# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=460

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 461

---

## [Cannot upgrade to 8.x; cannot find incompatible indices](https://discuss.elastic.co/t/cannot-upgrade-to-8-x-cannot-find-incompatible-indices/301526)

<div class="topic-metadata">

**Author:** [@Todd\_Sayers](https://discuss.elastic.co/u/Todd_Sayers)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 1:56pm UTC](https://discuss.elastic.co/t/cannot-upgrade-to-8-x-cannot-find-incompatible-indices/301526 "2022-04-07T13:56:57Z")

</div>

I'm not able to upgrade my cluster to 8.x. The Upgrade Assistant (via Kibana) does not identify any indices that need to be migrated (I additionally clicked the "migrate button," regardless). I'm stuck. After upgrading…

---

## [Elasticsearch filters aggregation does not return array format](https://discuss.elastic.co/t/elasticsearch-filters-aggregation-does-not-return-array-format/301736)

<div class="topic-metadata">

**Author:** [@abhi-jana](https://discuss.elastic.co/u/abhi-jana)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 1:05pm UTC](https://discuss.elastic.co/t/elasticsearch-filters-aggregation-does-not-return-array-format/301736 "2022-04-07T13:05:44Z")

</div>

The filters aggregation returns bucket as object "buckets": { "errors": { "doc\_count": 1 }, "warnings": { "doc\_count": 2 } } But i would like to return a …

---

## [What Does The Various Data Files Mean?](https://discuss.elastic.co/t/what-does-the-various-data-files-mean/301756)

<div class="topic-metadata">

**Author:** [@shaloms](https://discuss.elastic.co/u/shaloms)\
**Replies:** 2\
**Last updated:** [April 7, 2022, 12:55pm UTC](https://discuss.elastic.co/t/what-does-the-various-data-files-mean/301756 "2022-04-07T12:55:27Z")

</div>

Hi All, I'm new to Elasticsearch and this is my first time posting here, so apologies if I'm doing something incorrectly. Looking in the data directory, I see that there are lot of types of data files such as cfs, cfe,…

---

## [Terms aggregation on field with lowercase normalizer](https://discuss.elastic.co/t/terms-aggregation-on-field-with-lowercase-normalizer/301640)

<div class="topic-metadata">

**Author:** [@avnere](https://discuss.elastic.co/u/avnere)\
**Replies:** 5\
**Last updated:** [April 7, 2022, 12:54pm UTC](https://discuss.elastic.co/t/terms-aggregation-on-field-with-lowercase-normalizer/301640 "2022-04-07T12:54:15Z")

</div>

Hi, I mapped the following field: "name": { "type": "keyword", "normalizer": "lowercase", "fields": { "text": { "type": "text" } When I run Terms aggregation on this field, I get lowercase results. How can I get the …

---

## [Thresholds for Search Latency & What to do when Search Latency is high](https://discuss.elastic.co/t/thresholds-for-search-latency-what-to-do-when-search-latency-is-high/300850)

<div class="topic-metadata">

**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 11:46am UTC](https://discuss.elastic.co/t/thresholds-for-search-latency-what-to-do-when-search-latency-is-high/300850 "2022-04-07T11:46:35Z")

</div>

Hello everyone! Recently we are trying to develop a monitor for Search Latency in Elasticsearch. (The same as the Stack Monitoring chart) I researched optimum threshold values for Search Latency but couldn't find any do…

---

## [Pattern Capture Token Filter giving same start and end offset position](https://discuss.elastic.co/t/pattern-capture-token-filter-giving-same-start-and-end-offset-position/301858)

<div class="topic-metadata">

**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 11:46am UTC](https://discuss.elastic.co/t/pattern-capture-token-filter-giving-same-start-and-end-offset-position/301858 "2022-04-07T11:46:34Z")

</div>

I was following the Pattern Capture Token Filter example on the Elasticsearch 5.6 documentation. I tried running one example on my local elastic instance. I got the tokens but they all are showing the same start and end …

---

## [Use Elasticsearch to read lucene documents](https://discuss.elastic.co/t/use-elasticsearch-to-read-lucene-documents/301852)

<div class="topic-metadata">

**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 11:38am UTC](https://discuss.elastic.co/t/use-elasticsearch-to-read-lucene-documents/301852 "2022-04-07T11:38:48Z")

</div>

Hi All, I have an application that stores the data in lucene format. I want to read this data using Elasticsearch. Is there a way to implement the same? I have tried reindex api through kibana but that does not seem t…

---

## [Create bulkRequest using latest java API client(8.1.1) for list of products using builder lambda method](https://discuss.elastic.co/t/create-bulkrequest-using-latest-java-api-client-8-1-1-for-list-of-products-using-builder-lambda-method/301573)

