# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=500 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 501 --- ## [ILM policy based on index and not on index template](https://discuss.elastic.co/t/ilm-policy-based-on-index-and-not-on-index-template/296123)
**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\ **Replies:** 5\ **Last updated:** [February 2, 2022, 8:51pm UTC](https://discuss.elastic.co/t/ilm-policy-based-on-index-and-not-on-index-template/296123 "2022-02-02T20:51:49Z")
Hi, Is there a way to configure ILM policy specific to index and not based on index template? it is annoying to have multiple templates and specifying index patterns for each type (daily, monthly, yearly). If i want to … --- ## [Rollup Search results differ based on timeline interval](https://discuss.elastic.co/t/rollup-search-results-differ-based-on-timeline-interval/296120)
**Author:** [@rfox](https://discuss.elastic.co/u/rfox)\ **Replies:** 0\ **Last updated:** [February 2, 2022, 8:02pm UTC](https://discuss.elastic.co/t/rollup-search-results-differ-based-on-timeline-interval/296120 "2022-02-02T20:02:56Z")
If I use different timeline intervals on a rollup search I get a different set of resulting keys where I expect the same resulting keys but just in different time buckets and counts. It seems the larger the interval the… --- ## [Elastic crash](https://discuss.elastic.co/t/elastic-crash/295791)
**Author:** [@Grace\_A](https://discuss.elastic.co/u/Grace_A)\ **Replies:** 14\ **Last updated:** [February 2, 2022, 7:55pm UTC](https://discuss.elastic.co/t/elastic-crash/295791 "2022-02-02T19:55:16Z")
Elastic have some issue about java heap size. Elastic, Kibana, and Logstash live on 1 server that has 52 GB RAM. We've also tried change the jvm options for elastic from 1 to 40 Gb. But the elastic always shut down all … --- ## [ElasticSearch keyword mapping leads to illegal\_state\_exception](https://discuss.elastic.co/t/elasticsearch-keyword-mapping-leads-to-illegal-state-exception/296107)
**Author:** [@Jabest](https://discuss.elastic.co/u/Jabest)\ **Replies:** 0\ **Last updated:** [February 2, 2022, 6:24pm UTC](https://discuss.elastic.co/t/elasticsearch-keyword-mapping-leads-to-illegal-state-exception/296107 "2022-02-02T18:24:08Z")
In a spring boot application when indexing an object into es I get the following exception. Suppressed: org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://localhost:9299\], URI \[/my\_index\_name/\_doc/1… --- ## [Failed to setup password in APM\_SYSTEM in 7.16](https://discuss.elastic.co/t/failed-to-setup-password-in-apm-system-in-7-16/293815)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 2\ **Last updated:** [February 2, 2022, 5:29pm UTC](https://discuss.elastic.co/t/failed-to-setup-password-in-apm-system-in-7-16/293815 "2022-02-02T17:29:16Z")
How to setup basic + tls security in Elasticsearch i am following Set up minimal security for Elasticsearch | Elasticsearch Guide \[7.16\] | Elastic my elk was in 7.12 with "xpack.security.enabled" to true and discovery… --- ## [Elastic Ingest Pipeline Works with Test, but Fails on real usage](https://discuss.elastic.co/t/elastic-ingest-pipeline-works-with-test-but-fails-on-real-usage/295984)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 16\ **Last updated:** [February 2, 2022, 4:57pm UTC](https://discuss.elastic.co/t/elastic-ingest-pipeline-works-with-test-but-fails-on-real-usage/295984 "2022-02-02T16:57:05Z")
Hi All, Elasticsearch: 7.16.2 Logstash: 7.16.2 I have an ingest pipeline which processes syslog messages: Example message: \<86\>Feb 1 18:38:07 ASDF1234 sudo: pam\_unix(sudo:session): session closed for user root The … --- ## [Cluster Upgrade, Shard Allocation and null vs all](https://discuss.elastic.co/t/cluster-upgrade-shard-allocation-and-null-vs-all/295867)
