# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=511

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 512

---

## [Ansible roles being deprecated and to support Version 8.0.0?](https://discuss.elastic.co/t/ansible-roles-being-deprecated-and-to-support-version-8-0-0/292233)

<div class="topic-metadata">

**Author:** [@Andrew\_DeMarsh](https://discuss.elastic.co/u/Andrew_DeMarsh)\
**Replies:** 1\
**Last updated:** [January 13, 2022, 7:38pm UTC](https://discuss.elastic.co/t/ansible-roles-being-deprecated-and-to-support-version-8-0-0/292233 "2022-01-13T19:38:11Z")

</div>

Hey I've found notices in Elastic's git repos inside the Ansible roles that I currently use for rolling out Elasticsearch in our different environments saying: This Ansible role is being deprecated and will not be upda…

---

## [Unique feilds count](https://discuss.elastic.co/t/unique-feilds-count/294268)

<div class="topic-metadata">

**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\
**Replies:** 9\
**Last updated:** [January 13, 2022, 6:25pm UTC](https://discuss.elastic.co/t/unique-feilds-count/294268 "2022-01-13T18:25:16Z")

</div>

How can i right DSL query for count of unique value in fields (Colom) for one day. where unique value is greater than 15 SQL example: select /+parallel(15)/ fruits ,count(1) from all\_items where LOAD\_DATE=trunc(sysda…

---

## [Usage coordinator node before ingest node and data node](https://discuss.elastic.co/t/usage-coordinator-node-before-ingest-node-and-data-node/294149)

<div class="topic-metadata">

**Author:** [@acidborn601](https://discuss.elastic.co/u/acidborn601)\
**Replies:** 2\
**Last updated:** [January 13, 2022, 4:42pm UTC](https://discuss.elastic.co/t/usage-coordinator-node-before-ingest-node-and-data-node/294149 "2022-01-13T16:42:42Z")

</div>

Hi all! We have cluster with 3 dedicated master nodes, 4 dedicated ingest nodes and 28 dedicated data nodes. Data sent to ingest nodes from filebeat. Max.performance indexing on this configuration ~200000 tps. Question…

---

## [Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.19.0.3:9200](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-172-19-0-3-9200/294182)

<div class="topic-metadata">

**Author:** [@Spyros\_Agriopoulos](https://discuss.elastic.co/u/Spyros_Agriopoulos)\
**Replies:** 6\
**Last updated:** [January 13, 2022, 1:22pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-econnrefused-172-19-0-3-9200/294182 "2022-01-13T13:22:14Z")

</div>

Hello guys, I am trying to setup an ELK stack with docker compose and TLS, and I get this message from kibana's logs. Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.19.0.3:920…

---

## [Script Query - Returning multiple values on aggregation](https://discuss.elastic.co/t/script-query-returning-multiple-values-on-aggregation/294095)

<div class="topic-metadata">

**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\
**Replies:** 7\
**Last updated:** [January 13, 2022, 1:19pm UTC](https://discuss.elastic.co/t/script-query-returning-multiple-values-on-aggregation/294095 "2022-01-13T13:19:49Z")

</div>

Aggregation Result "aggregations": { "649": { "doc\_count\_error\_upper\_bound": 0, "sum\_other\_doc\_count": 0, "buckets": \[ { "key": "ALLOGENE THERAPEUTICS", …

---

## [Execute sql queries in elassandra \[elastic search\]](https://discuss.elastic.co/t/execute-sql-queries-in-elassandra-elastic-search/294260)

<div class="topic-metadata">

**Author:** [@kvaishnavi97](https://discuss.elastic.co/u/kvaishnavi97)\
**Replies:** 1\
**Last updated:** [January 13, 2022, 1:06pm UTC](https://discuss.elastic.co/t/execute-sql-queries-in-elassandra-elastic-search/294260 "2022-01-13T13:06:12Z")

</div>

Hi, I am using Elassandra \[Combination of Elasticsearch + Cassandra\], I want to execute sql queries in Elasticsearch, But I am getting one exception. I gone inside the elassandra pod, tried this cmd \`curl -XPOST http:/…

