# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=451 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 452 --- ## [Microservices: Decouple sorting from filtering/aggregations](https://discuss.elastic.co/t/microservices-decouple-sorting-from-filtering-aggregations/303232)
**Author:** [@philipschm1tt](https://discuss.elastic.co/u/philipschm1tt)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 9:14am UTC](https://discuss.elastic.co/t/microservices-decouple-sorting-from-filtering-aggregations/303232 "2022-04-26T09:14:37Z")
Context: ecommerce category page We are using Elasticsearch for our product index. On a category page the users can filter products, we show the number of products in each category we sort the products using Elastics… --- ## [How many master node should be in configuration](https://discuss.elastic.co/t/how-many-master-node-should-be-in-configuration/303198)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 16\ **Last updated:** [April 26, 2022, 8:44am UTC](https://discuss.elastic.co/t/how-many-master-node-should-be-in-configuration/303198 "2022-04-26T08:44:48Z")
Hi I've developed such configuration host1 2 x master node 3x data hot 9x data warm host2 2 x master node 3x data hot 9x data warm in the docker logs I don't see any suspicious but I can't set up a kibana\_system … --- ## [Es service not starting up due to error](https://discuss.elastic.co/t/es-service-not-starting-up-due-to-error/302154)
**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\ **Replies:** 7\ **Last updated:** [April 26, 2022, 8:34am UTC](https://discuss.elastic.co/t/es-service-not-starting-up-due-to-error/302154 "2022-04-26T08:34:15Z")
Hi Team, My cluster was working fine but all of sudden i am getting below errors in elastic log. es service is not getting failed. \[T06:13:20,213\]\[ERROR\]\[o.e.x.s.a.e.ReservedRealm\] \[es\_1\] failed to retrieve password ha… --- ## [Rebalance primary shards, 2022](https://discuss.elastic.co/t/rebalance-primary-shards-2022/302911)
**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 8:12am UTC](https://discuss.elastic.co/t/rebalance-primary-shards-2022/302911 "2022-04-26T08:12:58Z")
Hello, I, too, would like my primary shards to be balanced across the cluster. I often reduce the number of replicas on older indices to optimize disk space. When the cluster is reasonably idle, shards will recover fr… --- ## [Elasticsearch 6.8 crear vista de dos indices](https://discuss.elastic.co/t/elasticsearch-6-8-crear-vista-de-dos-indices/302953)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 3\ **Last updated:** [April 26, 2022, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-crear-vista-de-dos-indices/302953 "2022-04-26T06:15:28Z")
Hola, necesitaría crear una vista o índice que una mediante un field dos índices diferentes. Es posible? como puedo hacerlo? Gracias, un saludo Javier. --- ## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/302698)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 3:51am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/302698 "2022-04-26T03:51:31Z")
ES:7.10.2 this is my error log： \[parent\] Data too large, data for \[indices:data/write/bulk\[s\]\] would be \[30380624822/28.2gb\], which is larger than the limit of \[28975929753/26.9gb\], real usage: \[30380571432/28.2gb\],… --- ## [Log4jHotPatchFat.jar IllegalAccessError](https://discuss.elastic.co/t/log4jhotpatchfat-jar-illegalaccesserror/303209)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 0\ **Last updated:** [April 26, 2022, 3:44am UTC](https://discuss.elastic.co/t/log4jhotpatchfat-jar-illegalaccesserror/303209 "2022-04-26T03:44:09Z")
Hi, We recently updated our Amazon AMI to pickup a newer version and after recycling our nodes to re-deploy Elasticsearch 7.16.3 we started seeing the following exception. Is this a known issue and something with a rec… --- ## [What is the impact if we increase max buckets value](https://discuss.elastic.co/t/what-is-the-impact-if-we-increase-max-buckets-value/303189)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 2:55am UTC](https://discuss.elastic.co/t/what-is-the-impact-if-we-increase-max-buckets-value/303189 "2022-04-26T02:55:06Z")
Hi, i just wanna know what is the impact on elastic if i increase max buckets value to a higher number. our grafana getting an error "unkown elastic error" and what we found is grafana require buckets more than the defa… --- ## [Field Collisions](https://discuss.elastic.co/t/field-collisions/302798)
