# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=454 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 455 --- ## [Log4j vulnerability in Elastic Search 7.16.1](https://discuss.elastic.co/t/log4j-vulnerability-in-elastic-search-7-16-1/302760)
**Author:** [@olilam](https://discuss.elastic.co/u/olilam)\ **Replies:** 1\ **Last updated:** [April 20, 2022, 3:08am UTC](https://discuss.elastic.co/t/log4j-vulnerability-in-elastic-search-7-16-1/302760 "2022-04-20T03:08:57Z")
Hi, Our vulnerability scanning tool is detecting Elasticsearch-sql-cli-7.16.1.jar in the bin folder as vulnerable and the jar file contains a Jndilookup.class file. Is it supposed to be detected as vulnerable? Can anyo… --- ## [Node.max\_local\_storage\_nodes was set to 3, now can't upgrade to 8.0](https://discuss.elastic.co/t/node-max-local-storage-nodes-was-set-to-3-now-cant-upgrade-to-8-0/302642)
**Author:** [@Justin\_Cross](https://discuss.elastic.co/u/Justin_Cross)\ **Replies:** 7\ **Last updated:** [April 19, 2022, 7:20pm UTC](https://discuss.elastic.co/t/node-max-local-storage-nodes-was-set-to-3-now-cant-upgrade-to-8-0/302642 "2022-04-19T19:20:19Z")
Hi, So our node.max\_local\_storage\_nodes was set to 3 even though we only need 1 the whole time. Now we are trying to upgrade from 7.17.0 to 8 and it won't allow us even when we remove the node.max\_local\_storage\_nodes fr… --- ## [Need Clarification on How to Obtain ES SSL Certs for Fleet Server](https://discuss.elastic.co/t/need-clarification-on-how-to-obtain-es-ssl-certs-for-fleet-server/302738)
**Author:** [@CptElasticBand](https://discuss.elastic.co/u/CptElasticBand)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 5:36pm UTC](https://discuss.elastic.co/t/need-clarification-on-how-to-obtain-es-ssl-certs-for-fleet-server/302738 "2022-04-19T17:36:16Z")
Hello! I need clarification on the following prerequisite for setting up proper Fleet Server SSL/TLS certificates. Excerpt from Configure SSL/TLS for self-managed Fleet Servers: Elastic Agents require a PEM-format… --- ## [Error converting field type in a reindexing](https://discuss.elastic.co/t/error-converting-field-type-in-a-reindexing/302689)
**Author:** [@quim.gomez](https://discuss.elastic.co/u/quim.gomez)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 5:05pm UTC](https://discuss.elastic.co/t/error-converting-field-type-in-a-reindexing/302689 "2022-04-19T17:05:29Z")
Hello, I'm having some visualization problems inside Elastic due to I'm sending all the data Beats collect to Logstash instead of directly to Elastisearch. That made some fields change their type. For example, the fiel… --- ## [Solr's copyField equivalent in ElasticSearch](https://discuss.elastic.co/t/solrs-copyfield-equivalent-in-elasticsearch/302682)
**Author:** [@nn14](https://discuss.elastic.co/u/nn14)\ **Replies:** 5\ **Last updated:** [April 19, 2022, 4:59pm UTC](https://discuss.elastic.co/t/solrs-copyfield-equivalent-in-elasticsearch/302682 "2022-04-19T16:59:52Z")
Hello team, We are migrating from Solr to ES. Please let me know if there is an equivalent of copyField in ES. Basically for the below Solr code, this was done to enable date range searches on lastUpdateDate I need an… --- ## [Elastic ingest node load not balanced with pipeline](https://discuss.elastic.co/t/elastic-ingest-node-load-not-balanced-with-pipeline/301894)
**Author:** [@ss\_22](https://discuss.elastic.co/u/ss_22)\ **Replies:** 9\ **Last updated:** [April 19, 2022, 4:33pm UTC](https://discuss.elastic.co/t/elastic-ingest-node-load-not-balanced-with-pipeline/301894 "2022-04-19T16:33:41Z")
Hi, I have a ECK cluster with 6 data/ingest nodes. I also have an ingest node pipeline deployed and processing logs from Filebeat. While it is running I noticed only one node being utilized near 100% CPU where the other… --- ## [Transport\_address resolved as IP:PORT in docker](https://discuss.elastic.co/t/transport-address-resolved-as-ip-port-in-docker/302718)
**Author:** [@Jan\_Kucera](https://discuss.elastic.co/u/Jan_Kucera)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 1:21pm UTC](https://discuss.elastic.co/t/transport-address-resolved-as-ip-port-in-docker/302718 "2022-04-19T13:21:10Z")
Hello everyone, I am struggling with Docker and Elasticsearch. I am trying to setup my instance so it has published adddress in format HOSTNAME:PORT and not IP:PORT for both HTTP and transport. I am posting my docker-co… --- ## [Elasticsearch \[6.8.23\] does not return results when I query in a specific field](https://discuss.elastic.co/t/elasticsearch-6-8-23-does-not-return-results-when-i-query-in-a-specific-field/302704)
