# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=530 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 531 --- ## [Api/index\_patterns/\_fields\_for\_wildcard crashes Elasticsearch](https://discuss.elastic.co/t/api-index-patterns-fields-for-wildcard-crashes-elasticsearch/290908)
**Author:** [@rilcy](https://discuss.elastic.co/u/rilcy)\ **Replies:** 4\ **Last updated:** [December 6, 2021, 11:34am UTC](https://discuss.elastic.co/t/api-index-patterns-fields-for-wildcard-crashes-elasticsearch/290908 "2021-12-06T11:34:13Z")
Hi everyone, Could not find any post relating the problem i encounter so i here it is: Since a while i am unable to use Discover tab in Kibana ; when i try to, it basically crashes the Elasticsearch coordinating node w… --- ## [New Elasticsearch installation takes all memory during the startup results get killed by OOM (7.15.2)](https://discuss.elastic.co/t/new-elasticsearch-installation-takes-all-memory-during-the-startup-results-get-killed-by-oom-7-15-2/291010)
**Author:** [@cryonix\_pod](https://discuss.elastic.co/u/cryonix_pod)\ **Replies:** 6\ **Last updated:** [December 6, 2021, 10:57am UTC](https://discuss.elastic.co/t/new-elasticsearch-installation-takes-all-memory-during-the-startup-results-get-killed-by-oom-7-15-2/291010 "2021-12-06T10:57:08Z")
I was trying to install Elasticsearch last few hours and I was unable to do so. It turns out systemd got timed out trying to start the elasticsearch service. Initially I was trying to install it in a vm of 2 Gig mem (ora… --- ## [Rally 2.3.0 now throwing "should include an inner object describing the mapping" but 2.2.1 was fine?](https://discuss.elastic.co/t/rally-2-3-0-now-throwing-should-include-an-inner-object-describing-the-mapping-but-2-2-1-was-fine/290714)
**Author:** [@ddtombb](https://discuss.elastic.co/u/ddtombb)\ **Replies:** 3\ **Last updated:** [December 6, 2021, 10:28am UTC](https://discuss.elastic.co/t/rally-2-3-0-now-throwing-should-include-an-inner-object-describing-the-mapping-but-2-2-1-was-fine/290714 "2021-12-06T10:28:33Z")
Hey, when I was running rally on 2.2.1 it would run fine without issue but as I'm not specifying a version to use it picked up the latest 2.3.0 and now on run is throwing the following, but I don't get how the templates … --- ## [Queries for shard allocation failure](https://discuss.elastic.co/t/queries-for-shard-allocation-failure/291022)
**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\ **Replies:** 4\ **Last updated:** [December 6, 2021, 10:27am UTC](https://discuss.elastic.co/t/queries-for-shard-allocation-failure/291022 "2021-12-06T10:27:24Z")
I am using Elasticsearch v7.10.2. I have cluster running with many unassigned shards. I want to determine the number of retries that has already finished for the shards. Is there any way to check that as in how many retr… --- ## [Strange cluster behaviour](https://discuss.elastic.co/t/strange-cluster-behaviour/291011)
**Author:** [@Ain\_Ryushika](https://discuss.elastic.co/u/Ain_Ryushika)\ **Replies:** 5\ **Last updated:** [December 6, 2021, 8:39am UTC](https://discuss.elastic.co/t/strange-cluster-behaviour/291011 "2021-12-06T08:39:05Z")
Hello, we have experiencing strange claster behavior. If you look at the charts, the main indicators are falling. Such as query time, total operation stats, network usage. As if the load on the cluster is reduced. But… --- ## [List of users by role?](https://discuss.elastic.co/t/list-of-users-by-role/291021)
**Author:** [@Seba](https://discuss.elastic.co/u/Seba)\ **Replies:** 0\ **Last updated:** [December 6, 2021, 8:35am UTC](https://discuss.elastic.co/t/list-of-users-by-role/291021 "2021-12-06T08:35:02Z")
Hello, Is there a simple way, a command to list all users for a specific role? Kind regards, Sebastien --- ## [Filebeat with minimal security on ELK](https://discuss.elastic.co/t/filebeat-with-minimal-security-on-elk/290088)
**Author:** [@Lavandael](https://discuss.elastic.co/u/Lavandael)\ **Replies:** 5\ **Last updated:** [December 6, 2021, 7:39am UTC](https://discuss.elastic.co/t/filebeat-with-minimal-security-on-elk/290088 "2021-12-06T07:39:46Z")
Hello everyone, I am using one ELK stack into only one Centos server. I tried to follow this tutorial : security-minimal-setup So i added this xpack.security.enabled: true discovery.type: single-node into the Elast… --- ## [States condition to be allowed to write into index](https://discuss.elastic.co/t/states-condition-to-be-allowed-to-write-into-index/290891)
