# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=533

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 534

---

## [FScrawler does not scans the \`/tmp/es\`](https://discuss.elastic.co/t/fscrawler-does-not-scans-the-tmp-es/290417)

<div class="topic-metadata">

**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 4:01pm UTC](https://discuss.elastic.co/t/fscrawler-does-not-scans-the-tmp-es/290417 "2021-11-30T16:01:32Z")

</div>

Using Debian 10, Elasticsearch7,Java jdk 11 and FScrawler, when I run the crawler, it only index the files in /tmp/es directory at first lunch after first setup of \_settings.yaml. At first initialize, it seems good cau…

---

## [Elasticsearch multiple connections using python](https://discuss.elastic.co/t/elasticsearch-multiple-connections-using-python/290458)

<div class="topic-metadata">

**Author:** [@Zouhair](https://discuss.elastic.co/u/Zouhair)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 3:00pm UTC](https://discuss.elastic.co/t/elasticsearch-multiple-connections-using-python/290458 "2021-11-30T15:00:50Z")

</div>

Hi, I am using python to connect to my Elasticsearch and execute a search query. I have noticed that the python Elasticsearch module is making 2 connexion to the specified cluster. is that normal ? if not how can i co…

---

## [Fleet server - debug logs](https://discuss.elastic.co/t/fleet-server-debug-logs/290441)

<div class="topic-metadata">

**Author:** [@FALEN](https://discuss.elastic.co/u/FALEN)\
**Replies:** 3\
**Last updated:** [November 30, 2021, 2:00pm UTC](https://discuss.elastic.co/t/fleet-server-debug-logs/290441 "2021-11-30T14:00:23Z")

</div>

Hi all, Just updated to 7.15.1, and trying to configure fleet. Having some problems, but cannot find logs and spesific errors to trace. So i need to learn how to enable debug logging for Fleet Server Just found debug …

---

## [\[WARN\] Received plaintext http traffic on an https channel](https://discuss.elastic.co/t/warn-received-plaintext-http-traffic-on-an-https-channel/290495)

<div class="topic-metadata">

**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 12:55pm UTC](https://discuss.elastic.co/t/warn-received-plaintext-http-traffic-on-an-https-channel/290495 "2021-11-30T12:55:48Z")

</div>

Elasticsearch.log file error \[WARN \]\[o.e.x.s.t.n.SecurityNetty4HttpServerTransport\] \[node-1\] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/:9200, remoteAddress=/…

---

## [Issue while running FSCrawler on new install of Windows Server 2016](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-new-install-of-windows-server-2016/290524)

<div class="topic-metadata">

**Author:** [@Steveh15](https://discuss.elastic.co/u/Steveh15)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 12:42pm UTC](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-new-install-of-windows-server-2016/290524 "2021-11-30T12:42:36Z")

</div>

Hello, My apologies if I have missed any data but I am new to ES. I get the following error when trying to run FSCrawler: Error: Could not find or load main class Files\\Elasticsearch\\fscrawler-es7-2.7.config.log4j2.xm…

---

## [Custom Logs integration on Fleet: Select custom index](https://discuss.elastic.co/t/custom-logs-integration-on-fleet-select-custom-index/290542)

<div class="topic-metadata">

**Author:** [@alessio.dalbianco](https://discuss.elastic.co/u/alessio.dalbianco)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 12:16pm UTC](https://discuss.elastic.co/t/custom-logs-integration-on-fleet-select-custom-index/290542 "2021-11-30T12:16:25Z")

</div>

Hello, we are trying to setup a Custom Log integration in order to grab some logs from our servers. The logs are correctly captured, however there is no way to specify a custom index, Fleet creates its own data stream w…

---

## [How can I use "AnalyticsPlugin" to build my own Elasticsearch Node?](https://discuss.elastic.co/t/how-can-i-use-analyticsplugin-to-build-my-own-elasticsearch-node/290548)

