# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=551 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 552 --- ## [How to connect cluster with configured TLS?](https://discuss.elastic.co/t/how-to-connect-cluster-with-configured-tls/287773)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 6\ **Last updated:** [October 27, 2021, 8:50pm UTC](https://discuss.elastic.co/t/how-to-connect-cluster-with-configured-tls/287773 "2021-10-27T20:50:37Z")
I have two similar clusters with TLS configured on each. What I need to do to connect to each other as remote cluster? Need I add ca to keystore on each node or what? What to do with secured HTTPS traffic? cluster.na… --- ## [SSL error from logstash to elastic](https://discuss.elastic.co/t/ssl-error-from-logstash-to-elastic/287729)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 0\ **Last updated:** [October 26, 2021, 8:15pm UTC](https://discuss.elastic.co/t/ssl-error-from-logstash-to-elastic/287729 "2021-10-26T20:15:38Z")
Hi, am trying to enable TLS communication from Kibana/Logstash to Elasticsearch. It works from Kibana to Elasticsearch, but seeing this error when tried from Logstash: \[2021-10-26T14:26:37,751\]\[ERROR\]\[logstash.javapipel… --- ## [FsCrawler is throwing Algorithm negotiation fail](https://discuss.elastic.co/t/fscrawler-is-throwing-algorithm-negotiation-fail/287748)
**Author:** [@Lisahtwy](https://discuss.elastic.co/u/Lisahtwy)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 6:18pm UTC](https://discuss.elastic.co/t/fscrawler-is-throwing-algorithm-negotiation-fail/287748 "2021-10-27T18:18:54Z")
Hi, I have Elasticsearch and fs crawler running on same server. The crawler used to index remote files until today it started showing errors while creating the index. I was not able to index the files when i ran with --… --- ## [Highlights not generated for certain Fuzzy & Wildcard Phrase match queries using Span](https://discuss.elastic.co/t/highlights-not-generated-for-certain-fuzzy-wildcard-phrase-match-queries-using-span/287815)
**Author:** [@maurice](https://discuss.elastic.co/u/maurice)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 5:46pm UTC](https://discuss.elastic.co/t/highlights-not-generated-for-certain-fuzzy-wildcard-phrase-match-queries-using-span/287815 "2021-10-27T17:46:39Z")
Hey everybody, I'm running into an issue with highlights not being generated for certain phrase match queries using wildcards or fuzzy matching with spans. Included below are steps for test replication from Kibana. Ela… --- ## [Completion suggester returning non-deterministic results?](https://discuss.elastic.co/t/completion-suggester-returning-non-deterministic-results/287834)
**Author:** [@tallison](https://discuss.elastic.co/u/tallison)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 5:02pm UTC](https://discuss.elastic.co/t/completion-suggester-returning-non-deterministic-results/287834 "2021-10-27T17:02:20Z")
When I run a completion suggester I'm getting different results each time I send the same query over the same static data. I realize that this may be an optimization for search...because users don't always need all the … --- ## [What are the differences between \`xpack.security.http.ssl.enabled\` and \`xpack.security.transport.ssl.enabled\`](https://discuss.elastic.co/t/what-are-the-differences-between-xpack-security-http-ssl-enabled-and-xpack-security-transport-ssl-enabled/287757)
**Author:** [@QiaolingTang](https://discuss.elastic.co/u/QiaolingTang)\ **Replies:** 3\ **Last updated:** [October 27, 2021, 4:24pm UTC](https://discuss.elastic.co/t/what-are-the-differences-between-xpack-security-http-ssl-enabled-and-xpack-security-transport-ssl-enabled/287757 "2021-10-27T16:24:04Z")
I'm trying to configure xpack on my ES cluster, when I read the document, for the xpack.security.http.ssl.enabled and xpack.security.transport.ssl.enabled, both of them are Used to enable or disable TLS/SSL., but I can't… --- ## [How elasticsearch nested query work?](https://discuss.elastic.co/t/how-elasticsearch-nested-query-work/287821)
**Author:** [@tanvu](https://discuss.elastic.co/u/tanvu)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 4:02pm UTC](https://discuss.elastic.co/t/how-elasticsearch-nested-query-work/287821 "2021-10-27T16:02:41Z")
I have a document: { "recipes": \[ { "name": "prepare", "ingredients": \["pork","beef"\], "steps": \[ { "ingredients": \["pork","beef"\] … --- ## [Alert - Rules query\_string not working](https://discuss.elastic.co/t/alert-rules-query-string-not-working/287360)