**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\ **Replies:** 2\ **Last updated:** [December 6, 2021, 7:25am UTC](https://discuss.elastic.co/t/states-condition-to-be-allowed-to-write-into-index/290891 "2021-12-06T07:25:59Z")
Hi, I want to bulk-insert into an index. This index is made of 3 shards (0, 1, 2) and 1 replica distributed over 2 nodes as follow : N1: shard 0 p shard 1 r shard 2 p N2 : shard 0 r shard 1 p shard 2 r I loose… --- ## [Error in threshold rules when using ECS](https://discuss.elastic.co/t/error-in-threshold-rules-when-using-ecs/290899)
**Author:** [@nameless](https://discuss.elastic.co/u/nameless)\ **Replies:** 2\ **Last updated:** [December 6, 2021, 7:12am UTC](https://discuss.elastic.co/t/error-in-threshold-rules-when-using-ecs/290899 "2021-12-06T07:12:33Z")
Hello The following error occurs when the rule is running. Please help me understand the reason Bulk Indexing of signals failed: Could not dynamically add mapping for field \[source.ip.keyword\]. Existing mapping for \[s… --- ## [Unable start elasticsearch](https://discuss.elastic.co/t/unable-start-elasticsearch/290940)
**Author:** [@karthick\_kn](https://discuss.elastic.co/u/karthick_kn)\ **Replies:** 4\ **Last updated:** [December 6, 2021, 5:57am UTC](https://discuss.elastic.co/t/unable-start-elasticsearch/290940 "2021-12-06T05:57:09Z")
here I attached my log sudo tail -f /var/log/elasticsearch/my-application.log \[2021-12-03T17:10:26,220\]\[INFO \]\[o.e.x.w.WatcherService \] \[node-1\] stopping watch service, reason \[shutdown initiated\] \[2021-12-03T17:10:2… --- ## [Sum of each element of array](https://discuss.elastic.co/t/sum-of-each-element-of-array/291009)
**Author:** [@Dimple\_Goyal](https://discuss.elastic.co/u/Dimple_Goyal)\ **Replies:** 2\ **Last updated:** [December 6, 2021, 5:13am UTC](https://discuss.elastic.co/t/sum-of-each-element-of-array/291009 "2021-12-06T05:13:52Z")
I'm trying to use an Elasticsearch aggregation to 'merge' an array of integers based on a set of filters. I have documents that look like: { "arr": \[5, 4, 3, 2, 1\], "name": "test" } { "arr": \[4, 3, 2, 1, 0\], "na… --- ## [Spike Search is too often in elastic](https://discuss.elastic.co/t/spike-search-is-too-often-in-elastic/291007)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 8\ **Last updated:** [December 6, 2021, 5:06am UTC](https://discuss.elastic.co/t/spike-search-is-too-often-in-elastic/291007 "2021-12-06T05:06:31Z")
Hello Everobody, I just want to know, if Elasticsearch there is often a spike like this. What caused of it? can anyone explain to me? FYI: i'm newbie in elastic --- ## [Indexing of empty arrays affecting search results](https://discuss.elastic.co/t/indexing-of-empty-arrays-affecting-search-results/291006)
**Author:** [@michael-jaxsta](https://discuss.elastic.co/u/michael-jaxsta)\ **Replies:** 0\ **Last updated:** [December 6, 2021, 4:20am UTC](https://discuss.elastic.co/t/indexing-of-empty-arrays-affecting-search-results/291006 "2021-12-06T04:20:46Z")
Hi all, We are using Elasticsearch for searching content on our website which is primarily musician names. The primary search field is "name" but we also have a number of secondary index fields included in the search s… --- ## [Elastic Cloud Fills up to infinity](https://discuss.elastic.co/t/elastic-cloud-fills-up-to-infinity/290999)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 2\ **Last updated:** [December 6, 2021, 3:34am UTC](https://discuss.elastic.co/t/elastic-cloud-fills-up-to-infinity/290999 "2021-12-06T03:34:27Z")
Hello, I created an instance in Elastic Cloud, and I used Fleet to install Metricbeat, Endpoint Security, etc. My instance started 1GB of RAM, and was costing me $40 a month or so. Now, it is costing me about $300 a mon… --- ## [Change certificate for up and running cluster](https://discuss.elastic.co/t/change-certificate-for-up-and-running-cluster/290976)
**Author:** [@hinoryo](https://discuss.elastic.co/u/hinoryo)\ **Replies:** 1\ **Last updated:** [December 6, 2021, 3:18am UTC](https://discuss.elastic.co/t/change-certificate-for-up-and-running-cluster/290976 "2021-12-06T03:18:15Z")
hello, i want to change/update the whole cluster nodes certificates (because I've lost the ca.key so i can't generate a new certificate for the new node), for that i generated new certs for the cluster nodes using : /b… --- ## [Elasticsearch reindex search\_context\_missing\_exception](https://discuss.elastic.co/t/elasticsearch-reindex-search-context-missing-exception/290890)