<div class="topic-metadata">

**Author:** [@ZheHu](https://discuss.elastic.co/u/ZheHu)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 10:29am UTC](https://discuss.elastic.co/t/how-can-i-use-analyticsplugin-to-build-my-own-elasticsearch-node/290548 "2021-11-30T10:29:49Z")

</div>

Hi, community! I'm a freshman to Elasticsearch, recently, when I tried to build embedded test environment through InternalSettingsPreparer.prepareEnvironment(), I found that AnalyticsPlugin cannot be used (I want to use…

---

## [How to merge aggregation bucket in Elasticsearch?](https://discuss.elastic.co/t/how-to-merge-aggregation-bucket-in-elasticsearch/290230)

<div class="topic-metadata">

**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 9:04am UTC](https://discuss.elastic.co/t/how-to-merge-aggregation-bucket-in-elasticsearch/290230 "2021-11-30T09:04:53Z")

</div>

Query GET /\_search { "size" : 0, "query" : { "ids" : { "types" : \[ \], "values" : \[ "someId1", "someId2", "someId3" ... \] } }, "aggregations" : { "how\_to\_merge" : { "terms" : { …

---

## [Time Difference with "took" and python timer](https://discuss.elastic.co/t/time-difference-with-took-and-python-timer/290445)

<div class="topic-metadata">

**Author:** [@icgncl](https://discuss.elastic.co/u/icgncl)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 8:07am UTC](https://discuss.elastic.co/t/time-difference-with-took-and-python-timer/290445 "2021-11-30T08:07:10Z")

</div>

Hello everyone, I am very new in Elasticsearch and also in forum. I have created an index, then I have created some queries. When I checked the "took" time from kibana for my queries, it is between 7 and 10ms. However, w…

---

## [Watcher Transform - Replace newline character on specific field in multiple documents](https://discuss.elastic.co/t/watcher-transform-replace-newline-character-on-specific-field-in-multiple-documents/290479)

<div class="topic-metadata">

**Author:** [@Kambing](https://discuss.elastic.co/u/Kambing)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:46am UTC](https://discuss.elastic.co/t/watcher-transform-replace-newline-character-on-specific-field-in-multiple-documents/290479 "2021-11-30T07:46:59Z")

</div>

Hi, I'm currently building a watcher script to send data to 3rd party API, however the 3rd party API can't process the newline character ("\\n") input. Some of my documents have newline character in specific field. there …

---

## [Indices recovering after a red - yellow state leads to writes stucked?](https://discuss.elastic.co/t/indices-recovering-after-a-red-yellow-state-leads-to-writes-stucked/290522)

<div class="topic-metadata">

**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:40am UTC](https://discuss.elastic.co/t/indices-recovering-after-a-red-yellow-state-leads-to-writes-stucked/290522 "2021-11-30T07:40:15Z")

</div>

Hi, There is something I don't understand, and I don't know if it is something peculiar. When my cluster ES (42 nodes with 32GB, 20000 shards in a old 5.6 version = we aim to go to a 7.x at the end of Q1 2022, we must …

---

## [Action \[indices:admin/rollover\] is unauthorized for user \[remote\_monitoring\_user\] with roles](https://discuss.elastic.co/t/action-indices-admin-rollover-is-unauthorized-for-user-remote-monitoring-user-with-roles/288481)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:16am UTC](https://discuss.elastic.co/t/action-indices-admin-rollover-is-unauthorized-for-user-remote-monitoring-user-with-roles/288481 "2021-11-30T07:16:09Z")

</div>

Hi Elastic 7.15.1 After configuring metricbeat module elasticsearc-xpack, I am getting the following error in elasticsearch log files: \[2021-11-04T18:04:32,698\]\[ERROR\]\[o.e.x.i.IndexLifecycleRunner\] \[XXXXXXXXXXXXX\] po…

---

## [How to check for key exist script query parameters?](https://discuss.elastic.co/t/how-to-check-for-key-exist-script-query-parameters/290514)

<div class="topic-metadata">

**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 6:12am UTC](https://discuss.elastic.co/t/how-to-check-for-key-exist-script-query-parameters/290514 "2021-11-30T06:12:12Z")

