# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=524 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 525 --- ## [Add Index Mapping to Indices](https://discuss.elastic.co/t/add-index-mapping-to-indices/292281)
**Author:** [@pruttle](https://discuss.elastic.co/u/pruttle)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 10:16am UTC](https://discuss.elastic.co/t/add-index-mapping-to-indices/292281 "2021-12-17T10:16:39Z")
I have updated my Index Template with a new mapping that is and Alias to an existing field. I now want to add that to all past indices. Do I use the mapping API to add it? Is there and example? Thanks in advance. --- ## [Modificación formato campo number-duration](https://discuss.elastic.co/t/modificacion-formato-campo-number-duration/292280)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 9:09am UTC](https://discuss.elastic.co/t/modificacion-formato-campo-number-duration/292280 "2021-12-17T09:09:19Z")
Buenos días, ¿Se puede cambiar el formato del campo number de 0,0.\[000\] a 0.00,\[000\]? Tengo un campo en el índice tipo number con un formato DURATION (Default: number) la entrada en segundos y la salida en minutos. Has… --- ## [Is Elasticsearch 7.4.0 vulnerable to Log4j?](https://discuss.elastic.co/t/is-elasticsearch-7-4-0-vulnerable-to-log4j/292263)
**Author:** [@Ranith\_D](https://discuss.elastic.co/u/Ranith_D)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 8:20am UTC](https://discuss.elastic.co/t/is-elasticsearch-7-4-0-vulnerable-to-log4j/292263 "2021-12-17T08:20:23Z")
Im using Elasticsearch 7.4.0 and want to know if its vulnerable for Log4j --- ## [How to install Elasticsearch on Kubernetes using Helm (3 nodes) and production SSL certificates](https://discuss.elastic.co/t/how-to-install-elasticsearch-on-kubernetes-using-helm-3-nodes-and-production-ssl-certificates/291433)
**Author:** [@Peter\_Schwarz](https://discuss.elastic.co/u/Peter_Schwarz)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-install-elasticsearch-on-kubernetes-using-helm-3-nodes-and-production-ssl-certificates/291433 "2021-12-17T08:05:17Z")
Hi I am having a bad time trying to install Elasticsearch (3 nodes) on Kubernetes using HELM + Production certificates. I am using the following config: clusterName: "my-cluster" nodeGroup: "master" roles: master:… --- ## [How to build elasticsearch docker image from source](https://discuss.elastic.co/t/how-to-build-elasticsearch-docker-image-from-source/292251)
**Author:** [@111494](https://discuss.elastic.co/u/111494)\ **Replies:** 0\ **Last updated:** [December 17, 2021, 3:55am UTC](https://discuss.elastic.co/t/how-to-build-elasticsearch-docker-image-from-source/292251 "2021-12-17T03:55:57Z")
I want to make Elasticsearch docker image from source, but I dont know how. Can anyone tell me how? Thanks~ --- ## [Cannot compute used swap when total swap is 0 and free swap is 0 : Elastic Search 6.8.21](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0-elastic-search-6-8-21/292225)
**Author:** [@jthegoodlife](https://discuss.elastic.co/u/jthegoodlife)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 11:03pm UTC](https://discuss.elastic.co/t/cannot-compute-used-swap-when-total-swap-is-0-and-free-swap-is-0-elastic-search-6-8-21/292225 "2021-12-16T23:03:16Z")
Hi All, We have moved up into the version of Elasticsearch 6.8.21 We are getting logs of this continuously 2021-12-16T21:16:19,858\]\[WARN \]\[o.e.m.o.O.Swap \] \[BLAH\] cannot compute used swap when total swap is … --- ## [Logstash failing to ingest multi-line json log file... I think](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 9:56pm UTC](https://discuss.elastic.co/t/logstash-failing-to-ingest-multi-line-json-log-file-i-think/291851 "2021-12-16T21:56:05Z")
I am having trouble getting my data ingested by logstash... I think... but I'm just learning about how to do this. Someone else stood up Cloud Custodian, and is dumping logs to an s3 bucket, and I am attempting to inge… --- ## [Enabling Security X-Pack errors](https://discuss.elastic.co/t/enabling-security-x-pack-errors/292216)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 9:38pm UTC](https://discuss.elastic.co/t/enabling-security-x-pack-errors/292216 "2021-12-16T21:38:57Z")
\# ---------------------------------- Cluster ----------------------------------- # # Use a descriptive name for your cluster: # cluster.name: test-application # # ------------------------------------ Node ---------------… --- ## [Elastic cloud - Cluster failing to restart - log4j JVM security issue](https://discuss.elastic.co/t/elastic-cloud-cluster-failing-to-restart-log4j-jvm-security-issue/292058)