**Author:** [@sathish-ykone](https://discuss.elastic.co/u/sathish-ykone)\ **Replies:** 1\ **Last updated:** [December 6, 2021, 2:08am UTC](https://discuss.elastic.co/t/elasticsearch-reindex-search-context-missing-exception/290890 "2021-12-06T02:08:15Z")
We have 30 million entries in our current index, and we're getting a search context missing exception problem during reindexing. Can somebody assist me with this? error "type": "search\_phase\_execution\_exception", "reas… --- ## [Illegal\_argument\_exception](https://discuss.elastic.co/t/illegal-argument-exception/290743)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 1\ **Last updated:** [December 6, 2021, 2:05am UTC](https://discuss.elastic.co/t/illegal-argument-exception/290743 "2021-12-06T02:05:39Z")
Hi, I have problem with elastic error illegal\_argument\_exception because I changed field from text to number. However only new indexes have number field, old still have text field - I guess. "type": "illegal\_argument\_ex… --- ## [Mapping definition has unsupported parameters: \[norms : false\]](https://discuss.elastic.co/t/mapping-definition-has-unsupported-parameters-norms-false/290911)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 1\ **Last updated:** [December 6, 2021, 1:50am UTC](https://discuss.elastic.co/t/mapping-definition-has-unsupported-parameters-norms-false/290911 "2021-12-06T01:50:58Z")
I am trying to disable norms in Elasticsearch 6.8 but getting the error: elasticsearch.exceptions.RequestError: TransportError(400, 'mapper\_parsing\_exception', 'Mapping definition for \[AC\] has unsupported parameters: … --- ## [Unable to remove Root Node](https://discuss.elastic.co/t/unable-to-remove-root-node/290978)
**Author:** [@salim-buet03](https://discuss.elastic.co/u/salim-buet03)\ **Replies:** 3\ **Last updated:** [December 6, 2021, 1:49am UTC](https://discuss.elastic.co/t/unable-to-remove-root-node/290978 "2021-12-06T01:49:14Z")
I have 2 nodes cluster, both are mastered enabled. node-1 cluster.name: test node.name: "node-1" node.master: true node.data: true path.data: /var/lib/elasticsearch path.logs: /var/log/elasticsearch http.port: 8200 net… --- ## [Unit elasticsearch.service has failed to start on centos 7](https://discuss.elastic.co/t/unit-elasticsearch-service-has-failed-to-start-on-centos-7/290224)
**Author:** [@dan\_bau](https://discuss.elastic.co/u/dan_bau)\ **Replies:** 10\ **Last updated:** [December 5, 2021, 11:49pm UTC](https://discuss.elastic.co/t/unit-elasticsearch-service-has-failed-to-start-on-centos-7/290224 "2021-12-05T23:49:10Z")
Can you please help? rpm -qa|grep elasticsearch elasticsearch-7.15.2-1.x86\_64 Nov 25 23:20:01 vps.ovh.net crond\[2260\]: WARNING: RunAsUser for MSP ignored, check group ids (egid=48, want=51) Nov 25 23:20:01 vps.ovh.net … --- ## [Need to apply ILM policy on existing index](https://discuss.elastic.co/t/need-to-apply-ilm-policy-on-existing-index/290987)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [December 5, 2021, 11:42pm UTC](https://discuss.elastic.co/t/need-to-apply-ilm-policy-on-existing-index/290987 "2021-12-05T23:42:46Z")
Hello team, I have created one index kafka-facebook and missed to apply ILM policies. Now all data is going into S3 bucket like: partials:kafka-facebook-2021-12-04-000035 The above index has almost 500 GB of data. can… --- ## [ES 7.14: can not get API key to work](https://discuss.elastic.co/t/es-7-14-can-not-get-api-key-to-work/290969)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [December 5, 2021, 6:26pm UTC](https://discuss.elastic.co/t/es-7-14-can-not-get-api-key-to-work/290969 "2021-12-05T18:26:57Z")
I am trying to use an API key to authenticate using the API: first the code then the stack trace... $logger.info "Try connecting to ES #{params}" if $logger begin @client = Elasticsearch::Client.ne… --- ## [ElasticSearch Accessing Nested Documents in a Query Script - Null Pointer Exception](https://discuss.elastic.co/t/elasticsearch-accessing-nested-documents-in-a-query-script-null-pointer-exception/290980)
**Author:** [@abhirathmahipal](https://discuss.elastic.co/u/abhirathmahipal)\ **Replies:** 0\ **Last updated:** [December 5, 2021, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-accessing-nested-documents-in-a-query-script-null-pointer-exception/290980 "2021-12-05T10:43:50Z")
Gist: Trying to write a custom filter on nested documents using painless. Want to write error checks when there are no nested documents to surpass null\_pointer\_exception I have a mapping as such (simplified) { "video… --- ## [Generation new ssl keys for a new node](https://discuss.elastic.co/t/generation-new-ssl-keys-for-a-new-node/289312)
