# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=472

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 473

---

## [Can't sum bucket after composite](https://discuss.elastic.co/t/cant-sum-bucket-after-composite/300184)

<div class="topic-metadata">

**Author:** [@Techinp](https://discuss.elastic.co/u/Techinp)\
**Replies:** 4\
**Last updated:** [March 22, 2022, 3:21am UTC](https://discuss.elastic.co/t/cant-sum-bucket-after-composite/300184 "2022-03-22T03:21:30Z")

</div>

Hi all, How can I sum data after composite stage? What did I do wrong? This is my query GET report-20220316/\_search { "query": { "bool": { "must": \[ { "match": { "parentId.ke…

---

## [ElasticSearch Nest syntax for Script based sorting with SortDescriptor](https://discuss.elastic.co/t/elasticsearch-nest-syntax-for-script-based-sorting-with-sortdescriptor/300255)

<div class="topic-metadata">

**Author:** [@aashini](https://discuss.elastic.co/u/aashini)\
**Replies:** 0\
**Last updated:** [March 21, 2022, 11:55pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-syntax-for-script-based-sorting-with-sortdescriptor/300255 "2022-03-21T23:55:05Z")

</div>

I am using Elasticsearch Nest client in .Net application and looking for a syntax to use script based sorting with Sort Descriptor. So what would be the sorting syntax to add Params and painless Language with SortDescri…

---

## [Service Entry for TCP URL's](https://discuss.elastic.co/t/service-entry-for-tcp-urls/300253)

<div class="topic-metadata">

**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\
**Replies:** 0\
**Last updated:** [March 21, 2022, 10:25pm UTC](https://discuss.elastic.co/t/service-entry-for-tcp-urls/300253 "2022-03-21T22:25:54Z")

</div>

We are using elastic enterprise edition. We are in the process of enabling the Cross Cluster Replication across different clusters. So we are adding service entries on gateway level (ISTION Gateway for example). Below on…

---

## [Ulimits for elasticsearch instances](https://discuss.elastic.co/t/ulimits-for-elasticsearch-instances/300189)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 7\
**Last updated:** [March 21, 2022, 10:16pm UTC](https://discuss.elastic.co/t/ulimits-for-elasticsearch-instances/300189 "2022-03-21T22:16:54Z")

</div>

Hi I'm facing with issue related to configuration with resource limits. On the host I've 18 nodes with Elasticsearch (build over docker-compose) I have taken the following into consideration setting from elastic doc (…

---

## [Setting for node.roles](https://discuss.elastic.co/t/setting-for-node-roles/298709)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 3\
**Last updated:** [March 21, 2022, 9:15pm UTC](https://discuss.elastic.co/t/setting-for-node-roles/298709 "2022-03-21T21:15:28Z")

</div>

Hi What the value should be set up for taking part for node as a coordinator ??? I saw an article about node.roles but it's not clear enough, (it should be empty field?)

---

## [Getting less search speed](https://discuss.elastic.co/t/getting-less-search-speed/300201)

<div class="topic-metadata">

**Author:** [@Neeraj\_Jain7483](https://discuss.elastic.co/u/Neeraj_Jain7483)\
**Replies:** 3\
**Last updated:** [March 21, 2022, 6:40pm UTC](https://discuss.elastic.co/t/getting-less-search-speed/300201 "2022-03-21T18:40:32Z")

</div>

We have a cluster consisting of 3 masters (4 core, 16 GB RAM each), 3 hot(8 core, 32 GB RAM, 300 GB SSD each), and 3 warm nodes(8 core, 32GB RAM, 1.5TB HDD each). We have one index for each month of year following the n…

---

## [Setting up Index Life Management](https://discuss.elastic.co/t/setting-up-index-life-management/300077)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 5\
**Last updated:** [March 21, 2022, 6:11pm UTC](https://discuss.elastic.co/t/setting-up-index-life-management/300077 "2022-03-21T18:11:00Z")

