# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=468 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 469 --- ## [How to distribute documents across shards equally, using \_routing in Elasticsearch](https://discuss.elastic.co/t/how-to-distribute-documents-across-shards-equally-using-routing-in-elasticsearch/300802)
**Author:** [@likhith1995](https://discuss.elastic.co/u/likhith1995)\ **Replies:** 9\ **Last updated:** [March 28, 2022, 11:41am UTC](https://discuss.elastic.co/t/how-to-distribute-documents-across-shards-equally-using-routing-in-elasticsearch/300802 "2022-03-28T11:41:50Z")
Hi Team, We are ingesting the data into Elasticsearch, using 3 routing values (namely 3g, 4g, 5g). We assigned 3 primary shards and 1 replica. Index Rollover is configured to 1gb (max per primary shard) for testing. Wh… --- ## [The index creating by ElasticSearch(6.8.8) not match the configuration in code?](https://discuss.elastic.co/t/the-index-creating-by-elasticsearch-6-8-8-not-match-the-configuration-in-code/300651)
**Author:** [@xuekg](https://discuss.elastic.co/u/xuekg)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 11:24am UTC](https://discuss.elastic.co/t/the-index-creating-by-elasticsearch-6-8-8-not-match-the-configuration-in-code/300651 "2022-03-28T11:24:10Z")
I hava a cluster of ES with 3 servers. The version of ES and ik are same 6.8.8. Dependency of spring boot: \org.springframework.boot\ \spring-boot-dependencies\ \2.2.13.… --- ## [Elasticsearch : Snapshots not executed automatically (cron schedule issue)](https://discuss.elastic.co/t/elasticsearch-snapshots-not-executed-automatically-cron-schedule-issue/300820)
**Author:** [@Ksnov](https://discuss.elastic.co/u/Ksnov)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 9:05am UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-not-executed-automatically-cron-schedule-issue/300820 "2022-03-28T09:05:02Z")
Hi ! I've changed the schedule of my managed snapshot policy. By default, the cron is each 30 minutes, and I wanted just one per day. Since... the snapshots are not executed automatically... I've putted back the previo… --- ## [Phonetic search with \_msearch query](https://discuss.elastic.co/t/phonetic-search-with-msearch-query/300755)
**Author:** [@Sumit\_Suman](https://discuss.elastic.co/u/Sumit_Suman)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 8:32am UTC](https://discuss.elastic.co/t/phonetic-search-with-msearch-query/300755 "2022-03-28T08:32:01Z")
Hi, I am new to Elasticsearch, I was doing one POC on the Elasticsearch and I was trying to implement the phonetic search. For that, I have installed the phonetic analyzer in the server and created the index by putting … --- ## [Getting last document per specific field](https://discuss.elastic.co/t/getting-last-document-per-specific-field/300564)
**Author:** [@Malo\_Maisonneuve](https://discuss.elastic.co/u/Malo_Maisonneuve)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 8:15am UTC](https://discuss.elastic.co/t/getting-last-document-per-specific-field/300564 "2022-03-28T08:15:22Z")
Hi, I'm collecting logs from multiple devices, and I'm trying to retrieve the last log from each device. For instance, I'd like to have : "deviceId": 4568 =\> {content of last log according to timestamp for this devic… --- ## [AIX support for Elastic Stack](https://discuss.elastic.co/t/aix-support-for-elastic-stack/300806)
**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 7:40am UTC](https://discuss.elastic.co/t/aix-support-for-elastic-stack/300806 "2022-03-28T07:40:50Z")
Hi Team, As per Elastic support matrix, AIX is not mentioned anywhere, just wanted to confirm once again here, by any chance, AIX is being supported by any component of Elastic stack? Support matrix URL: Support Matrix… --- ## [High cpu load, just a one node working on 100%](https://discuss.elastic.co/t/high-cpu-load-just-a-one-node-working-on-100/300751)
**Author:** [@phmean21](https://discuss.elastic.co/u/phmean21)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 7:37am UTC](https://discuss.elastic.co/t/high-cpu-load-just-a-one-node-working-on-100/300751 "2022-03-28T07:37:26Z")
Hi everyone, i\`m newbie an elastic. I have cluster of 3 nodes with ES 7.15.0. Problem is just 1 node working on indexing. curl -s -XGET -u user:pass "mv-elk-data-01:9200/\_cat/thread\_pool" |grep " write " mv-elk-data-0… --- ## [Elasticsearch 8 single node replicas 0](https://discuss.elastic.co/t/elasticsearch-8-single-node-replicas-0/299676)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 9\ **Last updated:** [March 28, 2022, 6:45am UTC](https://discuss.elastic.co/t/elasticsearch-8-single-node-replicas-0/299676 "2022-03-28T06:45:26Z")