---

## [A file written by master to the store cannot be accessed on the node](https://discuss.elastic.co/t/a-file-written-by-master-to-the-store-cannot-be-accessed-on-the-node/294247)

<div class="topic-metadata">

**Author:** [@mihai.prichindel](https://discuss.elastic.co/u/mihai.prichindel)\
**Replies:** 2\
**Last updated:** [January 13, 2022, 12:18pm UTC](https://discuss.elastic.co/t/a-file-written-by-master-to-the-store-cannot-be-accessed-on-the-node/294247 "2022-01-13T12:18:43Z")

</div>

I am using Elasticsearch 7.8.0. When I want to make backups, most of the time everything is working fine, but from time to time I am getting the following error and backup fails: \[2021-06-02T09:50:25,297\]\[WARN \]\[r.supp…

---

## [Elastic/fleet-server cannot create/write to index - insufficient permissions](https://discuss.elastic.co/t/elastic-fleet-server-cannot-create-write-to-index-insufficient-permissions/294181)

<div class="topic-metadata">

**Author:** [@mark8](https://discuss.elastic.co/u/mark8)\
**Replies:** 3\
**Last updated:** [January 13, 2022, 11:57am UTC](https://discuss.elastic.co/t/elastic-fleet-server-cannot-create-write-to-index-insufficient-permissions/294181 "2022-01-13T11:57:18Z")

</div>

Hi, I am trying to log a variety of custom metrics to Elasticsearch through TCP, each in their own index. Until now I was working with a custom deployment of the ELK stack, and simply sending these metrics in JSON form …

---

## [FSCrawler 2.9 -supported versions of Elastic](https://discuss.elastic.co/t/fscrawler-2-9-supported-versions-of-elastic/294256)

<div class="topic-metadata">

**Author:** [@newschapmj1](https://discuss.elastic.co/u/newschapmj1)\
**Replies:** 3\
**Last updated:** [January 13, 2022, 11:07am UTC](https://discuss.elastic.co/t/fscrawler-2-9-supported-versions-of-elastic/294256 "2022-01-13T11:07:34Z")

</div>

We are using FSCrawler 2.7 with Elastics 7.10.2. Does the new version of FSCrawler 2.9 support Elastics 7.10.2 or do we have to upgrade to 7.16.2?

---

## [Elasticsearch - Merge date histogram aggregation](https://discuss.elastic.co/t/elasticsearch-merge-date-histogram-aggregation/294228)

<div class="topic-metadata">

**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\
**Replies:** 3\
**Last updated:** [January 13, 2022, 10:30am UTC](https://discuss.elastic.co/t/elasticsearch-merge-date-histogram-aggregation/294228 "2022-01-13T10:30:50Z")

</div>

Query GET /\_search { "size" : 0, "query" : { "ids" : { "types" : \[ \], "values" : \[ "someId1", "someId2", "someId3" ... \] } }, "aggregations" : { "how\_to\_merge" : { "date\_histogram" …

---

## [Linux(centos)+Windows Cluster](https://discuss.elastic.co/t/linux-centos-windows-cluster/294025)

<div class="topic-metadata">

**Author:** [@smam](https://discuss.elastic.co/u/smam)\
**Replies:** 3\
**Last updated:** [January 13, 2022, 8:13am UTC](https://discuss.elastic.co/t/linux-centos-windows-cluster/294025 "2022-01-13T08:13:47Z")

</div>

Hello, Can one have an Cluster with one Windows and one Linux VM Node? I only find information about migrating from one to another. (A yes or no is sufficient, I got the following error which makes me think it may not …

---

## [How do i build spell engine for prefix based search as you type product](https://discuss.elastic.co/t/how-do-i-build-spell-engine-for-prefix-based-search-as-you-type-product/294253)

<div class="topic-metadata">

**Author:** [@Bhagwati\_Malav](https://discuss.elastic.co/u/Bhagwati_Malav)\
**Replies:** 0\
**Last updated:** [January 13, 2022, 9:49am UTC](https://discuss.elastic.co/t/how-do-i-build-spell-engine-for-prefix-based-search-as-you-type-product/294253 "2022-01-13T09:49:07Z")

</div>

Hi Need input from community on building spell engine system for search as you type product. Currently running a search as you type product which uses edge ngram approach internally. Have turned off fuzziness setting as…

