# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=461 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 462 --- ## [How to delete elasticsearch logs?](https://discuss.elastic.co/t/how-to-delete-elasticsearch-logs/301666)
**Author:** [@danielbsilva2](https://discuss.elastic.co/u/danielbsilva2)\ **Replies:** 16\ **Last updated:** [April 6, 2022, 8:02pm UTC](https://discuss.elastic.co/t/how-to-delete-elasticsearch-logs/301666 "2022-04-06T20:02:29Z")
good afternoon folks how do i delete my indexes in Elasticsearch? I need to delete the logs generated in Elasticsearch from an application I have here and leave the logs from the last 3 days, I've looked here on the fo… --- ## [Where User/Roles, Index and Saved objects are stored?](https://discuss.elastic.co/t/where-user-roles-index-and-saved-objects-are-stored/301686)
**Author:** [@Gabriel\_Mendez](https://discuss.elastic.co/u/Gabriel_Mendez)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 6:30pm UTC](https://discuss.elastic.co/t/where-user-roles-index-and-saved-objects-are-stored/301686 "2022-04-06T18:30:47Z")
Hello!, I am using a docker version for Elasticsearch and Kibana, and I have deployed an AWS instance to have my App working, Now on every documentation for Elastic and Kibana with docker it says that to backup the data… --- ## [ElasticSearch 8.1 - Multinode Cluster Setup](https://discuss.elastic.co/t/elasticsearch-8-1-multinode-cluster-setup/301677)
**Author:** [@Aldo2](https://discuss.elastic.co/u/Aldo2)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 5:40pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-multinode-cluster-setup/301677 "2022-04-06T17:40:21Z")
Hi Elastic Community, I have a question about the multi node version 8.1.1 cluster setup. When I need to add the 2nd node to the cluster according to the elastic support I must add: cluster.name: aiops node.name: elas… --- ## [Node Role Specific Disk Watermarks](https://discuss.elastic.co/t/node-role-specific-disk-watermarks/301684)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 3\ **Last updated:** [April 6, 2022, 3:05pm UTC](https://discuss.elastic.co/t/node-role-specific-disk-watermarks/301684 "2022-04-06T15:05:19Z")
Hi All, I was wondering if there was a way to set high disk watermark based on the node role? Looking at the docs. I see the normal settings cluster.routing.allocation.disk.watermark.low, cluster.routing.allocation.di… --- ## [Sorting multiple indices with different fields](https://discuss.elastic.co/t/sorting-multiple-indices-with-different-fields/301315)
**Author:** [@marten1](https://discuss.elastic.co/u/marten1)\ **Replies:** 5\ **Last updated:** [April 6, 2022, 2:27pm UTC](https://discuss.elastic.co/t/sorting-multiple-indices-with-different-fields/301315 "2022-04-06T14:27:34Z")
Hi there, I'm having a sorting issue. I have 2 indexes which I search. I want to sort on a date field, but they have different names in each index: index01 has a datefield: publishedDate index02 has a datefield: pos… --- ## [Suggest index design for my data](https://discuss.elastic.co/t/suggest-index-design-for-my-data/301702)
**Author:** [@Martynas\_Juravicius](https://discuss.elastic.co/u/Martynas_Juravicius)\ **Replies:** 1\ **Last updated:** [April 6, 2022, 2:20pm UTC](https://discuss.elastic.co/t/suggest-index-design-for-my-data/301702 "2022-04-06T14:20:52Z")
Hey, everyone, We are currently building some search engine for our internal data and we are using Elasticsearch for that. Our data looks like this: Object A: {attribute\_a\_1, attribute\_a\_2} - 100M of object A; Object … --- ## [How to set data change history in a separate index?](https://discuss.elastic.co/t/how-to-set-data-change-history-in-a-separate-index/301762)
**Author:** [@a.number27](https://discuss.elastic.co/u/a.number27)\ **Replies:** 0\ **Last updated:** [April 6, 2022, 1:39pm UTC](https://discuss.elastic.co/t/how-to-set-data-change-history-in-a-separate-index/301762 "2022-04-06T13:39:45Z")
To set the historicity I need : "You should store the history in a separate index. And insert into the history index on every update to the original document index." Can you please tell me how to set it up step by step?… --- ## [How to index the csv file data into elasticsearch?](https://discuss.elastic.co/t/how-to-index-the-csv-file-data-into-elasticsearch/301395)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 4\ **Last updated:** [April 6, 2022, 9:30am UTC](https://discuss.elastic.co/t/how-to-index-the-csv-file-data-into-elasticsearch/301395 "2022-04-06T09:30:12Z")