I have a single node cluster which is showing yellow because replicas are set to 1 Is there a way to get this setup so that all future indexes have replicas set to 0 This used to be easy with legacy templates curl -XP… --- ## [Nearby Query with Dynamic Data](https://discuss.elastic.co/t/nearby-query-with-dynamic-data/300800)
**Author:** [@kabilsharma](https://discuss.elastic.co/u/kabilsharma)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 6:35am UTC](https://discuss.elastic.co/t/nearby-query-with-dynamic-data/300800 "2022-03-28T06:35:01Z")
(Nearby Query) We are building a search engine where user will type like Restaurant (Category) in Delhi (place) Bar (Category) in Mumbai (place) We are supposed to search first tag into category and second … --- ## [Is there any way to determine what ES doing caused abnormal IO?](https://discuss.elastic.co/t/is-there-any-way-to-determine-what-es-doing-caused-abnormal-io/300527)
**Author:** [@mjikop1231](https://discuss.elastic.co/u/mjikop1231)\ **Replies:** 6\ **Last updated:** [March 28, 2022, 6:19am UTC](https://discuss.elastic.co/t/is-there-any-way-to-determine-what-es-doing-caused-abnormal-io/300527 "2022-03-28T06:19:38Z")
I have a ES cluster with 3 master and 5 data node enabled rebalance and allocation. And in /\_nodes/.../stats doesn't show any thing running in that nodes, and also no tasks in \_tasks. But all data node has near 500 IOPS… --- ## [Connection refused on put mapping](https://discuss.elastic.co/t/connection-refused-on-put-mapping/300790)
**Author:** [@Arnab\_Dey](https://discuss.elastic.co/u/Arnab_Dey)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 12:00am UTC](https://discuss.elastic.co/t/connection-refused-on-put-mapping/300790 "2022-03-28T00:00:07Z")
Can anyone help me with the /put request for mapping in Elasticsearch the elk is deployed in a server but the put request always gives a connection refused exception the Url is http://#.##.##.##:9200/intscript And pls … --- ## [Out of RAM memory](https://discuss.elastic.co/t/out-of-ram-memory/300535)
**Author:** [@Uporaba](https://discuss.elastic.co/u/Uporaba)\ **Replies:** 1\ **Last updated:** [March 27, 2022, 11:52pm UTC](https://discuss.elastic.co/t/out-of-ram-memory/300535 "2022-03-27T23:52:35Z")
Hello. I have a cluster of 3 machines with 16 cores and 32 gigs of RAM. The last 2 weeks there has been a problem that 28-29 GB of 32 GB become full. I sinned on the cache, cleaned it, but the memory did not go away. Reb… --- ## [Running multiple servers in one command](https://discuss.elastic.co/t/running-multiple-servers-in-one-command/300578)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [March 27, 2022, 11:50pm UTC](https://discuss.elastic.co/t/running-multiple-servers-in-one-command/300578 "2022-03-27T23:50:56Z")
Hi, Each folder(Elasticsearch,Logstash,Kibana) runs a completely different type of server. They have to have 3 command instances up at the same time. Is there a way I can run the following commands within each folder … --- ## [What types of node require license, or i need license for all node?](https://discuss.elastic.co/t/what-types-of-node-require-license-or-i-need-license-for-all-node/300590)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [March 27, 2022, 11:50pm UTC](https://discuss.elastic.co/t/what-types-of-node-require-license-or-i-need-license-for-all-node/300590 "2022-03-27T23:50:10Z")
Hello team. I have build cluster with 67 node, as displayed in below table: My question is that, what types of node require license, or i need license for all node? Nodes Count Warm nodes 16 hot nodes 21 … --- ## [Some vulnerabilities are coming from Elasticsearch rest high level client v7.16.3](https://discuss.elastic.co/t/some-vulnerabilities-are-coming-from-elasticsearch-rest-high-level-client-v7-16-3/300614)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 1\ **Last updated:** [March 27, 2022, 11:47pm UTC](https://discuss.elastic.co/t/some-vulnerabilities-are-coming-from-elasticsearch-rest-high-level-client-v7-16-3/300614 "2022-03-27T23:47:48Z")
There is one vulnerability is coming from Elasticsearch rest high level client v7.16.3. Is there any way to mitigate this? Below is the link for CVE: https://nvd.nist.gov/vuln/detail/CVE-2022-23708 --- ## [Index rollover / Delete indexes](https://discuss.elastic.co/t/index-rollover-delete-indexes/300685)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 1\ **Last updated:** [March 27, 2022, 11:44pm UTC](https://discuss.elastic.co/t/index-rollover-delete-indexes/300685 "2022-03-27T23:44:49Z")
