# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=515

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 516

---

## [Copy specific snapshot to another repository](https://discuss.elastic.co/t/copy-specific-snapshot-to-another-repository/293647)

<div class="topic-metadata">

**Author:** [@Bilanda](https://discuss.elastic.co/u/Bilanda)\
**Replies:** 2\
**Last updated:** [January 6, 2022, 2:27pm UTC](https://discuss.elastic.co/t/copy-specific-snapshot-to-another-repository/293647 "2022-01-06T14:27:37Z")

</div>

Hello, I have a specific need regarding Snapshots. Indeed I have hundreds of snapshot (we use snapshot for a daily back-up of our indices). We would like to copy a specific snapshot from our repository to another one.…

---

## [How can I do a one-to-one search in the title field?](https://discuss.elastic.co/t/how-can-i-do-a-one-to-one-search-in-the-title-field/293523)

<div class="topic-metadata">

**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\
**Replies:** 9\
**Last updated:** [January 6, 2022, 1:10pm UTC](https://discuss.elastic.co/t/how-can-i-do-a-one-to-one-search-in-the-title-field/293523 "2022-01-06T13:10:58Z")

</div>

Hello friends, I have a problem, I would be very happy if you could help. I want it to return exactly the string I want in a query using Wilcard, but it doesn't work. I have a document and document's title: "Title" : "…

---

## [Failed to start elasticsearch node on K8S with this error: failed to download database \[GeoLite2-ASN.mmdb\]](https://discuss.elastic.co/t/failed-to-start-elasticsearch-node-on-k8s-with-this-error-failed-to-download-database-geolite2-asn-mmdb/292963)

<div class="topic-metadata">

**Author:** [@zhaoyi0113](https://discuss.elastic.co/u/zhaoyi0113)\
**Replies:** 1\
**Last updated:** [January 6, 2022, 9:09am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-node-on-k8s-with-this-error-failed-to-download-database-geolite2-asn-mmdb/292963 "2022-01-06T09:09:08Z")

</div>

I deployed an Elasticsearch cluster in AWS EKS with 3 nodes. After launching the cluster, I can see 3 pods are running but 2 of them running fine, one of them keep failing and terminating and restarting. Below is the er…

---

## [Blocked threads on read index calls](https://discuss.elastic.co/t/blocked-threads-on-read-index-calls/293241)

<div class="topic-metadata">

**Author:** [@Madhu\_Yadav](https://discuss.elastic.co/u/Madhu_Yadav)\
**Replies:** 10\
**Last updated:** [January 6, 2022, 8:56am UTC](https://discuss.elastic.co/t/blocked-threads-on-read-index-calls/293241 "2022-01-06T08:56:25Z")

</div>

Hi, A portal built using Liferay is using Elasticsearch as a search engine with below config: Elasticsearch 7.16.2 Single Node, Around 250MB sized indices Windows Server 2019 64Bit 8 vcpu, 32GB RAM, SSD Disk 100GB Op…

---

## [Elastic agent fail to connect fleet server](https://discuss.elastic.co/t/elastic-agent-fail-to-connect-fleet-server/293631)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 0\
**Last updated:** [January 6, 2022, 8:49am UTC](https://discuss.elastic.co/t/elastic-agent-fail-to-connect-fleet-server/293631 "2022-01-06T08:49:38Z")

</div>

Hi all I'm trying the enroll fleet server to manage the agent and to use elastic enpoint. But when i tried to start the fleet server, i see nothing happening in the kibana fleet enrolling interface. the log that agent…

---

## [Why i can't search my text](https://discuss.elastic.co/t/why-i-cant-search-my-text/293618)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [January 6, 2022, 6:01am UTC](https://discuss.elastic.co/t/why-i-cant-search-my-text/293618 "2022-01-06T06:01:18Z")

</div>

PUT my-index-000001 { "settings":{ "number\_of\_replicas": 0, "analysis":{ "analyzer":{ "my\_analyzer":{ "type":"custom", "tokenizer":"keyword", …

---

## [Trying to restore snapshot](https://discuss.elastic.co/t/trying-to-restore-snapshot/293448)

<div class="topic-metadata">

**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\
**Replies:** 8\
**Last updated:** [January 6, 2022, 1:09am UTC](https://discuss.elastic.co/t/trying-to-restore-snapshot/293448 "2022-01-06T01:09:07Z")

</div>

So I've been running my Elasticsearch in docker-compose. Now I have by accident lost all my data :cry:, it's not so much the data itself as that is only historic, but rather all the kibana work made. I'm now trying to …

---

## [Snapshot restore with basic license](https://discuss.elastic.co/t/snapshot-restore-with-basic-license/293555)

<div class="topic-metadata">

**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 10:45pm UTC](https://discuss.elastic.co/t/snapshot-restore-with-basic-license/293555 "2022-01-05T22:45:37Z")

