# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=478

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 479

---

## [Snapshot for a complete beginner](https://discuss.elastic.co/t/snapshot-for-a-complete-beginner/299349)

<div class="topic-metadata">

**Author:** [@Foggie](https://discuss.elastic.co/u/Foggie)\
**Replies:** 1\
**Last updated:** [March 10, 2022, 8:16pm UTC](https://discuss.elastic.co/t/snapshot-for-a-complete-beginner/299349 "2022-03-10T20:16:07Z")

</div>

I want to understand the relationship between the current "data" and snapshots. I am about to start work on a fairly small Elasticsearch application. At 2am each day a simple \_snapshot is performed to a repository with a…

---

## [Sort Data Created via Aggregation](https://discuss.elastic.co/t/sort-data-created-via-aggregation/299360)

<div class="topic-metadata">

**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\
**Replies:** 0\
**Last updated:** [March 10, 2022, 5:37pm UTC](https://discuss.elastic.co/t/sort-data-created-via-aggregation/299360 "2022-03-10T17:37:35Z")

</div>

I needed to create an aggregation based on the customer id, but inside the document I have an object with the customer details, like name and email. Through a code I found, I learned to display in this aggregation the n…

---

## [What if I don't set index.query.default\_field?](https://discuss.elastic.co/t/what-if-i-dont-set-index-query-default-field/299108)

<div class="topic-metadata">

**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\
**Replies:** 3\
**Last updated:** [March 10, 2022, 2:33pm UTC](https://discuss.elastic.co/t/what-if-i-dont-set-index-query-default-field/299108 "2022-03-10T14:33:49Z")

</div>

Our cluster is still running Elasticsearch 6.8, so I'm looking at getting it upgraded to Elasticsearch 7. The Kibana Upgrade Assistant is flagging a couple of hundred indices with this message This index has \[4234\] fie…

---

## [How to integrate knnsearch In java application](https://discuss.elastic.co/t/how-to-integrate-knnsearch-in-java-application/298897)

<div class="topic-metadata">

**Author:** [@dileepkotte4529](https://discuss.elastic.co/u/dileepkotte4529)\
**Replies:** 4\
**Last updated:** [March 10, 2022, 2:33pm UTC](https://discuss.elastic.co/t/how-to-integrate-knnsearch-in-java-application/298897 "2022-03-10T14:33:11Z")

</div>

Hi Folks , I was tried knnsearch for vector similarity search in python it worked .But Now i need to integrate that with my spring application , I don't see much resource on it. But i tried with below code Elastic Sea…

---

## [Are Elasticsearch object properties really just flat properties with a namespace?](https://discuss.elastic.co/t/are-elasticsearch-object-properties-really-just-flat-properties-with-a-namespace/299054)

<div class="topic-metadata">

**Author:** [@Robert\_Krueger](https://discuss.elastic.co/u/Robert_Krueger)\
**Replies:** 7\
**Last updated:** [March 10, 2022, 2:20pm UTC](https://discuss.elastic.co/t/are-elasticsearch-object-properties-really-just-flat-properties-with-a-namespace/299054 "2022-03-10T14:20:13Z")

</div>

In the Elasticsearch docs (Object field type | Elasticsearch Guide \[8.0\] | Elastic) it is stated that object properties internally are essentially just flat properties with a namespace. However when I do this: POST …

---

## [o.e.c.c.ClusterFormationFailureHelper failed to resolve host](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-failed-to-resolve-host/299251)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 2:16pm UTC](https://discuss.elastic.co/t/o-e-c-c-clusterformationfailurehelper-failed-to-resolve-host/299251 "2022-03-10T14:16:44Z")

</div>

Hi On the beginning I have a problem with configuration of two nodes on the same host. As first I need to create a cluster so at I've started from create network and swarm cluster. I don't know why the host name is …