**Author:** [@georgef](https://discuss.elastic.co/u/georgef)\ **Replies:** 6\ **Last updated:** [February 2, 2022, 4:08pm UTC](https://discuss.elastic.co/t/cluster-upgrade-shard-allocation-and-null-vs-all/295867 "2022-02-02T16:08:19Z")
Good Afternoon, I was conducting a rolling upgrade from 7.16.2 to 7.16.3 using the directions at Rolling upgrades | Elasticsearch Guide \[7.16\]. I stopped shard allocation with "cluster.routing.allocation.enable": prima… --- ## [Ingest pipeline: weird behaviour in changing the order of the grok processor patterns](https://discuss.elastic.co/t/ingest-pipeline-weird-behaviour-in-changing-the-order-of-the-grok-processor-patterns/295918)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 1\ **Last updated:** [February 2, 2022, 2:26pm UTC](https://discuss.elastic.co/t/ingest-pipeline-weird-behaviour-in-changing-the-order-of-the-grok-processor-patterns/295918 "2022-02-02T14:26:13Z")
Kibana 7.16.3 in latest Firefox and Brave (chromium) browsers steps to reproduce: go to app/management/ingest/ingest\_pipelines create pipeline name: any add processor: grok field: message first pattern: ^%{GREEDYDATA:… --- ## [Body optimisation with nested objects / filter](https://discuss.elastic.co/t/body-optimisation-with-nested-objects-filter/295964)
**Author:** [@Emporea](https://discuss.elastic.co/u/Emporea)\ **Replies:** 5\ **Last updated:** [February 2, 2022, 12:09pm UTC](https://discuss.elastic.co/t/body-optimisation-with-nested-objects-filter/295964 "2022-02-02T12:09:22Z")
I have a working query, what I am asking is if there is a more simple way for my query. I dont understand why using filter has to be so complicated. Am I missing something? I have such a terribly nested body. I have an… --- ## [Repo register issue](https://discuss.elastic.co/t/repo-register-issue/296016)
**Author:** [@Levan\_Medoshvili](https://discuss.elastic.co/u/Levan_Medoshvili)\ **Replies:** 5\ **Last updated:** [February 2, 2022, 11:41am UTC](https://discuss.elastic.co/t/repo-register-issue/296016 "2022-02-02T11:41:26Z")
Hello I have Elasticsearch installed in Windows Server. I want to take snapshot and restore it in another server. I have added in Elasticsearch.yml file path.repo and location path.repo: "D:\\ES\_Backup" When I am try… --- ## [Elasticsearch upgrade 7.16.2](https://discuss.elastic.co/t/elasticsearch-upgrade-7-16-2/296042)
**Author:** [@Vaibhav\_Yadav](https://discuss.elastic.co/u/Vaibhav_Yadav)\ **Replies:** 3\ **Last updated:** [February 2, 2022, 10:31am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-7-16-2/296042 "2022-02-02T10:31:53Z")
How to upgrade Elasticsearch 7.10 to Elasticsearch 7.16.2 on the Windows platform? --- ## [Upgrading NGINX for Elasticsearch server vulnerability](https://discuss.elastic.co/t/upgrading-nginx-for-elasticsearch-server-vulnerability/296046)
**Author:** [@Jane\_Garcia](https://discuss.elastic.co/u/Jane_Garcia)\ **Replies:** 1\ **Last updated:** [February 2, 2022, 9:57am UTC](https://discuss.elastic.co/t/upgrading-nginx-for-elasticsearch-server-vulnerability/296046 "2022-02-02T09:57:47Z")
We have nginx 0.6.x \< 1.20.1 1-Byte Memory Overwrite RCE vulnerability for Elasticsearch server (v. 2.4.6) as mentioned in nginx 0.6.x \< 1.20.1 1-Byte Memory Overwrite RCE | Tenable® we need to upgrade to 1.20.1 or late… --- ## [Reset password api is not working](https://discuss.elastic.co/t/reset-password-api-is-not-working/296028)