**Author:** [@Ralph\_v](https://discuss.elastic.co/u/Ralph_v)\ **Replies:** 5\ **Last updated:** [December 16, 2021, 7:50pm UTC](https://discuss.elastic.co/t/elastic-cloud-cluster-failing-to-restart-log4j-jvm-security-issue/292058 "2021-12-16T19:50:06Z")
Hello there, Is anyone else experiencing problems restarting their older version \<7.2 elastic cloud cluster? I am following the recommendation for the Log4j vulnerability, which is for cloud users to restart their clus… --- ## ["GET \_cat/indices" does not output all the indices](https://discuss.elastic.co/t/get-cat-indices-does-not-output-all-the-indices/292096)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 7:24pm UTC](https://discuss.elastic.co/t/get-cat-indices-does-not-output-all-the-indices/292096 "2021-12-16T19:24:18Z")
Hi Elastic, kibana 7.15.1 This gives me 31 rows (30 indices in total and first row for heading) GET \_cat/indices/\*?v&s=index:desc health status index uuid pri rep docs.coun… --- ## [Delete log4j-api-2.11.1.jar - CVE-2021-44228 - ESA-2021-31](https://discuss.elastic.co/t/delete-log4j-api-2-11-1-jar-cve-2021-44228-esa-2021-31/291711)
**Author:** [@Rnx](https://discuss.elastic.co/u/Rnx)\ **Replies:** 3\ **Last updated:** [December 16, 2021, 6:18pm UTC](https://discuss.elastic.co/t/delete-log4j-api-2-11-1-jar-cve-2021-44228-esa-2021-31/291711 "2021-12-16T18:18:16Z")
Hi, yes, the vulnurability... Shell I delete file "log4j-api-2.11.1.jar" from Elasticsearch folder in Linux installation after the package was updated to 7.16.1? The reason to ask is, the server will get several securi… --- ## [Problem java while upgrading elasticsearch 7.9.3 to 7.16](https://discuss.elastic.co/t/problem-java-while-upgrading-elasticsearch-7-9-3-to-7-16/292197)
**Author:** [@sdesseaux](https://discuss.elastic.co/u/sdesseaux)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 5:13pm UTC](https://discuss.elastic.co/t/problem-java-while-upgrading-elasticsearch-7-9-3-to-7-16/292197 "2021-12-16T17:13:28Z")
Hello, I've problem while upgrading elasticsearch 7.9.3 to 7.16. I've this message " could not find java in bundled JDK at /usr/share/elasticsearch/jdk/bin/java" But things seems to be OK java -version openjdk ve… --- ## [Grouping by a field and getting documents with lowest value for a given property](https://discuss.elastic.co/t/grouping-by-a-field-and-getting-documents-with-lowest-value-for-a-given-property/292185)
**Author:** [@jgmullor](https://discuss.elastic.co/u/jgmullor)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 4:33pm UTC](https://discuss.elastic.co/t/grouping-by-a-field-and-getting-documents-with-lowest-value-for-a-given-property/292185 "2021-12-16T16:33:50Z")
Hello! I am trying to find in an index that contains multiple documents related to courses, having a structure like: \[ { "course\_id":"ADE778", "subscriptions":91, "source":"page1.com" }, { … --- ## [Export machine learning jobs in elastic cloud](https://discuss.elastic.co/t/export-machine-learning-jobs-in-elastic-cloud/292133)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 1:34pm UTC](https://discuss.elastic.co/t/export-machine-learning-jobs-in-elastic-cloud/292133 "2021-12-16T13:34:35Z")
Hi, How to export ML jobs from elastic cloud? Kind regards, Dane --- ## [Determine when clone index has completed](https://discuss.elastic.co/t/determine-when-clone-index-has-completed/291675)
**Author:** [@madshov](https://discuss.elastic.co/u/madshov)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 11:52am UTC](https://discuss.elastic.co/t/determine-when-clone-index-has-completed/291675 "2021-12-16T11:52:03Z")
Hi, I'm writing some functionality where step 1 would be to backup the current ES index. For this I'm using the \_cloneIndex request. This seems like the most appropriate choice. But how would I know for sure when that h… --- ## [Nested ElasticSeach Aggregation term query help needed different levels](https://discuss.elastic.co/t/nested-elasticseach-aggregation-term-query-help-needed-different-levels/292129)
**Author:** [@Arti\_Sayani](https://discuss.elastic.co/u/Arti_Sayani)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 10:01am UTC](https://discuss.elastic.co/t/nested-elasticseach-aggregation-term-query-help-needed-different-levels/292129 "2021-12-16T10:01:44Z")
If someone can answer this. I need urgent help with this query on raw data for multiple nested aggregations --- ## [Search response returns empty \_source](https://discuss.elastic.co/t/search-response-returns-empty-source/292108)