---

## [Pull data from another elasticsearch cluster using logstash](https://discuss.elastic.co/t/pull-data-from-another-elasticsearch-cluster-using-logstash/293946)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 2\
**Last updated:** [January 13, 2022, 9:16am UTC](https://discuss.elastic.co/t/pull-data-from-another-elasticsearch-cluster-using-logstash/293946 "2022-01-13T09:16:21Z")

</div>

Hi folks, I have a use case where I need to pull data from an external Elasticsearch cluster with the following Limitation: It is not allowed to open a conection to my internal elastic cluster (due to compliance regulat…

---

## [Outdated dynamic field mapping](https://discuss.elastic.co/t/outdated-dynamic-field-mapping/294151)

<div class="topic-metadata">

**Author:** [@fede1](https://discuss.elastic.co/u/fede1)\
**Replies:** 3\
**Last updated:** [January 13, 2022, 8:48am UTC](https://discuss.elastic.co/t/outdated-dynamic-field-mapping/294151 "2022-01-13T08:48:41Z")

</div>

I have a dynamic field mapping of type X, and when I attempt to index a document with a different type for the same field, I get the following error with a 400 status code, as expected: "type": "mapper\_parsing\_exception…

---

## [Cannot group using alias columns](https://discuss.elastic.co/t/cannot-group-using-alias-columns/294241)

<div class="topic-metadata">

**Author:** [@yanghao](https://discuss.elastic.co/u/yanghao)\
**Replies:** 0\
**Last updated:** [January 13, 2022, 7:31am UTC](https://discuss.elastic.co/t/cannot-group-using-alias-columns/294241 "2022-01-13T07:31:30Z")

</div>

This sql query could get result POST /\_sql?format=txt { "query": "select dt,sum(pay\_order\_cnt\_1d) from (select dt,pay\_order\_cnt\_1d from sol\_t\_order\_home)t1 group by dt" } but when executing this sql query POST /\_sql…

---

## [How to combine prefix query with synonym filter in Elasticsearch?](https://discuss.elastic.co/t/how-to-combine-prefix-query-with-synonym-filter-in-elasticsearch/294235)

<div class="topic-metadata">

**Author:** [@learningmore](https://discuss.elastic.co/u/learningmore)\
**Replies:** 1\
**Last updated:** [January 13, 2022, 7:26am UTC](https://discuss.elastic.co/t/how-to-combine-prefix-query-with-synonym-filter-in-elasticsearch/294235 "2022-01-13T07:26:18Z")

</div>

I'm currently using Elasticsearch 7.16 and came across an issue. Assume that we have the following data: horse mouse chicken rooster duck cow Let's assume the synonym file has the following entries (i.e. rooster and c…

---

## [Can we create a Index life cycle policy with Hot, Warm and Cold phase in a two node cluster(1 data node, 1 master)?](https://discuss.elastic.co/t/can-we-create-a-index-life-cycle-policy-with-hot-warm-and-cold-phase-in-a-two-node-cluster-1-data-node-1-master/294133)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 4\
**Last updated:** [January 13, 2022, 6:04am UTC](https://discuss.elastic.co/t/can-we-create-a-index-life-cycle-policy-with-hot-warm-and-cold-phase-in-a-two-node-cluster-1-data-node-1-master/294133 "2022-01-13T06:04:58Z")

</div>

Can we create an Index life cycle policy with Hot, Warm, and Cold phases in a two-node cluster(1 data node, 1 master)? what can be the architecture of policy and what configurations are required for both Elastic nodes?