</div>

I use Logstash grok patterns to parse my logs. These logs are outputted to Elasticsearch in daily indexes. I want to create an index template to then apply to an ILM policy that will delete these logs after 60 days. Whe…

---

## [Dedicated Documentation for Java API Client](https://discuss.elastic.co/t/dedicated-documentation-for-java-api-client/300202)

<div class="topic-metadata">

**Author:** [@ssephillip](https://discuss.elastic.co/u/ssephillip)\
**Replies:** 2\
**Last updated:** [March 21, 2022, 3:48pm UTC](https://discuss.elastic.co/t/dedicated-documentation-for-java-api-client/300202 "2022-03-21T15:48:28Z")

</div>

Hello everyone, for the Java High Level REST Client there is a dedicated documentation providing detailed information and examples on how to use the Client. This was extremely helpful during development. My questions a…

---

## [Understanding a match query on a search-as-you-type index](https://discuss.elastic.co/t/understanding-a-match-query-on-a-search-as-you-type-index/300215)

<div class="topic-metadata">

**Author:** [@dlants](https://discuss.elastic.co/u/dlants)\
**Replies:** 1\
**Last updated:** [March 21, 2022, 3:04pm UTC](https://discuss.elastic.co/t/understanding-a-match-query-on-a-search-as-you-type-index/300215 "2022-03-21T15:04:45Z")

</div>

I'm curious if there is any way to understand the lucene query that's generated for a particular Elasticsearch DSL query. For example, if I create an index: await client.indices.create({ index: 'activities', …

---

## [ELK stack sizing](https://discuss.elastic.co/t/elk-stack-sizing/300214)

<div class="topic-metadata">

**Author:** [@PRASOON\_VINODAN](https://discuss.elastic.co/u/PRASOON_VINODAN)\
**Replies:** 0\
**Last updated:** [March 21, 2022, 2:43pm UTC](https://discuss.elastic.co/t/elk-stack-sizing/300214 "2022-03-21T14:43:17Z")

</div>

We are planning to use ELK stack with beats for few of our applications & OS real time monitoring. Currently I am doing some POC. I couldn't find any documentation regarding sizing when considering to build a ELK cluster…

---

## [Failed to verify all nodes have repository access](https://discuss.elastic.co/t/failed-to-verify-all-nodes-have-repository-access/299467)

<div class="topic-metadata">

**Author:** [@Caio\_Cesar](https://discuss.elastic.co/u/Caio_Cesar)\
**Replies:** 4\
**Last updated:** [March 21, 2022, 2:03pm UTC](https://discuss.elastic.co/t/failed-to-verify-all-nodes-have-repository-access/299467 "2022-03-21T14:03:48Z")

</div>

hello, I have a problem regarding backup using curator, I use version 6.3.2 of Elasticsearch and curator in version 5.7.6 , backups are stored in a google gsc bucket with all permissions but this error always appears Fa…

---

## [Uri\_parts Ingest Processor - domain field](https://discuss.elastic.co/t/uri-parts-ingest-processor-domain-field/300139)

<div class="topic-metadata">

**Author:** [@sera123k](https://discuss.elastic.co/u/sera123k)\
**Replies:** 2\
**Last updated:** [March 21, 2022, 1:51pm UTC](https://discuss.elastic.co/t/uri-parts-ingest-processor-domain-field/300139 "2022-03-21T13:51:48Z")

</div>

I'm working with the Zscaler integration and noticed that when passing the logs through the pipeline the uri\_parts ingest processor does not create url.domain out of the URL that Zscaler sends based off the test logs fro…

---

## [Need help in delete index after x days](https://discuss.elastic.co/t/need-help-in-delete-index-after-x-days/300192)

<div class="topic-metadata">

**Author:** [@Saranya\_V](https://discuss.elastic.co/u/Saranya_V)\
**Replies:** 5\
**Last updated:** [March 21, 2022, 12:52pm UTC](https://discuss.elastic.co/t/need-help-in-delete-index-after-x-days/300192 "2022-03-21T12:52:06Z")

</div>

I'm using Elasticsearch 1.x. is there any way we can delete index after x days without using delete query.

