# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=489

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 490

---

## [Node Auto Configuration](https://discuss.elastic.co/t/node-auto-configuration/297543)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 8\
**Last updated:** [February 21, 2022, 7:42pm UTC](https://discuss.elastic.co/t/node-auto-configuration/297543 "2022-02-21T19:42:28Z")

</div>

Hi there, I´m trying to deploy a new cluster using Elasticsearch 8 but it seens that is not working the way I expected. 4 Servers: 3 Elasticsearch 1 kibana All in the same network. I´m following the steps using the …

---

## [Search Query Parameter Preference Custom-ID](https://discuss.elastic.co/t/search-query-parameter-preference-custom-id/297807)

<div class="topic-metadata">

**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\
**Replies:** 0\
**Last updated:** [February 21, 2022, 6:53pm UTC](https://discuss.elastic.co/t/search-query-parameter-preference-custom-id/297807 "2022-02-21T18:53:09Z")

</div>

I have the same problem as the stackoverflow guy. I'm using the custom-session-id preference so that after executing the same query several times, keep the same score in each execution but this strategy is not working. …

---

## [Updating indices.query.bool.max\_clause\_count in k8s environment](https://discuss.elastic.co/t/updating-indices-query-bool-max-clause-count-in-k8s-environment/295999)

<div class="topic-metadata">

**Author:** [@gvslim](https://discuss.elastic.co/u/gvslim)\
**Replies:** 1\
**Last updated:** [February 21, 2022, 5:23pm UTC](https://discuss.elastic.co/t/updating-indices-query-bool-max-clause-count-in-k8s-environment/295999 "2022-02-21T17:23:02Z")

</div>

I tried to run a query on a recently updated 7.16.3 environment and got the following error ""field expansion matches too many fields, limit: 1024, got: 1328". I then went to set indices.query.bool.max\_clause\_count to 20…

---

## [Elasticsearch service not running after downgrade from 7.16.2 to old version 6.4.2](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666)

<div class="topic-metadata">

**Author:** [@rahulbansal](https://discuss.elastic.co/u/rahulbansal)\
**Replies:** 14\
**Last updated:** [February 21, 2022, 4:34pm UTC](https://discuss.elastic.co/t/elasticsearch-service-not-running-after-downgrade-from-7-16-2-to-old-version-6-4-2/295666 "2022-02-21T16:34:05Z")

</div>

Hi Everyone, We were trying to upgrade our Elasticsearch from the 6.4.2 version to 7.16.2 due to log4j vulnerability but after the upgrade directly from 6.4.2 to 7.16.2 the Elasticsearch service was not running so we tr…

---

## [Different results in Discover and Dev Console](https://discuss.elastic.co/t/different-results-in-discover-and-dev-console/297784)

<div class="topic-metadata">

**Author:** [@bitnapper](https://discuss.elastic.co/u/bitnapper)\
**Replies:** 0\
**Last updated:** [February 21, 2022, 4:15pm UTC](https://discuss.elastic.co/t/different-results-in-discover-and-dev-console/297784 "2022-02-21T16:15:01Z")

</div>

Hi, I'm still confused when elaticsearch is the right tool to use. As a exercise I imported editions from the OpenLibrary and tried to do some searches. I wrote a mapping and tried to filter out any prvious unicode issu…

---

## [Trying to get a fuzziness example to work](https://discuss.elastic.co/t/trying-to-get-a-fuzziness-example-to-work/297402)

<div class="topic-metadata">

**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\
**Replies:** 4\
**Last updated:** [February 21, 2022, 2:40pm UTC](https://discuss.elastic.co/t/trying-to-get-a-fuzziness-example-to-work/297402 "2022-02-21T14:40:33Z")

</div>

Hi, I'm trying to follow the example for fuzziness given here against the sample bank index. Here's the query: GET /bank/\_search?q=employer:Qu~ It returns nothing, but I expect to get 2 records, at least, from what I…

---

## [Parent child boost not working consistently](https://discuss.elastic.co/t/parent-child-boost-not-working-consistently/294808)

