# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=490

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 491

---

## [NAS drive mount give not able to obtain lock](https://discuss.elastic.co/t/nas-drive-mount-give-not-able-to-obtain-lock/297636)

<div class="topic-metadata">

**Author:** [@Uma\_Nath\_Jha](https://discuss.elastic.co/u/Uma_Nath_Jha)\
**Replies:** 0\
**Last updated:** [February 18, 2022, 7:27pm UTC](https://discuss.elastic.co/t/nas-drive-mount-give-not-able-to-obtain-lock/297636 "2022-02-18T19:27:44Z")

</div>

Hi Team, I have Elasticsearch running within a docker container and I have created a volume for my NAS drive which I mount for elastic data but it fails and gives me " \`\`\` Caused by: java.lang.IllegalStateException: fa…

---

## [How convert needed SQL query to Elastic DSL](https://discuss.elastic.co/t/how-convert-needed-sql-query-to-elastic-dsl/297585)

<div class="topic-metadata">

**Author:** [@alessio-hermes](https://discuss.elastic.co/u/alessio-hermes)\
**Replies:** 0\
**Last updated:** [February 18, 2022, 9:53am UTC](https://discuss.elastic.co/t/how-convert-needed-sql-query-to-elastic-dsl/297585 "2022-02-18T09:53:38Z")

</div>

Hello everyone, I have an index with 19 mapped fields and I need to query it with query like this: SELECT \* FROM my-index WHERE field1 IN (value1, value2) AND field2 IN (valueX, valueY, valueZ) AND \*anyOfThe19Fields\* C…

---

## [Java API client 7.16.3 : handling for loops in terms aggregations](https://discuss.elastic.co/t/java-api-client-7-16-3-handling-for-loops-in-terms-aggregations/297616)

<div class="topic-metadata">

**Author:** [@Scylanth](https://discuss.elastic.co/u/Scylanth)\
**Replies:** 1\
**Last updated:** [February 18, 2022, 5:09pm UTC](https://discuss.elastic.co/t/java-api-client-7-16-3-handling-for-loops-in-terms-aggregations/297616 "2022-02-18T17:09:52Z")

</div>

Hello. I struggle to do aggregations on multiple terms using the new Java API, whenever using loops. I have a map of terms I need to aggregate on with their renamed value that I need to loop on. I have tried the follo…

---

## [ERROR Index lifecycle management (ILM): listener failed while handling triggered event \[ilm\]](https://discuss.elastic.co/t/error-index-lifecycle-management-ilm-listener-failed-while-handling-triggered-event-ilm/297622)

<div class="topic-metadata">

**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\
**Replies:** 0\
**Last updated:** [February 18, 2022, 3:28pm UTC](https://discuss.elastic.co/t/error-index-lifecycle-management-ilm-listener-failed-while-handling-triggered-event-ilm/297622 "2022-02-18T15:28:49Z")

</div>

Hi, in my cluster the index lifecycle management (ILM) has stopped working, In detail there is only the cancellation that has not been done for a few days and this error appeared in the logs: \[2022-02-18T15: 36: 31,58…

---

## [What is the point of the match\_all and match\_none queries?](https://discuss.elastic.co/t/what-is-the-point-of-the-match-all-and-match-none-queries/297618)

<div class="topic-metadata">

**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\
**Replies:** 0\
**Last updated:** [February 18, 2022, 2:15pm UTC](https://discuss.elastic.co/t/what-is-the-point-of-the-match-all-and-match-none-queries/297618 "2022-02-18T14:15:56Z")

</div>

When would these queries be used and why? Thanks in advance to all who respond.