---

## [Elasticsearch problem when update mapping](https://discuss.elastic.co/t/elasticsearch-problem-when-update-mapping/300197)

<div class="topic-metadata">

**Author:** [@Muhammad\_Fhadli](https://discuss.elastic.co/u/Muhammad_Fhadli)\
**Replies:** 1\
**Last updated:** [March 21, 2022, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-problem-when-update-mapping/300197 "2022-03-21T11:42:21Z")

</div>

I want add mapping to synonym analyzer by perform this operation PUT /my\_index/\_mapping/items { "items": { "properties": { "judul": { "type": "text", "analyzer": "synonym"…

---

## [Master not discovered or elected yet error](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-error/300194)

<div class="topic-metadata">

**Author:** [@pabloochoa](https://discuss.elastic.co/u/pabloochoa)\
**Replies:** 1\
**Last updated:** [March 21, 2022, 11:08am UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-error/300194 "2022-03-21T11:08:15Z")

</div>

I am trying to deploy an Elasticsearch 8.0.0 4 node cluster with 2 masters and 3 datas (1 host will have both a master and a data). I am deploying it in portainer 2.9.0 and docker 20.10.11, so my docker compose is the fo…

---

## [Requirements for the deployment of ELK](https://discuss.elastic.co/t/requirements-for-the-deployment-of-elk/300159)

<div class="topic-metadata">

**Author:** [@thujitha\_p](https://discuss.elastic.co/u/thujitha_p)\
**Replies:** 2\
**Last updated:** [March 21, 2022, 10:17am UTC](https://discuss.elastic.co/t/requirements-for-the-deployment-of-elk/300159 "2022-03-21T10:17:02Z")

</div>

Hi all, Currently in our system has 2 Elasticsearch nodes. And we are facing an issue and it says, shards count reach 2000 limits. When I search I saw , it is not good to increase no of shards. But we can increase the s…

---

## [Transform BulkRequest from HLRC to Elastic 8.1.0](https://discuss.elastic.co/t/transform-bulkrequest-from-hlrc-to-elastic-8-1-0/300162)

<div class="topic-metadata">

**Author:** [@Raushan](https://discuss.elastic.co/u/Raushan)\
**Replies:** 1\
**Last updated:** [March 21, 2022, 8:13am UTC](https://discuss.elastic.co/t/transform-bulkrequest-from-hlrc-to-elastic-8-1-0/300162 "2022-03-21T08:13:03Z")

</div>

Hi, I need to transform below code to elastic 8.1.0 private BulkRequest createBulkRequest(List\<ElasticSearchMessage\> elasticSearchMessages, String indexName) { BulkRequest bulkRequest = new BulkRequest(indexName…

---

## [Elasticsearch won't start first use - 8.1.0](https://discuss.elastic.co/t/elasticsearch-wont-start-first-use-8-1-0/299741)

<div class="topic-metadata">

**Author:** [@itzikyis](https://discuss.elastic.co/u/itzikyis)\
**Replies:** 12\
**Last updated:** [March 21, 2022, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-first-use-8-1-0/299741 "2022-03-21T07:29:35Z")

</div>

After downloading Elasticsearch from zip to windows. run bin\\Elasticsearch.bat getting Error: skipping security auto configuration because the configuration file \[C:\\Program Files\\Elasticsearch-8.1.0\\bin\\Elasticsearch\\E…

---

## [NEST 7.17. Bulk-Update Partial Document changes JObject $type](https://discuss.elastic.co/t/nest-7-17-bulk-update-partial-document-changes-jobject-type/300164)

<div class="topic-metadata">

**Author:** [@neox2811](https://discuss.elastic.co/u/neox2811)\
**Replies:** 0\
**Last updated:** [March 21, 2022, 7:25am UTC](https://discuss.elastic.co/t/nest-7-17-bulk-update-partial-document-changes-jobject-type/300164 "2022-03-21T07:25:10Z")