**Author:** [@Sunil\_Bhakar](https://discuss.elastic.co/u/Sunil_Bhakar)\ **Replies:** 3\ **Last updated:** [February 2, 2022, 9:12am UTC](https://discuss.elastic.co/t/reset-password-api-is-not-working/296028 "2022-02-02T09:12:27Z")
{ "error" : { "root\_cause" : \[ { "type" : "status\_exception", "reason" : "Cluster state has not been recovered yet, cannot write to the \[null\] index" } \], "type" : "status\_exception", "reason" : "Cluster state h… --- ## [Fallback value for a bucket aggregation](https://discuss.elastic.co/t/fallback-value-for-a-bucket-aggregation/295983)
**Author:** [@Andrew\_Graham-Yooll](https://discuss.elastic.co/u/Andrew_Graham-Yooll)\ **Replies:** 4\ **Last updated:** [February 2, 2022, 7:51am UTC](https://discuss.elastic.co/t/fallback-value-for-a-bucket-aggregation/295983 "2022-02-02T07:51:22Z")
I know this query works. However it does not work when the value of either "failed" or "declined" is not present. GET /metrics-\*/\_search { "size": 0, "query": { "bool": { "filter": \[ { "t… --- ## [How to convert transformed index pattern from keyword/string-\>long?](https://discuss.elastic.co/t/how-to-convert-transformed-index-pattern-from-keyword-string-long/295985)
**Author:** [@MLsuper](https://discuss.elastic.co/u/MLsuper)\ **Replies:** 1\ **Last updated:** [February 2, 2022, 3:15am UTC](https://discuss.elastic.co/t/how-to-convert-transformed-index-pattern-from-keyword-string-long/295985 "2022-02-02T03:15:05Z")
I'm trying to convert a field that is a keyword to a long but I cannot edit it, it is fixed in the transform index. So I tried to use a ingest node pipeline which use convert keyword to long but how do I use that ingest… --- ## [Elasticsearch: Configurations when adding new nodes to a running cluster (Discovery)](https://discuss.elastic.co/t/elasticsearch-configurations-when-adding-new-nodes-to-a-running-cluster-discovery/295901)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 2\ **Last updated:** [February 2, 2022, 3:05am UTC](https://discuss.elastic.co/t/elasticsearch-configurations-when-adding-new-nodes-to-a-running-cluster-discovery/295901 "2022-02-02T03:05:01Z")
I have an Elastic cluster with 2 dedicated Master nodes and 2 dedicated Data nodes. I'm currently trying to add 4 new nodes to this running cluster. In the documentation, I have seen there should be at least 3 Master no… --- ## [Elasticsearch 7.16.3 Log4j Vulnerability log4j-core-2.11.1.jar still persists](https://discuss.elastic.co/t/elasticsearch-7-16-3-log4j-vulnerability-log4j-core-2-11-1-jar-still-persists/295184)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 10:02pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-3-log4j-vulnerability-log4j-core-2-11-1-jar-still-persists/295184 "2022-02-01T22:02:28Z")
Hi Team, In the wake of recent log4j vulnerability, we have update our production stack to version 7.16.3. Post upgrade, under /usr/share/Elasticsearch/lib/ the log4j-core is of version 2.17.1. However in /etc/elastic… --- ## [Cannot search on field \[log.original\] since it is not indexed](https://discuss.elastic.co/t/cannot-search-on-field-log-original-since-it-is-not-indexed/295897)
**Author:** [@mevan](https://discuss.elastic.co/u/mevan)\ **Replies:** 12\ **Last updated:** [February 1, 2022, 9:32pm UTC](https://discuss.elastic.co/t/cannot-search-on-field-log-original-since-it-is-not-indexed/295897 "2022-02-01T21:32:09Z")
Hi --I am not sure how to diagnose this issue. My searching has offered no results. When I try to refine my iptables query with \> log.original: "ID=1234" I get the error: failed to create query: Cannot search on field … --- ## [Highlight exact phrases/keywords](https://discuss.elastic.co/t/highlight-exact-phrases-keywords/295982)
