# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=513 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 514 --- ## [Painless script not work](https://discuss.elastic.co/t/painless-script-not-work/293957)
**Author:** [@Jongz\_Puangput](https://discuss.elastic.co/u/Jongz_Puangput)\ **Replies:** 0\ **Last updated:** [January 11, 2022, 12:15am UTC](https://discuss.elastic.co/t/painless-script-not-work/293957 "2022-01-11T00:15:05Z")
I try to add runtime field to the current index. Name: store\_hostname Value: if (doc\['message.keyword'\].size() == 0) return; def source = doc\['message.keyword'\].value; if (source != null) { Matcher matcher = /((th… --- ## [Illegal\_argument\_exception: index.lifecycle.rollover\_alias is empty or not defined](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-is-empty-or-not-defined/293933)
**Author:** [@dev9](https://discuss.elastic.co/u/dev9)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 6:33pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-is-empty-or-not-defined/293933 "2022-01-10T18:33:57Z")
Hi, I noticed this error last week on our elastic illegal\_argument\_exception: setting \[index.lifecycle.rollover\_alias\] for index \[test-2022.01.07\] is empty or not defined I did some research and found this article on t… --- ## [Connection elastic Cloud - Premise](https://discuss.elastic.co/t/connection-elastic-cloud-premise/293953)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 10:45pm UTC](https://discuss.elastic.co/t/connection-elastic-cloud-premise/293953 "2022-01-10T22:45:11Z")
Good morning! I changed the Elastic cloud on premise to cloud and know I have a question about the security. The problem is that I have a service on premise of redis, and I would like add the integration in elastic Clou… --- ## [Test Elastic Search Cross Cluster Replication in terms of latency and data loss](https://discuss.elastic.co/t/test-elastic-search-cross-cluster-replication-in-terms-of-latency-and-data-loss/293892)
**Author:** [@prasadnewase](https://discuss.elastic.co/u/prasadnewase)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 9:57pm UTC](https://discuss.elastic.co/t/test-elastic-search-cross-cluster-replication-in-terms-of-latency-and-data-loss/293892 "2022-01-10T21:57:05Z")
How to check replication latency and data loss in the Cross Cluster Replication of Elasticsearch? When we implement CCR how we can ensure the accuracy and efficiency of the replication. Please suggest any tool or .Net cl… --- ## [Evacuate node for maintenance](https://discuss.elastic.co/t/evacuate-node-for-maintenance/293914)
**Author:** [@windows95](https://discuss.elastic.co/u/windows95)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 9:54pm UTC](https://discuss.elastic.co/t/evacuate-node-for-maintenance/293914 "2022-01-10T21:54:54Z")
Hi, when I have a 3 node cluster and and 3 shards (1 primary, 2 replica) per index, as to my experience it is not possible to evacuate a node completely, which makes sense to me. Is it safe in this case to stop Elastics… --- ## [If i have large amount of data, should i create multi data stream instead of a single data stream](https://discuss.elastic.co/t/if-i-have-large-amount-of-data-should-i-create-multi-data-stream-instead-of-a-single-data-stream/293609)
**Author:** [@Zephery\_Wen](https://discuss.elastic.co/u/Zephery_Wen)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 9:14pm UTC](https://discuss.elastic.co/t/if-i-have-large-amount-of-data-should-i-create-multi-data-stream-instead-of-a-single-data-stream/293609 "2022-01-10T21:14:21Z")
If the storage capacity is about several Trillionbyte, should i use a single data stream? like this: data stream aaa contains index:aaa-2022.01.06-0001,aaa-2022.01.06-0002,aaa-2022.01.07-0003 or several data stream d… --- ## [Monthly indices but ILM on daily basis](https://discuss.elastic.co/t/monthly-indices-but-ilm-on-daily-basis/293458)
**Author:** [@windows95](https://discuss.elastic.co/u/windows95)\ **Replies:** 6\ **Last updated:** [January 10, 2022, 9:06pm UTC](https://discuss.elastic.co/t/monthly-indices-but-ilm-on-daily-basis/293458 "2022-01-10T21:06:52Z")
Hello. I had daily indices and a fixed retention time of 365 days via ILM. Now I changed to monthly indices to increase the index size. The problem now is that when the oldest index will be deleted, all data from now-(3… --- ## [Log4j CVE-2021-44832 (released 28th dec) - is ES vulnerable?](https://discuss.elastic.co/t/log4j-cve-2021-44832-released-28th-dec-is-es-vulnerable/293076)
