# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=462

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 463

---

## [How can I reduce the number of master candidate nodes from 3 to 1?](https://discuss.elastic.co/t/how-can-i-reduce-the-number-of-master-candidate-nodes-from-3-to-1/301612)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 1\
**Last updated:** [April 5, 2022, 11:31am UTC](https://discuss.elastic.co/t/how-can-i-reduce-the-number-of-master-candidate-nodes-from-3-to-1/301612 "2022-04-05T11:31:22Z")

</div>

There are a total of 4 nodes, of which 3 are master candidate nodes. I would like to specify one master candidate node for testing, but the operation does not proceed with the error below. "\[2019-06-19T20:16:12,366\]\[WA…

---

## [Thinking out loud, I have a large disk enclosure and want to use it for Elastic](https://discuss.elastic.co/t/thinking-out-loud-i-have-a-large-disk-enclosure-and-want-to-use-it-for-elastic/300681)

<div class="topic-metadata">

**Author:** [@UPPERCASE](https://discuss.elastic.co/u/UPPERCASE)\
**Replies:** 1\
**Last updated:** [April 5, 2022, 11:26am UTC](https://discuss.elastic.co/t/thinking-out-loud-i-have-a-large-disk-enclosure-and-want-to-use-it-for-elastic/300681 "2022-04-05T11:26:24Z")

</div>

I've got a 84x 16Tb in a disk enclosure that can be attached with SAS, all details can be read here. This is not a disk array, so it doesn't have its own cache, hardware RAID controller or ways to export the data via e.g…

---

## [Http.max\_content\_length update on cluster](https://discuss.elastic.co/t/http-max-content-length-update-on-cluster/301476)

<div class="topic-metadata">

**Author:** [@gerasimysys](https://discuss.elastic.co/u/gerasimysys)\
**Replies:** 4\
**Last updated:** [April 5, 2022, 11:19am UTC](https://discuss.elastic.co/t/http-max-content-length-update-on-cluster/301476 "2022-04-05T11:19:24Z")

</div>

Hello. On the logstash, have error \[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[4662344eb1eeab4baf336e2996a14ddadf8c61b8943c6e31c68cb582d77f72de\] Encountered a retryable error (will retry with exponential ba ckoff) {:…

---

## [Elasticsearch-service.bat start (from GUI) fails](https://discuss.elastic.co/t/elasticsearch-service-bat-start-from-gui-fails/301521)

<div class="topic-metadata">

**Author:** [@Foggie](https://discuss.elastic.co/u/Foggie)\
**Replies:** 3\
**Last updated:** [April 5, 2022, 10:49am UTC](https://discuss.elastic.co/t/elasticsearch-service-bat-start-from-gui-fails/301521 "2022-04-05T10:49:06Z")

</div>

Trying to use Elasticsearch 7.17.1 as a service on a Windows Server 2016. I run Elasticsearch-service manager and press Start from the GUI. After a short while it stops. here is the debug log: \< \[2022-04-04 14:17:33\]…

---

## [Elasticsearch search document with nested document with optional fields](https://discuss.elastic.co/t/elasticsearch-search-document-with-nested-document-with-optional-fields/301604)

<div class="topic-metadata">

**Author:** [@kemot90](https://discuss.elastic.co/u/kemot90)\
**Replies:** 2\
**Last updated:** [April 5, 2022, 10:21am UTC](https://discuss.elastic.co/t/elasticsearch-search-document-with-nested-document-with-optional-fields/301604 "2022-04-05T10:21:03Z")

</div>

I try to create query for nested object that contains year and month. Both of them are optional. If some field not exists we treat them as hit. I found one solution but it causes combinatorial explosion of terms so I'm t…

---

## [Restore snapshot to new server](https://discuss.elastic.co/t/restore-snapshot-to-new-server/301598)

<div class="topic-metadata">

**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\
**Replies:** 3\
**Last updated:** [April 5, 2022, 9:25am UTC](https://discuss.elastic.co/t/restore-snapshot-to-new-server/301598 "2022-04-05T09:25:51Z")