---

## [Terrible low performance search despite enough resources](https://discuss.elastic.co/t/terrible-low-performance-search-despite-enough-resources/293992)

<div class="topic-metadata">

**Author:** [@zarmci](https://discuss.elastic.co/u/zarmci)\
**Replies:** 3\
**Last updated:** [January 13, 2022, 5:48am UTC](https://discuss.elastic.co/t/terrible-low-performance-search-despite-enough-resources/293992 "2022-01-13T05:48:18Z")

</div>

We have two 3-nodes Elasticsearch cluster. Despite these clusters have approximately similar resources and the indices are quite similar, the speed of search in one of them is tenfold slower than another. We spent a lot …

---

## [I can't ingest time longer than 24 hours](https://discuss.elastic.co/t/i-cant-ingest-time-longer-than-24-hours/294168)

<div class="topic-metadata">

**Author:** [@Eric\_Barreto](https://discuss.elastic.co/u/Eric_Barreto)\
**Replies:** 2\
**Last updated:** [January 13, 2022, 5:44am UTC](https://discuss.elastic.co/t/i-cant-ingest-time-longer-than-24-hours/294168 "2022-01-13T05:44:24Z")

</div>

I need to create a dashboard based on a json that will be ingested repeatedly, this json has 2 fields of type time the first field is TA and the second is TT. The value of these fields is represented by HH:mm:ss, but th…

---

## [Missing replica shards](https://discuss.elastic.co/t/missing-replica-shards/294164)

<div class="topic-metadata">

**Author:** [@Latifa\_MASMOUDI](https://discuss.elastic.co/u/Latifa_MASMOUDI)\
**Replies:** 1\
**Last updated:** [January 13, 2022, 5:34am UTC](https://discuss.elastic.co/t/missing-replica-shards/294164 "2022-01-13T05:34:46Z")

</div>

hi community i'm a beginner in ELK, so i can't resolve this problem. the Elasticsearch overview show me that are Missing replica shards, also the health is yellow. Also, i uploaded a file to kibana, but it can't vis…

---

## [Data Integration between Hadoop - Hive and Elastic Search](https://discuss.elastic.co/t/data-integration-between-hadoop-hive-and-elastic-search/294037)

<div class="topic-metadata">

**Author:** [@Kishanu\_Bhattacharya](https://discuss.elastic.co/u/Kishanu_Bhattacharya)\
**Replies:** 2\
**Last updated:** [January 13, 2022, 4:41am UTC](https://discuss.elastic.co/t/data-integration-between-hadoop-hive-and-elastic-search/294037 "2022-01-13T04:41:56Z")

</div>

There are a few questions about a use case in which I am presently working, This is related to establishing a data pipeline(Data Integration) from Hadoop to Elasticsearch. I did a few quick POCs by creating the indices …

---

## [Data stream vs index](https://discuss.elastic.co/t/data-stream-vs-index/294202)

<div class="topic-metadata">

**Author:** [@Rahul\_Dey](https://discuss.elastic.co/u/Rahul_Dey)\
**Replies:** 1\
**Last updated:** [January 12, 2022, 10:40pm UTC](https://discuss.elastic.co/t/data-stream-vs-index/294202 "2022-01-12T22:40:45Z")

</div>

What are the benefits of using data stream instead of using index for storing data in Elasticsearch. I would like to store continuously generated data.

---

## [Can you manually curl geoip.elastic.co to get geo data?](https://discuss.elastic.co/t/can-you-manually-curl-geoip-elastic-co-to-get-geo-data/294206)

<div class="topic-metadata">

**Author:** [@spuder](https://discuss.elastic.co/u/spuder)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 10:07pm UTC](https://discuss.elastic.co/t/can-you-manually-curl-geoip-elastic-co-to-get-geo-data/294206 "2022-01-12T22:07:15Z")

</div>

I have an Elasticsearch cluster that does not have internet access for security. According to the documentaiton it is possible to mirror your own geoip endpoint I have a mirror setup, however I'm unable to test if the…

---

## [I'm seeing too many requests for a write operation on a node when I query it with the thread pool API](https://discuss.elastic.co/t/im-seeing-too-many-requests-for-a-write-operation-on-a-node-when-i-query-it-with-the-thread-pool-api/293208)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 6:18pm UTC](https://discuss.elastic.co/t/im-seeing-too-many-requests-for-a-write-operation-on-a-node-when-i-query-it-with-the-thread-pool-api/293208 "2022-01-12T18:18:42Z")

</div>

Hi everyone, I'm seeing too many requests for a write operation on a node when I query it with the thread pool API. On other nodes, this status appears as 0. It seems like write requests come to only one node. How can I…