**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 3:43pm UTC](https://discuss.elastic.co/t/alert-rules-query-string-not-working/287360 "2021-10-27T15:43:23Z")
Hello, I have a log as json string like below and that has been parsed as jsonparsor and stored in Elasticsearch { "\_index": "some index", "fields": { "many keys" : " values", "class.keyword": \[ "org.ap… --- ## [Is it possible to create an Elasticsearch Cluster with different OS?](https://discuss.elastic.co/t/is-it-possible-to-create-an-elasticsearch-cluster-with-different-os/287811)
**Author:** [@marti1](https://discuss.elastic.co/u/marti1)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 3:18pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-an-elasticsearch-cluster-with-different-os/287811 "2021-10-27T15:18:13Z")
Hi, I have three servers, two are running Red Hat 8 and one Windows 10. Is it possible to set up a cluster (three nodes) with this configuration? Has any inconvenient or possible risks? Thanks in advance … --- ## [/var/lib/elasticsearch/nodes/0/indices/](https://discuss.elastic.co/t/var-lib-elasticsearch-nodes-0-indices/287462)
**Author:** [@marcio\_lima](https://discuss.elastic.co/u/marcio_lima)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 1:25pm UTC](https://discuss.elastic.co/t/var-lib-elasticsearch-nodes-0-indices/287462 "2021-10-27T13:25:32Z")
I have the need to free up disk space by consuming elastic, the files are being generated in / var / lib / Elasticsearch / nodes / 0 / indices / how can i delete the indices? --- ## [How to use the aggregation buckets to update the documents](https://discuss.elastic.co/t/how-to-use-the-aggregation-buckets-to-update-the-documents/287809)
**Author:** [@Rui\_Goncalves](https://discuss.elastic.co/u/Rui_Goncalves)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 2:38pm UTC](https://discuss.elastic.co/t/how-to-use-the-aggregation-buckets-to-update-the-documents/287809 "2021-10-27T14:38:37Z")
Hi, I'm new to painless and needed some assistance. Having this query : GET index1/\_search/ { "size": 0, "aggs": { "attrs\_root": { "nested": { "path": "business\_index\_jd\_list\_agg" }, "… --- ## [Trying to setup multi-node Elasticsearch cluster environment](https://discuss.elastic.co/t/trying-to-setup-multi-node-elasticsearch-cluster-environment/287111)
**Author:** [@milindyedge](https://discuss.elastic.co/u/milindyedge)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 1:59pm UTC](https://discuss.elastic.co/t/trying-to-setup-multi-node-elasticsearch-cluster-environment/287111 "2021-10-27T13:59:07Z")
I am new to Elasticsearch and currently trying to setup a multi-node Elasticsearch cluster environment using docker in my local machine. When cluster comes up, it status is green (checked using "/\_cluster/health" api, ho… --- ## [Elasticsearch fails to start 'unexpected character'](https://discuss.elastic.co/t/elasticsearch-fails-to-start-unexpected-character/287790)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-unexpected-character/287790 "2021-10-27T13:57:11Z")
Hi All We have an elderly Elasticsearch 6.5.1 that we've never had the time to update. It's running as docker container. I was about to look into updating this, and shut it down to fix a few things to get it ready, bu… --- ## [Elasticsearch WARN log : "component": "o.e.c.s.ClusterApplierService" "message": "cluster state applier task \[Publication{term=17, version=7278}\] took \[41.2s\] which is above the warn threshold of \[30s\]](https://discuss.elastic.co/t/elasticsearch-warn-log-component-o-e-c-s-clusterapplierservice-message-cluster-state-applier-task-publication-term-17-version-7278-took-41-2s-which-is-above-the-warn-threshold-of-30s/287780)
**Author:** [@Farzad\_Ebrahimi](https://discuss.elastic.co/u/Farzad_Ebrahimi)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 12:14pm UTC](https://discuss.elastic.co/t/elasticsearch-warn-log-component-o-e-c-s-clusterapplierservice-message-cluster-state-applier-task-publication-term-17-version-7278-took-41-2s-which-is-above-the-warn-threshold-of-30s/287780 "2021-10-27T12:14:22Z")
Hi everyone, today we faced to this log with level WARN: {"type": "server", "timestamp": "2021-10-26T14:25:59,820Z", "level": "WARN", "component": "o.e.c.s.ClusterApplierService", "cluster.name": "elasticsearch\_cluster… --- ## [Need help to write fast query](https://discuss.elastic.co/t/need-help-to-write-fast-query/287791)