</div>

hello i want to ask, is it possible to restore snapshot from old server to new server

---

## [Retrieving settings of custom analysis filter with new elastic Java client](https://discuss.elastic.co/t/retrieving-settings-of-custom-analysis-filter-with-new-elastic-java-client/301502)

<div class="topic-metadata">

**Author:** [@acarrio](https://discuss.elastic.co/u/acarrio)\
**Replies:** 2\
**Last updated:** [April 5, 2022, 9:24am UTC](https://discuss.elastic.co/t/retrieving-settings-of-custom-analysis-filter-with-new-elastic-java-client/301502 "2022-04-05T09:24:35Z")

</div>

Hello, I have a custom analysis filter deployed on elastic and when I want to retrieve with the new Java client the setting of an index using this filter. I currently get : co.elastic.clients.util.MissingRequiredPrope…

---

## [Replicating legacy indexes via ccr](https://discuss.elastic.co/t/replicating-legacy-indexes-via-ccr/301608)

<div class="topic-metadata">

**Author:** [@rob18](https://discuss.elastic.co/u/rob18)\
**Replies:** 0\
**Last updated:** [April 5, 2022, 9:14am UTC](https://discuss.elastic.co/t/replicating-legacy-indexes-via-ccr/301608 "2022-04-05T09:14:25Z")

</div>

Hi I have couple of questions regarding CCR. We have setup ccr between 2 ES clusters, version 7.17.0 How do we migrate the existing set of indexes from the leader cluster to follower (considering follower cluster ha…

---

## [Need help with Pattern Capture Token Filter](https://discuss.elastic.co/t/need-help-with-pattern-capture-token-filter/301469)

<div class="topic-metadata">

**Author:** [@dishant.sharma](https://discuss.elastic.co/u/dishant.sharma)\
**Replies:** 0\
**Last updated:** [April 4, 2022, 8:17am UTC](https://discuss.elastic.co/t/need-help-with-pattern-capture-token-filter/301469 "2022-04-04T08:17:11Z")

</div>

I am currently using the Pattern Capture Group Token Filter inside an Elasticsearch plugin. Currently, the plugin is working absolutely fine and is emitting the tokens also. But, the issue is that the pattern which I am …

---

## [How to create two elastic search cluster. In single kubernetes cluster](https://discuss.elastic.co/t/how-to-create-two-elastic-search-cluster-in-single-kubernetes-cluster/301525)

<div class="topic-metadata">

**Author:** [@chethankumar4046](https://discuss.elastic.co/u/chethankumar4046)\
**Replies:** 2\
**Last updated:** [April 5, 2022, 6:40am UTC](https://discuss.elastic.co/t/how-to-create-two-elastic-search-cluster-in-single-kubernetes-cluster/301525 "2022-04-05T06:40:14Z")

</div>

i want to install two different versions of Elasticsearch in my single kubernetes cluster. is it posible

---

## [Prioritise health checks in ES cluster to prevent nodes falling out](https://discuss.elastic.co/t/prioritise-health-checks-in-es-cluster-to-prevent-nodes-falling-out/301578)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 1\
**Last updated:** [April 5, 2022, 4:04am UTC](https://discuss.elastic.co/t/prioritise-health-checks-in-es-cluster-to-prevent-nodes-falling-out/301578 "2022-04-05T04:04:58Z")

</div>

Hi I have a 30 node cluster. Occasionally, I encounter searches that spams the cluster, causing health checks to fail. I see errors like "SERVICE\_UNAVAILABLE/2/no master\]" and my coordinating node falls out of the clust…

---

## [Incorrect HTTP method for URI](https://discuss.elastic.co/t/incorrect-http-method-for-uri/301440)

<div class="topic-metadata">

**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\
**Replies:** 4\
**Last updated:** [April 5, 2022, 3:38am UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri/301440 "2022-04-05T03:38:06Z")

</div>

Hi guys, PUT /\<my-index-{now/d}\> PUT /%3Cmy-index-%7Bnow%2Fd%7D%3E I'm getting this error when I run the command above. { "error" : "Incorrect HTTP method for uri \[/%3Cmy-index-%7Bnow/d%7D%3E?pretty=true\] and method…

