# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=471 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 472 --- ## [Error on Elastic Search status](https://discuss.elastic.co/t/error-on-elastic-search-status/300406)
**Author:** [@Asha\_Anie\_Bose](https://discuss.elastic.co/u/Asha_Anie_Bose)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 10:55am UTC](https://discuss.elastic.co/t/error-on-elastic-search-status/300406 "2022-03-23T10:55:55Z")
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:212) ~\[elasticsearch-6.8.0.jar:6.8.0\] at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:333) ~\[elasticsearch-6.8.0.jar:6.8.0\] at org.elasticsearc… --- ## [GeoSpatial Query using NEST and ES 7.14](https://discuss.elastic.co/t/geospatial-query-using-nest-and-es-7-14/300206)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 2:54pm UTC](https://discuss.elastic.co/t/geospatial-query-using-nest-and-es-7-14/300206 "2022-03-22T14:54:48Z")
We are using ES 17.14 and have looked at the docs but have been unable to create a query and wondered if anyone can shed some light on it. 1- We have an IndexA that has a FieldA of type Geoshape with its latitude and l… --- ## [Winlogbeat is not shipping Data to Elasticsearch after enabling xpack Security](https://discuss.elastic.co/t/winlogbeat-is-not-shipping-data-to-elasticsearch-after-enabling-xpack-security/300423)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 10:05am UTC](https://discuss.elastic.co/t/winlogbeat-is-not-shipping-data-to-elasticsearch-after-enabling-xpack-security/300423 "2022-03-23T10:05:59Z")
Hello, so we've started to renew our Cluster for various reasons: 3 Node Cluster (CentOS 7) Using: Kibana 7.15 Elasticsearch 7.15 Logstash 7.15 Filebeat 7.15 Winlogbeat 7.15 After we setup xpack Security within … --- ## [Will es nodes connect with each other in 9200?](https://discuss.elastic.co/t/will-es-nodes-connect-with-each-other-in-9200/300421)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 9:53am UTC](https://discuss.elastic.co/t/will-es-nodes-connect-with-each-other-in-9200/300421 "2022-03-23T09:53:26Z")
Hi, there. The official doc said, Each Elasticsearch node has two different network interfaces. Clients send requests to Elasticsearch’s REST APIs using its HTTP interface, but nodes communicate with other nodes using… --- ## [Increase search thread pool capacity by adding more non "data" nodes](https://discuss.elastic.co/t/increase-search-thread-pool-capacity-by-adding-more-non-data-nodes/300230)
**Author:** [@ben5556](https://discuss.elastic.co/u/ben5556)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 9:17am UTC](https://discuss.elastic.co/t/increase-search-thread-pool-capacity-by-adding-more-non-data-nodes/300230 "2022-03-23T09:17:16Z")
Hi, We encounter search thread pool rejection errors on random days during peak usage. I was wondering if we can dynamically (scale UP) add non "data" nodes for example more master or other type of nodes to increase the… --- ## [Event.original field](https://discuss.elastic.co/t/event-original-field/300417)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 7:58am UTC](https://discuss.elastic.co/t/event-original-field/300417 "2022-03-23T07:58:46Z")
I am storing log files in Elasticsearch indexes via Filebeat and logstash. And I also use metricbeat to monitor the stack. In this case, the "event.original" field is automatically stored in the index." If you know ho… --- ## [Search if only the all word is repeated more than 1 times in a particular string](https://discuss.elastic.co/t/search-if-only-the-all-word-is-repeated-more-than-1-times-in-a-particular-string/300426)
**Author:** [@div927](https://discuss.elastic.co/u/div927)\ **Replies:** 0\ **Last updated:** [March 23, 2022, 9:02am UTC](https://discuss.elastic.co/t/search-if-only-the-all-word-is-repeated-more-than-1-times-in-a-particular-string/300426 "2022-03-23T09:02:11Z")
I am trying to write a search engine where I want to get the result only, if say -\> chess, player, game words are there I would return result only if all these 3 words present twice or thrice in any of the field \["… --- ## [Java RestHighLevelClient vs Elasticsearch Java API Client Improvements](https://discuss.elastic.co/t/java-resthighlevelclient-vs-elasticsearch-java-api-client-improvements/300398)