---

## [Error indexing with httpjson](https://discuss.elastic.co/t/error-indexing-with-httpjson/299122)

<div class="topic-metadata">

**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 1:59pm UTC](https://discuss.elastic.co/t/error-indexing-with-httpjson/299122 "2022-03-10T13:59:56Z")

</div>

Hi, Im having a issue while indexing via filebeat httpjson to elastic I have this configuration filebeat.inputs: - type: httpjson enabled: true config\_version: 2 fields\_under\_root: true json.keys\_under\_root: t…

---

## [How to escape colon in painless](https://discuss.elastic.co/t/how-to-escape-colon-in-painless/299328)

<div class="topic-metadata">

**Author:** [@geppo](https://discuss.elastic.co/u/geppo)\
**Replies:** 1\
**Last updated:** [March 10, 2022, 1:42pm UTC](https://discuss.elastic.co/t/how-to-escape-colon-in-painless/299328 "2022-03-10T13:42:01Z")

</div>

Hi to everyone! Few days ago someone in my company has created in my cluster a field called total\_chunks.RS|24|12:24 and I would like to rename It with an update\_by\_query. I have tried this query: { "query": { …

---

## [Best way to setup latest version of ES & Kibana using Docker?](https://discuss.elastic.co/t/best-way-to-setup-latest-version-of-es-kibana-using-docker/299334)

<div class="topic-metadata">

**Author:** [@Hazem\_Alabiad](https://discuss.elastic.co/u/Hazem_Alabiad)\
**Replies:** 0\
**Last updated:** [March 10, 2022, 12:41pm UTC](https://discuss.elastic.co/t/best-way-to-setup-latest-version-of-es-kibana-using-docker/299334 "2022-03-10T12:41:26Z")

</div>

What is the best way to install ES & Kibana v8.1.0 using Docker? I tried many tutorials but, seems that there are many security constraints that make the process trickier e.g. password, enrollment\_token .... etc. And f…

---

## [Elastic Anomaly Detection not showing some partition fields in single metric viewer](https://discuss.elastic.co/t/elastic-anomaly-detection-not-showing-some-partition-fields-in-single-metric-viewer/299329)

<div class="topic-metadata">

**Author:** [@Arpit\_Karwasara](https://discuss.elastic.co/u/Arpit_Karwasara)\
**Replies:** 1\
**Last updated:** [March 10, 2022, 1:00pm UTC](https://discuss.elastic.co/t/elastic-anomaly-detection-not-showing-some-partition-fields-in-single-metric-viewer/299329 "2022-03-10T13:00:45Z")

</div>

We have created an anomaly detection job using elastic machine learning. We created the job using detector on count (partition\_field) and we have around 3000 partitions. however some partition fields are not visible in …

---

## [How to rename field name in Elasticsearch with Time efficient?](https://discuss.elastic.co/t/how-to-rename-field-name-in-elasticsearch-with-time-efficient/299179)

<div class="topic-metadata">

**Author:** [@Haridoss\_M](https://discuss.elastic.co/u/Haridoss_M)\
**Replies:** 7\
**Last updated:** [March 10, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-rename-field-name-in-elasticsearch-with-time-efficient/299179 "2022-03-10T12:31:21Z")

</div>

I have been using the following query to rename fieldName. POST http://localhost:9200/INDEX\_NAME/\_update\_by\_query { "query": { "exists": { "field": "NEW\_FIELD\_NAME" } }, "script" : { "inline"…

---

## [Synthetic monitor data to specific indices](https://discuss.elastic.co/t/synthetic-monitor-data-to-specific-indices/299055)

<div class="topic-metadata">

**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\
**Replies:** 6\
**Last updated:** [March 10, 2022, 11:37am UTC](https://discuss.elastic.co/t/synthetic-monitor-data-to-specific-indices/299055 "2022-03-10T11:37:38Z")

</div>

Hi, Is it possible to redirect data of synthetic monitoring agent to a specific index? elk 8 thanks