<div class="topic-metadata">

**Author:** [@askids](https://discuss.elastic.co/u/askids)\
**Replies:** 9\
**Last updated:** [February 21, 2022, 2:23pm UTC](https://discuss.elastic.co/t/parent-child-boost-not-working-consistently/294808 "2022-02-21T14:23:28Z")

</div>

hi, We are using ES 7.10.2 on Windows 2012 R2, using inbuilt OpenJDK packaged with the MSI. We are seeing issues happening randomly with ES query being run on index using parent child relationship. We overwrite the rec…

---

## [Filter last X documents based on date, then do a metric aggregation](https://discuss.elastic.co/t/filter-last-x-documents-based-on-date-then-do-a-metric-aggregation/297721)

<div class="topic-metadata">

**Author:** [@neorus616](https://discuss.elastic.co/u/neorus616)\
**Replies:** 3\
**Last updated:** [February 21, 2022, 11:44am UTC](https://discuss.elastic.co/t/filter-last-x-documents-based-on-date-then-do-a-metric-aggregation/297721 "2022-02-21T11:44:15Z")

</div>

i have the following mapping in my ES: { "properties": { "id": { "type": "keyword", "fields": { "keyword": { "type": "keyword", "ignore\_above": 256 } } }, "creationTime": { "type": "…

---

## [How to schedule rule alert only on weekday and specific time](https://discuss.elastic.co/t/how-to-schedule-rule-alert-only-on-weekday-and-specific-time/296145)

<div class="topic-metadata">

**Author:** [@ss02072805](https://discuss.elastic.co/u/ss02072805)\
**Replies:** 1\
**Last updated:** [February 4, 2022, 7:40pm UTC](https://discuss.elastic.co/t/how-to-schedule-rule-alert-only-on-weekday-and-specific-time/296145 "2022-02-04T19:40:48Z")

</div>

Assume, in the Kibana Alerting Framework. this configuration set up for metrics reported with that process.name Alert Type : Metric Threshold, on this configuration how to step up alerting only on weekday and speci…

---

## [Setting the default timestamp to a specific date](https://discuss.elastic.co/t/setting-the-default-timestamp-to-a-specific-date/297732)

<div class="topic-metadata">

**Author:** [@dendrin](https://discuss.elastic.co/u/dendrin)\
**Replies:** 2\
**Last updated:** [February 21, 2022, 10:32am UTC](https://discuss.elastic.co/t/setting-the-default-timestamp-to-a-specific-date/297732 "2022-02-21T10:32:05Z")

</div>

Hi there, does anyone know how to change the default timestamp to a specific date? Currently, the timestamp field is populated with the current time in which the script is ran. I want to change that timestamp to always d…

---

## [Proper Way to Create a Zero Replica Priority Template](https://discuss.elastic.co/t/proper-way-to-create-a-zero-replica-priority-template/297729)

<div class="topic-metadata">

**Author:** [@JSylvia007](https://discuss.elastic.co/u/JSylvia007)\
**Replies:** 0\
**Last updated:** [February 21, 2022, 8:44am UTC](https://discuss.elastic.co/t/proper-way-to-create-a-zero-replica-priority-template/297729 "2022-02-21T08:44:09Z")

</div>

Howdy! I run Elastic in my homelab to pull logs together, etc., and I've recently rebuild from the ground up with Elastic 8. Previously I would create a global template like this: PUT \_template/zeroreplicas { "order…

---

## [Providing input to elasticsearch-keystore.bat programatically](https://discuss.elastic.co/t/providing-input-to-elasticsearch-keystore-bat-programatically/297670)

<div class="topic-metadata">

**Author:** [@Newbie111985](https://discuss.elastic.co/u/Newbie111985)\
**Replies:** 2\
**Last updated:** [February 21, 2022, 4:08am UTC](https://discuss.elastic.co/t/providing-input-to-elasticsearch-keystore-bat-programatically/297670 "2022-02-21T04:08:41Z")

