# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=450 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 451 --- ## [Elastic Search v7.17.1 Alias Filtering Performance Issues](https://discuss.elastic.co/t/elastic-search-v7-17-1-alias-filtering-performance-issues/303443)
**Author:** [@mma1](https://discuss.elastic.co/u/mma1)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 9:53pm UTC](https://discuss.elastic.co/t/elastic-search-v7-17-1-alias-filtering-performance-issues/303443 "2022-04-27T21:53:28Z")
Hello, I have recently started using alias filtering with our application and have seen some performance issues. I am using elastic v7.17.1 on a 12 node cluster. The alias looks like the following (the array in terms c… --- ## [Multiple clusters in elastic search](https://discuss.elastic.co/t/multiple-clusters-in-elastic-search/303383)
**Author:** [@sairaj\_dessai](https://discuss.elastic.co/u/sairaj_dessai)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 9:43pm UTC](https://discuss.elastic.co/t/multiple-clusters-in-elastic-search/303383 "2022-04-27T21:43:01Z")
How to create multiple clusters in a single windows machine. Also how to insert , select , update , delete records from multiple clusters. As of now I tried to run 2 Elasticsearch on single server and changed yaml file s… --- ## [NLP models on Elastic 8 Cloud](https://discuss.elastic.co/t/nlp-models-on-elastic-8-cloud/303199)
**Author:** [@Wonder\_Garance](https://discuss.elastic.co/u/Wonder_Garance)\ **Replies:** 3\ **Last updated:** [April 27, 2022, 9:31pm UTC](https://discuss.elastic.co/t/nlp-models-on-elastic-8-cloud/303199 "2022-04-27T21:31:46Z")
Hello, I started a free 14-days trial of Elastic 8 Cloud, to test NLP models. On this page Third party NLP models | Machine Learning in the Elastic Stack \[8.1\] | Elastic there are a lot of models, I just tried sentence-… --- ## [Ngram behavior vs wildcard field type](https://discuss.elastic.co/t/ngram-behavior-vs-wildcard-field-type/302762)
**Author:** [@maratusa](https://discuss.elastic.co/u/maratusa)\ **Replies:** 7\ **Last updated:** [April 27, 2022, 4:45pm UTC](https://discuss.elastic.co/t/ngram-behavior-vs-wildcard-field-type/302762 "2022-04-27T16:45:33Z")
Hi, Please help me understand n-gram and wildcard field type behaviors. I am working on an application that offers a search by phone number. It will be a contain search. e.g. search for phone number containing "234890"… --- ## [Best practices on generating queries with SDK vs storing queries as files](https://discuss.elastic.co/t/best-practices-on-generating-queries-with-sdk-vs-storing-queries-as-files/303328)
**Author:** [@darrenoc3](https://discuss.elastic.co/u/darrenoc3)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 2:05pm UTC](https://discuss.elastic.co/t/best-practices-on-generating-queries-with-sdk-vs-storing-queries-as-files/303328 "2022-04-27T14:05:24Z")
Hi there, I was wondering what the communities opinion was on best practices for generating queries in a complex application. For our date histogram queries we have tried both: Store DSL queries as text files, use str… --- ## [Default values for missing fields](https://discuss.elastic.co/t/default-values-for-missing-fields/303333)
**Author:** [@tfinan](https://discuss.elastic.co/u/tfinan)\ **Replies:** 6\ **Last updated:** [April 27, 2022, 1:47pm UTC](https://discuss.elastic.co/t/default-values-for-missing-fields/303333 "2022-04-27T13:47:00Z")
Can I create a field in a mapping that will be indexed with some default value if that field is not present in the document being indexed? In other words, if I have a mapping with the field {"Rating": "integer"}, and th… --- ## [Replace value from one field in another field using an Elasticsearch Ingest Pipeline](https://discuss.elastic.co/t/replace-value-from-one-field-in-another-field-using-an-elasticsearch-ingest-pipeline/302963)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 3\ **Last updated:** [April 27, 2022, 1:27pm UTC](https://discuss.elastic.co/t/replace-value-from-one-field-in-another-field-using-an-elasticsearch-ingest-pipeline/302963 "2022-04-27T13:27:03Z")
I need to remove a substring contained in one field from another field. However, I don't seem to be able to use the gsub or grok processors to accomplish this. E.g., I have the following fields: { "foo": "foo", … --- ## [Flattened fields with query\_string and wildcards](https://discuss.elastic.co/t/flattened-fields-with-query-string-and-wildcards/303400)