**Author:** [@hinoryo](https://discuss.elastic.co/u/hinoryo)\ **Replies:** 4\ **Last updated:** [November 18, 2021, 11:27pm UTC](https://discuss.elastic.co/t/generation-new-ssl-keys-for-a-new-node/289312 "2021-11-18T23:27:21Z")
hello , i have a cluster of 3 nodes and i want to add a new node to the cluster, for that i need to regenerate a new certificate for this new node; i generate the first certs using this command: /usr/share/elasticsearc… --- ## [Search multiple indices](https://discuss.elastic.co/t/search-multiple-indices/290972)
**Author:** [@Alireza\_Niary](https://discuss.elastic.co/u/Alireza_Niary)\ **Replies:** 3\ **Last updated:** [December 5, 2021, 8:50am UTC](https://discuss.elastic.co/t/search-multiple-indices/290972 "2021-12-05T08:50:22Z")
Is search on multiple indices asynchronous from each other? if I use "GET /my-index-1,my-index-2/\_search" dose Elasticsearch, search both indices simultaneous or in turn? I'm assuming that there is one node and single… --- ## [Would having multiple ports/connections improve performance in a cluster](https://discuss.elastic.co/t/would-having-multiple-ports-connections-improve-performance-in-a-cluster/290959)
**Author:** [@soundof](https://discuss.elastic.co/u/soundof)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 8:28pm UTC](https://discuss.elastic.co/t/would-having-multiple-ports-connections-improve-performance-in-a-cluster/290959 "2021-12-04T20:28:35Z")
Hi Im new to Elasticsearch and setting up a cluster with 3 nodes. Each server/node has multiple ethernet ports on the networking adapter. Would configuring the Elasticsearch node to have 2 IPs/ports increase performanc… --- ## [Elascicsearch was running in mbp m1 pro much slower than intel platform](https://discuss.elastic.co/t/elascicsearch-was-running-in-mbp-m1-pro-much-slower-than-intel-platform/290952)
**Author:** [@wangxueyuan](https://discuss.elastic.co/u/wangxueyuan)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 1:05pm UTC](https://discuss.elastic.co/t/elascicsearch-was-running-in-mbp-m1-pro-much-slower-than-intel-platform/290952 "2021-12-04T13:05:50Z")
I just got a mbp m1 pro .And I found that using es 7.15.2 , in my think pad I just can complete my procedure in just 3 minuts . The contents of procedure is just writing index data to es.But I installed es 7.15.2 and run… --- ## [Upgrading java with elasticsearch](https://discuss.elastic.co/t/upgrading-java-with-elasticsearch/290946)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 2\ **Last updated:** [December 4, 2021, 9:36am UTC](https://discuss.elastic.co/t/upgrading-java-with-elasticsearch/290946 "2021-12-04T09:36:54Z")
Hi, I've upgraded Elasticsearch from 7.13 to 7.15 successfully using: sudo apt-get update && sudo apt-get install elasticsearch But in the upgrade steps listed in elastic documentation, number 4 ( Java High Level REST… --- ## [Queries on keyword field are extremely slow](https://discuss.elastic.co/t/queries-on-keyword-field-are-extremely-slow/290833)
**Author:** [@Mujo](https://discuss.elastic.co/u/Mujo)\ **Replies:** 4\ **Last updated:** [December 4, 2021, 8:52am UTC](https://discuss.elastic.co/t/queries-on-keyword-field-are-extremely-slow/290833 "2021-12-04T08:52:25Z")
I use Elasticsearch for text search. Sentences used for indexing are first split into words and then each word is attached with its corresponding POS tag as below: Raw sentence: word1 word2 word3 word4. Sentence for i… --- ## [How to use x-pack with python to enable wildcard](https://discuss.elastic.co/t/how-to-use-x-pack-with-python-to-enable-wildcard/290941)
**Author:** [@Mujo](https://discuss.elastic.co/u/Mujo)\ **Replies:** 1\ **Last updated:** [December 4, 2021, 7:29am UTC](https://discuss.elastic.co/t/how-to-use-x-pack-with-python-to-enable-wildcard/290941 "2021-12-04T07:29:29Z")
I need to set "type" : "wildcard" in mappings. I have learnt that wildcard is added as a new feature to Elasticsearch 7.9. However, I need to use x-pack in order to use this feature. There are limited documents for le… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=529) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=531)