</div>

Hi, I need to add few settings to Elasticsearch keystore in windows using elasticsearch-keystore.bat file. Hence I tried the following from the windows command prompt: echo "mypwd" | D:\\Elasticsearch-7.17.0\\bin\\elastic…

---

## [Can i use http communication in ccs (remote cluster)?](https://discuss.elastic.co/t/can-i-use-http-communication-in-ccs-remote-cluster/297559)

<div class="topic-metadata">

**Author:** [@hyuil](https://discuss.elastic.co/u/hyuil)\
**Replies:** 1\
**Last updated:** [February 21, 2022, 2:13am UTC](https://discuss.elastic.co/t/can-i-use-http-communication-in-ccs-remote-cluster/297559 "2022-02-21T02:13:21Z")

</div>

hi I'm asking this question because I don't know much even if I read the official document. What is the difference between sniff mode and proxy mode in the remote cluster? Does remote cluster connection only support t…

---

## [Changing roles after api key creation?](https://discuss.elastic.co/t/changing-roles-after-api-key-creation/297610)

<div class="topic-metadata">

**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\
**Replies:** 1\
**Last updated:** [February 21, 2022, 2:11am UTC](https://discuss.elastic.co/t/changing-roles-after-api-key-creation/297610 "2022-02-21T02:11:06Z")

</div>

Is it possible to change the permissions of an API key after creation or do you have to create a new key and change all the configurations every single time you want to grant access to a new index?

---

## [Changing Certificate Authority on an Elasticsearch 8 cluster-How to override the certificates created at install time](https://discuss.elastic.co/t/changing-certificate-authority-on-an-elasticsearch-8-cluster-how-to-override-the-certificates-created-at-install-time/297694)

<div class="topic-metadata">

**Author:** [@alrubaa](https://discuss.elastic.co/u/alrubaa)\
**Replies:** 2\
**Last updated:** [February 21, 2022, 2:06am UTC](https://discuss.elastic.co/t/changing-certificate-authority-on-an-elasticsearch-8-cluster-how-to-override-the-certificates-created-at-install-time/297694 "2022-02-21T02:06:02Z")

</div>

Hi There, I have been experimenting and testing Elasticsearch 8 to assess migration and I am stuck at adding a new certificate authority CA to a newly setup cluster. I have setup a single node and a multi-node clusters…

---

## [Does the java new client support \_doc api?](https://discuss.elastic.co/t/does-the-java-new-client-support-doc-api/297444)

<div class="topic-metadata">

**Author:** [@dkskrkwrr](https://discuss.elastic.co/u/dkskrkwrr)\
**Replies:** 2\
**Last updated:** [February 21, 2022, 1:31am UTC](https://discuss.elastic.co/t/does-the-java-new-client-support-doc-api/297444 "2022-02-21T01:31:00Z")

</div>

Hello, we are migrating from the Java Rest High Level Client to the New Rest Client. Currently, the java new rest client seems to support document create EndPoint only with \_create. I'm going to use \_doc Endpoint to au…

---

## [Non-compliant license for \[geohash\_grid aggregation on geo\_shape fields\]](https://discuss.elastic.co/t/non-compliant-license-for-geohash-grid-aggregation-on-geo-shape-fields/297702)

<div class="topic-metadata">

**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\
**Replies:** 2\
**Last updated:** [February 20, 2022, 9:52pm UTC](https://discuss.elastic.co/t/non-compliant-license-for-geohash-grid-aggregation-on-geo-shape-fields/297702 "2022-02-20T21:52:24Z")

</div>

Hi! Topic says it all. I'm trying to run a query to aggregate geo\_shape field on geohash\_grid. However, getting an error about non-compliant license: { "type": "security\_exception", "reason": "current license is no…

---

## [Is \_reindex api an online aciton or not](https://discuss.elastic.co/t/is-reindex-api-an-online-aciton-or-not/297676)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 5\
**Last updated:** [February 20, 2022, 4:09pm UTC](https://discuss.elastic.co/t/is-reindex-api-an-online-aciton-or-not/297676 "2022-02-20T16:09:22Z")