</div>

Is there any way to return null if there is no corresponding value? example) Since params do not have a field4 value, I want the null value to be returned to the syn variable. "aggs": { "countries": { "terms"…

---

## [The index shard is lost, and the cluster status is green](https://discuss.elastic.co/t/the-index-shard-is-lost-and-the-cluster-status-is-green/290332)

<div class="topic-metadata">

**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\
**Replies:** 4\
**Last updated:** [November 30, 2021, 1:57am UTC](https://discuss.elastic.co/t/the-index-shard-is-lost-and-the-cluster-status-is-green/290332 "2021-11-30T01:57:05Z")

</div>

Elasticsearchversion (bin/Elasticsearch --version): Version: 7.3.1 Plugins installed: JVM version (java -version): jdk 8 OS version : Linux Description of the problem including expected versus actual behavior: The …

---

## [Query string with default\_operator as AND works differently in v2.4 and v6.8](https://discuss.elastic.co/t/query-string-with-default-operator-as-and-works-differently-in-v2-4-and-v6-8/290476)

<div class="topic-metadata">

**Author:** [@Syed\_Souban](https://discuss.elastic.co/u/Syed_Souban)\
**Replies:** 2\
**Last updated:** [November 29, 2021, 8:49pm UTC](https://discuss.elastic.co/t/query-string-with-default-operator-as-and-works-differently-in-v2-4-and-v6-8/290476 "2021-11-29T20:49:00Z")

</div>

The query\_string query seems to be returning the documents that match all the terms across fields specified in the fields parameter in ES 2.4 whereas in ES 6.8 documents that match all the terms per field are returned. S…

---

## [Self hosted elasticsearch on AWS ec2 server](https://discuss.elastic.co/t/self-hosted-elasticsearch-on-aws-ec2-server/290483)

<div class="topic-metadata">

**Author:** [@bbangerter](https://discuss.elastic.co/u/bbangerter)\
**Replies:** 4\
**Last updated:** [November 29, 2021, 8:39pm UTC](https://discuss.elastic.co/t/self-hosted-elasticsearch-on-aws-ec2-server/290483 "2021-11-29T20:39:46Z")

</div>

I'm new to Elasticsearch, and I'm trying to install and run Elasticsearch on a CentOS 8 server in AWS. Currently it is a small server (1GB memory, 15GB SSD, 1 CPU) I have installed the software, but when trying to run t…

---

## [Using ElasticSearch as a Microservice](https://discuss.elastic.co/t/using-elasticsearch-as-a-microservice/290354)

<div class="topic-metadata">

**Author:** [@Mohan\_Radhakrishnan](https://discuss.elastic.co/u/Mohan_Radhakrishnan)\
**Replies:** 3\
**Last updated:** [November 29, 2021, 8:18pm UTC](https://discuss.elastic.co/t/using-elasticsearch-as-a-microservice/290354 "2021-11-29T20:18:23Z")

</div>

Hello, This is a design question. We have messages pushed to Kafka and Kafka can pipe it to Elastic using Kafka connect. This is what I am considering for message search. Kafka can send these messages but it also forwa…

---

## [Query MultMatch with fuzzines in 7.6](https://discuss.elastic.co/t/query-multmatch-with-fuzzines-in-7-6/290486)

<div class="topic-metadata">

**Author:** [@RafaelPeggau](https://discuss.elastic.co/u/RafaelPeggau)\
**Replies:** 0\
**Last updated:** [November 29, 2021, 7:43pm UTC](https://discuss.elastic.co/t/query-multmatch-with-fuzzines-in-7-6/290486 "2021-11-29T19:43:32Z")

</div>

Estou tentando construir uma consulta, onde pesquiso sobre vários campos (fields), usando minimun should match, e fuzzines, como no exemplo. "size": 10000, "query": { "bool": { …

---

## [Up-Sizing Resources with Helm Chart / Kubernetes](https://discuss.elastic.co/t/up-sizing-resources-with-helm-chart-kubernetes/290481)