---

## [Not in other index](https://discuss.elastic.co/t/not-in-other-index/297588)

<div class="topic-metadata">

**Author:** [@Loic\_Bajard](https://discuss.elastic.co/u/Loic_Bajard)\
**Replies:** 4\
**Last updated:** [February 18, 2022, 1:15pm UTC](https://discuss.elastic.co/t/not-in-other-index/297588 "2022-02-18T13:15:29Z")

</div>

Considering these two indices: ## Mappings PUT breeds { "mappings": { "properties": { "size": { "type": "keyword" }, "guarding\_skills": { "type": "keyword" } } } } PUT dogs { "mappings": { …

---

## [Repository\_verification\_exception while creating new repository in snapshot](https://discuss.elastic.co/t/repository-verification-exception-while-creating-new-repository-in-snapshot/297483)

<div class="topic-metadata">

**Author:** [@Darshil\_Shah](https://discuss.elastic.co/u/Darshil_Shah)\
**Replies:** 14\
**Last updated:** [February 18, 2022, 10:55am UTC](https://discuss.elastic.co/t/repository-verification-exception-while-creating-new-repository-in-snapshot/297483 "2022-02-18T10:55:35Z")

</div>

we are running 3 node Elasticsearch setup where all of the nodes are master in kubernetes . i have installed s3 plugin for Elasticsearch and provided access key and secret key . whenever i create a repository and verif…

---

## [How to select the newest rows in an ordered result set?](https://discuss.elastic.co/t/how-to-select-the-newest-rows-in-an-ordered-result-set/297598)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 0\
**Last updated:** [February 18, 2022, 10:50am UTC](https://discuss.elastic.co/t/how-to-select-the-newest-rows-in-an-ordered-result-set/297598 "2022-02-18T10:50:44Z")

</div>

Hello I have an annoying problem with Elasticsearch SQL I hope someone can help me with. Elasticsearch is version 7.17.0 and it will soon be upgraded to 8.0.0. We collect package data from Linux hosts with the auditbea…

---

## [UNASSIGNED replicas after reroute allocate\_stale\_primary](https://discuss.elastic.co/t/unassigned-replicas-after-reroute-allocate-stale-primary/297596)

<div class="topic-metadata">

**Author:** [@tjmartins](https://discuss.elastic.co/u/tjmartins)\
**Replies:** 0\
**Last updated:** [February 18, 2022, 10:45am UTC](https://discuss.elastic.co/t/unassigned-replicas-after-reroute-allocate-stale-primary/297596 "2022-02-18T10:45:07Z")

</div>

Hi all, After a node fail in a 3 node cluster, one of our indexes became in red state. My solution to recover, at least a primary shard, was to run: POST /\_cluster/reroute { "commands" : \[ { "allocate\_s…

---

## [MultisearchBody and seq\_no\_primary\_term](https://discuss.elastic.co/t/multisearchbody-and-seq-no-primary-term/297595)

<div class="topic-metadata">

**Author:** [@Pingouin](https://discuss.elastic.co/u/Pingouin)\
**Replies:** 0\
**Last updated:** [February 18, 2022, 10:44am UTC](https://discuss.elastic.co/t/multisearchbody-and-seq-no-primary-term/297595 "2022-02-18T10:44:40Z")

</div>

I am currently updating my code from High Level Rest java client to new Java client. It seems that it is no longer possible to activate "seq\_no\_primary\_term" for multi search request. With High Level REST Api, it only …

---

## [Configure deprecation log index properties](https://discuss.elastic.co/t/configure-deprecation-log-index-properties/291342)

<div class="topic-metadata">

**Author:** [@OrangeDog](https://discuss.elastic.co/u/OrangeDog)\
**Replies:** 9\
**Last updated:** [February 18, 2022, 8:03am UTC](https://discuss.elastic.co/t/configure-deprecation-log-index-properties/291342 "2022-02-18T08:03:17Z")

</div>

7.16 adds a new stream/index for deprecation logging. e.g. the first one today is .ds-.logs-deprecation.elasticsearch-default-2021.12.09-000001 However, it is created with "number\_of\_replicas": "1" and I only have one …

---

## [Change the default master connection timeout of 30s to 60s](https://discuss.elastic.co/t/change-the-default-master-connection-timeout-of-30s-to-60s/297311)

<div class="topic-metadata">

**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\
**Replies:** 15\
**Last updated:** [February 17, 2022, 11:11pm UTC](https://discuss.elastic.co/t/change-the-default-master-connection-timeout-of-30s-to-60s/297311 "2022-02-17T23:11:33Z")

</div>

Hi, I am using Elasticsearch 5.5.2 version and when the node 2 is trying to connect to the master node node 1 I am getting the below error. I had opened this thread - Getting ConnectTimeoutException When joining in clust…