**Author:** [@Vashiru](https://discuss.elastic.co/u/Vashiru)\ **Replies:** 9\ **Last updated:** [January 10, 2022, 9:04pm UTC](https://discuss.elastic.co/t/log4j-cve-2021-44832-released-28th-dec-is-es-vulnerable/293076 "2022-01-10T21:04:20Z")
As the title states, is Elasticsearch vulnerable for the new Log4j vulnerability CVE-2021-44832? This is a new vulnerability of which the details were released a few hours ago. Or is this prevented by the security manage… --- ## [Question about release scheduling](https://discuss.elastic.co/t/question-about-release-scheduling/293926)
**Author:** [@Miguel\_Lopez1](https://discuss.elastic.co/u/Miguel_Lopez1)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 9:01pm UTC](https://discuss.elastic.co/t/question-about-release-scheduling/293926 "2022-01-10T21:01:54Z")
Hi, As part of a masters degree assignment we need to address some questions about the Elasticsearch to the developers. The question is: How are the release schedule planned in relation to deciding when to increase a … --- ## [Boosting Boolean Should's & Best Approach for Address](https://discuss.elastic.co/t/boosting-boolean-shoulds-best-approach-for-address/293916)
**Author:** [@snoopy20](https://discuss.elastic.co/u/snoopy20)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 5:06pm UTC](https://discuss.elastic.co/t/boosting-boolean-shoulds-best-approach-for-address/293916 "2022-01-10T17:06:25Z")
Hi, Couldn't find anything in the documentation about how do you go about boosting an individual should match? I'd hoped it would be a simple case of adding the boost: n into the object as with multi\_search but it's not… --- ## [How does we can implement ingest pipeline in runtime](https://discuss.elastic.co/t/how-does-we-can-implement-ingest-pipeline-in-runtime/293830)
**Author:** [@kadiveti](https://discuss.elastic.co/u/kadiveti)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 3:44pm UTC](https://discuss.elastic.co/t/how-does-we-can-implement-ingest-pipeline-in-runtime/293830 "2022-01-10T15:44:15Z")
Hi Team, I created a ingest pipeline like below. PUT \_ingest/pipeline/test2 { "description": "Test the pipe line", "processors": \[ { "remove": { "field": "account\_number" }, "set": { "field": "\_source.fullname… --- ## [Document delete spike in elastic v7](https://discuss.elastic.co/t/document-delete-spike-in-elastic-v7/293903)
**Author:** [@Idan\_Koch](https://discuss.elastic.co/u/Idan_Koch)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 3:03pm UTC](https://discuss.elastic.co/t/document-delete-spike-in-elastic-v7/293903 "2022-01-10T15:03:32Z")
Hi, Recently we are upgrading from Elasticsearch v6 to Elasticsearch v7 we are basically doing the same thing but we see that we have huge spikes in document deleted (unlike v6) and that IOPS are higher 10x can you pl… --- ## [Disaster Recovery - Non-Enterprise version](https://discuss.elastic.co/t/disaster-recovery-non-enterprise-version/293897)
**Author:** [@rajeev.j.khanna](https://discuss.elastic.co/u/rajeev.j.khanna)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 2:50pm UTC](https://discuss.elastic.co/t/disaster-recovery-non-enterprise-version/293897 "2022-01-10T14:50:06Z")
Hi Team, We are using the open-source version of ELK. We want to implement a Disaster Recovery (DR) solution for our application. That means ELK LOGS has to be replicated. How can we do this? (Please do not share the… --- ## [How to sync elasticsearch data between DC, DR](https://discuss.elastic.co/t/how-to-sync-elasticsearch-data-between-dc-dr/293651)
**Author:** [@banf](https://discuss.elastic.co/u/banf)\ **Replies:** 6\ **Last updated:** [January 10, 2022, 1:41pm UTC](https://discuss.elastic.co/t/how-to-sync-elasticsearch-data-between-dc-dr/293651 "2022-01-10T13:41:24Z")
Hi Team, We have elasticsearch running on our DC side so standalone as of now. We would like to know how can we sync elasticsearch data to DR side so that if DR happens, we can still see data in kibana. It is installe… --- ## [How to format sum\_bucket aggregation float output?](https://discuss.elastic.co/t/how-to-format-sum-bucket-aggregation-float-output/293851)