**Author:** [@joanjanku2000](https://discuss.elastic.co/u/joanjanku2000)\ **Replies:** 2\ **Last updated:** [April 19, 2022, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-23-does-not-return-results-when-i-query-in-a-specific-field/302704 "2022-04-19T13:06:42Z")
Hi Everyone, I am running an issue after I upgraded my Elastic Cluster from 5.1.1 to 6.8.23. When I search everything in an index using this API: /index\_0003/\_search it returns all the result as expected. However… --- ## [How to access each value separately in ctx.payload.\_value](https://discuss.elastic.co/t/how-to-access-each-value-separately-in-ctx-payload-value/302450)
**Author:** [@700grm](https://discuss.elastic.co/u/700grm)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 11:18am UTC](https://discuss.elastic.co/t/how-to-access-each-value-separately-in-ctx-payload-value/302450 "2022-04-19T11:18:52Z")
Hi, I have two values in payload the host name and IP Address, which I need to access separately: "transform" : { "type" : "script", "status" : "success", "payload" : { "\_value" :… --- ## [Multi index search](https://discuss.elastic.co/t/multi-index-search/302711)
**Author:** [@anime\_lover](https://discuss.elastic.co/u/anime_lover)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 11:14am UTC](https://discuss.elastic.co/t/multi-index-search/302711 "2022-04-19T11:14:56Z")
Hi there , this query is interesting take a look and suggest me solution: suppose i have two indices . one is sales which contain cusId,productName,,,etc. another is custInfo which contain phonenumber,custId,...etc. … --- ## [Bulk index w/ new java-client](https://discuss.elastic.co/t/bulk-index-w-new-java-client/300111)
**Author:** [@divadpoc](https://discuss.elastic.co/u/divadpoc)\ **Replies:** 6\ **Last updated:** [April 19, 2022, 8:51am UTC](https://discuss.elastic.co/t/bulk-index-w-new-java-client/300111 "2022-04-19T08:51:51Z")
Hi, I'm looking for an example of how to do a bulk insert w/ the new java-client (8.1). Previously (w/ ES 7) I used the high level rest client and a BulkProcessor . Thanks --- ## [Create timestamp as index in Elasticsearch Kibana](https://discuss.elastic.co/t/create-timestamp-as-index-in-elasticsearch-kibana/302681)
**Author:** [@Manish.gupta](https://discuss.elastic.co/u/Manish.gupta)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 7:39am UTC](https://discuss.elastic.co/t/create-timestamp-as-index-in-elasticsearch-kibana/302681 "2022-04-19T07:39:29Z")
Hi, I am trying to change the default index in Elasticsearch with timestamp index. please let me know if there is a way for the same. --- ## [As the server hard disk no enough and I delete the file under /elasticsearch/nodes/0/indices](https://discuss.elastic.co/t/as-the-server-hard-disk-no-enough-and-i-delete-the-file-under-elasticsearch-nodes-0-indices/302605)
**Author:** [@Whybee](https://discuss.elastic.co/u/Whybee)\ **Replies:** 3\ **Last updated:** [April 19, 2022, 7:31am UTC](https://discuss.elastic.co/t/as-the-server-hard-disk-no-enough-and-i-delete-the-file-under-elasticsearch-nodes-0-indices/302605 "2022-04-19T07:31:54Z")
{"type": "server", "timestamp": "2022-04-18T16:40:26,280+08:00", "level": "WARN", "component": "o.e.c.s.MasterService", "cluster.name": "elasticsearch", "node.name": "jenkirsappu01", "message": "failing \[create-index \[it… --- ## [Cannot order by non-grouped column\[column name\]](https://discuss.elastic.co/t/cannot-order-by-non-grouped-column-column-name/302675)
**Author:** [@dido](https://discuss.elastic.co/u/dido)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 7:20am UTC](https://discuss.elastic.co/t/cannot-order-by-non-grouped-column-column-name/302675 "2022-04-19T07:20:05Z")
select \* from (select street, count(street) as counts, min(grocery) as grocery, min(school) as school, (min(grocery) + min(school)) as score from geo\_address group by 1) t order by grocery I have geo\_address index and… --- ## [Latency issue when cluster nodes are spread across data center](https://discuss.elastic.co/t/latency-issue-when-cluster-nodes-are-spread-across-data-center/302674)
**Author:** [@mSaify](https://discuss.elastic.co/u/mSaify)\ **Replies:** 0\ **Last updated:** [April 19, 2022, 7:18am UTC](https://discuss.elastic.co/t/latency-issue-when-cluster-nodes-are-spread-across-data-center/302674 "2022-04-19T07:18:09Z")
All, one of my clients has a cluster configuration where the 3 nodes are spread across 2 data centers. For a while, they have been noticing the latency on search queries. Based on network logs and cluster configuration… --- ## [Getting All records with doc\_count \>= 2](https://discuss.elastic.co/t/getting-all-records-with-doc-count-2/302407)