**Author:** [@dor](https://discuss.elastic.co/u/dor)\ **Replies:** 0\ **Last updated:** [April 27, 2022, 12:29pm UTC](https://discuss.elastic.co/t/flattened-fields-with-query-string-and-wildcards/303400 "2022-04-27T12:29:46Z")
Hi, I'm using Elasticsearch 8, and I'm having weird behaviors with flattened fields and query strings with wildcards. Let's have this test index: PUT test\_index { "mappings": { "properties": { "flattened\_f… --- ## [Performance issue in record insertion in elastic search on upgrading to ElasticSearch version from 7.1.1 to 7.16.3 in linux](https://discuss.elastic.co/t/performance-issue-in-record-insertion-in-elastic-search-on-upgrading-to-elasticsearch-version-from-7-1-1-to-7-16-3-in-linux/303394)
**Author:** [@rahul.kushwah](https://discuss.elastic.co/u/rahul.kushwah)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 11:11am UTC](https://discuss.elastic.co/t/performance-issue-in-record-insertion-in-elastic-search-on-upgrading-to-elasticsearch-version-from-7-1-1-to-7-16-3-in-linux/303394 "2022-04-27T11:11:49Z")
We are using default transport client (i.e transport client 7.16.3) for communication with Elasticsearch. Previously on Elasticsearch 7.1.1 it takes around 3 sec to insert 5000 records but after upgrading it to Elasticse… --- ## [Uniqueness in filter aggregations](https://discuss.elastic.co/t/uniqueness-in-filter-aggregations/303272)
**Author:** [@Lucass](https://discuss.elastic.co/u/Lucass)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 10:12am UTC](https://discuss.elastic.co/t/uniqueness-in-filter-aggregations/303272 "2022-04-27T10:12:41Z")
Hi, kindly ask you ideas to solve following: imagine having users filling personal surveys, eg. filling what they usually smoke. Each user can decide one or more possibilities from the checklist survey. On results, I am… --- ## [ES Source code compilation](https://discuss.elastic.co/t/es-source-code-compilation/303137)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 3\ **Last updated:** [April 27, 2022, 8:26am UTC](https://discuss.elastic.co/t/es-source-code-compilation/303137 "2022-04-27T08:26:50Z")
Should the parameter be specified with - E or - D? When i used -D like this ：-Des.path.conf=/Users/caster/Desktop/elasticsearch-7.10.2-demo/config，i got: ERROR: D is not a recognized option When i used -E like this ：-E… --- ## [How i can store hot, warm and cold indices on serval disk partition?](https://discuss.elastic.co/t/how-i-can-store-hot-warm-and-cold-indices-on-serval-disk-partition/303356)
**Author:** [@Mohsin\_Ashraf](https://discuss.elastic.co/u/Mohsin_Ashraf)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 8:10am UTC](https://discuss.elastic.co/t/how-i-can-store-hot-warm-and-cold-indices-on-serval-disk-partition/303356 "2022-04-27T08:10:28Z")
Hi, I want to store hot, warm and cold indices in different disk partitions on the same node. for example, I have different partitions on the same node like 100GB, 250GB and 300GB. So, how can I store indices across dif… --- ## [Elastic ILM rollover not working as expected](https://discuss.elastic.co/t/elastic-ilm-rollover-not-working-as-expected/303012)
**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\ **Replies:** 2\ **Last updated:** [April 27, 2022, 7:45am UTC](https://discuss.elastic.co/t/elastic-ilm-rollover-not-working-as-expected/303012 "2022-04-27T07:45:13Z")
Hello, I use data streams for my input data and the expected behavior of the ILM policy is to delete data which is 10 days old. To do this, I setup a policy that should create a new index every day and move the data to … --- ## [Wildcards with query\_string query and custom analyzer](https://discuss.elastic.co/t/wildcards-with-query-string-query-and-custom-analyzer/303330)
**Author:** [@mej101](https://discuss.elastic.co/u/mej101)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 5:15am UTC](https://discuss.elastic.co/t/wildcards-with-query-string-query-and-custom-analyzer/303330 "2022-04-27T05:15:16Z")
I have a query\_string query I'm using with wildcards and a custom analyzer. The query behaves as expected for some words and not for others. Here's the query: "query\_string": { "query": "Abdulla\*", "an… --- ## [Parse Date from Script\_Fields Params](https://discuss.elastic.co/t/parse-date-from-script-fields-params/303329)