</div>

Hi Elastic 7.16.3 I was curious, is \_reindex api an online action or not..? Like, does it take any read or write locks on source index or not. Regards Raul

---

## [Pipelines YAML file is empty](https://discuss.elastic.co/t/pipelines-yaml-file-is-empty/297560)

<div class="topic-metadata">

**Author:** [@Naba01](https://discuss.elastic.co/u/Naba01)\
**Replies:** 1\
**Last updated:** [February 20, 2022, 3:17pm UTC](https://discuss.elastic.co/t/pipelines-yaml-file-is-empty/297560 "2022-02-20T15:17:45Z")

</div>

I am new to ELK.Just tried installing and starting logstash on local windows PC, getting the below error after run the logstash.bat command. Could you please help resolve the issue. ERROR: Pipelines YAML file is empty…

---

## [Using ILM for data that can be updated or deleted at any phase](https://discuss.elastic.co/t/using-ilm-for-data-that-can-be-updated-or-deleted-at-any-phase/297659)

<div class="topic-metadata">

**Author:** [@Afsaneh\_Habibi](https://discuss.elastic.co/u/Afsaneh_Habibi)\
**Replies:** 2\
**Last updated:** [February 20, 2022, 1:59pm UTC](https://discuss.elastic.co/t/using-ilm-for-data-that-can-be-updated-or-deleted-at-any-phase/297659 "2022-02-20T13:59:31Z")

</div>

Hi I read about ILM and as I understood the main usage is for the data that is read only. In my scenario the latest data is much more important than old data, and as data gets old is much less likely to get accessed, b…

---

## [How to organise Elasticsearch indexes with too many dynamic fields](https://discuss.elastic.co/t/how-to-organise-elasticsearch-indexes-with-too-many-dynamic-fields/297531)

<div class="topic-metadata">

**Author:** [@sushilprj](https://discuss.elastic.co/u/sushilprj)\
**Replies:** 1\
**Last updated:** [February 20, 2022, 12:15pm UTC](https://discuss.elastic.co/t/how-to-organise-elasticsearch-indexes-with-too-many-dynamic-fields/297531 "2022-02-20T12:15:15Z")

</div>

I have a scenario where there are too many groups, and each group has numerous documents with few standard fields and few dynamic fields. So I have created an alias for every group for an index. Now, as these groups grow…

---

## [Dev Tools: How to create a new index on existing index](https://discuss.elastic.co/t/dev-tools-how-to-create-a-new-index-on-existing-index/297504)

<div class="topic-metadata">

**Author:** [@pandu](https://discuss.elastic.co/u/pandu)\
**Replies:** 1\
**Last updated:** [February 20, 2022, 11:30am UTC](https://discuss.elastic.co/t/dev-tools-how-to-create-a-new-index-on-existing-index/297504 "2022-02-20T11:30:00Z")

</div>

I have an index. I am creating a bucket aggregation using Dev Tools (GET method). How do I use this bucket aggregation in visualization? Do I need to create a new index for the GET.. and then visualize? Or, I could use t…

---

## [Array of object using ruby](https://discuss.elastic.co/t/array-of-object-using-ruby/297693)

<div class="topic-metadata">

**Author:** [@royalE](https://discuss.elastic.co/u/royalE)\
**Replies:** 0\
**Last updated:** [February 20, 2022, 11:21am UTC](https://discuss.elastic.co/t/array-of-object-using-ruby/297693 "2022-02-20T11:21:30Z")

</div>

I have an array of object and I want to sparte the value of array to new field . this my array of object . I tried to use ruby but no luck unfortunately . students = \[ {id:"id1",name:"name1",age:"age1"},…

---

## [Dynamic mapping with .keyword field](https://discuss.elastic.co/t/dynamic-mapping-with-keyword-field/297449)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [February 20, 2022, 11:12am UTC](https://discuss.elastic.co/t/dynamic-mapping-with-keyword-field/297449 "2022-02-20T11:12:26Z")