---

## [Query in ElasticSearch comparing properties in a document](https://discuss.elastic.co/t/query-in-elasticsearch-comparing-properties-in-a-document/301246)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 4\
**Last updated:** [April 5, 2022, 1:37am UTC](https://discuss.elastic.co/t/query-in-elasticsearch-comparing-properties-in-a-document/301246 "2022-04-05T01:37:46Z")

</div>

Is it possible in Elasticsearch to search for documents that have two equal/different properties or a property in the document root is equal/different to a property in a nested property? For example, I have a document t…

---

## [Taking a snapshot causes nodes to fall out of the cluster](https://discuss.elastic.co/t/taking-a-snapshot-causes-nodes-to-fall-out-of-the-cluster/301545)

<div class="topic-metadata">

**Author:** [@reshippie](https://discuss.elastic.co/u/reshippie)\
**Replies:** 3\
**Last updated:** [April 5, 2022, 12:20am UTC](https://discuss.elastic.co/t/taking-a-snapshot-causes-nodes-to-fall-out-of-the-cluster/301545 "2022-04-05T00:20:20Z")

</div>

I've got a 22 node cluster (64GB RAM, 16 or 32 cores, 6x2TB SSD in RAID5) along with 3 master eligible nodes. I'm trying to take snapshots of a few indices and whenever I do, I see messages like: \[o.e.c.c.C.Coordinator…

---

## [Fluent-bit microservice getting restart frequently](https://discuss.elastic.co/t/fluent-bit-microservice-getting-restart-frequently/301496)

<div class="topic-metadata">

**Author:** [@muralikri](https://discuss.elastic.co/u/muralikri)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 10:39pm UTC](https://discuss.elastic.co/t/fluent-bit-microservice-getting-restart-frequently/301496 "2022-04-04T22:39:53Z")

</div>

Hi Team, We have created configmap as below, fluent-bit MS is getting terminate and startup frequently and i could see that it is throwing below error in the logs. After restart it indexing fine and also no buffer \*.flb…

---

## [Elasticsearch file realm users in docker image](https://discuss.elastic.co/t/elasticsearch-file-realm-users-in-docker-image/301555)

<div class="topic-metadata">

**Author:** [@zvonimir](https://discuss.elastic.co/u/zvonimir)\
**Replies:** 0\
**Last updated:** [April 4, 2022, 7:27pm UTC](https://discuss.elastic.co/t/elasticsearch-file-realm-users-in-docker-image/301555 "2022-04-04T19:27:16Z")

</div>

Hello. I have security dilemma to create Elasticsearch docker image with file realm files (user, user\_roles) to have some users ready as soon as cluster is deployed. Is that common approach or security issues? I am worr…

---

## [Reference Tables in Elastic](https://discuss.elastic.co/t/reference-tables-in-elastic/301369)

<div class="topic-metadata">

**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\
**Replies:** 7\
**Last updated:** [April 4, 2022, 6:24pm UTC](https://discuss.elastic.co/t/reference-tables-in-elastic/301369 "2022-04-04T18:24:12Z")

</div>

Scenario: I have a multi-field index which stores documents, 'index a', which has a field "id" whose value is a hexadecimal number i have another index 'b' which stores a list of id's and their corresponding string nam…

---

## [Is it possible to exclude the geo\_shape match field in a geo\_match enrich policy?](https://discuss.elastic.co/t/is-it-possible-to-exclude-the-geo-shape-match-field-in-a-geo-match-enrich-policy/301007)

<div class="topic-metadata">

**Author:** [@Joseph\_Parish](https://discuss.elastic.co/u/Joseph_Parish)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 6:00pm UTC](https://discuss.elastic.co/t/is-it-possible-to-exclude-the-geo-shape-match-field-in-a-geo-match-enrich-policy/301007 "2022-04-04T18:00:23Z")

</div>

I am following this example and excluded the match\_field from the enrich\_fields (the example includes the match\_field in the array) but the match\_field still shows up in the target\_field. The reason for exclusion is that…