---

## [Elasticsearch-sql-cli jar and log4j vulnerabilty](https://discuss.elastic.co/t/elasticsearch-sql-cli-jar-and-log4j-vulnerabilty/297550)

<div class="topic-metadata">

**Author:** [@praveen4bv](https://discuss.elastic.co/u/praveen4bv)\
**Replies:** 1\
**Last updated:** [February 17, 2022, 10:32pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-cli-jar-and-log4j-vulnerabilty/297550 "2022-02-17T22:32:20Z")

</div>

We are running Elasticsearch 7.6.2 and have mitigated the log4j by setting the -Dlog4j2.formatMsgNoLookups=true in JVM options. However, our scans are still showing that Elasticsearch-sql-cli-7.6.2.jar file is vulner…

---

## [Apache monitoring on several FreeBSD hosts](https://discuss.elastic.co/t/apache-monitoring-on-several-freebsd-hosts/297479)

<div class="topic-metadata">

**Author:** [@txfz](https://discuss.elastic.co/u/txfz)\
**Replies:** 0\
**Last updated:** [February 17, 2022, 11:22am UTC](https://discuss.elastic.co/t/apache-monitoring-on-several-freebsd-hosts/297479 "2022-02-17T11:22:32Z")

</div>

Hi, I'm new to the Elastic Stack. I've only barely managed to get it up and running before, so I may or may not fully understand all the things which I'm asking for here. We have a number of FreeBSD hosts running Apach…

---

## [\[ES 8.0.0\] Index Template ".monitoring-logstash-mb" has a missing field](https://discuss.elastic.co/t/es-8-0-0-index-template-monitoring-logstash-mb-has-a-missing-field/297544)

<div class="topic-metadata">

**Author:** [@nikAizuddin](https://discuss.elastic.co/u/nikAizuddin)\
**Replies:** 0\
**Last updated:** [February 17, 2022, 8:45pm UTC](https://discuss.elastic.co/t/es-8-0-0-index-template-monitoring-logstash-mb-has-a-missing-field/297544 "2022-02-17T20:45:01Z")

</div>

Hi, I'm using Elastic Stack and Beats version 8.0.0. I noticed Index Template .monitoring-logstash-mb is missing a mapping for logstash.node.stats.pipelines.queue.capacity.queue\_size\_in\_bytes field. My setup for Stack …

---

## [Problem in phrase\_prefix with filter](https://discuss.elastic.co/t/problem-in-phrase-prefix-with-filter/297538)

<div class="topic-metadata">

**Author:** [@Kalavero](https://discuss.elastic.co/u/Kalavero)\
**Replies:** 0\
**Last updated:** [February 17, 2022, 7:17pm UTC](https://discuss.elastic.co/t/problem-in-phrase-prefix-with-filter/297538 "2022-02-17T19:17:17Z")

</div>

I have a query that I use for a search\_as\_you\_type field that is not returning the expected value. The query looks something like this: GET users/\_search { "\_source": \["first\_name","full\_name","last\_name","marketplac…

---

## [Phrase Suggester Score](https://discuss.elastic.co/t/phrase-suggester-score/297492)

<div class="topic-metadata">

**Author:** [@mukeshdantuluri15](https://discuss.elastic.co/u/mukeshdantuluri15)\
**Replies:** 0\
**Last updated:** [February 17, 2022, 12:57pm UTC](https://discuss.elastic.co/t/phrase-suggester-score/297492 "2022-02-17T12:57:57Z")

</div>

Current Elastic API documentation shows only available options to get best matched suggestion as per below page, where as formulae to calculate score is not mentioned anywhere for understanding Need formulae used for s…

---

## [Which Java client to use for implementing search functionality](https://discuss.elastic.co/t/which-java-client-to-use-for-implementing-search-functionality/297461)

<div class="topic-metadata">

**Author:** [@roulupen](https://discuss.elastic.co/u/roulupen)\
**Replies:** 0\
**Last updated:** [February 17, 2022, 9:17am UTC](https://discuss.elastic.co/t/which-java-client-to-use-for-implementing-search-functionality/297461 "2022-02-17T09:17:27Z")

