UTC](https://discuss.elastic.co/t/elasticsearch-fips-bouncycastle/303298 "2022-05-05T01:19:50Z")

</div>

I am tasked with trying to get Elasticsearch working in FIPS mode. I know there is probably no experts on this topic in the forums but wanted to see if anyone could give me just a working solution. In my Elasticsearch.y…

---

## [Problem on starting elasticsearch](https://discuss.elastic.co/t/problem-on-starting-elasticsearch/303911)

<div class="topic-metadata">

**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 12:27am UTC](https://discuss.elastic.co/t/problem-on-starting-elasticsearch/303911 "2022-05-05T00:27:30Z")

</div>

root@elastic:~# systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result:…

---

## [Upgrading error from 6.8 to 7.13](https://discuss.elastic.co/t/upgrading-error-from-6-8-to-7-13/303943)

<div class="topic-metadata">

**Author:** [@Zurka](https://discuss.elastic.co/u/Zurka)\
**Replies:** 2\
**Last updated:** [May 4, 2022, 10:47pm UTC](https://discuss.elastic.co/t/upgrading-error-from-6-8-to-7-13/303943 "2022-05-04T22:47:44Z")

</div>

Hi! I have a RedHat8 machine with Elasticsearch 5.6 installed and I want to upgrade to 7.x. I've been able to upgrade to 6.8 following the guide but somehow, I am getting an error when trying to start the Elasticsearch …

---

## [Latest Open source elasticsearch version](https://discuss.elastic.co/t/latest-open-source-elasticsearch-version/303938)

<div class="topic-metadata">

**Author:** [@anshulgoyal](https://discuss.elastic.co/u/anshulgoyal)\
**Replies:** 4\
**Last updated:** [May 4, 2022, 10:10pm UTC](https://discuss.elastic.co/t/latest-open-source-elasticsearch-version/303938 "2022-05-04T22:10:32Z")

</div>

Hi All, I have configured Elasticsearch 7.17 version on the system but not sure if it is open source, non-licensed, and log4j vulnerable or not. If it is not all of the three, please suggest me a version which has all t…

---

## [Grafana fails connect to elastic search](https://discuss.elastic.co/t/grafana-fails-connect-to-elastic-search/303966)

<div class="topic-metadata">

**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\
**Replies:** 0\
**Last updated:** [May 4, 2022, 3:48pm UTC](https://discuss.elastic.co/t/grafana-fails-connect-to-elastic-search/303966 "2022-05-04T15:48:22Z")

</div>

Hi everyone, i'm new with Elasticsearch, i want to export some logs from elastic to grafana so i can create a dashboard. I followed the instruction of grafana documentation grafana doc, but i got this error when i try …

---

## [IO wait when using dense\_vector field](https://discuss.elastic.co/t/io-wait-when-using-dense-vector-field/303261)

<div class="topic-metadata">

**Author:** [@gioele](https://discuss.elastic.co/u/gioele)\
**Replies:** 2\
**Last updated:** [May 4, 2022, 6:49pm UTC](https://discuss.elastic.co/t/io-wait-when-using-dense-vector-field/303261 "2022-05-04T18:49:37Z")

</div>

Elasticsearch 7.15.2 While testing the performances of various types of queries using the dense\_vector field type we noticed that a significant amount of time is spent loading the dense\_vector from the disk. We observe…

---

## [How to get a Term list for a field?](https://discuss.elastic.co/t/how-to-get-a-term-list-for-a-field/303968)

<div class="topic-metadata">

**Author:** [@iam](https://discuss.elastic.co/u/iam)\
**Replies:** 0\
**Last updated:** [May 4, 2022, 3:50pm UTC](https://discuss.elastic.co/t/how-to-get-a-term-list-for-a-field/303968 "2022-05-04T15:50:33Z")

</div>

Hi All, Is there a way to get a sorted list of terms from a field in Elasticsearch? We are going to migrate from Solr to ES and we need something similar to /terms handler, for example: http://localhost:8983/solr/myda…

---

## [\[JAVA\] Error deserializing TermSuggest](https://discuss.elastic.co/t/java-error-deserializing-termsuggest/303970)

<div class="topic-metadata">

**Author:** [@danielbenedi6](https://discuss.elastic.co/u/danielbenedi6)\
**Replies:** 0\
**Last updated:** [May 4, 2022, 5:11pm UTC](https://discuss.elastic.co/t/java-error-deserializing-termsuggest/303970 "2022-05-04T17:11:08Z")

</div>

I am using the Java client in its version 8.2.0. When running my search I get a runtime error when I add the suggest and it happens when deserializing. My code: SearchResponse\<Podcast\> response = client.search( …

---

## [Terms Enum Api text support](https://discuss.elastic.co/t/terms-enum-api-text-support/295943)

<div class="topic-metadata">

**Author:** [@ffoeta](https://discuss.elastic.co/u/ffoeta)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 4:40pm UTC](https://discuss.elastic.co/t/terms-enum-api-text-support/295943 "2022-05-04T16:40:47Z")