**Author:** [@Hummellt](https://discuss.elastic.co/u/Hummellt)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:57am UTC](https://discuss.elastic.co/t/field-collisions/302798 "2022-04-26T01:57:06Z")
Hi, this is my first time working with elastic so i think im missing something. Im trying to setup the Elastic Stack to analyze Cowrie Logs. Problem is there are different sources for the Input field. In the Cowrie Lo… --- ## [What is the maximum number of indices allowed in elasticsearch?](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793)
**Author:** [@raqeeb](https://discuss.elastic.co/u/raqeeb)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:39am UTC](https://discuss.elastic.co/t/what-is-the-maximum-number-of-indices-allowed-in-elasticsearch/302793 "2022-04-26T01:39:32Z")
I am using MySQL for storing data in my software. We have to generate hundreds of reports using the data and it is taking more time when the size of data in increasing. For some reports it is taking 1 or 2 minutes. So we… --- ## [Limit the Transform scope based on timestamp](https://discuss.elastic.co/t/limit-the-transform-scope-based-on-timestamp/302832)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 0\ **Last updated:** [April 20, 2022, 3:30pm UTC](https://discuss.elastic.co/t/limit-the-transform-scope-based-on-timestamp/302832 "2022-04-20T15:30:31Z")
Hi! Supposedly I have logs, with timestamp for each one of them. Those logs can be group by a few dozens and describe a "session", which can take between 1 second - 1 minute. I currently have a Transform who is groupi… --- ## [Custom path for elasticsearch.yml, kibana.yml and logstash.yml](https://discuss.elastic.co/t/custom-path-for-elasticsearch-yml-kibana-yml-and-logstash-yml/302895)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:24am UTC](https://discuss.elastic.co/t/custom-path-for-elasticsearch-yml-kibana-yml-and-logstash-yml/302895 "2022-04-26T01:24:53Z")
Hello, I have installed ELK stack on my test server using the default installation options and have been able to set up an end to end test system working. However now, I have a new requirement to change the default ins… --- ## [I got received plaintext http traffic on an https channel, closing connection Netty4HttpChannel](https://discuss.elastic.co/t/i-got-received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/302973)
**Author:** [@moazmahmoud\_saad](https://discuss.elastic.co/u/moazmahmoud_saad)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:13am UTC](https://discuss.elastic.co/t/i-got-received-plaintext-http-traffic-on-an-https-channel-closing-connection-netty4httpchannel/302973 "2022-04-26T01:13:41Z")
i got this error on Elasticsearch 8.1.3 , how can i solve it i see many solutions but it doesn't work here is the output of the terminal when i go ot "http://localhost:9200/" it shows no data come and on the terminal i … --- ## [Some question about soft\_deletes and Reindex API](https://discuss.elastic.co/t/some-question-about-soft-deletes-and-reindex-api/302765)
**Author:** [@zhangzongdong](https://discuss.elastic.co/u/zhangzongdong)\ **Replies:** 5\ **Last updated:** [April 26, 2022, 1:12am UTC](https://discuss.elastic.co/t/some-question-about-soft-deletes-and-reindex-api/302765 "2022-04-26T01:12:31Z")
Two questions How to use reindex API with zero downtime. Could the index setting of index.soft\_deletes\_enabled be non-dynamic and replace reindex API with setting index.soft\_deletes\_enabled to true for a exist index wit… --- ## [Need help with pfx certificate installation on Windows Server 2016](https://discuss.elastic.co/t/need-help-with-pfx-certificate-installation-on-windows-server-2016/302954)
**Author:** [@vikas.shirke](https://discuss.elastic.co/u/vikas.shirke)\ **Replies:** 0\ **Last updated:** [April 21, 2022, 6:00pm UTC](https://discuss.elastic.co/t/need-help-with-pfx-certificate-installation-on-windows-server-2016/302954 "2022-04-21T18:00:21Z")
Hi All, Any help would be appreciated! I have downloaded latest 8.1.2 Elasticsearch version on my windows Server 2016 (.zip file). After extracting it, I tried creating certificates by following below two commands with… --- ## [Elasticsearch Cluster Configuration when upgrading ES to 7.16.2](https://discuss.elastic.co/t/elasticsearch-cluster-configuration-when-upgrading-es-to-7-16-2/303042)