**Author:** [@Ashfur](https://discuss.elastic.co/u/Ashfur)\ **Replies:** 1\ **Last updated:** [March 23, 2022, 8:26am UTC](https://discuss.elastic.co/t/java-resthighlevelclient-vs-elasticsearch-java-api-client-improvements/300398 "2022-03-23T08:26:24Z")
Hello, We are on 7.16.2 and are currently using the org.Elasticsearch.client.RestHighLevelClient. I am aware that the RestHighLevelClient has been deprecated in favor of the new Java API client. I'd just like to know… --- ## [High disk read resulting in io wait on new Cluster 7.9](https://discuss.elastic.co/t/high-disk-read-resulting-in-io-wait-on-new-cluster-7-9/298884)
**Author:** [@borch-inc](https://discuss.elastic.co/u/borch-inc)\ **Replies:** 10\ **Last updated:** [March 23, 2022, 5:23am UTC](https://discuss.elastic.co/t/high-disk-read-resulting-in-io-wait-on-new-cluster-7-9/298884 "2022-03-23T05:23:34Z")
Hey hope for some help on where to optimize We have just moved our cluster into new and bigger servers. so we went from 8 to 5 data nodes since the hardware should have improved a lot. Once we started our application … --- ## [Elasticsearch Became case sensitive after add synonym analyzer](https://discuss.elastic.co/t/elasticsearch-became-case-sensitive-after-add-synonym-analyzer/300283)
**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\ **Replies:** 3\ **Last updated:** [March 23, 2022, 4:42am UTC](https://discuss.elastic.co/t/elasticsearch-became-case-sensitive-after-add-synonym-analyzer/300283 "2022-03-23T04:42:22Z")
After I added synonym analyzer to my\_index, the index became case-sensitive I have one property called nationality that has synonym analyzer. But it seems that this property become case sensitive because of the synonym … --- ## [Is there any introduction about the action in \_cat/tasks api](https://discuss.elastic.co/t/is-there-any-introduction-about-the-action-in-cat-tasks-api/300271)
**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\ **Replies:** 4\ **Last updated:** [March 23, 2022, 12:42am UTC](https://discuss.elastic.co/t/is-there-any-introduction-about-the-action-in-cat-tasks-api/300271 "2022-03-23T00:42:56Z")
Is there any introduction about all list of the action of \_cat/tasks? --- ## [Filtering collection in aggregation based on document property value](https://discuss.elastic.co/t/filtering-collection-in-aggregation-based-on-document-property-value/299592)
**Author:** [@Mahendra\_Choudhary](https://discuss.elastic.co/u/Mahendra_Choudhary)\ **Replies:** 3\ **Last updated:** [March 22, 2022, 9:32pm UTC](https://discuss.elastic.co/t/filtering-collection-in-aggregation-based-on-document-property-value/299592 "2022-03-22T21:32:14Z")
Hello all, I am kind of stuck in a special case. My document looks like below. { "\_source" : { "name" : "SPIM", "spDetails" : { "isActive" : true }, "id" : "251561", "categories" : \[ "FM", "SP" \] } }, { … --- ## [Can the field type (e.g. "flattened") be specified at time of indexing?](https://discuss.elastic.co/t/can-the-field-type-e-g-flattened-be-specified-at-time-of-indexing/298671)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 4\ **Last updated:** [March 22, 2022, 9:24pm UTC](https://discuss.elastic.co/t/can-the-field-type-e-g-flattened-be-specified-at-time-of-indexing/298671 "2022-03-22T21:24:50Z")
I know I can specify that a specific field has the type "flattened" (Flattened field type | Elasticsearch Guide \[8.0\] | Elastic) by specifying that in the index \_mapping but is there a way to do that when indexing? I wa… --- ## [Migrating 1000's of fields from SOLR to elastic](https://discuss.elastic.co/t/migrating-1000s-of-fields-from-solr-to-elastic/300379)
**Author:** [@Jon\_Vivers](https://discuss.elastic.co/u/Jon_Vivers)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 7:34pm UTC](https://discuss.elastic.co/t/migrating-1000s-of-fields-from-solr-to-elastic/300379 "2022-03-22T19:34:44Z")
I am investigating migrating my search solution from SOLR to elastic. However the current SOLR implementation has several thousand fields which are used for aggregations. For example there could be a field 'color\_hist' w… --- ## [Ingest postfix (mail) logs to ELK](https://discuss.elastic.co/t/ingest-postfix-mail-logs-to-elk/299663)
**Author:** [@Guif](https://discuss.elastic.co/u/Guif)\ **Replies:** 6\ **Last updated:** [March 22, 2022, 6:57pm UTC](https://discuss.elastic.co/t/ingest-postfix-mail-logs-to-elk/299663 "2022-03-22T18:57:10Z")
Hi! I would like to ingest sendmail logs (/var/log/maillog) from different servers (about 5) into Elasticsearch at the same time. I did Google search and found different and confused tutorials about this. Anybody can … --- ## [Java Client API migration: FieldValue does not accept an Object value](https://discuss.elastic.co/t/java-client-api-migration-fieldvalue-does-not-accept-an-object-value/300069)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 4:30pm UTC](https://discuss.elastic.co/t/java-client-api-migration-fieldvalue-does-not-accept-an-object-value/300069 "2022-03-22T16:30:43Z")