</div>

Hi All, I want to query from my Elasticsearch instance and the queries will be dynamic based on the user selection. Which Java library is best fit for it and is there any example available for the initial setup of the l…

---

## [Elastisearch installation](https://discuss.elastic.co/t/elastisearch-installation/297341)

<div class="topic-metadata">

**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\
**Replies:** 18\
**Last updated:** [February 17, 2022, 3:43pm UTC](https://discuss.elastic.co/t/elastisearch-installation/297341 "2022-02-17T15:43:10Z")

</div>

Hello Greetings of the day, I am trying to install Elasticsearch in linux server but its not installing & throwing error & logs are also not generating in var/log/Elasticsearch. Elasticsearch status: journalctl -x…

---

## [Cluster.routing.allocation.enable vs planned node outages, eg. rolling node restarts](https://discuss.elastic.co/t/cluster-routing-allocation-enable-vs-planned-node-outages-eg-rolling-node-restarts/297497)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 1\
**Last updated:** [February 17, 2022, 2:14pm UTC](https://discuss.elastic.co/t/cluster-routing-allocation-enable-vs-planned-node-outages-eg-rolling-node-restarts/297497 "2022-02-17T14:14:39Z")

</div>

Trying to recapture BCP for doing a planned node outage eg. by rolling restarts. Wouldn't it be good practice to set cluster.routing.allocation.enable transient to 'none' before taking a node offline and the then set it…

---

## [Error indexing data in Elasticsearch](https://discuss.elastic.co/t/error-indexing-data-in-elasticsearch/297416)

<div class="topic-metadata">

**Author:** [@Matheus26](https://discuss.elastic.co/u/Matheus26)\
**Replies:** 2\
**Last updated:** [February 17, 2022, 1:55pm UTC](https://discuss.elastic.co/t/error-indexing-data-in-elasticsearch/297416 "2022-02-17T13:55:50Z")

</div>

Hi, I'm trying to index datas in Elasticsearch, but I'm getting an error. I'm using the latest Nest release (7.17.0) in C# The error is "Failed to serialize anonymous type". This error message is from an exception af…

---

## [Aggregation across multiple indexes/indices - significant terms](https://discuss.elastic.co/t/aggregation-across-multiple-indexes-indices-significant-terms/296787)

<div class="topic-metadata">

**Author:** [@anthonyfps](https://discuss.elastic.co/u/anthonyfps)\
**Replies:** 4\
**Last updated:** [February 17, 2022, 1:25pm UTC](https://discuss.elastic.co/t/aggregation-across-multiple-indexes-indices-significant-terms/296787 "2022-02-17T13:25:30Z")

</div>

Hi, we have indexes that are split by date for manageability but contain the same mappings. I'm currently trying to use the significant terms aggregation to identify new terms, by specifying the foreground as e.g. the l…

---

## [Cutoff Frequency for match queries](https://discuss.elastic.co/t/cutoff-frequency-for-match-queries/296529)

<div class="topic-metadata">

**Author:** [@Brodin](https://discuss.elastic.co/u/Brodin)\
**Replies:** 5\
**Last updated:** [February 17, 2022, 11:21am UTC](https://discuss.elastic.co/t/cutoff-frequency-for-match-queries/296529 "2022-02-17T11:21:48Z")

</div>

According to this Match query | Elasticsearch Guide \[7.17\] | Elastic Cutoff frequency is deprecated and no longer needed, however I am seeing vastly different result for my match query when I remove it. So which one is…

---

## [My cluster keep dropping node and changing master "failed to writeCluster State"](https://discuss.elastic.co/t/my-cluster-keep-dropping-node-and-changing-master-failed-to-writecluster-state/297219)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 8\
**Last updated:** [February 17, 2022, 11:13am UTC](https://discuss.elastic.co/t/my-cluster-keep-dropping-node-and-changing-master-failed-to-writecluster-state/297219 "2022-02-17T11:13:45Z")

</div>

Hello, My cluster keep dropping one node randomly everytime, which made the stack instable, sometimes it takes more than 3 hours to rejoin that node and recover. My cluster compose of 4 nodes : 1 coordinator . 3 data…