---

## [Buckler plugin - TLS connection](https://discuss.elastic.co/t/buckler-plugin-tls-connection/299325)

<div class="topic-metadata">

**Author:** [@MicroB](https://discuss.elastic.co/u/MicroB)\
**Replies:** 0\
**Last updated:** [March 10, 2022, 10:53am UTC](https://discuss.elastic.co/t/buckler-plugin-tls-connection/299325 "2022-03-10T10:53:50Z")

</div>

Hi, I would like install Buckler plugin to have TLS connection between Elasticsearch and Bitbucket server. On Atlassian website (Install and configure a remote Elasticsearch server | Bitbucket Data Center and Server 7.…

---

## [Update \_id field](https://discuss.elastic.co/t/update-id-field/299320)

<div class="topic-metadata">

**Author:** [@gunjankum](https://discuss.elastic.co/u/gunjankum)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 10:45am UTC](https://discuss.elastic.co/t/update-id-field/299320 "2022-03-10T10:45:11Z")

</div>

Can we update \_id field of a doc. POST /test\_region/\_doc/01 { "id":"222", "userName":"Kumar", "region":"DelhiNew" } Doc value :slight\_smile: { "\_index" : "test\_region", "\_type" : "\_doc", "\_id" : "01", "\_score…

---

## [Date histogram aggregation over duration from startDate to endDate](https://discuss.elastic.co/t/date-histogram-aggregation-over-duration-from-startdate-to-enddate/297944)

<div class="topic-metadata">

**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\
**Replies:** 12\
**Last updated:** [March 10, 2022, 10:29am UTC](https://discuss.elastic.co/t/date-histogram-aggregation-over-duration-from-startdate-to-enddate/297944 "2022-03-10T10:29:34Z")

</div>

Hi, I m trying to create an elastic query that should return all fields in each bucket using date histogram builder. I have an index that has thresholdValue with a start date and end date of 2/3 months period. Now I wan…

---

## [Elasticsearch cluster issue](https://discuss.elastic.co/t/elasticsearch-cluster-issue/298882)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 8\
**Last updated:** [March 10, 2022, 9:20am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-issue/298882 "2022-03-10T09:20:31Z")

</div>

I had one node. I didnt delete data in first node. Then I deleted data from second and third nodes, try to add to first node cluster. But it created two clusters. One with first node alone Another with second and third…

---

## [Default IndicesOptions in SearchRequest and disable specific deprecation warnings](https://discuss.elastic.co/t/default-indicesoptions-in-searchrequest-and-disable-specific-deprecation-warnings/299242)

<div class="topic-metadata">

**Author:** [@joschi](https://discuss.elastic.co/u/joschi)\
**Replies:** 4\
**Last updated:** [March 10, 2022, 8:23am UTC](https://discuss.elastic.co/t/default-indicesoptions-in-searchrequest-and-disable-specific-deprecation-warnings/299242 "2022-03-10T08:23:45Z")

</div>

Hi folks, this is a follow-up to the automatically closed topic at Disable specific deprecation warnings. We've updated to Elasticsearch 7.16.3 on the servers and for our clients now but still get this deprecation mess…

---

## ["\[ignore\_throttled\] parameter is deprecated because frozen indices have been deprecated](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated-because-frozen-indices-have-been-deprecated/299144)

<div class="topic-metadata">

**Author:** [@Archana\_Punia](https://discuss.elastic.co/u/Archana_Punia)\
**Replies:** 4\
**Last updated:** [March 10, 2022, 7:53am UTC](https://discuss.elastic.co/t/ignore-throttled-parameter-is-deprecated-because-frozen-indices-have-been-deprecated/299144 "2022-03-10T07:53:55Z")

</div>

Continuing the discussion from Ignore\_throttled parameter is deprecated: Hi, I upgrade my ES and Kibana version to 7.16.3 from 7.15.0 and post upgrading, this warning is showing on my kibana continuously. Can you let m…