</div>

I am using the basic license but noticed on the subscription page (Subscriptions | Elastic Stack Products & Support | Elastic), it shows the basic license for snapshot/restore but further down under Recovery from snapsh…

---

## [Watcher : Action Body's Text](https://discuss.elastic.co/t/watcher-action-bodys-text/293245)

<div class="topic-metadata">

**Author:** [@appleyin1](https://discuss.elastic.co/u/appleyin1)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 9:47pm UTC](https://discuss.elastic.co/t/watcher-action-bodys-text/293245 "2022-01-05T21:47:01Z")

</div>

Hi there: I'm stuck at the Watch Action body text section, I have a payload below. Is that possible to only retrieve which service and host's doc\_count \< 5 ? in order to determine what are the services are unavailable …

---

## [Unable to take snapshot to 2gb index](https://discuss.elastic.co/t/unable-to-take-snapshot-to-2gb-index/293591)

<div class="topic-metadata">

**Author:** [@ima](https://discuss.elastic.co/u/ima)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 9:01pm UTC](https://discuss.elastic.co/t/unable-to-take-snapshot-to-2gb-index/293591 "2022-01-05T21:01:34Z")

</div>

Hello team, I wanna backup the data of me cluster of 3 nodes master /hot/warm, when I try to take snapshot to a 2 gb or more index It gets stuck and I can no longer take another snapshot but after I restart the nodes, is…

---

## [Unable to Add Data Node to Elasticsearch Cluster](https://discuss.elastic.co/t/unable-to-add-data-node-to-elasticsearch-cluster/292232)

<div class="topic-metadata">

**Author:** [@Jeffrey\_Meurer](https://discuss.elastic.co/u/Jeffrey_Meurer)\
**Replies:** 6\
**Last updated:** [January 5, 2022, 8:41pm UTC](https://discuss.elastic.co/t/unable-to-add-data-node-to-elasticsearch-cluster/292232 "2022-01-05T20:41:00Z")

</div>

Hi, I'm having trouble adding another data node to my Master Elasticsearch. Running 7.16.1 Here's the Elasticsearch.yml from the Master: # ---------------------------------- Cluster ----------------------------------- …

---

## [Help: Pass in Parameters Dynamically in Watcher](https://discuss.elastic.co/t/help-pass-in-parameters-dynamically-in-watcher/292530)

<div class="topic-metadata">

**Author:** [@appleyin1](https://discuss.elastic.co/u/appleyin1)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 7:41pm UTC](https://discuss.elastic.co/t/help-pass-in-parameters-dynamically-in-watcher/292530 "2022-01-05T19:41:33Z")

</div>

Hi there, Is that possible to pass in parameters dynamically in Watcher? Below "Search Input" only for static, Please advise, thanks.

---

## [Elasticsearch incorrect licensing](https://discuss.elastic.co/t/elasticsearch-incorrect-licensing/293557)

<div class="topic-metadata">

**Author:** [@Dede\_Pessu](https://discuss.elastic.co/u/Dede_Pessu)\
**Replies:** 4\
**Last updated:** [January 5, 2022, 7:00pm UTC](https://discuss.elastic.co/t/elasticsearch-incorrect-licensing/293557 "2022-01-05T19:00:18Z")

</div>

I have just pulled 7.16.1 rpms for Elasticsearch to do a fresh install, in my environment i have a platinum license but for some reason Elasticsearch is loading a random incorrect license that is basic which is causing i…

---

## [Elasticsearch: Custom Index pattern issue](https://discuss.elastic.co/t/elasticsearch-custom-index-pattern-issue/293570)

<div class="topic-metadata">

**Author:** [@Elie\_Sbat1](https://discuss.elastic.co/u/Elie_Sbat1)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 5:35pm UTC](https://discuss.elastic.co/t/elasticsearch-custom-index-pattern-issue/293570 "2022-01-05T17:35:56Z")

</div>

Hello, I am unable to create kibana index (@timestamp) when a custom Elasticsearch index is being used. logs are being sent through filebeat, but they are not visible in discover page of kibana, Br, E

---

## [Regarding log4j vulnerability](https://discuss.elastic.co/t/regarding-log4j-vulnerability/291749)

<div class="topic-metadata">

**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\
**Replies:** 4\
**Last updated:** [January 5, 2022, 5:30pm UTC](https://discuss.elastic.co/t/regarding-log4j-vulnerability/291749 "2022-01-05T17:30:12Z")

</div>

Hello Team, I am using/running ELK 7.13 version on my environment using docker compose along with Filebeat 7.14 and have enabled xpack security option. I have restarted all three containers using docker compose and com…