---

## [Access to Netty4Plugin(transport-netty4) in custom plugins to run test codes with RestClient and ESIntegTestCase in version 8.0.0](https://discuss.elastic.co/t/access-to-netty4plugin-transport-netty4-in-custom-plugins-to-run-test-codes-with-restclient-and-esintegtestcase-in-version-8-0-0/297288)

<div class="topic-metadata">

**Author:** [@harori](https://discuss.elastic.co/u/harori)\
**Replies:** 1\
**Last updated:** [February 17, 2022, 9:42am UTC](https://discuss.elastic.co/t/access-to-netty4plugin-transport-netty4-in-custom-plugins-to-run-test-codes-with-restclient-and-esintegtestcase-in-version-8-0-0/297288 "2022-02-17T09:42:45Z")

</div>

Hello! First of all, I'd like to say thank you for maintaining such great projects and communities. I'm big fan of Elasticsearch. I wrote several custom plugins for Elasticsearch, and I have some test codes which use E…

---

## [Adding replicas during forcemerge - is this supposed to happen?](https://discuss.elastic.co/t/adding-replicas-during-forcemerge-is-this-supposed-to-happen/297464)

<div class="topic-metadata">

**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\
**Replies:** 0\
**Last updated:** [February 17, 2022, 9:36am UTC](https://discuss.elastic.co/t/adding-replicas-during-forcemerge-is-this-supposed-to-happen/297464 "2022-02-17T09:36:53Z")

</div>

Hello nice people of Elasticsearch. Recently I accidentally upped the number of replicas from 0 to 1 during a forcemerge. End result: Replica got created from non-merged primary and stayed unmerged. Is this supposed…

---

## [Lucene query syntax won't work](https://discuss.elastic.co/t/lucene-query-syntax-wont-work/296828)

<div class="topic-metadata">

**Author:** [@Martin\_Miloshev](https://discuss.elastic.co/u/Martin_Miloshev)\
**Replies:** 2\
**Last updated:** [February 17, 2022, 9:00am UTC](https://discuss.elastic.co/t/lucene-query-syntax-wont-work/296828 "2022-02-17T09:00:21Z")

</div>

Hi guys! I am trying to specify a table which I want to meet an amount of logs of three fields. for example: metadata.environment: "prod" and metadata.component: "my-services" and level:"ERROR" Unfortunately, i get n…

---

## [Extra processor in ingest pipeline disappears after upgrade](https://discuss.elastic.co/t/extra-processor-in-ingest-pipeline-disappears-after-upgrade/297290)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 1\
**Last updated:** [February 17, 2022, 8:59am UTC](https://discuss.elastic.co/t/extra-processor-in-ingest-pipeline-disappears-after-upgrade/297290 "2022-02-17T08:59:55Z")

</div>

I am looking for a solution for my ingest pipeline, in this case logs-system.syslog-1.6.4. I added a KV-processor for customized syslog of my Raspberry Pies. But with every update of elastic this add processor is gone …

---

## [Elastic Update Script avoid dynamic script compilations](https://discuss.elastic.co/t/elastic-update-script-avoid-dynamic-script-compilations/295236)

<div class="topic-metadata">

**Author:** [@Siegi](https://discuss.elastic.co/u/Siegi)\
**Replies:** 5\
**Last updated:** [February 17, 2022, 8:51am UTC](https://discuss.elastic.co/t/elastic-update-script-avoid-dynamic-script-compilations/295236 "2022-02-17T08:51:42Z")

</div>

Hey there, after my elastic usage is growing, I ran into the script.max\_compilations\_rate( TransportError(500, 'general\_script\_exception', '\[script\] Too many dynamic script compilations ) in my updates. I use update…

---

## [Combining Painless and Mustache](https://discuss.elastic.co/t/combining-painless-and-mustache/296209)

<div class="topic-metadata">

**Author:** [@Navanit\_dubey](https://discuss.elastic.co/u/Navanit_dubey)\
**Replies:** 3\
**Last updated:** [February 17, 2022, 8:44am UTC](https://discuss.elastic.co/t/combining-painless-and-mustache/296209 "2022-02-17T08:44:08Z")

</div>

Can I make a template using both the painless script and mustache. So as to make a search query where the search is done by mustache template and its done insde the painless language query.

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=489)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=491)