<div class="topic-metadata">

**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\
**Replies:** 0\
**Last updated:** [November 29, 2021, 7:04pm UTC](https://discuss.elastic.co/t/up-sizing-resources-with-helm-chart-kubernetes/290481 "2021-11-29T19:04:15Z")

</div>

I have a 3-node ES cluster which was spun up with the Elasticsearch Helm chart ( helm-charts/README.md at main · elastic/helm-charts · GitHub ). I want to bump up the heap/CPU/memory allocations, so I've created a new, …

---

## [How to secure Elastic cluster with Docker + Traefik + SSL](https://discuss.elastic.co/t/how-to-secure-elastic-cluster-with-docker-traefik-ssl/289933)

<div class="topic-metadata">

**Author:** [@live2learn](https://discuss.elastic.co/u/live2learn)\
**Replies:** 2\
**Last updated:** [November 29, 2021, 6:31pm UTC](https://discuss.elastic.co/t/how-to-secure-elastic-cluster-with-docker-traefik-ssl/289933 "2021-11-29T18:31:53Z")

</div>

Hi there, What I want to do Set up an Elastic cluster (with Kibana) with Docker (via docker-compose). The cluster is secured (either username/password or API-Key) and lives behind a traefik reverse proxy which has Lets…

---

## [Kibana 6.1.1 : Add include\_type\_name=true in calls to elasticsearch](https://discuss.elastic.co/t/kibana-6-1-1-add-include-type-name-true-in-calls-to-elasticsearch/290277)

<div class="topic-metadata">

**Author:** [@Ranjan\_prabhu](https://discuss.elastic.co/u/Ranjan_prabhu)\
**Replies:** 3\
**Last updated:** [November 29, 2021, 6:13pm UTC](https://discuss.elastic.co/t/kibana-6-1-1-add-include-type-name-true-in-calls-to-elasticsearch/290277 "2021-11-29T18:13:25Z")

</div>

I started with Elasticsearch 6.1.x with kibana 6.1.x. I am planning to use kibana 6.1.x with Elasticsearch 7.x. I have gone through this to understand what has changed in es 7.x: Breaking changes in 7.0 | Elasticsearch G…

---

## [Elasticsearch is running but not showing in ElasticHead](https://discuss.elastic.co/t/elasticsearch-is-running-but-not-showing-in-elastichead/290377)

<div class="topic-metadata">

**Author:** [@userR](https://discuss.elastic.co/u/userR)\
**Replies:** 5\
**Last updated:** [November 29, 2021, 5:46pm UTC](https://discuss.elastic.co/t/elasticsearch-is-running-but-not-showing-in-elastichead/290377 "2021-11-29T17:46:40Z")

</div>

Hi, I checked the status of Elasticsearch and everything indicates that it is running. However, when I try to connect to elastichead or even look up the ip:port, it does not connect. Is this some sort of port issue? My E…

---

## [Clastic cluster unstable](https://discuss.elastic.co/t/clastic-cluster-unstable/290475)

<div class="topic-metadata">

**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\
**Replies:** 0\
**Last updated:** [November 29, 2021, 5:45pm UTC](https://discuss.elastic.co/t/clastic-cluster-unstable/290475 "2021-11-29T17:45:58Z")

</div>

I have ELB stack running in kubernetes. But noticed issue with two out of 3 nodes with following error {"type": "server", "timestamp": "2021-11-29T17:42:37,326Z", "level": "WARN", "component": "o.e.c.c.ClusterFormationF…

---

## [Different size\_in\_bytes for the same index](https://discuss.elastic.co/t/different-size-in-bytes-for-the-same-index/290474)

<div class="topic-metadata">

**Author:** [@Saliinger](https://discuss.elastic.co/u/Saliinger)\
**Replies:** 0\
**Last updated:** [November 29, 2021, 5:40pm UTC](https://discuss.elastic.co/t/different-size-in-bytes-for-the-same-index/290474 "2021-11-29T17:40:50Z")