**Author:** [@minhaj\_shakeel](https://discuss.elastic.co/u/minhaj_shakeel)\ **Replies:** 14\ **Last updated:** [April 19, 2022, 5:03am UTC](https://discuss.elastic.co/t/getting-all-records-with-doc-count-2/302407 "2022-04-19T05:03:55Z")
I have 2 es indices. There are some records common in both the indices, I want to fetch them. My preliminary query is :- GET index1,index2/\_search { "size": 0, "aggs": { "duplicate record": { "terms": { … --- ## [Prometheus to Elasticsearch using remote\_write - server returned HTTP status 405 method not allowed](https://discuss.elastic.co/t/prometheus-to-elasticsearch-using-remote-write-server-returned-http-status-405-method-not-allowed/302661)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 1\ **Last updated:** [April 19, 2022, 3:51am UTC](https://discuss.elastic.co/t/prometheus-to-elasticsearch-using-remote-write-server-returned-http-status-405-method-not-allowed/302661 "2022-04-19T03:51:30Z")
Hi All, I am working on sending data from prometheus to elasticsearch using remote\_write in k8s and I am using Prometheus 2.28 image. Below is the remote write configuration defined in configMap (k8s). --- kind: Confi… --- ## [Updating field that is an empty string](https://discuss.elastic.co/t/updating-field-that-is-an-empty-string/302649)
**Author:** [@es\_beginner](https://discuss.elastic.co/u/es_beginner)\ **Replies:** 5\ **Last updated:** [April 19, 2022, 1:59am UTC](https://discuss.elastic.co/t/updating-field-that-is-an-empty-string/302649 "2022-04-19T01:59:49Z")
I currently have an elastic document with a field called grade. This field is an empty string. In Kibana, its registered as grade: (empty). Now when I try to update grade via: POST index/\_update/\_id { "doc": { … --- ## [Data Size and Shard Limits](https://discuss.elastic.co/t/data-size-and-shard-limits/302643)
**Author:** [@geena.rollins](https://discuss.elastic.co/u/geena.rollins)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 11:30pm UTC](https://discuss.elastic.co/t/data-size-and-shard-limits/302643 "2022-04-18T23:30:11Z")
What is the maxium recommended data size per shard? What is the maxium recommended number of shards per cluster? --- ## [Ingest Pipeline Grok filter ignores first pattern and matches second pattern when second pattern exists](https://discuss.elastic.co/t/ingest-pipeline-grok-filter-ignores-first-pattern-and-matches-second-pattern-when-second-pattern-exists/302645)
**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 9:03pm UTC](https://discuss.elastic.co/t/ingest-pipeline-grok-filter-ignores-first-pattern-and-matches-second-pattern-when-second-pattern-exists/302645 "2022-04-18T21:03:45Z")
Ingest Pipeline GROK filter: { "grok": { "field": "message", "patterns": \[ "\\\\s\*Workstation Name:(?!\\\\t-)\\\\s\*%{DATA:winlog.event\_data.WorkstationName}\\\\n\\\\t.\*", "%{GREEDYDATA:message}" … --- ## [Scroll context exceeding 500](https://discuss.elastic.co/t/scroll-context-exceeding-500/302641)
**Author:** [@Abi\_Blista](https://discuss.elastic.co/u/Abi_Blista)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 8:01pm UTC](https://discuss.elastic.co/t/scroll-context-exceeding-500/302641 "2022-04-18T20:01:33Z")
Im using python to pull large data from ES. When I tried to pull the data, Im getting this partucular issue scroll context exceeding 500. is there way to resolve this issue --- ## [Nest - Routing for multi tenant application](https://discuss.elastic.co/t/nest-routing-for-multi-tenant-application/302606)
**Author:** [@adrian.serban](https://discuss.elastic.co/u/adrian.serban)\ **Replies:** 1\ **Last updated:** [April 18, 2022, 6:33pm UTC](https://discuss.elastic.co/t/nest-routing-for-multi-tenant-application/302606 "2022-04-18T18:33:12Z")
We try to index the data according to a Routing Key (which refers to the ID of a tenant, from a multi-tenant application) The data seems to be indexed as expected: However, searching by this Routing field does not w… --- ## [Faield to start elastic search](https://discuss.elastic.co/t/faield-to-start-elastic-search/302608)