**Author:** [@Eduardo\_Montes](https://discuss.elastic.co/u/Eduardo_Montes)\ **Replies:** 3\ **Last updated:** [January 10, 2022, 1:16pm UTC](https://discuss.elastic.co/t/how-to-format-sum-bucket-aggregation-float-output/293851 "2022-01-10T13:16:32Z")
I use Elasticsearch for my Search Service and I use this JSON request for sum\_bucket aggregation: "from": 0, "size": 0, "aggregations": { "aggr": { "type": "term", "field": "type.… --- ## [Heap issue - OutofMemory](https://discuss.elastic.co/t/heap-issue-outofmemory/291432)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 7\ **Last updated:** [January 10, 2022, 12:23pm UTC](https://discuss.elastic.co/t/heap-issue-outofmemory/291432 "2022-01-10T12:23:12Z")
With the latest version of Elasticsearch, the HEAP is automatically defined by Elasticsearch... So I upgraded my elk system from 7.7.0 to 7.15.2 with rpm I tried to leave jvm.options config file as a default (i mean, I… --- ## [Transform doesn't create a destination index](https://discuss.elastic.co/t/transform-doesnt-create-a-destination-index/293867)
**Author:** [@knopkosasha](https://discuss.elastic.co/u/knopkosasha)\ **Replies:** 3\ **Last updated:** [January 10, 2022, 12:18pm UTC](https://discuss.elastic.co/t/transform-doesnt-create-a-destination-index/293867 "2022-01-10T12:18:57Z")
I'm trying to compare data in two indices using a slightly altered version of transform from here curl -v -H "content-type: application/json" -X PUT http://elastic-cluster:9200/\_transform/compare\_idx -d '{ "id" : "com… --- ## [To compute ingestion rate to elasticsearch cluster](https://discuss.elastic.co/t/to-compute-ingestion-rate-to-elasticsearch-cluster/293843)
**Author:** [@Varun\_S](https://discuss.elastic.co/u/Varun_S)\ **Replies:** 6\ **Last updated:** [January 10, 2022, 12:18pm UTC](https://discuss.elastic.co/t/to-compute-ingestion-rate-to-elasticsearch-cluster/293843 "2022-01-10T12:18:12Z")
Hi Team, We are using fluentd to send data to Elasticsearch and fluentd is transmitting data to Elasticsearch using the HTTP layer. We want to compute the ingestion rate to the Elasticsearch cluster, but there are no me… --- ## [\_reindex task creates loads of bulk requests and destroys audit log disk space](https://discuss.elastic.co/t/reindex-task-creates-loads-of-bulk-requests-and-destroys-audit-log-disk-space/293884)
**Author:** [@can.ozdemir](https://discuss.elastic.co/u/can.ozdemir)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 11:52am UTC](https://discuss.elastic.co/t/reindex-task-creates-loads-of-bulk-requests-and-destroys-audit-log-disk-space/293884 "2022-01-10T11:52:10Z")
Hello, I recently tried to reindex 40ish smaller indexes into on big index for better distribution. reindexing was going fine I was watching the process on monitoring ui, and the task was ok no failed shards. After quit… --- ## [Is there any way to search specific index according to time range?](https://discuss.elastic.co/t/is-there-any-way-to-search-specific-index-according-to-time-range/293822)
**Author:** [@Zephery\_Wen](https://discuss.elastic.co/u/Zephery_Wen)\ **Replies:** 1\ **Last updated:** [January 9, 2022, 9:29pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-search-specific-index-according-to-time-range/293822 "2022-01-09T21:29:05Z")
When i use aaaa-\* and limit time range to search, es will search all of index begin with aaaa index, if there any way to search specific index according to time range? for example: aaaa-\* have these index: aaaa-2022-01… --- ## [What is the best way to build an auto complete](https://discuss.elastic.co/t/what-is-the-best-way-to-build-an-auto-complete/293829)
**Author:** [@Amir\_Faramarzi](https://discuss.elastic.co/u/Amir_Faramarzi)\ **Replies:** 5\ **Last updated:** [January 10, 2022, 11:18am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-build-an-auto-complete/293829 "2022-01-10T11:18:55Z")
Hello friends What is the best way to build an auto complete program in terms of performance ?? Also consider that I want to prioritize information whose names start with the text that the user is searching for. --- ## [How to use carriage return in a script template with a runtime mapping field?](https://discuss.elastic.co/t/how-to-use-carriage-return-in-a-script-template-with-a-runtime-mapping-field/293879)
**Author:** [@Ricou13](https://discuss.elastic.co/u/Ricou13)\ **Replies:** 0\ **Last updated:** [January 10, 2022, 11:17am UTC](https://discuss.elastic.co/t/how-to-use-carriage-return-in-a-script-template-with-a-runtime-mapping-field/293879 "2022-01-10T11:17:32Z")
Here is an example that illustrates the problem we are having with "mustache" and the carriage return. In our script template, we need : a runtime mapping field : to compute a result (with a big script in our real cas… --- ## [Elasticsearch aggregation on million or more data](https://discuss.elastic.co/t/elasticsearch-aggregation-on-million-or-more-data/293641)