Hi, the deprecated Java High Level REST Client API allowed to specify a Term query by providing the value as an Object (see QueryBuilders (server 7.8.1 API) With the new Java Client API, it doesn't seem to be possible … --- ## [Error while creating Elasticsearch API Client(8.0.1) object using Spring Boot](https://discuss.elastic.co/t/error-while-creating-elasticsearch-api-client-8-0-1-object-using-spring-boot/300263)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 3\ **Last updated:** [March 22, 2022, 4:29pm UTC](https://discuss.elastic.co/t/error-while-creating-elasticsearch-api-client-8-0-1-object-using-spring-boot/300263 "2022-03-22T16:29:29Z")
I am implementing Elasticsearch 8.0.1 version using Spring Boot. As mentioned in the documentation, this is the pom.xml of my project \ \ \ \co.elastic.clients\ **Author:** [@rsommer](https://discuss.elastic.co/u/rsommer)\ **Replies:** 4\ **Last updated:** [March 22, 2022, 4:19pm UTC](https://discuss.elastic.co/t/index-size-with-elasticseach-8-increasing/300351 "2022-03-22T16:19:38Z") Hi, before filing a bug report I would like to ask if someone else is encountering increase in index sizes after the update to Elasticsearch 8? I posted the sizes of our logstash daily indices from one cluster. Size and… --- ## [APM-Server 8.1 via Elastic-Agent 8.1 unable to connect to ElasticSearch 8.1](https://discuss.elastic.co/t/apm-server-8-1-via-elastic-agent-8-1-unable-to-connect-to-elasticsearch-8-1/300362)
**Author:** [@gperdacher](https://discuss.elastic.co/u/gperdacher)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 3:15pm UTC](https://discuss.elastic.co/t/apm-server-8-1-via-elastic-agent-8-1-unable-to-connect-to-elasticsearch-8-1/300362 "2022-03-22T15:15:22Z")
Hello, I installed Elasticsearch 8.1 Kibana 8.1 Fleet-Server 8.1 on a debian 11 system with default settings. Via Fleet-Server i installed/enrolled an elastic-agent with a policy and Elastic APM Integration 8.1. Af… --- ## [Templates w/ new java-client](https://discuss.elastic.co/t/templates-w-new-java-client/300218)
**Author:** [@divadpoc](https://discuss.elastic.co/u/divadpoc)\ **Replies:** 3\ **Last updated:** [March 22, 2022, 3:05pm UTC](https://discuss.elastic.co/t/templates-w-new-java-client/300218 "2022-03-22T15:05:04Z")
Initially I was looking for a way to add component and index templates via the new java-client. Then I stumbled upon the following two methods: ElasticsearchIndicesClient.getTemplate ElasticsearchIndicesClient.getIndex… --- ## [Index filled EC2 completely, manually deleted nodes, no longer able to start Elasticsearch](https://discuss.elastic.co/t/index-filled-ec2-completely-manually-deleted-nodes-no-longer-able-to-start-elasticsearch/300221)
**Author:** [@pritster5](https://discuss.elastic.co/u/pritster5)\ **Replies:** 7\ **Last updated:** [March 22, 2022, 2:18pm UTC](https://discuss.elastic.co/t/index-filled-ec2-completely-manually-deleted-nodes-no-longer-able-to-start-elasticsearch/300221 "2022-03-22T14:18:02Z")
I recently had an issue where I was ingesting data from S3 via Logstash and the S3 Input Plugin (aka the pipeline feature) into my AWS EC2 instance running ELK 7.5.2. Overnight, the index filled up my entire EC2 storage… --- ## [Model used in anomaly detection](https://discuss.elastic.co/t/model-used-in-anomaly-detection/300264)
**Author:** [@zanattabruno](https://discuss.elastic.co/u/zanattabruno)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 2:00pm UTC](https://discuss.elastic.co/t/model-used-in-anomaly-detection/300264 "2022-03-22T14:00:46Z")
Guys, can you let me know when I use the following options to enable anomaly detection in Elasticsearch. Analytics\>Machine Learning\>Anomaly Detection\>Create job\> Categorization Which algorithm/model would the implement… --- ## [Plugin unable to find classes in ES 7.12 and newer](https://discuss.elastic.co/t/plugin-unable-to-find-classes-in-es-7-12-and-newer/299890)