<div class="topic-metadata">

**Author:** [@amitmbm](https://discuss.elastic.co/u/amitmbm)\
**Replies:** 5\
**Last updated:** [April 7, 2022, 10:49am UTC](https://discuss.elastic.co/t/create-bulkrequest-using-latest-java-api-client-8-1-1-for-list-of-products-using-builder-lambda-method/301573 "2022-04-07T10:49:49Z")

</div>

I am having a list of Products(for simplicity let's assume it has an id, brand, and name properties), and I want to index this list of products to Elasticsearch using java API client version 8.1.1. BulkRequest in java a…

---

## [Elastic Search Cross cluster replication](https://discuss.elastic.co/t/elastic-search-cross-cluster-replication/300674)

<div class="topic-metadata">

**Author:** [@Arpita11](https://discuss.elastic.co/u/Arpita11)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 10:03am UTC](https://discuss.elastic.co/t/elastic-search-cross-cluster-replication/300674 "2022-04-07T10:03:48Z")

</div>

Hi Team, I have a cluster with 3 nodes in primary region (all nodes are data nodes and master-eligible). My requirement is to setup cross cluster replication in secondary region for disaster recovery. Can I setup CCR …

---

## [\[Elasticsearch 5.5\] when node left and rejoin, all data in the node gone](https://discuss.elastic.co/t/elasticsearch-5-5-when-node-left-and-rejoin-all-data-in-the-node-gone/301825)

<div class="topic-metadata">

**Author:** [@meteoriteliu](https://discuss.elastic.co/u/meteoriteliu)\
**Replies:** 4\
**Last updated:** [April 7, 2022, 9:49am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-when-node-left-and-rejoin-all-data-in-the-node-gone/301825 "2022-04-07T09:49:43Z")

</div>

I have a Elasticsearch 5.5 cluster consists of 8 nodes (all the same config of both master and data nodes) and each node contains about 60 shards and each shard contains about 15GB data. I run into the problem that if I…

---

## [Collapse with point in time feature](https://discuss.elastic.co/t/collapse-with-point-in-time-feature/301535)

<div class="topic-metadata">

**Author:** [@nabhan\_karmi](https://discuss.elastic.co/u/nabhan_karmi)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:35am UTC](https://discuss.elastic.co/t/collapse-with-point-in-time-feature/301535 "2022-04-07T07:35:17Z")

</div>

I'm trying to use the collapse feature with the point in time, I successfully make the two features run together as per documentation, but the problem is with the result, in my case I have 3 documents has the same value …

---

## [Sub query using over order by in elasticsearch](https://discuss.elastic.co/t/sub-query-using-over-order-by-in-elasticsearch/301658)

<div class="topic-metadata">

**Author:** [@willers](https://discuss.elastic.co/u/willers)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:32am UTC](https://discuss.elastic.co/t/sub-query-using-over-order-by-in-elasticsearch/301658 "2022-04-07T07:32:05Z")

</div>

I need to transform the query to a query in Elasticsearch, but I didn't find a solution in my searches. Has anyone had this problem? SELECT \* FROM ( SELECT coalesce(open.day, close.day) as da…

---

## [Is there a way to read a dumped Elasticsearch index with Java?](https://discuss.elastic.co/t/is-there-a-way-to-read-a-dumped-elasticsearch-index-with-java/301654)

<div class="topic-metadata">

**Author:** [@MikeThomsen](https://discuss.elastic.co/u/MikeThomsen)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:30am UTC](https://discuss.elastic.co/t/is-there-a-way-to-read-a-dumped-elasticsearch-index-with-java/301654 "2022-04-07T07:30:34Z")

</div>

Is there a Java API for reading the contents of an Elasticsearch index that has been dumped to disk with the 2.X backup tools? We'd prefer to not set up a 2.X cluster and do rolling upgrades and unfortunately, the folks …

---

## [Error message: org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:82](https://discuss.elastic.co/t/error-message-org-elasticsearch-bootstrap-elasticsearch-main-elasticsearch-java-82/301715)

<div class="topic-metadata">

**Author:** [@Supelec](https://discuss.elastic.co/u/Supelec)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:29am UTC](https://discuss.elastic.co/t/error-message-org-elasticsearch-bootstrap-elasticsearch-main-elasticsearch-java-82/301715 "2022-04-07T07:29:29Z")

</div>

Hi, I installed Elasticsearch in Mac OS Monterey 12.3.1 in using brew command. The version installed is for Elasticsearch: 7.10.2/ java -version java version "1.8.0\_321" Java(TM) SE Runtime Environment (build 1.8.0\_…

---

## [Merging two nested fields with update\_by\_query](https://discuss.elastic.co/t/merging-two-nested-fields-with-update-by-query/301797)