**Author:** [@itsmerajesh](https://discuss.elastic.co/u/itsmerajesh)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 11:45am UTC](https://discuss.elastic.co/t/need-help-to-write-fast-query/287791 "2021-10-27T11:45:00Z")
Hi all, Consider, I have 1000phrases(Example of phrases can be: 1. "Hello",2. "What are you doing", 3. "automatically debit",...etc) as a1, a2, a3.......a1000. now I need to write a query in java for the ES database, th… --- ## [\_source is stored in elasticsearch?](https://discuss.elastic.co/t/source-is-stored-in-elasticsearch/287789)
**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 11:21am UTC](https://discuss.elastic.co/t/source-is-stored-in-elasticsearch/287789 "2021-10-27T11:21:27Z")
Hi. We are currently checking the capabilities of our cluster, and we noticed that when consult the information in Kibana discover, a json document contains both a "\_source" with all the fields and a separate field call… --- ## [Get key field mapping of flatten field](https://discuss.elastic.co/t/get-key-field-mapping-of-flatten-field/287783)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 10:01am UTC](https://discuss.elastic.co/t/get-key-field-mapping-of-flatten-field/287783 "2021-10-27T10:01:20Z")
Hi, I have a use case for storing a map of key-value items. The keys are not likely to vary from one document to another, but I do not know them in advance. Therefore I am using dynamic\_templates in order to index them.… --- ## [Frozen tiers : How to size local cache?](https://discuss.elastic.co/t/frozen-tiers-how-to-size-local-cache/287704)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 9:39am UTC](https://discuss.elastic.co/t/frozen-tiers-how-to-size-local-cache/287704 "2021-10-27T09:39:58Z")
Hello ! Is there any RAM/Disk ratio to size the local cache for frozen tiers ? I found ratios for Hot/Warm/Cold tiers but nothing for frozen tiers Thanks --- ## [20 seconds downtime when swapping alias](https://discuss.elastic.co/t/20-seconds-downtime-when-swapping-alias/287739)
**Author:** [@morland96](https://discuss.elastic.co/u/morland96)\ **Replies:** 7\ **Last updated:** [October 27, 2021, 9:14am UTC](https://discuss.elastic.co/t/20-seconds-downtime-when-swapping-alias/287739 "2021-10-27T09:14:11Z")
Hi all. I have a service requires zero down time. Since the data need to be versionized, our pipeline will ingest data every day into a new index. After the new index is "green" and able to search, we simply swap the ali… --- ## [ELK (Docker-compose) integration with Iciniga2](https://discuss.elastic.co/t/elk-docker-compose-integration-with-iciniga2/287694)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 9:12am UTC](https://discuss.elastic.co/t/elk-docker-compose-integration-with-iciniga2/287694 "2021-10-27T09:12:33Z")
Hello Team, I have ELK stack running using docker-compose on host and I have used Filebeat (Container again) on another instance to ship the application logs to ELK. Now I need to integrate ELK with Incinga2. Any kind… --- ## [Delete async on response of update async does not work](https://discuss.elastic.co/t/delete-async-on-response-of-update-async-does-not-work/287724)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 6:03am UTC](https://discuss.elastic.co/t/delete-async-on-response-of-update-async-does-not-work/287724 "2021-10-27T06:03:29Z")
Hi all and sorry for my poor english I'm calling an updateAsync with an action listener bind. So I 'm calling a delete Async onResponse AND onFailure of previous async update but delete async is not excecuted correctly… --- ## [How to specify the time range with \`search API\`?](https://discuss.elastic.co/t/how-to-specify-the-time-range-with-search-api/287769)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 0\ **Last updated:** [October 27, 2021, 7:56am UTC](https://discuss.elastic.co/t/how-to-specify-the-time-range-with-search-api/287769 "2021-10-27T07:56:40Z")
The request body like this: "range": { "time\_iso8601": { "gte": now.shift(days=-1).floor('day').timestamp() \* 1000, "lte": now.shift(days=-1).ceil('day').timestamp() \* 1000, "format": "epoch\_… --- ## [Elasticsearch service deployed to EKS by Jenkins suddenly fails health check](https://discuss.elastic.co/t/elasticsearch-service-deployed-to-eks-by-jenkins-suddenly-fails-health-check/287766)