**Author:** [@brian8371](https://discuss.elastic.co/u/brian8371)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 1:41pm UTC](https://discuss.elastic.co/t/plugin-unable-to-find-classes-in-es-7-12-and-newer/299890 "2022-03-22T13:41:31Z")
I'm new to ES plugin development and I'm trying to change an ES plugin that worked with ES v7.3.0 to work with ES v7.13.4 or newer, but it seems like both index.query.QueryShardContext and index.search.MatchQuery were re… --- ## [Send GeoPoint data to elastic Search using client.index method](https://discuss.elastic.co/t/send-geopoint-data-to-elastic-search-using-client-index-method/300345)
**Author:** [@Vishnu\_Agarwal](https://discuss.elastic.co/u/Vishnu_Agarwal)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 1:25pm UTC](https://discuss.elastic.co/t/send-geopoint-data-to-elastic-search-using-client-index-method/300345 "2022-03-22T13:25:56Z")
I am trying to send geolocation as location:{"lat": 19.07, "lon": 72.87} , and i have mapped location as geo\_point in index. I am getting following error. reason: "can't merge a non object mapping \[myloc\] with an objec… --- ## [Query a specific IP address in Elastic](https://discuss.elastic.co/t/query-a-specific-ip-address-in-elastic/300318)
**Author:** [@ianrobo](https://discuss.elastic.co/u/ianrobo)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 12:34pm UTC](https://discuss.elastic.co/t/query-a-specific-ip-address-in-elastic/300318 "2022-03-22T12:34:26Z")
Hi there, I am relatively new to elastic and expanding our ES daily. We are ingesting logs from various network devices but come across a problem in Cisco. They do not send the hostname in their syslog and therefore al… --- ## [Elasticsearch 7.16 installing error](https://discuss.elastic.co/t/elasticsearch-7-16-installing-error/300209)
**Author:** [@Kailas](https://discuss.elastic.co/u/Kailas)\ **Replies:** 1\ **Last updated:** [March 22, 2022, 12:26pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-installing-error/300209 "2022-03-22T12:26:31Z")
Hi, I am trying to install Elasticsarch 7.16.1 on 3 nodes by following Install Elasticsearch from archive on Linux or MacOS | Elasticsearch Guide \[7.16\] | Elastic . The ES installation needs to be done on Linux. Howeve… --- ## [Auto-configuration of ssl certificate](https://discuss.elastic.co/t/auto-configuration-of-ssl-certificate/300306)
**Author:** [@itsecworks](https://discuss.elastic.co/u/itsecworks)\ **Replies:** 1\ **Last updated:** [March 22, 2022, 10:05am UTC](https://discuss.elastic.co/t/auto-configuration-of-ssl-certificate/300306 "2022-03-22T10:05:30Z")
I dont find the CA private key of the transport layer that has been generated by Elasticsearch at first start. I can find the CA private key of the http layer its in the generated http.p12 file, I would expect the simil… --- ## [Huge indexing (refresh) performance drop when upgrading from ES 2.4 to ES 7.16](https://discuss.elastic.co/t/huge-indexing-refresh-performance-drop-when-upgrading-from-es-2-4-to-es-7-16/299479)
**Author:** [@daniel-kr](https://discuss.elastic.co/u/daniel-kr)\ **Replies:** 1\ **Last updated:** [March 22, 2022, 9:31am UTC](https://discuss.elastic.co/t/huge-indexing-refresh-performance-drop-when-upgrading-from-es-2-4-to-es-7-16/299479 "2022-03-22T09:31:25Z")
Hello, we updated our system from ES 2.4 to ES 7.16 some time ago. Now we recognized that there is a huge indexing performance drop when it comes to a very special use case that we have. The use case is as follows: We … --- ## [Getting error : jdk-17.0.2 was unexpected at this time](https://discuss.elastic.co/t/getting-error-jdk-17-0-2-was-unexpected-at-this-time/300300)
**Author:** [@yahire](https://discuss.elastic.co/u/yahire)\ **Replies:** 0\ **Last updated:** [March 22, 2022, 8:45am UTC](https://discuss.elastic.co/t/getting-error-jdk-17-0-2-was-unexpected-at-this-time/300300 "2022-03-22T08:45:30Z")
While starting Elasticsearch.bat in my windows system, i am getting following error : D:\\Elastic APM\\Elasticsearch-8.1.0\\Elasticsearch-8.1.0\\bin\>Elasticsearch.bat \\jdk-17.0.2 was unexpected at this time. I am having J… --- ## [Help: Only winlogbeat index with date being created](https://discuss.elastic.co/t/help-only-winlogbeat-index-with-date-being-created/300284)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 8:17am UTC](https://discuss.elastic.co/t/help-only-winlogbeat-index-with-date-being-created/300284 "2022-03-22T08:17:26Z")
This is my current output: output { if \[type\]=="syslog" { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "logstash-%{+yyyy.MM.dd}" } … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=470) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=472)