---

## [ILM action failed "check-rollover-ready,Moving to ERROR step"?](https://discuss.elastic.co/t/ilm-action-failed-check-rollover-ready-moving-to-error-step/299288)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 4\
**Last updated:** [March 10, 2022, 7:50am UTC](https://discuss.elastic.co/t/ilm-action-failed-check-rollover-ready-moving-to-error-step/299288 "2022-03-10T07:50:33Z")

</div>

I found that my es cluster is always reporting an error, he said that the ILM work failed, according to the prompt "check-rollover-ready", I didn't understand what it needs to identify, and the target index is the system…

---

## [Issue with allocation filtering on snapshot restore](https://discuss.elastic.co/t/issue-with-allocation-filtering-on-snapshot-restore/299032)

<div class="topic-metadata">

**Author:** [@bar0n36](https://discuss.elastic.co/u/bar0n36)\
**Replies:** 10\
**Last updated:** [March 10, 2022, 7:27am UTC](https://discuss.elastic.co/t/issue-with-allocation-filtering-on-snapshot-restore/299032 "2022-03-10T07:27:59Z")

</div>

Hi, I have just encountered a strange issue when attempting a test restore of my production Elasticsearch cluster to a test server. It appears I have several indices that have somehow ended up with a node level routing …

---

## [ElasticSearch : Failure Sink always running](https://discuss.elastic.co/t/elasticsearch-failure-sink-always-running/299293)

<div class="topic-metadata">

**Author:** [@Adesh\_Agarwal](https://discuss.elastic.co/u/Adesh_Agarwal)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-failure-sink-always-running/299293 "2022-03-10T07:22:17Z")

</div>

The logs are always being written to both Elastic Search and Local Log Files (when used as a Failure Sink) . This should not be the case. Local Log Files should be created only when the application fails to write logs to…

---

## [Es readtimeout occurs](https://discuss.elastic.co/t/es-readtimeout-occurs/299085)

<div class="topic-metadata">

**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\
**Replies:** 12\
**Last updated:** [March 10, 2022, 3:18am UTC](https://discuss.elastic.co/t/es-readtimeout-occurs/299085 "2022-03-10T03:18:00Z")

</div>

At 5:11, search readtimeout occurred a lot. When we execute batch execution, if the primary shard is indexed, we are increasing the replica shard at that time, But at that time, the search engine creates replica …

---

## [How to increase score for documents matching multiple words in elasticsearch](https://discuss.elastic.co/t/how-to-increase-score-for-documents-matching-multiple-words-in-elasticsearch/299281)

<div class="topic-metadata">

**Author:** [@Ashu\_kumar](https://discuss.elastic.co/u/Ashu_kumar)\
**Replies:** 3\
**Last updated:** [March 10, 2022, 3:33am UTC](https://discuss.elastic.co/t/how-to-increase-score-for-documents-matching-multiple-words-in-elasticsearch/299281 "2022-03-10T03:33:20Z")

</div>

When I am searching for dubai tour , I am getting these results: Dubai iVenture Dubai Select Pass Big Bus Dubai: Night Tour Big Bus Dubai: Hop-On, Hop-Off Bus Tour City Sightseeing Dubai: Hop-On, Hop-Off Bus Tour At-Th…

---

## [Which will cause the LocalCheckpoint less than GlobalCheckpoint?](https://discuss.elastic.co/t/which-will-cause-the-localcheckpoint-less-than-globalcheckpoint/299197)

<div class="topic-metadata">

**Author:** [@armsword](https://discuss.elastic.co/u/armsword)\
**Replies:** 2\
**Last updated:** [March 10, 2022, 3:00am UTC](https://discuss.elastic.co/t/which-will-cause-the-localcheckpoint-less-than-globalcheckpoint/299197 "2022-03-10T03:00:49Z")

</div>

https://github.com/elastic/elasticsearch/blob/master/server/src/main/java/org/elasticsearch/index/seqno/ReplicationTracker.java#L1250 Hi, I have a question about the Local CheckPoint and Global CheckPoint. The Code in l…