---

## [Can't move large ES snapshots to different server](https://discuss.elastic.co/t/cant-move-large-es-snapshots-to-different-server/293024)

<div class="topic-metadata">

**Author:** [@erikNL](https://discuss.elastic.co/u/erikNL)\
**Replies:** 3\
**Last updated:** [January 5, 2022, 5:07pm UTC](https://discuss.elastic.co/t/cant-move-large-es-snapshots-to-different-server/293024 "2022-01-05T17:07:41Z")

</div>

I'm having an issue with moving a Elasticsearch index to a different machine. I'm running Elasticsearch on a single machine inside a docker container (single node cluster). I have 2 indexes that are 28.6gb and 15gb larg…

---

## [CCR request circuit breakers error](https://discuss.elastic.co/t/ccr-request-circuit-breakers-error/292809)

<div class="topic-metadata">

**Author:** [@dgarcia](https://discuss.elastic.co/u/dgarcia)\
**Replies:** 5\
**Last updated:** [January 5, 2022, 4:58pm UTC](https://discuss.elastic.co/t/ccr-request-circuit-breakers-error/292809 "2022-01-05T16:58:12Z")

</div>

Hi, We are using the CCR feature as part of ours process to migrate our data between two cluster, but we are experimenting some unexpected behaviour in the remote cluster. Once begin to follow an index in the remote cl…

---

## [Question about nested pipeline](https://discuss.elastic.co/t/question-about-nested-pipeline/291400)

<div class="topic-metadata">

**Author:** [@fengjian1993](https://discuss.elastic.co/u/fengjian1993)\
**Replies:** 4\
**Last updated:** [January 5, 2022, 4:39pm UTC](https://discuss.elastic.co/t/question-about-nested-pipeline/291400 "2022-01-05T16:39:02Z")

</div>

I have question with using nested pipeline :wink: distribution pipeline processor: PUT \_ingest/pipeline/pipeline\_for\_distribution { "description": "a pipeline for distribution", "processors": \[ { "pipeline": { "…

---

## [Java Api Client MatchQuery$Builder missing query method with the string as an argument](https://discuss.elastic.co/t/java-api-client-matchquery-builder-missing-query-method-with-the-string-as-an-argument/293560)

<div class="topic-metadata">

**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 4:23pm UTC](https://discuss.elastic.co/t/java-api-client-matchquery-builder-missing-query-method-with-the-string-as-an-argument/293560 "2022-01-05T16:23:16Z")

</div>

Shouldn't it have public final Builder query(String value) method? Or should I use MatchQuery$Builder#query(FieldValue.of(.... ? I am using Elasticsearch-java-7.16.2 version

---

## [Java Api Client BoolQuery$Builder missing minimumShouldMatch method with Number as an argument](https://discuss.elastic.co/t/java-api-client-boolquery-builder-missing-minimumshouldmatch-method-with-number-as-an-argument/293559)

<div class="topic-metadata">

**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 3:49pm UTC](https://discuss.elastic.co/t/java-api-client-boolquery-builder-missing-minimumshouldmatch-method-with-number-as-an-argument/293559 "2022-01-05T15:49:45Z")

</div>

Hello. BoolQuery$Builder has only public final Builder minimumShouldMatch(@Nullable String value) method. Im my opinion it should have the same method with a number as an argument. I am using Elasticsearch-java-7.16.…

---

## [Watcher Condition: Bucket Size](https://discuss.elastic.co/t/watcher-condition-bucket-size/292635)

<div class="topic-metadata">

**Author:** [@appleyin1](https://discuss.elastic.co/u/appleyin1)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 3:44pm UTC](https://discuss.elastic.co/t/watcher-condition-bucket-size/292635 "2022-01-05T15:44:09Z")

</div>

Hello, does anyone knows how do I get the buckets size from the sub-aggregation buckets "obs1" under the Watcher condition ? Please advise, thanks. "aggregations" : { "system" : { "doc\_count\_error\_upper\_boun…

---

## [Could not connect to SMTP host](https://discuss.elastic.co/t/could-not-connect-to-smtp-host/293207)

<div class="topic-metadata">

**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 3:42pm UTC](https://discuss.elastic.co/t/could-not-connect-to-smtp-host/293207 "2022-01-05T15:42:50Z")

</div>

Hi, I have configured watcher related alerts. Sending the watcher alert emails from a "support.test@domain.com". Below is the action template I have used in watcher "actions": { "send\_email": { "email": { …

---

## [Java api client structuring aggregation](https://discuss.elastic.co/t/java-api-client-structuring-aggregation/292981)

<div class="topic-metadata">

**Author:** [@Arun\_Nath](https://discuss.elastic.co/u/Arun_Nath)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 3:14pm UTC](https://discuss.elastic.co/t/java-api-client-structuring-aggregation/292981 "2022-01-05T15:14:44Z")