---

## [Elasticsearch java api client](https://discuss.elastic.co/t/elasticsearch-java-api-client/294042)

<div class="topic-metadata">

**Author:** [@Arun\_Nath](https://discuss.elastic.co/u/Arun_Nath)\
**Replies:** 8\
**Last updated:** [January 12, 2022, 5:28pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-client/294042 "2022-01-12T17:28:43Z")

</div>

{ "aggs": { "my-agg-name": { "terms": { "field": "my-field" }, "aggs": { "my-sub-agg-name": { "avg": { "field": "my-other-field" } } }…

---

## [Hyphenation decompounder token filter seems to ignore the \`only\_longest\_match\` option](https://discuss.elastic.co/t/hyphenation-decompounder-token-filter-seems-to-ignore-the-only-longest-match-option/294047)

<div class="topic-metadata">

**Author:** [@Jelena\_Malinovic](https://discuss.elastic.co/u/Jelena_Malinovic)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 5:12pm UTC](https://discuss.elastic.co/t/hyphenation-decompounder-token-filter-seems-to-ignore-the-only-longest-match-option/294047 "2022-01-12T17:12:53Z")

</div>

Hi everyone, We are trying to improve searches on our website which include compounds words. For that purpose, we are using the token filter hyphenation\_decompounder. During testing, we found out that only\_longest\_match …

---

## [Docker Swarm - Internode Communication Issue](https://discuss.elastic.co/t/docker-swarm-internode-communication-issue/294176)

<div class="topic-metadata">

**Author:** [@Darryl\_Idle](https://discuss.elastic.co/u/Darryl_Idle)\
**Replies:** 2\
**Last updated:** [January 12, 2022, 4:31pm UTC](https://discuss.elastic.co/t/docker-swarm-internode-communication-issue/294176 "2022-01-12T16:31:14Z")

</div>

Hi, My environment for ELK is a Docker Swarm setup. Three containers on three individual hosts to utilize distributed storage. I'm using Swarmpit as my orchestrator to compose the stack as follows: version: '3.3' servi…

---

## [Heap space error (Changes not reflecting even after changes in jvm.options file)](https://discuss.elastic.co/t/heap-space-error-changes-not-reflecting-even-after-changes-in-jvm-options-file/294172)

<div class="topic-metadata">

**Author:** [@Anilkumar061988](https://discuss.elastic.co/u/Anilkumar061988)\
**Replies:** 5\
**Last updated:** [January 12, 2022, 3:48pm UTC](https://discuss.elastic.co/t/heap-space-error-changes-not-reflecting-even-after-changes-in-jvm-options-file/294172 "2022-01-12T15:48:14Z")

</div>

Hi Everyone, I am using elastic search 5.1.2 in my application which has 1 node 5 indexes. I am running elastic on a windows machine with 4 core and 14 GB RAM. Java heap space configured was 3G with initial setup, …

---

## [Data modelling to avoid reprocessing](https://discuss.elastic.co/t/data-modelling-to-avoid-reprocessing/293148)

<div class="topic-metadata">

**Author:** [@lunea](https://discuss.elastic.co/u/lunea)\
**Replies:** 1\
**Last updated:** [January 12, 2022, 1:58pm UTC](https://discuss.elastic.co/t/data-modelling-to-avoid-reprocessing/293148 "2022-01-12T13:58:56Z")

</div>

Hi team! I'm not experienced in Elasticsearch. I'm looking for a new technical solution to dashboard generation with filters and aggregations queries, so I decided to look at Elasticsearch. However, my data is composed…

---

## [To get the ingestion rate to elasticsearch cluster](https://discuss.elastic.co/t/to-get-the-ingestion-rate-to-elasticsearch-cluster/294156)

<div class="topic-metadata">

**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\
**Replies:** 1\
**Last updated:** [January 12, 2022, 12:45pm UTC](https://discuss.elastic.co/t/to-get-the-ingestion-rate-to-elasticsearch-cluster/294156 "2022-01-12T12:45:07Z")

</div>

Hi Team, We are deploying fluentd and Elasticsearch in the k8s environment, fluentd is sending data to Elasticsearch and we are monitoring Elasticsearch metrics using the Prometheus plugin. We want to calculate the inge…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=510)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=512)