</div>

Hi, I want to update existing objects with the Code provided in this topic: Bulk Partial Update using Nest - #2 by Erkan\_Aslanel But atfer the update the $type of my entity has changes to the type of the partial update…

---

## [Index wildcard Performance](https://discuss.elastic.co/t/index-wildcard-performance/300153)

<div class="topic-metadata">

**Author:** [@111505](https://discuss.elastic.co/u/111505)\
**Replies:** 0\
**Last updated:** [March 21, 2022, 4:57am UTC](https://discuss.elastic.co/t/index-wildcard-performance/300153 "2022-03-21T04:57:31Z")

</div>

log-1 log-2 log-3 If there is an index, I use "log-" But suppose that the data I want is only in log-1. Is there a difference in actual operation and performance between using it as log- and using it as log-1? Search…

---

## [Best practice for elastic server and elastic agent](https://discuss.elastic.co/t/best-practice-for-elastic-server-and-elastic-agent/300148)

<div class="topic-metadata">

**Author:** [@sevenout](https://discuss.elastic.co/u/sevenout)\
**Replies:** 0\
**Last updated:** [March 21, 2022, 3:58am UTC](https://discuss.elastic.co/t/best-practice-for-elastic-server-and-elastic-agent/300148 "2022-03-21T03:58:24Z")

</div>

Hi guys, i just wanna ask about the best practice for elastic server and elastic agent. These are my conditions right now: I've installed Elasticsearch and kibana dashboard on a local server (only for Elasticsearch) I'…

---

## [CIRCLE geo\_shape query not supported in ES 8.1](https://discuss.elastic.co/t/circle-geo-shape-query-not-supported-in-es-8-1/300024)

<div class="topic-metadata">

**Author:** [@Dat\_Le\_Tien](https://discuss.elastic.co/u/Dat_Le_Tien)\
**Replies:** 2\
**Last updated:** [March 21, 2022, 3:04am UTC](https://discuss.elastic.co/t/circle-geo-shape-query-not-supported-in-es-8-1/300024 "2022-03-21T03:04:22Z")

</div>

we currently want to move from ES7.17 to 8.1. so far everything went fine but one application seeding the data on geolocations fails with an error currently on our test system unsupported\_operation\_exception: CIRCLE geo…

---

## [Can any one help me with this exception](https://discuss.elastic.co/t/can-any-one-help-me-with-this-exception/300101)

<div class="topic-metadata">

**Author:** [@Kandlavath\_Dasaradhi](https://discuss.elastic.co/u/Kandlavath_Dasaradhi)\
**Replies:** 2\
**Last updated:** [March 21, 2022, 2:57am UTC](https://discuss.elastic.co/t/can-any-one-help-me-with-this-exception/300101 "2022-03-21T02:57:46Z")

</div>

C:\\Elasticsearch-7.3.2\\bin\>Elasticsearch Exception in thread "main" java.nio.file.NoSuchFileException: C:\\Elasticsearch-8.0.1\\config\\jvm.options at java.base/sun.nio.fs.WindowsException.translateToIOException(WindowsEx…

---

## [How to add metadata to an image such that it gets indexed by fscrawler?](https://discuss.elastic.co/t/how-to-add-metadata-to-an-image-such-that-it-gets-indexed-by-fscrawler/300141)

<div class="topic-metadata">

**Author:** [@thinking23487](https://discuss.elastic.co/u/thinking23487)\
**Replies:** 1\
**Last updated:** [March 21, 2022, 2:46am UTC](https://discuss.elastic.co/t/how-to-add-metadata-to-an-image-such-that-it-gets-indexed-by-fscrawler/300141 "2022-03-21T02:46:33Z")

</div>

Hi all, using exiftool I add a custom xmp field to a jpg via exiftool -config exif.hash.conf -xmp-xmp:Test="T1" data/images/13-Moss-Mushrooms-1.jpg where exif.hash.conf contains %Image::ExifTool::UserDefined = ( …

---

## [Cross-cluster search](https://discuss.elastic.co/t/cross-cluster-search/300132)

<div class="topic-metadata">

**Author:** [@ufuk\_varol](https://discuss.elastic.co/u/ufuk_varol)\
**Replies:** 1\
**Last updated:** [March 20, 2022, 1:55pm UTC](https://discuss.elastic.co/t/cross-cluster-search/300132 "2022-03-20T13:55:06Z")

</div>

Does standard version of Elasticsearch support "cross-cluster search" feature explained below link detailly?