---

## [Which NEST version should i use with the latest 8.1 Elastic?](https://discuss.elastic.co/t/which-nest-version-should-i-use-with-the-latest-8-1-elastic/301458)

<div class="topic-metadata">

**Author:** [@Suat\_Kose](https://discuss.elastic.co/u/Suat_Kose)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 5:13pm UTC](https://discuss.elastic.co/t/which-nest-version-should-i-use-with-the-latest-8-1-elastic/301458 "2022-04-04T17:13:45Z")

</div>

Hi, We use NEST 6.8.0 with 6.8.4 Elasticsearch. We are upgrading our Elasticsearch version to 8.1. Should we use this client ?NuGet Gallery | Elastic.Clients.Elasticsearch 8.0.0-alpha.4 Is this alpha version recommende…

---

## [Running 2x 4 Node Cluster Using Docker, Advice with Hardware and Approach](https://discuss.elastic.co/t/running-2x-4-node-cluster-using-docker-advice-with-hardware-and-approach/301540)

<div class="topic-metadata">

**Author:** [@webscrapinglife](https://discuss.elastic.co/u/webscrapinglife)\
**Replies:** 0\
**Last updated:** [April 4, 2022, 4:24pm UTC](https://discuss.elastic.co/t/running-2x-4-node-cluster-using-docker-advice-with-hardware-and-approach/301540 "2022-04-04T16:24:34Z")

</div>

Hi everyone, i'm looking for some input/feedback /guidance on how i use elastic both from a hardware point of view and how i utilising docker. First everything below has grown from self interest, i don't operate a busin…

---

## [Unable to activate GOLD license](https://discuss.elastic.co/t/unable-to-activate-gold-license/301524)

<div class="topic-metadata">

**Author:** [@discuss\_lipak](https://discuss.elastic.co/u/discuss_lipak)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 2:37pm UTC](https://discuss.elastic.co/t/unable-to-activate-gold-license/301524 "2022-04-04T14:37:43Z")

</div>

We are having Elasticsearch GOLD license for our org and we are trying to install the license with security disabled. But we are getting error "Cannot install a \[GOLD\] license unless TLS is configured or security is dis…

---

## [Mapping\_data with 2 index](https://discuss.elastic.co/t/mapping-data-with-2-index/300495)

<div class="topic-metadata">

**Author:** [@wdffw](https://discuss.elastic.co/u/wdffw)\
**Replies:** 2\
**Last updated:** [April 4, 2022, 11:41am UTC](https://discuss.elastic.co/t/mapping-data-with-2-index/300495 "2022-04-04T11:41:10Z")

</div>

Hello, I have a question about kibana and any help is welcome, I'm stuck on this for a week. I have two indexes (index1 and index2 let's say) and I want to create a mapping in index1 which has as name change and whose …

---

## [Elastic Cloud - Too many shards - Help to fix it](https://discuss.elastic.co/t/elastic-cloud-too-many-shards-help-to-fix-it/301419)

<div class="topic-metadata">

**Author:** [@mgfeal](https://discuss.elastic.co/u/mgfeal)\
**Replies:** 4\
**Last updated:** [April 4, 2022, 11:20am UTC](https://discuss.elastic.co/t/elastic-cloud-too-many-shards-help-to-fix-it/301419 "2022-04-04T11:20:09Z")

</div>

Hello, We have definitely contracted Elastic Cloud. And we've started building integrations for IIS, which collect access and error logs, and IIS metrics as well. When we had added about 5 such integrations, Elastic st…

---

## [Query using NEST API if a point (Lat/lng) falls within a Polygon](https://discuss.elastic.co/t/query-using-nest-api-if-a-point-lat-lng-falls-within-a-polygon/301498)

<div class="topic-metadata">

**Author:** [@xef](https://discuss.elastic.co/u/xef)\
**Replies:** 0\
**Last updated:** [April 4, 2022, 11:10am UTC](https://discuss.elastic.co/t/query-using-nest-api-if-a-point-lat-lng-falls-within-a-polygon/301498 "2022-04-04T11:10:53Z")

