# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=555 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 556 --- ## [How to monitor funtions within an application runnign on pods](https://discuss.elastic.co/t/how-to-monitor-funtions-within-an-application-runnign-on-pods/287269)
**Author:** [@kaleelcsa](https://discuss.elastic.co/u/kaleelcsa)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 8:01am UTC](https://discuss.elastic.co/t/how-to-monitor-funtions-within-an-application-runnign-on-pods/287269 "2021-10-21T08:01:32Z")
how to monitor funtions within an application runnign on pods --- ## [Health check of \[/usr/share/elasticsearch/data/nodes/0\] took \[10146ms\] which is above the warn threshold of \[5s\]](https://discuss.elastic.co/t/health-check-of-usr-share-elasticsearch-data-nodes-0-took-10146ms-which-is-above-the-warn-threshold-of-5s/287255)
**Author:** [@Farzad\_Ebrahimi](https://discuss.elastic.co/u/Farzad_Ebrahimi)\ **Replies:** 1\ **Last updated:** [October 21, 2021, 7:23am UTC](https://discuss.elastic.co/t/health-check-of-usr-share-elasticsearch-data-nodes-0-took-10146ms-which-is-above-the-warn-threshold-of-5s/287255 "2021-10-21T07:23:11Z")
Hi everyone, every day we faced to this log with level WARN: {"type": "server", "timestamp": "2021-10-20T03:13:18,747Z", "level": "WARN", "component": "o.e.m.f.FsHealthService", "cluster.name": "elasticsearch\_cluster",… --- ## [CentOS 7: Failed to Update Elasticsearch 7 with yum](https://discuss.elastic.co/t/centos-7-failed-to-update-elasticsearch-7-with-yum/287197)
**Author:** [@obi134](https://discuss.elastic.co/u/obi134)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 5:40am UTC](https://discuss.elastic.co/t/centos-7-failed-to-update-elasticsearch-7-with-yum/287197 "2021-10-21T05:40:12Z")
Elasticsearch version ( bin/elasticsearch --version ): Version: 7.10.0, Build: default/rpm/51e9d6f22758d0374a0f3f5c6e8f3a7997850f96/2020-11-09T21:30:33.964949Z, JVM: 15.0.1 JVM version ( java -version ): openjdk versi… --- ## [Not sure where my indexes are being deleted](https://discuss.elastic.co/t/not-sure-where-my-indexes-are-being-deleted/287180)
**Author:** [@davman](https://discuss.elastic.co/u/davman)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 2:50am UTC](https://discuss.elastic.co/t/not-sure-where-my-indexes-are-being-deleted/287180 "2021-10-21T02:50:32Z")
Hey there, I inherited a system form a previous admin. I want to see the policy assigned to a certain index pattern for deletion. I know they are being deleted I just cant seem to tie the pattern to an ILM. Can someo… --- ## [Transform error: "could not start transform, not a transform node"](https://discuss.elastic.co/t/transform-error-could-not-start-transform-not-a-transform-node/287187)
**Author:** [@AmrIbra](https://discuss.elastic.co/u/AmrIbra)\ **Replies:** 1\ **Last updated:** [October 20, 2021, 11:55pm UTC](https://discuss.elastic.co/t/transform-error-could-not-start-transform-not-a-transform-node/287187 "2021-10-20T23:55:47Z")
I'm getting this error every time I try to start a transform. What could be the reason for that? --- ## [Node fails even after start/restart and it is not joining the cluster](https://discuss.elastic.co/t/node-fails-even-after-start-restart-and-it-is-not-joining-the-cluster/287201)
**Author:** [@RamyaE](https://discuss.elastic.co/u/RamyaE)\ **Replies:** 1\ **Last updated:** [October 20, 2021, 11:48pm UTC](https://discuss.elastic.co/t/node-fails-even-after-start-restart-and-it-is-not-joining-the-cluster/287201 "2021-10-20T23:48:25Z")
Hi, I have tried to diagnose as much as I can, I have a three node cluster in that one of my node went down and it is not recovering from failed status, I have tried to stop/start it but it keep on hitting and maintainin… --- ## [Document ID Scope when Index Life Cycle Management is in play and index patterns](https://discuss.elastic.co/t/document-id-scope-when-index-life-cycle-management-is-in-play-and-index-patterns/287132)
**Author:** [@Ben\_Hunsberger](https://discuss.elastic.co/u/Ben_Hunsberger)\ **Replies:** 4\ **Last updated:** [October 20, 2021, 11:04pm UTC](https://discuss.elastic.co/t/document-id-scope-when-index-life-cycle-management-is-in-play-and-index-patterns/287132 "2021-10-20T23:04:28Z")
Using the BULK api and the index action on each entry. Suppose I have an index pattern "myindex-\*". ILM is in play creating "myindex-00001", "myindex-00002", etc.... Day one a document is POSTed to the rollover alias … --- ## [Kibana search profiler accuracy](https://discuss.elastic.co/t/kibana-search-profiler-accuracy/286770)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 3\ **Last updated:** [October 20, 2021, 8:06pm UTC](https://discuss.elastic.co/t/kibana-search-profiler-accuracy/286770 "2021-10-20T20:06:29Z")