---

## [Restoration of indices from aws](https://discuss.elastic.co/t/restoration-of-indices-from-aws/300129)

<div class="topic-metadata">

**Author:** [@Mahendra\_Choudhary](https://discuss.elastic.co/u/Mahendra_Choudhary)\
**Replies:** 0\
**Last updated:** [March 20, 2022, 1:11pm UTC](https://discuss.elastic.co/t/restoration-of-indices-from-aws/300129 "2022-03-20T13:11:03Z")

</div>

Hello all, I am new in ELK stack. Often I need to restore indices from aws. But most of time it interrupt and fails, I need to start again from beginning. Also, restoration seems to be very slow. Is there any faster …

---

## [What is the meaning of query\_string with 1~ or ~AUTO?](https://discuss.elastic.co/t/what-is-the-meaning-of-query-string-with-1-or-auto/300128)

<div class="topic-metadata">

**Author:** [@asil](https://discuss.elastic.co/u/asil)\
**Replies:** 0\
**Last updated:** [March 20, 2022, 12:58pm UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-query-string-with-1-or-auto/300128 "2022-03-20T12:58:18Z")

</div>

I read the documentation of (Query string query | Elasticsearch Guide \[8.1\] | Elastic) and still don't understand the following example: GET /\_search { "query": { "bool": { "must": \[{ "…

---

## [Master\_not\_discovered\_exception](https://discuss.elastic.co/t/master-not-discovered-exception/300125)

<div class="topic-metadata">

**Author:** [@kzltp](https://discuss.elastic.co/u/kzltp)\
**Replies:** 2\
**Last updated:** [March 20, 2022, 12:25pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception/300125 "2022-03-20T12:25:24Z")

</div>

Hello Everyone; I created elastic environment with 4 nodes. 2 nodes set master role other 2 role set data node. When all node was starting everything is okey. but when any master node down, my cluster not working. Other…

---

## [ElasticSearch Linux startup failed. Procedure](https://discuss.elastic.co/t/elasticsearch-linux-startup-failed-procedure/298799)

<div class="topic-metadata">

**Author:** [@zx\_emo](https://discuss.elastic.co/u/zx_emo)\
**Replies:** 10\
**Last updated:** [March 20, 2022, 9:47am UTC](https://discuss.elastic.co/t/elasticsearch-linux-startup-failed-procedure/298799 "2022-03-20T09:47:30Z")

</div>

Elasticsearch has been deployed to Linux and I have encountered a problem with the certificate signing. After following the steps to resolve these problems, I get an exception when I start Elasticsearch. How do I resolve…

---

## [How can make sub aggregation code in elasticsearch-java:7.17.1](https://discuss.elastic.co/t/how-can-make-sub-aggregation-code-in-elasticsearch-java-7-17-1/300001)

<div class="topic-metadata">

**Author:** [@mzinboy](https://discuss.elastic.co/u/mzinboy)\
**Replies:** 2\
**Last updated:** [March 20, 2022, 8:57am UTC](https://discuss.elastic.co/t/how-can-make-sub-aggregation-code-in-elasticsearch-java-7-17-1/300001 "2022-03-20T08:57:54Z")

</div>

Hi, I can't make code to aggregation with sub aggregation using "Elasticsearch-java:7.17.1" Java library. There is no subAggregation method in TermsAggregation.Builder class. How to complete the code that has with su…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=471)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=473)