Hi, I have a kind of wierd question. I just want to know if there is a way using index rollover and the index lifecycle to lets say to allways keep the last 3 indexes. Ej Lets say I have a rollover policy that rolls m… --- ## [Elastic java client 8.1 - create index from json example](https://discuss.elastic.co/t/elastic-java-client-8-1-create-index-from-json-example/300324)
**Author:** [@Anna\_Mikhilev](https://discuss.elastic.co/u/Anna_Mikhilev)\ **Replies:** 3\ **Last updated:** [March 24, 2022, 10:03pm UTC](https://discuss.elastic.co/t/elastic-java-client-8-1-create-index-from-json-example/300324 "2022-03-24T22:03:37Z")
In https://www.elastic.co/guide/en/elasticsearch/client/java-api-client/current/loading-json.html There is an create index example using the .withJson(input) method CreateIndexRequest req = CreateIndexRequest.of(b -\>… --- ## [Errors indexing binary attachment using ingest-attachment pipeline](https://discuss.elastic.co/t/errors-indexing-binary-attachment-using-ingest-attachment-pipeline/300766)
**Author:** [@Enxiad](https://discuss.elastic.co/u/Enxiad)\ **Replies:** 5\ **Last updated:** [March 27, 2022, 6:37am UTC](https://discuss.elastic.co/t/errors-indexing-binary-attachment-using-ingest-attachment-pipeline/300766 "2022-03-27T06:37:30Z")
Hi all, I am ingesting a document A and I receive the error: "Last unit does not have enough valid bits" when the document contains only the word "Lorem". For document B which contains the words "Lorem ipsum" then I get… --- ## [Doubts to enable xpack in elasticsearch 8.x](https://discuss.elastic.co/t/doubts-to-enable-xpack-in-elasticsearch-8-x/300352)
**Author:** [@gustavoluza](https://discuss.elastic.co/u/gustavoluza)\ **Replies:** 8\ **Last updated:** [March 26, 2022, 7:23pm UTC](https://discuss.elastic.co/t/doubts-to-enable-xpack-in-elasticsearch-8-x/300352 "2022-03-26T19:23:22Z")
I'm trying to install Elasticsearch 8 with the xpack module enabled, but I'm facing the errors below when I start the service, could you help me? Mar 22 10:35:11 elk systemd-entrypoint\[748\]: at com.fasterxml.jackson.dat… --- ## [Getting right shards and replicas count](https://discuss.elastic.co/t/getting-right-shards-and-replicas-count/300715)
**Author:** [@tflorac](https://discuss.elastic.co/u/tflorac)\ **Replies:** 6\ **Last updated:** [March 26, 2022, 1:57pm UTC](https://discuss.elastic.co/t/getting-right-shards-and-replicas-count/300715 "2022-03-26T13:57:02Z")
Hi, I'm building a new application using Elasticsearch. This application will have to manage a relatively low number of documents (10.000 at start!), but many of these documents are quite huge and can contain multiple b… --- ## [Elasticsearch does not listen on ipv4](https://discuss.elastic.co/t/elasticsearch-does-not-listen-on-ipv4/300748)
**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\ **Replies:** 1\ **Last updated:** [March 26, 2022, 10:15am UTC](https://discuss.elastic.co/t/elasticsearch-does-not-listen-on-ipv4/300748 "2022-03-26T10:15:34Z")
Hello, my dears, I installed Elasticsearch on my Debian Buster Server. The following ports have been opened. root@dsme01:~# netstat -tulpen | grep 192.168.150.20 tcp6 0 0 192.168.150.20:9200 :::\* … --- ## [Elastic 8.1 installation on windows with HTTPS and wild card certificates](https://discuss.elastic.co/t/elastic-8-1-installation-on-windows-with-https-and-wild-card-certificates/300703)
**Author:** [@thomasbosa](https://discuss.elastic.co/u/thomasbosa)\ **Replies:** 1\ **Last updated:** [March 26, 2022, 8:38am UTC](https://discuss.elastic.co/t/elastic-8-1-installation-on-windows-with-https-and-wild-card-certificates/300703 "2022-03-26T08:38:36Z")
Hi All, I'm trying to setup an elastic-search cluster, on Windows machines (all windows server 2019). When i run the Elasticsearch.bat for the first time, it configures the node with a default configuration, which is n… --- ## [Slow response time even though slow logs show fast (query+fetch)](https://discuss.elastic.co/t/slow-response-time-even-though-slow-logs-show-fast-query-fetch/300742)