How to index the data from a CSV file into Elasticsearch without using logstash? Looking to get it done through curl command and providing the csv file as input. --- ## [Indexing/search algorithm stability between versions](https://discuss.elastic.co/t/indexing-search-algorithm-stability-between-versions/301718)
**Author:** [@Alvaro\_Denis\_Acosta](https://discuss.elastic.co/u/Alvaro_Denis_Acosta)\ **Replies:** 1\ **Last updated:** [April 6, 2022, 8:14am UTC](https://discuss.elastic.co/t/indexing-search-algorithm-stability-between-versions/301718 "2022-04-06T08:14:22Z")
Hello @all, I'm migrating from Elasticsearch 1.5 to 7.10 there are multiple required changes, the most relevant one is the removal of the document type concept in version 6, to deal with it I introduced a new field "doc… --- ## [Doc\['message.keyword'\] shows 0 value for given index but actually value is present in message field. What could be the reason?](https://discuss.elastic.co/t/doc-message-keyword-shows-0-value-for-given-index-but-actually-value-is-present-in-message-field-what-could-be-the-reason/301299)
**Author:** [@vishdubey](https://discuss.elastic.co/u/vishdubey)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 8:14am UTC](https://discuss.elastic.co/t/doc-message-keyword-shows-0-value-for-given-index-but-actually-value-is-present-in-message-field-what-could-be-the-reason/301299 "2022-04-06T08:14:12Z")
below is the script field GET log-2022.03.30/\_search { "script\_fields": { "message": { "script": { "lang" : "painless", "source": "doc\['message.keyword'\].value" } } } } and here … --- ## [So many indices for activity\_page\_xxxxx in elasticsearch](https://discuss.elastic.co/t/so-many-indices-for-activity-page-xxxxx-in-elasticsearch/301690)
**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\ **Replies:** 6\ **Last updated:** [April 6, 2022, 6:27am UTC](https://discuss.elastic.co/t/so-many-indices-for-activity-page-xxxxx-in-elasticsearch/301690 "2022-04-06T06:27:16Z")
why there are so many indices of activity\_page\_xxxxx in Elasticsearch? The default parameter of max\_shards\_per\_node is 1000, The activity\_page\_xxxxx is nearly 2000. --- ## [Automation for version upgrade of elastic search](https://discuss.elastic.co/t/automation-for-version-upgrade-of-elastic-search/301281)
**Author:** [@aman123](https://discuss.elastic.co/u/aman123)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 6:08am UTC](https://discuss.elastic.co/t/automation-for-version-upgrade-of-elastic-search/301281 "2022-04-06T06:08:00Z")
Hi All, I'm planning to set the automatic jenkins pipeline for the automatic upgrade of the Elasticsearch. Is there any better way to setup the automation for the same. --- ## [Change Elasticsearch settings without Kibana](https://discuss.elastic.co/t/change-elasticsearch-settings-without-kibana/301681)
**Author:** [@carl25en](https://discuss.elastic.co/u/carl25en)\ **Replies:** 6\ **Last updated:** [April 6, 2022, 5:42am UTC](https://discuss.elastic.co/t/change-elasticsearch-settings-without-kibana/301681 "2022-04-06T05:42:21Z")
Hey there! I was wondering if there is any way to change the settings of Elasticsearch without using Kibana. I specifically have to change the size of the result of query from 10,000 (default) to 120,000. Is it possible… --- ## [Making PatternCaptureGroupTokenFilter matches globally](https://discuss.elastic.co/t/making-patterncapturegrouptokenfilter-matches-globally/301693)
**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\ **Replies:** 0\ **Last updated:** [April 6, 2022, 4:29am UTC](https://discuss.elastic.co/t/making-patterncapturegrouptokenfilter-matches-globally/301693 "2022-04-06T04:29:44Z")
I have created a regex. But, the issue with that regex is that it is returning only the first match and stopped matching afterwards. Inside my java file, I know I can use the find and group methods for returning all the … --- ## [What happens if a warm node will be out of space in the middle of an index rollover?](https://discuss.elastic.co/t/what-happens-if-a-warm-node-will-be-out-of-space-in-the-middle-of-an-index-rollover/301695)