**Author:** [@prashant\_zeta](https://discuss.elastic.co/u/prashant_zeta)\ **Replies:** 1\ **Last updated:** [April 27, 2022, 3:53am UTC](https://discuss.elastic.co/t/parse-date-from-script-fields-params/303329 "2022-04-27T03:53:34Z")
I am trying to find the elapsed time elapsed time: duration of time b/w now and createdTime To pass the current\_time (ie now) I have added it to the params, and I can access that in the source field by writing params… --- ## [Monitoring or Distributed 2 Elastic stack to 1 elastic](https://discuss.elastic.co/t/monitoring-or-distributed-2-elastic-stack-to-1-elastic/303338)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 3\ **Last updated:** [April 27, 2022, 3:48am UTC](https://discuss.elastic.co/t/monitoring-or-distributed-2-elastic-stack-to-1-elastic/303338 "2022-04-27T03:48:31Z")
I have two branch offices that use elaticsearch. but I want both of them to be monitored centrally at the head office. Can it? and how? thank you --- ## [I have an issue with the elastic 8.1.3 settings](https://discuss.elastic.co/t/i-have-an-issue-with-the-elastic-8-1-3-settings/303102)
**Author:** [@Mahmoud](https://discuss.elastic.co/u/Mahmoud)\ **Replies:** 3\ **Last updated:** [April 27, 2022, 1:17am UTC](https://discuss.elastic.co/t/i-have-an-issue-with-the-elastic-8-1-3-settings/303102 "2022-04-27T01:17:43Z")
I have a startup problem with elastic version 8.1.3 i trying to configure elastic cluster its have single node Apr 24 16:50:40 elastic systemd-entrypoint\[3419\]: ERROR: Elasticsearch did not exit normally - check the log… --- ## [Any relationship between refresh\_interval & bulk\_write task time?](https://discuss.elastic.co/t/any-relationship-between-refresh-interval-bulk-write-task-time/303112)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 4\ **Last updated:** [April 27, 2022, 1:13am UTC](https://discuss.elastic.co/t/any-relationship-between-refresh-interval-bulk-write-task-time/303112 "2022-04-27T01:13:31Z")
Is it normal to have longer bulk\_write time if I increase the refresh\_interval to say 300 seconds? I have noticed an index bulk\_write is taking more than 4 seconds. Not sure if this is normal or cause for concern. I g… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303252)
**Author:** [@Achraf\_MENSI](https://discuss.elastic.co/u/Achraf_MENSI)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 11:01pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303252 "2022-04-26T23:01:48Z")
Hello , i depoyed a multi node cluster with 3 azure vm, the cluster worked on ES and nodes are connected. but i can't work on them with kibana " Kibana server is not ready yet " \[2022-04-25T00:00:01,091\]\[WARN \]\[o.e.c.… --- ## [Java 8.1 bulk request](https://discuss.elastic.co/t/java-8-1-bulk-request/302423)
**Author:** [@3xil3](https://discuss.elastic.co/u/3xil3)\ **Replies:** 6\ **Last updated:** [April 26, 2022, 10:40pm UTC](https://discuss.elastic.co/t/java-8-1-bulk-request/302423 "2022-04-26T22:40:34Z")
Hi, I'm having trouble doing a bulk index request using the java 8.1.1 client. I get an unclear error message and I'm basically stuck. String test= "{ \\"test\\",\\"test\\"}"; final InputStream jsonInputStr… --- ## [Permission denied when starting Elasticsearch 7.17.0 installed via RPM](https://discuss.elastic.co/t/permission-denied-when-starting-elasticsearch-7-17-0-installed-via-rpm/303192)
**Author:** [@ed\_vf](https://discuss.elastic.co/u/ed_vf)\ **Replies:** 11\ **Last updated:** [April 26, 2022, 8:10pm UTC](https://discuss.elastic.co/t/permission-denied-when-starting-elasticsearch-7-17-0-installed-via-rpm/303192 "2022-04-26T20:10:31Z")
We are trying to expand our cluster size from 3 nodes to 5 nodes. After installing Elasticsearch via RPM on the new nodes we receive the following 'Permission denied' error when starting the service. \[root@host user\]# s… --- ## [Attempting to Connect Fluentd with Elastic8.1.2 gives an error for Developing an ingestion pipeline](https://discuss.elastic.co/t/attempting-to-connect-fluentd-with-elastic8-1-2-gives-an-error-for-developing-an-ingestion-pipeline/301991)
**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 6:28pm UTC](https://discuss.elastic.co/t/attempting-to-connect-fluentd-with-elastic8-1-2-gives-an-error-for-developing-an-ingestion-pipeline/301991 "2022-04-26T18:28:41Z")
So i saw the example Elastic8.1.2 cluster set up with Kibana on the website. I liked it, though i wanted to add an ingestion pipe and added a FluentD container to the mix in order to manage ingestion a bit more. The b… --- ## [Elasticsearch automatically closes connection as soon as I run my Java Springboot program](https://discuss.elastic.co/t/elasticsearch-automatically-closes-connection-as-soon-as-i-run-my-java-springboot-program/303069)