</div>

Currently terms API does not support text fieldType. I've tried creating custom field extension combining code from Keyword and Text types, basically creating exact copy of text type with getTerms(...) method implement…

---

## [Stale master elected in elastic version \< 7](https://discuss.elastic.co/t/stale-master-elected-in-elastic-version-7/303882)

<div class="topic-metadata">

**Author:** [@johny1](https://discuss.elastic.co/u/johny1)\
**Replies:** 7\
**Last updated:** [May 4, 2022, 2:52pm UTC](https://discuss.elastic.co/t/stale-master-elected-in-elastic-version-7/303882 "2022-05-04T14:52:16Z")

</div>

running version 6.x which relies on minimum master node config for quorum. the cluster has three master eligible nodes (1,2,3) and active master was (1). One master node (3) left the cluster due to an unknown error and …

---

## [Is it safe to run a problematic node (possible corrupt data folder) while other nodes are working properly](https://discuss.elastic.co/t/is-it-safe-to-run-a-problematic-node-possible-corrupt-data-folder-while-other-nodes-are-working-properly/303906)

<div class="topic-metadata">

**Author:** [@elaskibuser](https://discuss.elastic.co/u/elaskibuser)\
**Replies:** 5\
**Last updated:** [May 4, 2022, 2:01pm UTC](https://discuss.elastic.co/t/is-it-safe-to-run-a-problematic-node-possible-corrupt-data-folder-while-other-nodes-are-working-properly/303906 "2022-05-04T14:01:03Z")

</div>

I have a three node setup and one of them had a hard drive fail and a long the data snapshots were gone (bad planning). Now, we have two nodes running well (given the circumstances) and the third node is offline with th…

---

## [Querying for a empty array](https://discuss.elastic.co/t/querying-for-a-empty-array/303813)

<div class="topic-metadata">

**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\
**Replies:** 5\
**Last updated:** [May 4, 2022, 12:54pm UTC](https://discuss.elastic.co/t/querying-for-a-empty-array/303813 "2022-05-04T12:54:24Z")

</div>

I have a ES index with a nested field called “relations”. In the mapping, it is defined as: "relations": { "type": "nested", "properties": { "primaryWordIndex": { "type": "…

---

## [More Like This Searches - an analogy?](https://discuss.elastic.co/t/more-like-this-searches-an-analogy/303929)

<div class="topic-metadata">

**Author:** [@sandydesu](https://discuss.elastic.co/u/sandydesu)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 12:33pm UTC](https://discuss.elastic.co/t/more-like-this-searches-an-analogy/303929 "2022-05-04T12:33:14Z")

</div>

I'm using 'More Like This' (MLT) searches for a problem I have and I have found them to be really well suited for the types of searches I need. I need to explain how MLT searches work in a meeting and I'm after an analog…

---

## [Runtime field scoring with decay](https://discuss.elastic.co/t/runtime-field-scoring-with-decay/303836)

<div class="topic-metadata">

**Author:** [@Vikas\_Verma](https://discuss.elastic.co/u/Vikas_Verma)\
**Replies:** 2\
**Last updated:** [May 4, 2022, 9:19am UTC](https://discuss.elastic.co/t/runtime-field-scoring-with-decay/303836 "2022-05-04T09:19:34Z")

</div>

Hi, I've been facing an issue regarding runtime fields scoring using decay functions. Let me share a snippet of my code for the refrence: Runtime Field "runtime\_mappings": { "price": { "type": "dou…

---

## [How to run elasticsearch-shard in a docker container](https://discuss.elastic.co/t/how-to-run-elasticsearch-shard-in-a-docker-container/303815)

<div class="topic-metadata">

**Author:** [@elaskibuser](https://discuss.elastic.co/u/elaskibuser)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 10:27am UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-shard-in-a-docker-container/303815 "2022-05-03T10:27:20Z")

</div>

Through an unfortunate series of events, data was lost on a node on a 3 node cluster. All that is left a month old copy of a the data folder. I am not able to run Elasticsearch-shard --remove-corrupted-data because it …

---

## [Transform --\> Default a pivot groupBy keyName is does not exist](https://discuss.elastic.co/t/transform-default-a-pivot-groupby-keyname-is-does-not-exist/303871)

<div class="topic-metadata">

**Author:** [@lupolo](https://discuss.elastic.co/u/lupolo)\
**Replies:** 2\
**Last updated:** [May 4, 2022, 1:47am UTC](https://discuss.elastic.co/t/transform-default-a-pivot-groupby-keyname-is-does-not-exist/303871 "2022-05-04T01:47:21Z")

</div>

In a transform under the section of "pivot": and "group\_by": I would like to default a value if keyName does not exist. Example: \<if query\_parameters.partnerId does not exists: partnerId=null else: partnerId=q…

---

## [Spring4Shell ::Spring Framework Remote Code Execution Vulnerability](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/301229)