**Author:** [@Fidel\_Perez](https://discuss.elastic.co/u/Fidel_Perez)\ **Replies:** 0\ **Last updated:** [February 1, 2022, 6:40pm UTC](https://discuss.elastic.co/t/highlight-exact-phrases-keywords/295982 "2022-02-01T18:40:50Z")
hello everyone I want to highlight the query match but to be an exact match when words or phrases { "body": { "highlight": { "fields": { "textContent": { "fragment\_size": 150, "n… --- ## [Error when trying to reindex old indices thru Kibana 7.0 Upgrade Assistant](https://discuss.elastic.co/t/error-when-trying-to-reindex-old-indices-thru-kibana-7-0-upgrade-assistant/295362)
**Author:** [@willdennis](https://discuss.elastic.co/u/willdennis)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 8:58pm UTC](https://discuss.elastic.co/t/error-when-trying-to-reindex-old-indices-thru-kibana-7-0-upgrade-assistant/295362 "2022-02-01T20:58:50Z")
Getting this error when trying to reindex old indexes (which were created in 5.6.x) thru Kibana's 7.0 Upgrade Assistant: \[mapper\_parsing\_exception\]\[include\_in\_all\] is not allowed for indices created on or after version … --- ## [Placeholders within \`index.lifecycle.rollover\_alias\` to generalize index templates?](https://discuss.elastic.co/t/placeholders-within-index-lifecycle-rollover-alias-to-generalize-index-templates/296001)
**Author:** [@gburtenshaw](https://discuss.elastic.co/u/gburtenshaw)\ **Replies:** 0\ **Last updated:** [February 1, 2022, 8:58pm UTC](https://discuss.elastic.co/t/placeholders-within-index-lifecycle-rollover-alias-to-generalize-index-templates/296001 "2022-02-01T20:58:00Z")
Our data is indexed on a per customer basis... for example, customer abc, xyz, etc... We are trying to use ILM rollover on these indices. The data is mutable nor is it strictly time based, so we are not using data strea… --- ## [Getting different results for the same query](https://discuss.elastic.co/t/getting-different-results-for-the-same-query/295997)
**Author:** [@hamzahda](https://discuss.elastic.co/u/hamzahda)\ **Replies:** 2\ **Last updated:** [February 1, 2022, 8:53pm UTC](https://discuss.elastic.co/t/getting-different-results-for-the-same-query/295997 "2022-02-01T20:53:24Z")
When I execute this search with Postmn or the Elastic console I get different results as when I do it in a script using axios any ideas.. {"query":{"exists":{"field":"RefreshOrderNo"}}} I can't share the whole data eca… --- ## [Maximum number of concurrent reindexing tasks in ES cluster](https://discuss.elastic.co/t/maximum-number-of-concurrent-reindexing-tasks-in-es-cluster/295949)
**Author:** [@yabhishek](https://discuss.elastic.co/u/yabhishek)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 8:45pm UTC](https://discuss.elastic.co/t/maximum-number-of-concurrent-reindexing-tasks-in-es-cluster/295949 "2022-02-01T20:45:17Z")
Hi I was working with reindexing tasks and wanted to understand if ES sets any restriction on the number of concurrent reindexing tasks that can run in the cluster at any point of time and fails the new tasks if cluster… --- ## [Failed to start Elasticsearch in AlmaLinux](https://discuss.elastic.co/t/failed-to-start-elasticsearch-in-almalinux/295995)
**Author:** [@MBekhit](https://discuss.elastic.co/u/MBekhit)\ **Replies:** 1\ **Last updated:** [February 1, 2022, 8:24pm UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-in-almalinux/295995 "2022-02-01T20:24:07Z")
Elasticsearch stopped working and this is a error log Feb 1 20:17:25 server33 systemd\[1\]: Starting Elasticsearch... Feb 1 20:17:30 server33 systemd-entrypoint\[93293\]: encountered \[2\] errors parsing \[/etc/elasticsearch… --- ## [ELK - Elasticsearch nodes High CPU](https://discuss.elastic.co/t/elk-elasticsearch-nodes-high-cpu/295373)