<div class="topic-metadata">

**Author:** [@magedmakled](https://discuss.elastic.co/u/magedmakled)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 7:19am UTC](https://discuss.elastic.co/t/merging-two-nested-fields-with-update-by-query/301797 "2022-04-07T07:19:30Z")

</div>

Hello elastic community, I'm trying to merge two nested fields from two different documents. The nested fields have objects inside of them. I tried to load the nested array from the first document and add it to the nes…

---

## [A bug with \_bulk endpoint](https://discuss.elastic.co/t/a-bug-with-bulk-endpoint/301776)

<div class="topic-metadata">

**Author:** [@Rithik\_greendeck](https://discuss.elastic.co/u/Rithik_greendeck)\
**Replies:** 4\
**Last updated:** [April 7, 2022, 7:12am UTC](https://discuss.elastic.co/t/a-bug-with-bulk-endpoint/301776 "2022-04-07T07:12:56Z")

</div>

\[2022-04-06T07:32:33,436\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[1ba476d6d04397ba2f8ff005a1e5552e5a5314abde283c5a9a485566374f1026\] Encountered an unexpected error submitting a bulk request, will retry {:message=\>"S…

---

## [Elastic Maven Repository Down?](https://discuss.elastic.co/t/elastic-maven-repository-down/301589)

<div class="topic-metadata">

**Author:** [@jshyun](https://discuss.elastic.co/u/jshyun)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 7:09am UTC](https://discuss.elastic.co/t/elastic-maven-repository-down/301589 "2022-04-07T07:09:56Z")

</div>

Is the Maven repository at https://artifacts.elastic.co/maven still functioning? Index pages do not get served and maven can't seem to use it as a valid repository. From other community board posts it seems Elasticsearch…

---

## [Bucket Script and Gaps](https://discuss.elastic.co/t/bucket-script-and-gaps/301619)

<div class="topic-metadata">

**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\
**Replies:** 3\
**Last updated:** [April 7, 2022, 7:06am UTC](https://discuss.elastic.co/t/bucket-script-and-gaps/301619 "2022-04-07T07:06:26Z")

</div>

Hi, According to the documentation, the bucket script should be able to deal with gaps: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-pipeline.html#gap-policy But in my case, I go…

---

## [Cross cluster index in kibana](https://discuss.elastic.co/t/cross-cluster-index-in-kibana/301833)

<div class="topic-metadata">

**Author:** [@subham](https://discuss.elastic.co/u/subham)\
**Replies:** 0\
**Last updated:** [April 7, 2022, 6:21am UTC](https://discuss.elastic.co/t/cross-cluster-index-in-kibana/301833 "2022-04-07T06:21:11Z")

</div>

Hi All, Can someone tell whether we can get indices from cross cluster in Index Management. I am able to get the data of new index from remote cluster in dev tools but not able to see the same index in kibana. Please …

---

## [Index Data Ingestion](https://discuss.elastic.co/t/index-data-ingestion/301830)

<div class="topic-metadata">

**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\
**Replies:** 1\
**Last updated:** [April 7, 2022, 5:36am UTC](https://discuss.elastic.co/t/index-data-ingestion/301830 "2022-04-07T05:36:23Z")

</div>

Hi, I am trying to understand how the ingestion works. Lets say I created an index with 6 primary shards, 1 replica. and I am ingesting to the cluster (say logstash is continuously pushing data) to a coordinating only…

---

## [Bulk Import of data for different indices in presence of enrich ingest pipeline](https://discuss.elastic.co/t/bulk-import-of-data-for-different-indices-in-presence-of-enrich-ingest-pipeline/301689)

<div class="topic-metadata">

**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\
**Replies:** 4\
**Last updated:** [April 7, 2022, 3:21am UTC](https://discuss.elastic.co/t/bulk-import-of-data-for-different-indices-in-presence-of-enrich-ingest-pipeline/301689 "2022-04-07T03:21:12Z")

</div>

Context: I have two indices: devices and events devices has an enrich policy associated with it and a pipeline was created to enable this data enrichment. This pipeline works fine. i want to bulk import JSON objects fo…

---

## [Best ElasticSearch configuration mode](https://discuss.elastic.co/t/best-elasticsearch-configuration-mode/301566)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 9\
**Last updated:** [April 7, 2022, 2:28am UTC](https://discuss.elastic.co/t/best-elasticsearch-configuration-mode/301566 "2022-04-07T02:28:32Z")

</div>

Years ago I configured a server\* with Elasticsearch, however, until today my knowledge to configure, manage, define nodes, is totally 0. I don't have nodes for ingest, digest, etc, as I have no idea what they do. Even m…

---

## [Is default dynamic mapping of documents okay?](https://discuss.elastic.co/t/is-default-dynamic-mapping-of-documents-okay/301784)