**Author:** [@Tasdiq\_Shaikh](https://discuss.elastic.co/u/Tasdiq_Shaikh)\ **Replies:** 7\ **Last updated:** [April 26, 2022, 3:35pm UTC](https://discuss.elastic.co/t/elasticsearch-automatically-closes-connection-as-soon-as-i-run-my-java-springboot-program/303069 "2022-04-26T15:35:58Z")
\*\[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[DESKTOP-ADQ0I0S\] received plaintext traffic on an encrypted channel, closing connection Netty4TcpChannel{localAddress=/127.0.0.1:9300, remoteAddress=/127.0.0.1:59255, prof… --- ## [Aggregations taking way too long?](https://discuss.elastic.co/t/aggregations-taking-way-too-long/303171)
**Author:** [@ChamMach](https://discuss.elastic.co/u/ChamMach)\ **Replies:** 6\ **Last updated:** [April 26, 2022, 12:57pm UTC](https://discuss.elastic.co/t/aggregations-taking-way-too-long/303171 "2022-04-26T12:57:22Z")
Hello, I would like to have your opinion on these aggregations. Currently, these can take up to 5 mins to run on my ES cluster (7.17.1) for ~ 2 years of data (~ 1 billion of documents / 100GB data spread over 2 data nod… --- ## [Spring4Shell ::Spring Framework Remote Code Execution Vulnerability](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/303282)
**Author:** [@hank80](https://discuss.elastic.co/u/hank80)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 12:24pm UTC](https://discuss.elastic.co/t/spring4shell-spring-framework-remote-code-execution-vulnerability/303282 "2022-04-26T12:24:52Z")
Hello, We are using Elasticsearch 7.6.1 Please let us know, whether Elasticsearch is impacted any way by the reported spring4shell vulnerability. --- ## [Index template](https://discuss.elastic.co/t/index-template/303280)
**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 12:22pm UTC](https://discuss.elastic.co/t/index-template/303280 "2022-04-26T12:22:15Z")
Hi Elastic community, I've enabled mapper size plugin to help me with the sizing of my cloud cluster. I tried to modify an existing Index template with this API by adding a component template to enable the new meta fiel… --- ## [Filter\_path support in Java Client](https://discuss.elastic.co/t/filter-path-support-in-java-client/303258)
**Author:** [@Fabrizio\_Fortino](https://discuss.elastic.co/u/Fabrizio_Fortino)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 12:07pm UTC](https://discuss.elastic.co/t/filter-path-support-in-java-client/303258 "2022-04-26T12:07:02Z")
We would like to reduce the response size of search requests by removing stuff we don't need (eg: index name since we are pointing to a single index or score). Elastic supports this through filter\_path. Both RHLC and EJ… --- ## [Mapper size plugin on Elastic Cloud](https://discuss.elastic.co/t/mapper-size-plugin-on-elastic-cloud/303161)
**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\ **Replies:** 3\ **Last updated:** [April 26, 2022, 11:15am UTC](https://discuss.elastic.co/t/mapper-size-plugin-on-elastic-cloud/303161 "2022-04-26T11:15:51Z")
Hello, I've enabled the mapper size plugin on my Elastic Cloud cluster and would like to know how can I add that new field mapping to my existing indices? I know that I have to modify my index templates to add the mappi… --- ## [Elasticsearch 7.16 use S3-compatible API setting return Failed to connect to service endpoint](https://discuss.elastic.co/t/elasticsearch-7-16-use-s3-compatible-api-setting-return-failed-to-connect-to-service-endpoint/303208)
**Author:** [@forget6](https://discuss.elastic.co/u/forget6)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 9:32am UTC](https://discuss.elastic.co/t/elasticsearch-7-16-use-s3-compatible-api-setting-return-failed-to-connect-to-service-endpoint/303208 "2022-04-26T09:32:20Z")
elasticsearch version: 7.16.2 s3 setting: elasticsearch.yml s3.client.default.endpoint: ${our own s3} bin/elasticsearch-keystore list keystore.seed s3.client.default.access\_key s3.client.default.secret\_key =========… --- ## [We are setting up 3 node Elasticsearch cluster](https://discuss.elastic.co/t/we-are-setting-up-3-node-elasticsearch-cluster/303181)
**Author:** [@ak9234](https://discuss.elastic.co/u/ak9234)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 9:17am UTC](https://discuss.elastic.co/t/we-are-setting-up-3-node-elasticsearch-cluster/303181 "2022-04-26T09:17:53Z")
We are setting up 3 node Elasticsearch cluster using 7.17, while configuring the cluster we are getting this error message: master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, an… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=449) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=451)