</div>

Hi all, i'm trying to push data with dynamically mapping to indices. The problem is everytime every string field is taken as text instead of keyword and it later throws an error. I cannot define mappings as they are p…

---

## [I wonder why docvalues are fast for sorting](https://discuss.elastic.co/t/i-wonder-why-docvalues-are-fast-for-sorting/297039)

<div class="topic-metadata">

**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\
**Replies:** 2\
**Last updated:** [February 20, 2022, 10:42am UTC](https://discuss.elastic.co/t/i-wonder-why-docvalues-are-fast-for-sorting/297039 "2022-02-20T10:42:36Z")

</div>

docvalues ​​are sorted by docid, so they are not values, but why can they be fast for sorting? I want to know deeply about the internal structure, please help!

---

## [Elasticsearch - major design flaw with node ID](https://discuss.elastic.co/t/elasticsearch-major-design-flaw-with-node-id/297665)

<div class="topic-metadata">

**Author:** [@Bieniek](https://discuss.elastic.co/u/Bieniek)\
**Replies:** 6\
**Last updated:** [February 20, 2022, 9:10am UTC](https://discuss.elastic.co/t/elasticsearch-major-design-flaw-with-node-id/297665 "2022-02-20T09:10:40Z")

</div>

Elasticsearch seems to have a major design flaw when it comes to being deployed in a docker swarm (clustered). Each Elasticsearch node is identified by a randomly generated node ID. This node ID is stored in the databa…

---

## [Date processor - Pipeline](https://discuss.elastic.co/t/date-processor-pipeline/297566)

<div class="topic-metadata">

**Author:** [@p2w2](https://discuss.elastic.co/u/p2w2)\
**Replies:** 3\
**Last updated:** [February 19, 2022, 9:46pm UTC](https://discuss.elastic.co/t/date-processor-pipeline/297566 "2022-02-19T21:46:46Z")

</div>

Hi guys. I'm trying to add the date processor to my index and at first it seemed to be working but then I noticed very strange result that I don't understand and can't find anywhere explanation for this behavior. I hav…

---

## [Support Diagnostic Tool failing](https://discuss.elastic.co/t/support-diagnostic-tool-failing/293999)

<div class="topic-metadata">

**Author:** [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\
**Replies:** 3\
**Last updated:** [February 19, 2022, 9:11am UTC](https://discuss.elastic.co/t/support-diagnostic-tool-failing/293999 "2022-02-19T09:11:34Z")

</div>

I'm trying to run diagnostics-8.2.6 on my ES node running on Openshift 4.6 with Elastic Stack version 7.16.2. The command being used is: ./diagnostics.sh --host logging-es --port 9200 --type local -u ayush.mathur --ssl…

---

## [Elastic Cloud hardware profiles do not line up with documenation](https://discuss.elastic.co/t/elastic-cloud-hardware-profiles-do-not-line-up-with-documenation/297564)

<div class="topic-metadata">

**Author:** [@JJK](https://discuss.elastic.co/u/JJK)\
**Replies:** 4\
**Last updated:** [February 19, 2022, 1:37am UTC](https://discuss.elastic.co/t/elastic-cloud-hardware-profiles-do-not-line-up-with-documenation/297564 "2022-02-19T01:37:11Z")

</div>

I'm trying to create a new deployment. The linked help documentation mentions 3 options for hardware profiles: I/O Optimized Computed Optimized Memory Optimized Actual options given in Elastic cloud: Storage Optimiz…

---

## [PHP client not working](https://discuss.elastic.co/t/php-client-not-working/297645)

<div class="topic-metadata">

**Author:** [@iosif](https://discuss.elastic.co/u/iosif)\
**Replies:** 3\
**Last updated:** [February 19, 2022, 12:15am UTC](https://discuss.elastic.co/t/php-client-not-working/297645 "2022-02-19T00:15:35Z")

</div>

Hello, I want to use the php client. E installed it using Composer, like shown in the tutorial here: Installation | Elasticsearch PHP Client \[7.16\] | Elastic Composer creates the composer.lock file and install the depe…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=488)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=490)