<div class="topic-metadata">

**Author:** [@Vishnu\_Vijay](https://discuss.elastic.co/u/Vishnu_Vijay)\
**Replies:** 5\
**Last updated:** [May 3, 2022, 11:55pm UTC](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/301229 "2022-05-03T23:55:49Z")

</div>

Hello, We are using Elasticsearch 6.3.2 & 6.8.23 Please let us know, whether ES is using spring boot war and whether Elasticsearch is impacted any way by the reported spring shell vulnerability. Please suggest, wheth…

---

## [The UI windows of ES ODBC Driver is too small](https://discuss.elastic.co/t/the-ui-windows-of-es-odbc-driver-is-too-small/303858)

<div class="topic-metadata">

**Author:** [@bhguo](https://discuss.elastic.co/u/bhguo)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 4:33pm UTC](https://discuss.elastic.co/t/the-ui-windows-of-es-odbc-driver-is-too-small/303858 "2022-05-03T16:33:48Z")

</div>

Dear sirs, I want to use Elasticsearch ODBC Driver to access ES data, I have downloaded and installed it in my computer, I meet some troubles in using it. When I set ODBC DSN in control panel, I find the windows is too…

---

## [Installing and running Docker plugin - help with syntax needed](https://discuss.elastic.co/t/installing-and-running-docker-plugin-help-with-syntax-needed/302529)

<div class="topic-metadata">

**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\
**Replies:** 1\
**Last updated:** [May 3, 2022, 10:14pm UTC](https://discuss.elastic.co/t/installing-and-running-docker-plugin-help-with-syntax-needed/302529 "2022-05-03T22:14:38Z")

</div>

I get the error "docker run" requires at least 1 argument(s). when I run this command docker run --log-driver=elastic/elastic-logging-plugin:8.1.2 --log-opt hosts="thehost" I then tried to fix the error by adding wha…

---

## [Indices keep getting deleted automatically](https://discuss.elastic.co/t/indices-keep-getting-deleted-automatically/303555)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 4\
**Last updated:** [May 3, 2022, 9:07pm UTC](https://discuss.elastic.co/t/indices-keep-getting-deleted-automatically/303555 "2022-05-03T21:07:30Z")

</div>

We are running ELK 7.6.2 stack. It seems that indices are getting deleted / cleaned automatically by ES. We have ILM policy of 2 days retention for the index, but somehow it deletes the current one too. After enabling…

---

## [Error enrolling Fleet Server: FAILED: Missed two check-ins](https://discuss.elastic.co/t/error-enrolling-fleet-server-failed-missed-two-check-ins/303875)

<div class="topic-metadata">

**Author:** [@mhoward](https://discuss.elastic.co/u/mhoward)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 8:12pm UTC](https://discuss.elastic.co/t/error-enrolling-fleet-server-failed-missed-two-check-ins/303875 "2022-05-03T20:12:44Z")

</div>

I am in the process of adding a Fleet server to a self-managed Elastic cluster in Production mode using my own generated certificates. I'm running into the following error of Elastic-agent failing to start when running …

---

## [How to start a elastic cluster 8.1 with three or more nodes](https://discuss.elastic.co/t/how-to-start-a-elastic-cluster-8-1-with-three-or-more-nodes/303540)

<div class="topic-metadata">

**Author:** [@Adrian\_Gtz](https://discuss.elastic.co/u/Adrian_Gtz)\
**Replies:** 8\
**Last updated:** [May 3, 2022, 8:10pm UTC](https://discuss.elastic.co/t/how-to-start-a-elastic-cluster-8-1-with-three-or-more-nodes/303540 "2022-05-03T20:10:59Z")

</div>

I have the first node, but I don't know what is next. What do I have to do to define the master and join new nodes to the cluster. Is there a guide or something explained ? Thanks in advanced.

---

## [Elasticsearch Upgrade from 2.x to 6.x](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-x-to-6-x/301590)

<div class="topic-metadata">

**Author:** [@veenarvg](https://discuss.elastic.co/u/veenarvg)\
**Replies:** 0\
**Last updated:** [April 5, 2022, 6:24am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-2-x-to-6-x/301590 "2022-04-05T06:24:33Z")

</div>

This category relates to the Enterprise Search set of products - App Search, Site Search and Workplace Search. If your question relates to core Elasticsearch functionality, please head over to the #elastic-stack:elastic…

---

## [If else query on elastic search](https://discuss.elastic.co/t/if-else-query-on-elastic-search/302663)

<div class="topic-metadata">

**Author:** [@anime\_lover](https://discuss.elastic.co/u/anime_lover)\
**Replies:** 0\
**Last updated:** [April 19, 2022, 4:48am UTC](https://discuss.elastic.co/t/if-else-query-on-elastic-search/302663 "2022-04-19T04:48:08Z")

</div>

Hi there , i am facing some problem on searching . My problem is : Suppose i have three field A,B and C . If i search for certain text then it should search on field A first if found ,stop searching and return result i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=445)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=447)