**Author:** [@aivinog1](https://discuss.elastic.co/u/aivinog1)\ **Replies:** 0\ **Last updated:** [April 6, 2022, 5:17am UTC](https://discuss.elastic.co/t/what-happens-if-a-warm-node-will-be-out-of-space-in-the-middle-of-an-index-rollover/301695 "2022-04-06T05:17:08Z")
Hello! I have a question: what happens with a cluster's ILM if a warm node (I want to offload some data that is not frequently used to warm nodes and delete it from there after some period of time) will be out of space … --- ## [How to understand index and search info obtained by \_node/stats API？](https://discuss.elastic.co/t/how-to-understand-index-and-search-info-obtained-by-node-stats-api/301384)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 2\ **Last updated:** [April 6, 2022, 4:09am UTC](https://discuss.elastic.co/t/how-to-understand-index-and-search-info-obtained-by-node-stats-api/301384 "2022-04-06T04:09:10Z")
use this API can get the index\_total and query\_total GET \_nodes/stats/indices/indexing,search and from granfana can get info as below: how to understand the meaning of index\_total and query\_total ？ --- ## [How to write complex ElasticSearch query](https://discuss.elastic.co/t/how-to-write-complex-elasticsearch-query/301692)
**Author:** [@GurjitGora](https://discuss.elastic.co/u/GurjitGora)\ **Replies:** 0\ **Last updated:** [April 6, 2022, 3:37am UTC](https://discuss.elastic.co/t/how-to-write-complex-elasticsearch-query/301692 "2022-04-06T03:37:05Z")
--- ## [Zlib 1.2.12 getting corruption errors](https://discuss.elastic.co/t/zlib-1-2-12-getting-corruption-errors/301581)
**Author:** [@mailme\_gx](https://discuss.elastic.co/u/mailme_gx)\ **Replies:** 4\ **Last updated:** [April 6, 2022, 1:42am UTC](https://discuss.elastic.co/t/zlib-1-2-12-getting-corruption-errors/301581 "2022-04-06T01:42:35Z")
Hi all I filed a bug several days ago but have had no response, has no one else had issues after upgrading zlib to 1.2.12? I tried this on a new clean data directory with a single node, if I downgrade to 1.2.11 the s… --- ## [Adding a warm node](https://discuss.elastic.co/t/adding-a-warm-node/301663)
**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\ **Replies:** 15\ **Last updated:** [April 5, 2022, 11:07pm UTC](https://discuss.elastic.co/t/adding-a-warm-node/301663 "2022-04-05T23:07:26Z")
I've started with 4 ELK nodes: Host 1 Logstash & Kibana Host 2 Elasticsearch node-1 Host 3 Elasticsearch node-2 Host 4 Elasticsearch node-3 The stack is running 7.16.1 and has just over a years' worth of data. I'… --- ## [New elasticsearch installation broke after Fedor update](https://discuss.elastic.co/t/new-elasticsearch-installation-broke-after-fedor-update/301569)
**Author:** [@moby](https://discuss.elastic.co/u/moby)\ **Replies:** 10\ **Last updated:** [April 5, 2022, 10:37pm UTC](https://discuss.elastic.co/t/new-elasticsearch-installation-broke-after-fedor-update/301569 "2022-04-05T22:37:59Z")
Hello, I have installed the latest version of Fedora desktop and was able to install Elasticsearch and kibana via the DNF package manager. I was able to bring up Kibana and login. Shutdown the computer. A few days late… --- ## [Delayed Allocation - Multiple Node Failures](https://discuss.elastic.co/t/delayed-allocation-multiple-node-failures/301653)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 10:30pm UTC](https://discuss.elastic.co/t/delayed-allocation-multiple-node-failures/301653 "2022-04-05T22:30:00Z")
Had a unique situation occur recently, and I've been thinking about how to prevent it from recurring. I have an Elasticsearch cluster which happens to run on multiple docker containers, on rackmount servers. Essentiall… --- ## [Unable to create index from c#](https://discuss.elastic.co/t/unable-to-create-index-from-c/301655)
**Author:** [@shamir](https://discuss.elastic.co/u/shamir)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 9:46pm UTC](https://discuss.elastic.co/t/unable-to-create-index-from-c/301655 "2022-04-05T21:46:20Z")
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown\_ca at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:480) ~\[netty-code… --- ## [Oidc 5000milliseconds timeout. oidc realm oidc1 failed to authenticate](https://discuss.elastic.co/t/oidc-5000milliseconds-timeout-oidc-realm-oidc1-failed-to-authenticate/301659)
**Author:** [@Ali\_Muhammad](https://discuss.elastic.co/u/Ali_Muhammad)\ **Replies:** 0\ **Last updated:** [April 5, 2022, 6:33pm UTC](https://discuss.elastic.co/t/oidc-5000milliseconds-timeout-oidc-realm-oidc1-failed-to-authenticate/301659 "2022-04-05T18:33:52Z")
Hello community. I have been stuck with following message for a while now. \[2022-04-05T18:20:23,391\]\[WARN \]\[o.e.x.s.a.AuthenticationService\] \[vesa-brokerage-elk-multizone-es-node-2\] Authentication to realm oidc1 failed… --- ## [Minimum\_should\_match percentage rounding](https://discuss.elastic.co/t/minimum-should-match-percentage-rounding/301662)