**Author:** [@Paritosh\_Pandey](https://discuss.elastic.co/u/Paritosh_Pandey)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 4:37pm UTC](https://discuss.elastic.co/t/faield-to-start-elastic-search/302608 "2022-04-18T16:37:24Z")
I am unable to start Elasticsearch, it shows code exited \ Elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/Elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Resu… --- ## [Get list of all indices using Elasticsearch Java API Client 7.17](https://discuss.elastic.co/t/get-list-of-all-indices-using-elasticsearch-java-api-client-7-17/302395)
**Author:** [@saurabhrs](https://discuss.elastic.co/u/saurabhrs)\ **Replies:** 6\ **Last updated:** [April 18, 2022, 2:28pm UTC](https://discuss.elastic.co/t/get-list-of-all-indices-using-elasticsearch-java-api-client-7-17/302395 "2022-04-18T14:28:33Z")
I am using Elasticsearch Java API Client 7.17 to perform operations on my cluster. I can not find a way to get list of all indices in my cluster using this API. I have found examples to achieve this using REST APIs but … --- ## [Elasticsearch - Bootstrap checks failing](https://discuss.elastic.co/t/elasticsearch-bootstrap-checks-failing/302442)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 2\ **Last updated:** [April 18, 2022, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-bootstrap-checks-failing/302442 "2022-04-18T13:28:53Z")
Hello i want to install elk on docker, so i followed the official documentation Install Elasticsearch with Docker | Elasticsearch Guide \[8.1\] | Elastic So when i want to start Elasticsearch in Docker to get the passwor… --- ## [Same template created every minute](https://discuss.elastic.co/t/same-template-created-every-minute/302623)
**Author:** [@stk1](https://discuss.elastic.co/u/stk1)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 1:23pm UTC](https://discuss.elastic.co/t/same-template-created-every-minute/302623 "2022-04-18T13:23:39Z")
Hi, we are using Elasticsearch with Kibana and APM-Server for monitoring since two years. Since 3 weeks we are experiencing massive problems. First Kibana stopped due to a corrupted translog (TranslogCorruptedException)… --- ## [Snapshot Backup is not deleting Across the ELK Cluster](https://discuss.elastic.co/t/snapshot-backup-is-not-deleting-across-the-elk-cluster/302620)
**Author:** [@Abhishek\_Pratap\_Sin1](https://discuss.elastic.co/u/Abhishek_Pratap_Sin1)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 12:34pm UTC](https://discuss.elastic.co/t/snapshot-backup-is-not-deleting-across-the-elk-cluster/302620 "2022-04-18T12:34:40Z")
Hi Team, I have three nodes ELK-Cluster, I have created an SLM policy to take a Snapshot backup on the daily basis and delete the snapshot backup after three days on the cluster \[Issue\]: The snapshot backup is deleted… --- ## [Adding a new field with phonetic(metaphone) value in elasticsearch index with logstash](https://discuss.elastic.co/t/adding-a-new-field-with-phonetic-metaphone-value-in-elasticsearch-index-with-logstash/302614)
**Author:** [@saiyad\_arshad\_qadir](https://discuss.elastic.co/u/saiyad_arshad_qadir)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 10:44am UTC](https://discuss.elastic.co/t/adding-a-new-field-with-phonetic-metaphone-value-in-elasticsearch-index-with-logstash/302614 "2022-04-18T10:44:00Z")
I am new to Elasticsearch and trying to index phonetic value(metaphone) into my Elasticsearch index using logstash. index example: { "\_id" : "lRBYHIAB4PMEhuD9IXcF", "name":"KEVIN GENTLE" } and when we index it, i am s… --- ## [My Mapping with python is not working](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545)
**Author:** [@Celal\_Celik](https://discuss.elastic.co/u/Celal_Celik)\ **Replies:** 8\ **Last updated:** [April 18, 2022, 10:34am UTC](https://discuss.elastic.co/t/my-mapping-with-python-is-not-working/302545 "2022-04-18T10:34:02Z")
Hello community, I was trying to upload a simple csv-File but unfortunatelty my Mapping is not working. All my fields are still "keywords". What am I missing? def csv\_reader(filename,indexname): # connection to Ela… --- ## [Elastic APM with .Net 5.0](https://discuss.elastic.co/t/elastic-apm-with-net-5-0/302596)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 0\ **Last updated:** [April 18, 2022, 7:12am UTC](https://discuss.elastic.co/t/elastic-apm-with-net-5-0/302596 "2022-04-18T07:12:35Z")
Hi, I am trying to instrument my sample dotnet application which is .net 5.0 version with elastic APM. While I am able to get the transactions and their respective stacktraces, the traces captured seems to be intermitte… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=453) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=455)