**Author:** [@PAVK\_PRASAD](https://discuss.elastic.co/u/PAVK_PRASAD)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:08am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-configuration-when-upgrading-es-to-7-16-2/303042 "2022-04-26T01:08:13Z")
Hi Team, Required "Elasticsearch.yml" configuration for cluster (i.e 2 nodes) when upgrading ES to 7.16.2 from 7.3.2. Is below two properties are enough for cluster xpack.security.enabled: true xpack.security.transpo… --- ## [How to create a user with the security API in ElasticSearch create a user with Node JS Client?](https://discuss.elastic.co/t/how-to-create-a-user-with-the-security-api-in-elasticsearch-create-a-user-with-node-js-client/303017)
**Author:** [@Saurabh24](https://discuss.elastic.co/u/Saurabh24)\ **Replies:** 0\ **Last updated:** [April 22, 2022, 10:39am UTC](https://discuss.elastic.co/t/how-to-create-a-user-with-the-security-api-in-elasticsearch-create-a-user-with-node-js-client/303017 "2022-04-22T10:39:45Z")
The user is not getting created when the security API is used to create a user with the help of Node JS client. Can you please specify a code snippet or an example? --- ## [Scale down cluster recommendations](https://discuss.elastic.co/t/scale-down-cluster-recommendations/303123)
**Author:** [@elementcz](https://discuss.elastic.co/u/elementcz)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:02am UTC](https://discuss.elastic.co/t/scale-down-cluster-recommendations/303123 "2022-04-26T01:02:50Z")
Hello, we made a demo setup of Elasticsearch cluster on k8s consisting of 2 ingest nodes, 3 data nodes and 3 master nodes. As we bought the platinum license valid for only 3 nodes now we will need to scale cluster down … --- ## [Elasticsearch index shard size expanding/contracting by more than 75% of size](https://discuss.elastic.co/t/elasticsearch-index-shard-size-expanding-contracting-by-more-than-75-of-size/303149)
**Author:** [@Vamsi\_Htc](https://discuss.elastic.co/u/Vamsi_Htc)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 1:01am UTC](https://discuss.elastic.co/t/elasticsearch-index-shard-size-expanding-contracting-by-more-than-75-of-size/303149 "2022-04-26T01:01:13Z")
We run cluster on 5.6.3 , a 45 node cluster with single replica and shard size is around 70 GB . On some occasions shard size is expanding more than 75% of usual size and reaching to 120GB . This is causing diskspace hi… --- ## [7.9.3 Elasticsearch Installation Error](https://discuss.elastic.co/t/7-9-3-elasticsearch-installation-error/303175)
**Author:** [@Parvi](https://discuss.elastic.co/u/Parvi)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 12:57am UTC](https://discuss.elastic.co/t/7-9-3-elasticsearch-installation-error/303175 "2022-04-26T00:57:17Z")
I am getting this error tryin to install Elasticsearch 7.9.3 on my Windows system. Please suggest. Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/logging/log4j/core/config/properties/PropertiesCon… --- ## [Elasticsearch RAM remains busy. Elasticsearch version 6.3.0](https://discuss.elastic.co/t/elasticsearch-ram-remains-busy-elasticsearch-version-6-3-0/301985)
**Author:** [@Alex\_A](https://discuss.elastic.co/u/Alex_A)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 12:49am UTC](https://discuss.elastic.co/t/elasticsearch-ram-remains-busy-elasticsearch-version-6-3-0/301985 "2022-04-26T00:49:47Z")
Elasticsearch consumes a lot of memory during load testing. But the main problem is that after the termination of the load testing, the RAM remains busy. Elasticsearch version 6.3.0. What could be the problem? What clari… --- ## [Slow log threshold question](https://discuss.elastic.co/t/slow-log-threshold-question/302159)
**Author:** [@knightsg1](https://discuss.elastic.co/u/knightsg1)\ **Replies:** 3\ **Last updated:** [April 25, 2022, 9:35pm UTC](https://discuss.elastic.co/t/slow-log-threshold-question/302159 "2022-04-25T21:35:12Z")
I'm looking through the documentation regarding the slow log as I'd like to use it troubleshoot some performance issues we've run into. I'm a bit confused about the thresholds that are suggested in the documentation as i… --- ## [No public build() method on Aggregation.Builder class](https://discuss.elastic.co/t/no-public-build-method-on-aggregation-builder-class/303173)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 5:34pm UTC](https://discuss.elastic.co/t/no-public-build-method-on-aggregation-builder-class/303173 "2022-04-25T17:34:52Z")