**Author:** [@Katgust](https://discuss.elastic.co/u/Katgust)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 8:28am UTC](https://discuss.elastic.co/t/search-response-returns-empty-source/292108 "2021-12-16T08:28:12Z")
Similar or almost identical search querys in other files give the right response but now something isn't working. I stripped it down to the smallest query but I still have the same problem. var searchResponse = await Es… --- ## [Log4j vulnerability and Elasticsearch 6.8.21](https://discuss.elastic.co/t/log4j-vulnerability-and-elasticsearch-6-8-21/292088)
**Author:** [@srikanth.puli](https://discuss.elastic.co/u/srikanth.puli)\ **Replies:** 0\ **Last updated:** [December 16, 2021, 6:59am UTC](https://discuss.elastic.co/t/log4j-vulnerability-and-elasticsearch-6-8-21/292088 "2021-12-16T06:59:21Z")
Hi, As per the release notes of Elasticserch 6.8.21, the vulnerability CVE-2021-44228 is addressed by removing the class file JndiLookup.class from the log4j jar. We have upgraded our application with Elasticsearch 6.8.… --- ## [Using pre-configured email connector instead of using configured email connector](https://discuss.elastic.co/t/using-pre-configured-email-connector-instead-of-using-configured-email-connector/291720)
**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\ **Replies:** 4\ **Last updated:** [December 16, 2021, 7:24am UTC](https://discuss.elastic.co/t/using-pre-configured-email-connector-instead-of-using-configured-email-connector/291720 "2021-12-16T07:24:58Z")
Hi, I am working on watcher emails. Configured a connector in "Rules and Connectors" I have validated the connector validation by test email. I am able to receive the email from the Test tab by clicking on the "Run" bu… --- ## [Extract Hashtags and Mentions into separate fields](https://discuss.elastic.co/t/extract-hashtags-and-mentions-into-separate-fields/291656)
**Author:** [@prakhar\_nigam](https://discuss.elastic.co/u/prakhar_nigam)\ **Replies:** 2\ **Last updated:** [December 16, 2021, 6:48am UTC](https://discuss.elastic.co/t/extract-hashtags-and-mentions-into-separate-fields/291656 "2021-12-16T06:48:50Z")
I am doing a DIY Tweet Sentiment analyser, I have an index of tweets like these, "\_source" : { "id" : 26930655, "status" : 1, "title" : "Here’s 5 underrated #BTC and realistic crypto accounts that ever… --- ## [Unable to configure Elasticsearch following the Quickstart guide](https://discuss.elastic.co/t/unable-to-configure-elasticsearch-following-the-quickstart-guide/292076)
**Author:** [@abu.kalna](https://discuss.elastic.co/u/abu.kalna)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 5:43am UTC](https://discuss.elastic.co/t/unable-to-configure-elasticsearch-following-the-quickstart-guide/292076 "2021-12-16T05:43:18Z")
Unable to configure Elasticsearch on Kubernetes 1.22 using the Quickstart guide (Deploy ECK in your Kubernetes cluster | Elastic Cloud on Kubernetes \[1.8\] | Elastic). It is in "ApplyingChanges" for the last 14 hours. $ … --- ## [MISP Configuration issue in Filebeat module](https://discuss.elastic.co/t/misp-configuration-issue-in-filebeat-module/292002)
**Author:** [@tejas.tech](https://discuss.elastic.co/u/tejas.tech)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 3:22pm UTC](https://discuss.elastic.co/t/misp-configuration-issue-in-filebeat-module/292002 "2021-12-15T15:22:36Z")
Error while processing http request: failed to execute http client.Do: failed to execute http client.Do: Post "https://127.0.0.1/events/restSearch": POST https://127.0.0.1/events/restSearch giving up after 6 attempts … --- ## [Elasticsearch 7.10.0, x-pack-core and x-pack-security under which license](https://discuss.elastic.co/t/elasticsearch-7-10-0-x-pack-core-and-x-pack-security-under-which-license/290104)
**Author:** [@Sagarika\_Mahalik](https://discuss.elastic.co/u/Sagarika_Mahalik)\ **Replies:** 3\ **Last updated:** [December 16, 2021, 5:34am UTC](https://discuss.elastic.co/t/elasticsearch-7-10-0-x-pack-core-and-x-pack-security-under-which-license/290104 "2021-12-16T05:34:53Z")
Hi, I wanted to ask the Elasticsearch 7.10.0 is now under which license and the x-pack-core7.10.0 and x-pack-security7.10.0 which comes with Elasticsearch 7.10.0 is under which license. Thanks --- ## [CVE-2021-44228 not using XPack, does exposure change?](https://discuss.elastic.co/t/cve-2021-44228-not-using-xpack-does-exposure-change/292022)