</div>

Say we have an index that has a field of geo\_shape and in it are the co-ordinates of a polygon. How do I query to return all documents that have the point described by a lat/lng(not a field value but just a pair of valu…

---

## [Elasticsearch API throws search\_phase\_execution\_exception error](https://discuss.elastic.co/t/elasticsearch-api-throws-search-phase-execution-exception-error/301495)

<div class="topic-metadata">

**Author:** [@itsakiridisfs](https://discuss.elastic.co/u/itsakiridisfs)\
**Replies:** 0\
**Last updated:** [April 4, 2022, 10:42am UTC](https://discuss.elastic.co/t/elasticsearch-api-throws-search-phase-execution-exception-error/301495 "2022-04-04T10:42:52Z")

</div>

Hello, we are using the Elasticsearch API, to do an aggregation with two fields and we get the following error: Merging/Reducing the multi\_term aggregations failed when computing the aggregation GroupByLevel & GroupByPro…

---

## [How documents is retrieved if we are not using \_routing](https://discuss.elastic.co/t/how-documents-is-retrieved-if-we-are-not-using-routing/301479)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 3\
**Last updated:** [April 4, 2022, 10:03am UTC](https://discuss.elastic.co/t/how-documents-is-retrieved-if-we-are-not-using-routing/301479 "2022-04-04T10:03:23Z")

</div>

I have an index with 3 primary and 1 replicas,total 6 shards for an index. I sent 5 messages to Elasticsearch cluster and these messages is distributed among 5 different shards. As a client i am curious how a client ca…

---

## [Watcher keeps firing when created via watcher api](https://discuss.elastic.co/t/watcher-keeps-firing-when-created-via-watcher-api/300204)

<div class="topic-metadata">

**Author:** [@gerardpeters](https://discuss.elastic.co/u/gerardpeters)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 10:01am UTC](https://discuss.elastic.co/t/watcher-keeps-firing-when-created-via-watcher-api/300204 "2022-04-04T10:01:59Z")

</div>

Hi, I've got several watcher that watch the metrics of kafka. Now something strange happens. When I create the watch via de API the watch keeps firing. When I manually save the watcher the status becomes OK. I tried cop…

---

## [In which version was cluster.initial\_master\_nodes first introduced?](https://discuss.elastic.co/t/in-which-version-was-cluster-initial-master-nodes-first-introduced/301484)

<div class="topic-metadata">

**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\
**Replies:** 1\
**Last updated:** [April 4, 2022, 9:58am UTC](https://discuss.elastic.co/t/in-which-version-was-cluster-initial-master-nodes-first-introduced/301484 "2022-04-04T09:58:13Z")

</div>

Which version was the cluster.initial\_master\_nodes first introduced?

---

## [Too long search with sort inside query after migrate es6.8 to es7.16](https://discuss.elastic.co/t/too-long-search-with-sort-inside-query-after-migrate-es6-8-to-es7-16/301157)

<div class="topic-metadata">

**Author:** [@111338](https://discuss.elastic.co/u/111338)\
**Replies:** 3\
**Last updated:** [April 4, 2022, 9:52am UTC](https://discuss.elastic.co/t/too-long-search-with-sort-inside-query-after-migrate-es6-8-to-es7-16/301157 "2022-04-04T09:52:54Z")

</div>

Several years we live with es68 and it works fine. But now we want to migrate to es716 and we got problem with queries which contains sort option inside. For example, we have simple query which returns only one record G…

---

## [Painless Scripting](https://discuss.elastic.co/t/painless-scripting/301043)

<div class="topic-metadata">

**Author:** [@chivas](https://discuss.elastic.co/u/chivas)\
**Replies:** 9\
**Last updated:** [April 4, 2022, 9:51am UTC](https://discuss.elastic.co/t/painless-scripting/301043 "2022-04-04T09:51:58Z")

</div>

Hi, I am trying to get a count of the requests hitting my server by time range, and have come up with below query: GET /logs-prod\*/\_search?pretty=true { "query": { "bool": { "filter": \[ { …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=461)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=463)