<div class="topic-metadata">

**Author:** [@ksuren](https://discuss.elastic.co/u/ksuren)\
**Replies:** 2\
**Last updated:** [April 6, 2022, 11:39pm UTC](https://discuss.elastic.co/t/is-default-dynamic-mapping-of-documents-okay/301784 "2022-04-06T23:39:12Z")

</div>

While creating a business listing data store, so far added Business and Categories to an index. The mappings show as: Q1: Is this okay? And/or referring to Mapping | Elasticsearch Guide \[8.1\] | Elastic should I crea…

---

## [Does elastic master node really delete or create an index?](https://discuss.elastic.co/t/does-elastic-master-node-really-delete-or-create-an-index/301661)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 3\
**Last updated:** [April 6, 2022, 10:49pm UTC](https://discuss.elastic.co/t/does-elastic-master-node-really-delete-or-create-an-index/301661 "2022-04-06T22:49:35Z")

</div>

I am just confuse that what exactly does master node do in cluster According to my understanding it just maintain cluster state and each data node have cluster state information. From this documentation https://www.el…

---

## [Upgrade of elastic search version](https://discuss.elastic.co/t/upgrade-of-elastic-search-version/301620)

<div class="topic-metadata">

**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\
**Replies:** 3\
**Last updated:** [April 6, 2022, 10:48pm UTC](https://discuss.elastic.co/t/upgrade-of-elastic-search-version/301620 "2022-04-06T22:48:11Z")

</div>

hi team, I have 10 node cluster, I upgraded from 10 nodes to 2 nodes now 1 node is master node . Do I need make master node to other node and then upgrade 1 st node or I can directly upgrade the master node.

---

## [Elastic GravityApps Sql Backup Transaction Logs](https://discuss.elastic.co/t/elastic-gravityapps-sql-backup-transaction-logs/301494)

<div class="topic-metadata">

**Author:** [@Techplay27](https://discuss.elastic.co/u/Techplay27)\
**Replies:** 3\
**Last updated:** [April 6, 2022, 10:44pm UTC](https://discuss.elastic.co/t/elastic-gravityapps-sql-backup-transaction-logs/301494 "2022-04-06T22:44:30Z")

</div>

I can see quite a few transaction logs dating back to last year June and this is really using a lot of disk space up. I have a scheduled a full backup of the server, so after this successfully completes I will delete all…

---

## [Define custom unique key](https://discuss.elastic.co/t/define-custom-unique-key/301642)

<div class="topic-metadata">

**Author:** [@nn14](https://discuss.elastic.co/u/nn14)\
**Replies:** 3\
**Last updated:** [April 6, 2022, 10:42pm UTC](https://discuss.elastic.co/t/define-custom-unique-key/301642 "2022-04-06T22:42:45Z")

</div>

Hi team, Is there a way to define our own custom unique key for the document which is similar to uniqueKey provided in Solr. For e.g I need to define employeeId or a combination of 2 fields as unique id. Any example w…

---

## [Consulta no elastic](https://discuss.elastic.co/t/consulta-no-elastic/301792)

<div class="topic-metadata">

**Author:** [@Gabriel\_mec77](https://discuss.elastic.co/u/Gabriel_mec77)\
**Replies:** 4\
**Last updated:** [April 6, 2022, 8:43pm UTC](https://discuss.elastic.co/t/consulta-no-elastic/301792 "2022-04-06T20:43:50Z")

</div>

Como procurar apenas indices em vermelho no elastic

---

## [Calculate metric to raise alert in kibana](https://discuss.elastic.co/t/calculate-metric-to-raise-alert-in-kibana/301799)

<div class="topic-metadata">

**Author:** [@waelboss](https://discuss.elastic.co/u/waelboss)\
**Replies:** 0\
**Last updated:** [April 6, 2022, 8:21pm UTC](https://discuss.elastic.co/t/calculate-metric-to-raise-alert-in-kibana/301799 "2022-04-06T20:21:08Z")

</div>

i want to fire an alert with a query condition if min value = max value and current value \> 40 then fire alert the purpose is to fire the alert if the queue size doesn't decrease over a time interval of 5 minutes her…

---

## [Self-signed cert unable to import data to stream using fleet](https://discuss.elastic.co/t/self-signed-cert-unable-to-import-data-to-stream-using-fleet/301798)

<div class="topic-metadata">

**Author:** [@nfarmer](https://discuss.elastic.co/u/nfarmer)\
**Replies:** 0\
**Last updated:** [April 6, 2022, 8:07pm UTC](https://discuss.elastic.co/t/self-signed-cert-unable-to-import-data-to-stream-using-fleet/301798 "2022-04-06T20:07:56Z")

</div>

Hello, I'm trying to deploy elastic agents using fleet with the certificate authorities enable in the advanced output settings, but when I go to install the agent, it still says unknown authority. So I enrolled the agen…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=459)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=461)