**Author:** [@alanwgmendel](https://discuss.elastic.co/u/alanwgmendel)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-service-deployed-to-eks-by-jenkins-suddenly-fails-health-check/287766 "2021-10-27T07:43:50Z")
Hello I have an application that is deployed via Jenkins to an EKS cluster. One of the application's services is an Elasticsearch service. After having successfully run it over a dozen times this year, the deployment ha… --- ## [How to integrate one kibana with multiple elatsicsearch](https://discuss.elastic.co/t/how-to-integrate-one-kibana-with-multiple-elatsicsearch/287764)
**Author:** [@Radhikag815](https://discuss.elastic.co/u/Radhikag815)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 7:34am UTC](https://discuss.elastic.co/t/how-to-integrate-one-kibana-with-multiple-elatsicsearch/287764 "2021-10-27T07:34:39Z")
I need to integrate multiple elaticsearch with one kibana dashboard so whenever I search for query it will search in both the elastic and display result in one console. Please help me I am new in this ELK. --- ## [Parameter Errors When Getting Snapshots](https://discuss.elastic.co/t/parameter-errors-when-getting-snapshots/287761)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 7:27am UTC](https://discuss.elastic.co/t/parameter-errors-when-getting-snapshots/287761 "2021-10-27T07:27:56Z")
Hi, I'm trying to get a list of snapshots using the size and sort parameters: GET /\_snapshot/\/snapshots-\*?size=2&sort=name But get this error: { "error" : { "root\_cause" : \[ { "type" : … --- ## [Rejections in Thread\_Pool v6.2.4](https://discuss.elastic.co/t/rejections-in-thread-pool-v6-2-4/287689)
**Author:** [@CCCowboy](https://discuss.elastic.co/u/CCCowboy)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 7:02am UTC](https://discuss.elastic.co/t/rejections-in-thread-pool-v6-2-4/287689 "2021-10-27T07:02:42Z")
I have a problem with a node (different each time) that stops responding. When checking \_cat/thread\_pool in "hanging mode", the GET queue is full and have started rejected requests. The log file, though, indicates that … --- ## [EOL / End of life and support topic](https://discuss.elastic.co/t/eol-end-of-life-and-support-topic/287756)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [October 27, 2021, 6:54am UTC](https://discuss.elastic.co/t/eol-end-of-life-and-support-topic/287756 "2021-10-27T06:54:45Z")
Dear Elastic Team, I have a gold support. My 7.8 environment reaches EOL in the mid of December. Does it mean I cannot open issues anymore in case of need after that day? By the way: I am planning the follwoing upgrad… --- ## [How to find which IP most requests to elasticsearch come from?](https://discuss.elastic.co/t/how-to-find-which-ip-most-requests-to-elasticsearch-come-from/287538)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 7\ **Last updated:** [October 27, 2021, 6:41am UTC](https://discuss.elastic.co/t/how-to-find-which-ip-most-requests-to-elasticsearch-come-from/287538 "2021-10-27T06:41:46Z")
Hello friends, my Elasticsearch server is constantly receiving requests from other IPs. Is it possible to find out from which IP the most requests are received? Any ideas will help me thank you in advance. --- ## [Automatically Applying Existing ILM Policy to Newly Created Indicies](https://discuss.elastic.co/t/automatically-applying-existing-ilm-policy-to-newly-created-indicies/287749)
**Author:** [@rajsuper2021](https://discuss.elastic.co/u/rajsuper2021)\ **Replies:** 1\ **Last updated:** [October 27, 2021, 5:38am UTC](https://discuss.elastic.co/t/automatically-applying-existing-ilm-policy-to-newly-created-indicies/287749 "2021-10-27T05:38:55Z")
I have indicies that daily created by logstash in Elasticsearch called "logstash-\*" I have a ILM policy to clean up indicies that are 10 days old. How do I ensure newly created indices have the ILM Policy automatically… --- ## [Agg results can't support long words](https://discuss.elastic.co/t/agg-results-cant-support-long-words/286590)
**Author:** [@carpeDiem](https://discuss.elastic.co/u/carpeDiem)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 3:41am UTC](https://discuss.elastic.co/t/agg-results-cant-support-long-words/286590 "2021-10-27T03:41:34Z")
Hello experts, I'm currently trying to excute aggregate request,but I can't get some results which the field value is a little long,and I can't find any information for the length of field value to aggregate on guide,th… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=550) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=552)