**Author:** [@Nowrin\_Hossain](https://discuss.elastic.co/u/Nowrin_Hossain)\ **Replies:** 5\ **Last updated:** [January 10, 2022, 9:42am UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-on-million-or-more-data/293641 "2022-01-10T09:42:08Z")
I have an index which can have millions of documents with time. I need to make several aggregation on those huge amount of documents fields. In these documents, I need to count number of unique value of a field which may… --- ## [Total doc\_count aggregations](https://discuss.elastic.co/t/total-doc-count-aggregations/293832)
**Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 9:11am UTC](https://discuss.elastic.co/t/total-doc-count-aggregations/293832 "2022-01-10T09:11:05Z")
I am looking for a way to sum up the Total doc\_count aggregations that I have defined in the query. I will try to explain my question through the following simple representative example: { "name" : false, "… --- ## [Configuring multiple nodes in one Elastic installation](https://discuss.elastic.co/t/configuring-multiple-nodes-in-one-elastic-installation/291936)
**Author:** [@arthytrip](https://discuss.elastic.co/u/arthytrip)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 9:07am UTC](https://discuss.elastic.co/t/configuring-multiple-nodes-in-one-elastic-installation/291936 "2022-01-10T09:07:46Z")
Hello everybody, I'm trying to set up multiple Elasticsearch nodes in one installation. For the moment it is a test so I have no performance problems (but any advice is welcome). Based on some readings on the net I tr… --- ## [Circuit Breaker Exception](https://discuss.elastic.co/t/circuit-breaker-exception/293737)
**Author:** [@Suresh\_Ghatuwa](https://discuss.elastic.co/u/Suresh_Ghatuwa)\ **Replies:** 9\ **Last updated:** [January 10, 2022, 9:00am UTC](https://discuss.elastic.co/t/circuit-breaker-exception/293737 "2022-01-10T09:00:50Z")
I am working on ES Circuit Breaker implementation. I got circuit breaker exception if heavy terms aggregation. But if multiple es query with less JVM usage than limit is executed, then we got Out Of Memory exception. Qu… --- ## [Delete All and multiple bulk puts](https://discuss.elastic.co/t/delete-all-and-multiple-bulk-puts/293756)
**Author:** [@snoopy20](https://discuss.elastic.co/u/snoopy20)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 8:59am UTC](https://discuss.elastic.co/t/delete-all-and-multiple-bulk-puts/293756 "2022-01-10T08:59:22Z")
Hi All, New user here and I've come across my first issue which the documentation doesn't seem to cater for. I have a need to index about 35,000 small records which I intend to do through /indexName/\_bulk. At first I t… --- ## [Sql query cannot be closed](https://discuss.elastic.co/t/sql-query-cannot-be-closed/293192)
**Author:** [@bxl](https://discuss.elastic.co/u/bxl)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 8:29am UTC](https://discuss.elastic.co/t/sql-query-cannot-be-closed/293192 "2022-01-10T08:29:41Z")
sql query cannot be closed, resulting in cluster exception，Restart Cluster Recovery Elasticsearch version: 7.9.3 query GET \_sql?format=txt {"query": """ SELECT app,tag,count(1) as c FROM "test" group by app,tag order … --- ## [Does transform job's groupBy order matter?](https://discuss.elastic.co/t/does-transform-jobs-groupby-order-matter/293787)
**Author:** [@Ashfur](https://discuss.elastic.co/u/Ashfur)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 8:01am UTC](https://discuss.elastic.co/t/does-transform-jobs-groupby-order-matter/293787 "2022-01-10T08:01:45Z")
When we specify multiple groupBys in a pivot transform job, does the order matter? For example, let's say we have a TermGroupBy by userId and a DateHistogramGroupBy by timestamp. Does it matter which is declared firs… --- ## [Transform Retention Policy](https://discuss.elastic.co/t/transform-retention-policy/293683)
**Author:** [@KentHHarris](https://discuss.elastic.co/u/KentHHarris)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 7:49am UTC](https://discuss.elastic.co/t/transform-retention-policy/293683 "2022-01-10T07:49:57Z")
Hello, I was hoping for some clarity around transforms' retention policy. My understanding is that any documents in the destination index would be "ignored" from the pivot computations, when the retention policy dateti… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=512) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=514)