</div>

Hi , Can anyone please share how to structure subAggregations using java api client . I have a code in java rest high level client using AggregationBuilders and was looking forward to upgrade to java api client . Code …

---

## [Reloads search analyzers are unsupported for tokenizer user\_dictionary](https://discuss.elastic.co/t/reloads-search-analyzers-are-unsupported-for-tokenizer-user-dictionary/293546)

<div class="topic-metadata">

**Author:** [@slowup](https://discuss.elastic.co/u/slowup)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 1:26pm UTC](https://discuss.elastic.co/t/reloads-search-analyzers-are-unsupported-for-tokenizer-user-dictionary/293546 "2022-01-05T13:26:56Z")

</div>

Thesaurus is dynamically loaded but the tokenizer doesn't seem to have a related user\_dictionary, so is there a way to do it?

---

## [Elasticsearch 7.16.2 on M1 Max under Docker (ARM) aggressive throttling while indexing](https://discuss.elastic.co/t/elasticsearch-7-16-2-on-m1-max-under-docker-arm-aggressive-throttling-while-indexing/293468)

<div class="topic-metadata">

**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-on-m1-max-under-docker-arm-aggressive-throttling-while-indexing/293468 "2022-01-05T14:56:39Z")

</div>

Hey folks, I've been struggling a bit with Elasticsearch 7.16.2 running under Docker on my MacBook Pro M1 Max (64 GB RAM, 8 TB SSD). I have a job running under Ruby on Rails 6.1 with the most recent Elasticsearch Ruby …

---

## [Log4j2 issue](https://discuss.elastic.co/t/log4j2-issue/291776)

<div class="topic-metadata">

**Author:** [@umangpatel](https://discuss.elastic.co/u/umangpatel)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 2:33pm UTC](https://discuss.elastic.co/t/log4j2-issue/291776 "2022-01-05T14:33:31Z")

</div>

I have this mentioned 2 jar file... 1.)log4j-1.2.17.jar 2.)apache-log4j-extras-1.2.17.jar does this 2 jar affect any vulnerability? and yes so what changes required from our end please suggest.

---

## [Replace document vs update document](https://discuss.elastic.co/t/replace-document-vs-update-document/293549)

<div class="topic-metadata">

**Author:** [@AhmadHamouda](https://discuss.elastic.co/u/AhmadHamouda)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 2:28pm UTC](https://discuss.elastic.co/t/replace-document-vs-update-document/293549 "2022-01-05T14:28:14Z")

</div>

Ill have documents which contain json ex: {id:100, usersIds: \[1,2,54\]} Ill need to update userIds adding some new ids and removing some exist ids My question is it better to replace the whole document or do update oper…

---

## [Copy values from one field to another within a nested object](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478)

<div class="topic-metadata">

**Author:** [@louisdeveloper](https://discuss.elastic.co/u/louisdeveloper)\
**Replies:** 1\
**Last updated:** [January 5, 2022, 2:18pm UTC](https://discuss.elastic.co/t/copy-values-from-one-field-to-another-within-a-nested-object/293478 "2022-01-05T14:18:45Z")

</div>

I have a document that has the structure with an field object with a nested field internally. The nested field is responsible for storing all interactions that occurred in an internal communication. It happens that I ne…

---

## [Fetch .kibana indices that end with integer](https://discuss.elastic.co/t/fetch-kibana-indices-that-end-with-integer/293544)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 0\
**Last updated:** [January 5, 2022, 1:21pm UTC](https://discuss.elastic.co/t/fetch-kibana-indices-that-end-with-integer/293544 "2022-01-05T13:21:46Z")

</div>

Hi everyone I want to only fetch those kibana indices that end with integer like this .kibana\_1, .kibana\_2 etc I know how to fetch all indices that start with .kibana text using following curl command that I have typed…

---

## [Java Api Client TermsQueryBuilder how to add terms from collection of strings](https://discuss.elastic.co/t/java-api-client-termsquerybuilder-how-to-add-terms-from-collection-of-strings/293464)

<div class="topic-metadata">

**Author:** [@Piotr\_Idzikowski](https://discuss.elastic.co/u/Piotr_Idzikowski)\
**Replies:** 3\
**Last updated:** [January 5, 2022, 1:17pm UTC](https://discuss.elastic.co/t/java-api-client-termsquerybuilder-how-to-add-terms-from-collection-of-strings/293464 "2022-01-05T13:17:13Z")

</div>

Hello. The only available method is by ObjectBuilder value(List v) method. Why there is no option to add just a list of Strings? I am using Elasticsearch-java-7.16.2 version

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=514)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=516)