**Author:** [@falcon404](https://discuss.elastic.co/u/falcon404)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 1:18am UTC](https://discuss.elastic.co/t/cve-2021-44228-not-using-xpack-does-exposure-change/292022 "2021-12-16T01:18:52Z")
Hi, We are running Elasticsearch and not enabling / installing X-Pack for reasons. With regard to the log4j2 vulnerability CVE-2021-44228, there has been mention of setting property or upgrading to a later version (I … --- ## [Nested must\_not query does not return expected results](https://discuss.elastic.co/t/nested-must-not-query-does-not-return-expected-results/291944)
**Author:** [@jsjs2](https://discuss.elastic.co/u/jsjs2)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 10:44pm UTC](https://discuss.elastic.co/t/nested-must-not-query-does-not-return-expected-results/291944 "2021-12-15T22:44:54Z")
what is the expected behavior for a nested must\_not query? sample query: { "query": { "bool": { "filter": \[ { "nested": { "path": "par… --- ## [Found " Nettle Cryptographics Library Vulnerability" in docker.elastic.co/elasticsearch/elasticsearch:7.12.1 image](https://discuss.elastic.co/t/found-nettle-cryptographics-library-vulnerability-in-docker-elastic-co-elasticsearch-elasticsearch-7-12-1-image/292038)
**Author:** [@Ajinkya\_Shinde1](https://discuss.elastic.co/u/Ajinkya_Shinde1)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 6:38pm UTC](https://discuss.elastic.co/t/found-nettle-cryptographics-library-vulnerability-in-docker-elastic-co-elasticsearch-elasticsearch-7-12-1-image/292038 "2021-12-15T18:38:01Z")
We are using Elasticsearch as a log server for Liferay application 7.3-ga1. The recommended version of ELS is 7.12 as per Liferay documentation. Recently I have scanned the docker image with Azure Defender and observed… --- ## [Cannot consume elasticsearch client in angular application](https://discuss.elastic.co/t/cannot-consume-elasticsearch-client-in-angular-application/291029)
**Author:** [@Ola\_Aboamer](https://discuss.elastic.co/u/Ola_Aboamer)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 8:00pm UTC](https://discuss.elastic.co/t/cannot-consume-elasticsearch-client-in-angular-application/291029 "2021-12-15T20:00:39Z")
Hi There I am using Angular10 and "@elastic/Elasticsearch": "^7.15.0", and getting the following dependency errors, ERROR in ./node\_modules/@elastic/elasticsearch/lib/Connection.js Module not found: Error: Can't re… --- ## [Elasticsearch js client version update when upgrading 6.x to 7.x for ES](https://discuss.elastic.co/t/elasticsearch-js-client-version-update-when-upgrading-6-x-to-7-x-for-es/292032)
**Author:** [@northwest](https://discuss.elastic.co/u/northwest)\ **Replies:** 0\ **Last updated:** [December 15, 2021, 6:06pm UTC](https://discuss.elastic.co/t/elasticsearch-js-client-version-update-when-upgrading-6-x-to-7-x-for-es/292032 "2021-12-15T18:06:31Z")
Planning on upgrading our ES cluster from 6.x to 7.x. With rolling update the cluster has 0 down time but I am wondering how to coordinate the js client version update since we have to use the same major version between … --- ## [Is Elasticsearch affected by CVE-2021-45046 - a second vulnerability in log4j?](https://discuss.elastic.co/t/is-elasticsearch-affected-by-cve-2021-45046-a-second-vulnerability-in-log4j/291885)
**Author:** [@smlx](https://discuss.elastic.co/u/smlx)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 4:56pm UTC](https://discuss.elastic.co/t/is-elasticsearch-affected-by-cve-2021-45046-a-second-vulnerability-in-log4j/291885 "2021-12-15T16:56:32Z")
As per the title there is a newer vulnerability in log4j: CVE-2021-45046 https://logging.apache.org/log4j/2.x/security.html As the current log4j announcement doesn't specifically mention this CVE except in the context … --- ## [Date math index name throwing error in Watcher input](https://discuss.elastic.co/t/date-math-index-name-throwing-error-in-watcher-input/290638)
**Author:** [@Munavir\_Chavody](https://discuss.elastic.co/u/Munavir_Chavody)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 4:05pm UTC](https://discuss.elastic.co/t/date-math-index-name-throwing-error-in-watcher-input/290638 "2021-12-15T16:05:41Z")
I've the date math name in one of the watcher search input as below. "indices": \["\<.watcher-history-13-{now/d}\>"\] But the execution fails with below error. "result": { "execution\_time": "2021-12-01T07:57:46.049Z",… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=523) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=525)