**Author:** [@bews](https://discuss.elastic.co/u/bews)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 7:42pm UTC](https://discuss.elastic.co/t/minimum-should-match-percentage-rounding/301662 "2022-04-05T19:42:06Z")
Situation: I have a bool query with N 'should' conditions and I want to let it ignore 1 of those. Before in ES version 6 (iirc) this was achieved with 'minimum\_should\_match' =\> '99%', but now on version 8.1.1 this doesn… --- ## [Nest Client search empty string does not work](https://discuss.elastic.co/t/nest-client-search-empty-string-does-not-work/301664)
**Author:** [@qwe](https://discuss.elastic.co/u/qwe)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 7:02pm UTC](https://discuss.elastic.co/t/nest-client-search-empty-string-does-not-work/301664 "2022-04-05T19:02:07Z")
I am trying to implement search for documents where a field exists and is not empty. The field is mapped as follows: { "mapping": { "properties": { "standardData": { "properties": { ... "p… --- ## [I am trying to uninstall elastic search MSI but can't find the elasticsearch-service.bat file](https://discuss.elastic.co/t/i-am-trying-to-uninstall-elastic-search-msi-but-cant-find-the-elasticsearch-service-bat-file/301447)
**Author:** [@Pierre\_Abi\_Chedid](https://discuss.elastic.co/u/Pierre_Abi_Chedid)\ **Replies:** 4\ **Last updated:** [April 5, 2022, 3:45pm UTC](https://discuss.elastic.co/t/i-am-trying-to-uninstall-elastic-search-msi-but-cant-find-the-elasticsearch-service-bat-file/301447 "2022-04-05T15:45:31Z")
Hello, I have been trying to install Elasticsearch using the msi version: https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.10.0.msi But I have been encountering problems with setting up the passwor… --- ## [Elasticsearch 8.1.1 error](https://discuss.elastic.co/t/elasticsearch-8-1-1-error/301126)
**Author:** [@andrewm659](https://discuss.elastic.co/u/andrewm659)\ **Replies:** 9\ **Last updated:** [April 5, 2022, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-1-error/301126 "2022-04-05T14:41:29Z")
I am trying to upgrade from 7.17.1 to 8.1.1 and getting the following error on RHEL 7.x latest with Java 17 from RHEL: \[2022-03-30T11:51:49,898\]\[INFO \]\[o.e.n.Node \] \[elasticsearch01.internaldomain.com\] ver… --- ## [Connection timeout when resthighlevel client is called from spark mapPartitions method](https://discuss.elastic.co/t/connection-timeout-when-resthighlevel-client-is-called-from-spark-mappartitions-method/301492)
**Author:** [@vinayak\_j](https://discuss.elastic.co/u/vinayak_j)\ **Replies:** 3\ **Last updated:** [April 5, 2022, 1:56pm UTC](https://discuss.elastic.co/t/connection-timeout-when-resthighlevel-client-is-called-from-spark-mappartitions-method/301492 "2022-04-05T13:56:07Z")
Hi Team, We are getting "Connection timed out " while connecting to elastic cluster \[setup on GCP\] through resthighlevel client from spark mapPartitions() \[using dataproc\]. We are using Elasticsearch for lookup; basica… --- ## [Query syntax?](https://discuss.elastic.co/t/query-syntax/301628)
**Author:** [@jze1](https://discuss.elastic.co/u/jze1)\ **Replies:** 1\ **Last updated:** [April 5, 2022, 12:40pm UTC](https://discuss.elastic.co/t/query-syntax/301628 "2022-04-05T12:40:01Z")
Hello, I need to extract certain records from logs and make some grouping based on some fields. It requires that a substring based on regexp is extracted from one of the fields to allow grouping. After some googling I … --- ## [MultiSearch Indexes different mapping](https://discuss.elastic.co/t/multisearch-indexes-different-mapping/301559)
**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\ **Replies:** 2\ **Last updated:** [April 5, 2022, 11:57am UTC](https://discuss.elastic.co/t/multisearch-indexes-different-mapping/301559 "2022-04-05T11:57:07Z")
Has anyone ever used a search strategy on more than one index? In my case I have different indexes, like a product index and a community index, both with different mappings. In tests using the same alias for both, sort… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=460) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=462)