---

## [Elastic Search injest attachment cannot index multiple pdf](https://discuss.elastic.co/t/elastic-search-injest-attachment-cannot-index-multiple-pdf/299234)

<div class="topic-metadata">

**Author:** [@Leo\_Baby\_Jacob](https://discuss.elastic.co/u/Leo_Baby_Jacob)\
**Replies:** 4\
**Last updated:** [March 9, 2022, 10:01pm UTC](https://discuss.elastic.co/t/elastic-search-injest-attachment-cannot-index-multiple-pdf/299234 "2022-03-09T22:01:57Z")

</div>

I have an mysql table with multiple pdfs and an associated item\_name for title pdf\_s3\_link -------- -------------- Harry Potter linktopdfons3 Batman s3\_link\_to\_pdfons3 I am trying t…

---

## [Mapping error: Please use a keyword field instead](https://discuss.elastic.co/t/mapping-error-please-use-a-keyword-field-instead/299240)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 9:47pm UTC](https://discuss.elastic.co/t/mapping-error-please-use-a-keyword-field-instead/299240 "2022-03-09T21:47:00Z")

</div>

Hi, Im getting data from Azure with metricbeat, and also getting additional data from event hub. the data from metricbeat and Event Hub is shown in the same dashboard. In order to filter with a control visualization i…

---

## [Elasticsearch license renewal](https://discuss.elastic.co/t/elasticsearch-license-renewal/299222)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 9:29pm UTC](https://discuss.elastic.co/t/elasticsearch-license-renewal/299222 "2022-03-09T21:29:26Z")

</div>

HI Team, I have few question regarding my license renewal, Our platinum license is about to expire on next week and we are working on renewal process. If we face any difficulties on renewal before the dew date will it…

---

## [Shard failed recovery upon rolling upgrade due to storeTermVector error](https://discuss.elastic.co/t/shard-failed-recovery-upon-rolling-upgrade-due-to-storetermvector-error/299260)

<div class="topic-metadata">

**Author:** [@jz1603](https://discuss.elastic.co/u/jz1603)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 9:01pm UTC](https://discuss.elastic.co/t/shard-failed-recovery-upon-rolling-upgrade-due-to-storetermvector-error/299260 "2022-03-09T21:01:40Z")

</div>

Hi there, I am testing the rolling upgrade from 7.5 to 8.0 on a single node cluster. According to the documentations, I did 7.5-\>7.17, then 7.17-\>8.0. The 7.5 to 7.17 rolling upgrade went smoothly, but when I did 7.17-\>8…

---

## [Failed to obtain node locks Elasticsearch \[8.0.1\]](https://discuss.elastic.co/t/failed-to-obtain-node-locks-elasticsearch-8-0-1/298994)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 1\
**Last updated:** [March 9, 2022, 5:40pm UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-elasticsearch-8-0-1/298994 "2022-03-09T17:40:27Z")

</div>

Hi Can You help me with fix it? During install elasticsearch over docker swarm/docker compose I've met a common issue with java.lang.IllegalStateException: failed to obtain node locks I'm pretty sure that only one…

---

## [Fluend periodically fails sending logs to Elasticsearch](https://discuss.elastic.co/t/fluend-periodically-fails-sending-logs-to-elasticsearch/299201)

<div class="topic-metadata">

**Author:** [@Vlad\_Stavarache](https://discuss.elastic.co/u/Vlad_Stavarache)\
**Replies:** 0\
**Last updated:** [March 9, 2022, 10:51am UTC](https://discuss.elastic.co/t/fluend-periodically-fails-sending-logs-to-elasticsearch/299201 "2022-03-09T10:51:41Z")

</div>

Issue: fluentd periodically stops sending logs to Elasticsearch. when i delete the fluentd pod, fluentd starts sending previously stuck logs successfully to Elasticsearch and i can see them in kibana. after several hours…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=477)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=479)