</div>

Hello! :slight\_smile: I'm trying to get the size in bytes of an individual document for each index I have. I'm using Index stats to get that information dividing the size\_of bytes with docs (total docs count). For exa…

---

## [Deploy an auto-scaling cluster in AWS Elastic Beanstalk](https://discuss.elastic.co/t/deploy-an-auto-scaling-cluster-in-aws-elastic-beanstalk/290467)

<div class="topic-metadata">

**Author:** [@gpribi](https://discuss.elastic.co/u/gpribi)\
**Replies:** 1\
**Last updated:** [November 29, 2021, 5:27pm UTC](https://discuss.elastic.co/t/deploy-an-auto-scaling-cluster-in-aws-elastic-beanstalk/290467 "2021-11-29T17:27:54Z")

</div>

Hi, I currently have a single-node production environment in AWS EC2 and having scaling issues, so I wanted to make the transition into a cluster. Since my user demand changes a lot during the day, I thought that a good …

---

## [Elasticsearch aggregation on array field with in a range](https://discuss.elastic.co/t/elasticsearch-aggregation-on-array-field-with-in-a-range/290031)

<div class="topic-metadata">

**Author:** [@jiajun](https://discuss.elastic.co/u/jiajun)\
**Replies:** 1\
**Last updated:** [November 29, 2021, 1:35pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-on-array-field-with-in-a-range/290031 "2021-11-29T13:35:05Z")

</div>

I'm going to perform a count aggregation on an array field by filtering the values in a range. For example, I have following 3 documents and I want to find out value counts for purchase\_date\_list that are between 2021010…

---

## [Unable to Tessellate shape](https://discuss.elastic.co/t/unable-to-tessellate-shape/290384)

<div class="topic-metadata">

**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\
**Replies:** 5\
**Last updated:** [November 29, 2021, 12:09pm UTC](https://discuss.elastic.co/t/unable-to-tessellate-shape/290384 "2021-11-29T12:09:59Z")

</div>

when i ingest geo\_shape data to ES, it shows this kind of error elasticsearch.helpers.errors.BulkIndexError: ('1 document(s) failed to index.', \[{'index': {'\_index': 'spx\_id\_station\_zone\_detail\_di\_test', '\_type': '\_doc'…

---

## [How to use offset in table metrics](https://discuss.elastic.co/t/how-to-use-offset-in-table-metrics/290432)

<div class="topic-metadata">

**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\
**Replies:** 0\
**Last updated:** [November 29, 2021, 11:54am UTC](https://discuss.elastic.co/t/how-to-use-offset-in-table-metrics/290432 "2021-11-29T11:54:56Z")

</div>

i want to get the count of current hour, the hour of yesterday and the hour of 7 days ago. Here is the table i need. how to set offset in input json?

---

## [How to get text field size](https://discuss.elastic.co/t/how-to-get-text-field-size/290350)

<div class="topic-metadata">

**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\
**Replies:** 1\
**Last updated:** [November 29, 2021, 11:50am UTC](https://discuss.elastic.co/t/how-to-get-text-field-size/290350 "2021-11-29T11:50:17Z")

</div>

when i run this script : GET shopee\_smart\_sorting\_my\_db\_\_address\_match\_result\_tab\*/\_search { "script\_fields": { "full\_name": { "script": { "lang": "painless", "source": """ if (par…

---

## [Downgrade Elastic Search](https://discuss.elastic.co/t/downgrade-elastic-search/289286)

<div class="topic-metadata">

**Author:** [@Y\_MN](https://discuss.elastic.co/u/Y_MN)\
**Replies:** 8\
**Last updated:** [November 29, 2021, 11:03am UTC](https://discuss.elastic.co/t/downgrade-elastic-search/289286 "2021-11-29T11:03:48Z")

</div>

I need to upgrade ES from 7.10.2 to 7.14.1, and if something goes wrong, can I automatically roll back to the previous version?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=532)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=534)