**Author:** [@aumthanki](https://discuss.elastic.co/u/aumthanki)\ **Replies:** 3\ **Last updated:** [February 1, 2022, 7:44pm UTC](https://discuss.elastic.co/t/elk-elasticsearch-nodes-high-cpu/295373 "2022-02-01T19:44:05Z")
Setup: 3 nodes in Azure. 2 masters and one voting\_only. Info: (Nodes) { "name" : "\<\>", "cluster\_name" : "\<\>", "cluster\_uuid" : "\<\>", "version" : { "number" : "7.16.1", "build\_flavor" : "default", "… --- ## [Token filter predicate script and query-time 'params'](https://discuss.elastic.co/t/token-filter-predicate-script-and-query-time-params/295752)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 4\ **Last updated:** [February 1, 2022, 6:50pm UTC](https://discuss.elastic.co/t/token-filter-predicate-script-and-query-time-params/295752 "2022-02-01T18:50:32Z")
Hello! I have been spelunking through Elastic code to try to understand how the following is possible. The Analysis Predicate Context says that painless scripts run at analysis can accept query-time params" params ( M… --- ## [Updating all documents using a dictionary as input](https://discuss.elastic.co/t/updating-all-documents-using-a-dictionary-as-input/295728)
**Author:** [@Jenobi](https://discuss.elastic.co/u/Jenobi)\ **Replies:** 5\ **Last updated:** [February 1, 2022, 5:14pm UTC](https://discuss.elastic.co/t/updating-all-documents-using-a-dictionary-as-input/295728 "2022-02-01T17:14:44Z")
Update All Documents Background Information I have a use case where I need to update all documents in my index. My source looks similar to the below: { 'hits': \[ {'\_index': 'main-index-v2', '\_type': '\_doc', … --- ## [Elastic config file revert to default](https://discuss.elastic.co/t/elastic-config-file-revert-to-default/295955)
**Author:** [@Gamliel\_Alon](https://discuss.elastic.co/u/Gamliel_Alon)\ **Replies:** 0\ **Last updated:** [February 1, 2022, 3:23pm UTC](https://discuss.elastic.co/t/elastic-config-file-revert-to-default/295955 "2022-02-01T15:23:23Z")
Hi after installing security patches on ubuntu 18.04 the yml config file was revert to default like all was commented again on the logs I see this see this: Setting up linux-cloud-tools-common (4.15.0-166.174) ... S… --- ## [Elastic search - filter on a field based on the length of that field's contents](https://discuss.elastic.co/t/elastic-search-filter-on-a-field-based-on-the-length-of-that-fields-contents/295883)
**Author:** [@drwiremore](https://discuss.elastic.co/u/drwiremore)\ **Replies:** 4\ **Last updated:** [February 1, 2022, 3:02pm UTC](https://discuss.elastic.co/t/elastic-search-filter-on-a-field-based-on-the-length-of-that-fields-contents/295883 "2022-02-01T15:02:16Z")
Thought this would be easy. I'm searching a data index of data-awsch\*:ls-aws-cloudtrail\* based on event.type that is not one of start, access, info. This is working as intended, but the output is huge. Rather than fil… --- ## [Any example of how to connect to elastic cloud using express js](https://discuss.elastic.co/t/any-example-of-how-to-connect-to-elastic-cloud-using-express-js/295952)
**Author:** [@Munashe\_komichi](https://discuss.elastic.co/u/Munashe_komichi)\ **Replies:** 0\ **Last updated:** [February 1, 2022, 3:00pm UTC](https://discuss.elastic.co/t/any-example-of-how-to-connect-to-elastic-cloud-using-express-js/295952 "2022-02-01T15:00:54Z")
Any example of how to implement Elasticsearch into express js,links documentation, i cant find any grappable information on it [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=499) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=501)