Hello, In the new Elasticsearch Java Client API, the method build() of class co.elastic.clients.Elasticsearch.\_types.aggregations.Aggregation.Builder is not public. What is the correct way of creating an instance of co… --- ## [No matching indices found: No indices match pattern "filebeat-\*"](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-filebeat/302976)
**Author:** [@napoleon182](https://discuss.elastic.co/u/napoleon182)\ **Replies:** 9\ **Last updated:** [April 25, 2022, 5:02pm UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-filebeat/302976 "2022-04-25T17:02:43Z")
Hi All, I have big problem with my recent deploy of ES version 7.8 using docker. I'm trying to connect my filebeat sources, but I have following ERROR in the Stack Management 7.8.0 (see screenshot below). Some of the sou… --- ## [Elasticsearch Java Client: Support for custom mappings/settings](https://discuss.elastic.co/t/elasticsearch-java-client-support-for-custom-mappings-settings/303172)
**Author:** [@Fabrizio\_Fortino](https://discuss.elastic.co/u/Fabrizio_Fortino)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 4:17pm UTC](https://discuss.elastic.co/t/elasticsearch-java-client-support-for-custom-mappings-settings/303172 "2022-04-25T16:17:19Z")
Custom plugins sometimes require custom mappings/settings. As an example, elastiknn requires a specific setting to enable the plugin for a given index and a custom field mapping for the configuration. With the Rest Hig… --- ## [Elasticsearch enrich index](https://discuss.elastic.co/t/elasticsearch-enrich-index/303158)
**Author:** [@Slim\_Saddem](https://discuss.elastic.co/u/Slim_Saddem)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 2:07pm UTC](https://discuss.elastic.co/t/elasticsearch-enrich-index/303158 "2022-04-25T14:07:11Z")
Hi everyone! I use enrich policy to enrich indexes with data from another indexes. Link Documentation : Enrich your data | Elasticsearch Guide \[7.16\] | Elastic its works fine, but my problem is Elasticsearch doesn't r… --- ## [Aggregation Response](https://discuss.elastic.co/t/aggregation-response/303126)
**Author:** [@jpv](https://discuss.elastic.co/u/jpv)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 1:55pm UTC](https://discuss.elastic.co/t/aggregation-response/303126 "2022-04-25T13:55:08Z")
I recently migrated to Elasticsearch 7.0 and currently using RestHighLevelClient. I noticed my search response, specifically the aggregation response has some added prefixes on the aggregation name (filters#. sterm, min,… --- ## [ES Rally - indexing time increasing](https://discuss.elastic.co/t/es-rally-indexing-time-increasing/303136)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 5\ **Last updated:** [April 25, 2022, 1:19pm UTC](https://discuss.elastic.co/t/es-rally-indexing-time-increasing/303136 "2022-04-25T13:19:02Z")
Hi there, We set up a nightly race on an existing cluster to see the evolution of the cluster's performance. We are deleting existing indices from the previous race, indexing them again - 3, for a total of about 10G - … --- ## [Deprecate and remove Multiple Data Paths](https://discuss.elastic.co/t/deprecate-and-remove-multiple-data-paths/297911)
**Author:** [@st4r.f1sch](https://discuss.elastic.co/u/st4r.f1sch)\ **Replies:** 9\ **Last updated:** [April 25, 2022, 11:05am UTC](https://discuss.elastic.co/t/deprecate-and-remove-multiple-data-paths/297911 "2022-04-25T11:05:25Z")
Hi there, While I don't agree that this should be discussed here, but if that helps ¯\_(ツ)\_/¯ The issue is that Elastic is removing multiple data paths from the configuration that is a big issue when you have a ton of d… --- ## [Fields returned on a certain index are out of scope](https://discuss.elastic.co/t/fields-returned-on-a-certain-index-are-out-of-scope/303133)
**Author:** [@Draken](https://discuss.elastic.co/u/Draken)\ **Replies:** 0\ **Last updated:** [April 25, 2022, 9:03am UTC](https://discuss.elastic.co/t/fields-returned-on-a-certain-index-are-out-of-scope/303133 "2022-04-25T09:03:14Z")
Hello, we are currently working on a monitoring application which utilizes Elasticsearch for data storage, we are working with Elasticsearch 7.17.0 and currently using RestHighLevelClient to interact with it from our app… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=450) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=452)