**Author:** [@Abhishek\_Singh2](https://discuss.elastic.co/u/Abhishek_Singh2)\ **Replies:** 0\ **Last updated:** [March 26, 2022, 6:41am UTC](https://discuss.elastic.co/t/slow-response-time-even-though-slow-logs-show-fast-query-fetch/300742 "2022-03-26T06:41:59Z")
I am having trouble with my Elasticsearch nodes/queries ……. I have 3 physical nodes in which all 3 are master + data nodes. I am running a simple filter query in slow logs I see query +fetch time as 8 millisec sometimes … --- ## [How to determine elected master from INodesStatsResponse with the Nest client](https://discuss.elastic.co/t/how-to-determine-elected-master-from-inodesstatsresponse-with-the-nest-client/300739)
**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\ **Replies:** 0\ **Last updated:** [March 26, 2022, 5:08am UTC](https://discuss.elastic.co/t/how-to-determine-elected-master-from-inodesstatsresponse-with-the-nest-client/300739 "2022-03-26T05:08:32Z")
I am using the Nest client to monitor my cluster. One thing I can't seem to figure out is how to determine if a given master-eligible node is the elected master. I am running this code on the physical VM where Elasticsea… --- ## [Elasticsearch backup](https://discuss.elastic.co/t/elasticsearch-backup/300723)
**Author:** [@Amitabh\_Prasad](https://discuss.elastic.co/u/Amitabh_Prasad)\ **Replies:** 1\ **Last updated:** [March 26, 2022, 1:54am UTC](https://discuss.elastic.co/t/elasticsearch-backup/300723 "2022-03-26T01:54:13Z")
Running into issues where deployment is failing with following error {"@timestamp":"2022-03-24T17:29:14.324Z", "log.level": "INFO", "message":"heap size \[1gb\], compressed ordinary object pointers \[true\]", "ecs.version":… --- ## [.ds-.fleet-actions-results can't change settings](https://discuss.elastic.co/t/ds-fleet-actions-results-cant-change-settings/300736)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 0\ **Last updated:** [March 25, 2022, 10:47pm UTC](https://discuss.elastic.co/t/ds-fleet-actions-results-cant-change-settings/300736 "2022-03-25T22:47:08Z")
Hey all, I thought elastic was the superuser account curl -XPUT -k -u elastic:$pass https://localhost:9200/.ds-.fleet-actions-results-2022.03.22-000001/\_settings?pretty -H 'Content-Type: application/json' -d '{"settin… --- ## [All replica shards reside on two nodes, 9 nodes total](https://discuss.elastic.co/t/all-replica-shards-reside-on-two-nodes-9-nodes-total/300513)
**Author:** [@jwcw](https://discuss.elastic.co/u/jwcw)\ **Replies:** 2\ **Last updated:** [March 24, 2022, 8:40pm UTC](https://discuss.elastic.co/t/all-replica-shards-reside-on-two-nodes-9-nodes-total/300513 "2022-03-24T20:40:38Z")
I have an elasticsearch 6.8.23 cluster (we are upgrading to 7.x soon) with 9 data nodes and 3,000 shards where all of the replica shards have allocated to two of the nodes. I have removed all cluster.routing.allocation s… --- ## [Use nested aggregation based on parent values](https://discuss.elastic.co/t/use-nested-aggregation-based-on-parent-values/299492)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 1\ **Last updated:** [March 25, 2022, 7:48pm UTC](https://discuss.elastic.co/t/use-nested-aggregation-based-on-parent-values/299492 "2022-03-25T19:48:12Z")
I have an aggregation that uses comments nested within a task, the purpose of this aggregation is to count comments that other users who are not responsible for the task have left on the task. Tried using painless for t… --- ## [Stuck upgrading elastic search from 6.x to 7.17](https://discuss.elastic.co/t/stuck-upgrading-elastic-search-from-6-x-to-7-17/300393)
**Author:** [@CapitanRedBeard](https://discuss.elastic.co/u/CapitanRedBeard)\ **Replies:** 5\ **Last updated:** [March 25, 2022, 4:53pm UTC](https://discuss.elastic.co/t/stuck-upgrading-elastic-search-from-6-x-to-7-17/300393 "2022-03-25T16:53:17Z")
I have two Elasticsearch deployments hosted on the elastic cloud. My DEV deployment is on v6.8.9 with kibana on v6.6.1 thus it has a "7.0 Upgrade Assistant" in the Management options in kibana. My PROD deployment is on… --- ## [Winlogbeat "No results match your search criteria"](https://discuss.elastic.co/t/winlogbeat-no-results-match-your-search-criteria/300713)
**Author:** [@n.petrovic](https://discuss.elastic.co/u/n.petrovic)\ **Replies:** 0\ **Last updated:** [March 25, 2022, 2:19pm UTC](https://discuss.elastic.co/t/winlogbeat-no-results-match-your-search-criteria/300713 "2022-03-25T14:19:33Z")
winlogbeat "No results match your search criteria" Client setup done properly PS C:\\ProgramData\\Beats\\winlogbeat-7.15.0-windows-x86\_64\> .\\winlogbeat.exe setup Overwriting ILM policy is disabled. Set setup.ilm.overwrit… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=467) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=469)