I am debugging a long query and encountered below observation. The actual query takes 4.976 seconds. But the kibana search profiler states the search takes only 23.416 ms and aggregation takes 574.025 ms cumulatively e… --- ## [Problem securing entire stack](https://discuss.elastic.co/t/problem-securing-entire-stack/286778)
**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\ **Replies:** 13\ **Last updated:** [October 20, 2021, 7:42pm UTC](https://discuss.elastic.co/t/problem-securing-entire-stack/286778 "2021-10-20T19:42:27Z")
I have been trying to secure communications within (and connections to) my elastic stack, and am running into issues. I will just go through my configuration and what I've done so far. I have three servers (let's call t… --- ## [Search for a field across multiple indices](https://discuss.elastic.co/t/search-for-a-field-across-multiple-indices/286274)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 9\ **Last updated:** [October 20, 2021, 5:28pm UTC](https://discuss.elastic.co/t/search-for-a-field-across-multiple-indices/286274 "2021-10-20T17:28:16Z")
Hi All, We have ELK 7.6.2 stack running with number of indices in place. One of the fields in the indices is called requestID which has a unique value e.g. 1-01-TV-PCVEFOW6JXMZSMEVUZBWXPWRFFMPEIG10411767701@1-21506255#… --- ## [Runtime Fields with subnested fields](https://discuss.elastic.co/t/runtime-fields-with-subnested-fields/287218)
**Author:** [@rreverol](https://discuss.elastic.co/u/rreverol)\ **Replies:** 0\ **Last updated:** [October 20, 2021, 3:44pm UTC](https://discuss.elastic.co/t/runtime-fields-with-subnested-fields/287218 "2021-10-20T15:44:21Z")
I have the following doc mapping { "mappings": { "security": { "properties": { "id": { "type": "keyword" }, "trades": { "type": "nested", "properties": {… --- ## [Cross cluster replication connection issue](https://discuss.elastic.co/t/cross-cluster-replication-connection-issue/286150)
**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 12:28am UTC](https://discuss.elastic.co/t/cross-cluster-replication-connection-issue/286150 "2021-10-11T00:28:25Z")
HI , Im having an issue with connecting to a remote cluster. first I tried to connect one node of es to another node and that was fine. I am implementing the same steps I took to connect to remote clusters before but … --- ## [How to open debug ES index write log (index slow log is too simple)](https://discuss.elastic.co/t/how-to-open-debug-es-index-write-log-index-slow-log-is-too-simple/287208)
**Author:** [@dalei2019](https://discuss.elastic.co/u/dalei2019)\ **Replies:** 0\ **Last updated:** [October 20, 2021, 2:29pm UTC](https://discuss.elastic.co/t/how-to-open-debug-es-index-write-log-index-slow-log-is-too-simple/287208 "2021-10-20T14:29:20Z")
Use slow log, I can find the index result when error occur. PUT /xxx/\_settings { "index.indexing.slowlog.threshold.index.warn": "0s", "index.indexing.slowlog.threshold.index.info": "0s", "index.indexing.slowlog.th… --- ## [PKI chain realms](https://discuss.elastic.co/t/pki-chain-realms/287126)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 4\ **Last updated:** [October 20, 2021, 1:49pm UTC](https://discuss.elastic.co/t/pki-chain-realms/287126 "2021-10-20T13:49:06Z")
I want to add two PKI authentication realms in order to map each one to a specific role-mapping. I know I can create a realm chain, but I'm in need of help with setting up my secondary PKI realm using the OU name. For ex… --- ## [Phrase Suggester return whole field](https://discuss.elastic.co/t/phrase-suggester-return-whole-field/287196)
**Author:** [@gabriel21](https://discuss.elastic.co/u/gabriel21)\ **Replies:** 0\ **Last updated:** [October 20, 2021, 12:37pm UTC](https://discuss.elastic.co/t/phrase-suggester-return-whole-field/287196 "2021-10-20T12:37:08Z")
Hi, I'm trying out the Phrase Suggester and wondering if there is a way to make it always return whole fields? For example, when I search noble I want the suggestion to be nobel prize rather than just the term nobel. My… --- ## [Match with or without thousands separator](https://discuss.elastic.co/t/match-with-or-without-thousands-separator/287183)
**Author:** [@Morten\_Sjogren](https://discuss.elastic.co/u/Morten_Sjogren)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 10:53am UTC](https://discuss.elastic.co/t/match-with-or-without-thousands-separator/287183 "2021-10-20T10:53:23Z")
How do we match numbers in text-fields with and without thousands separators? Use-case: The user searches for titles with one of "15000", "15,000" or "15.000" They expect to find items with titles like these: "Histor… --- ## [Cannot start docker image (elasticsearch 6.8](https://discuss.elastic.co/t/cannot-start-docker-image-elasticsearch-6-8/287161)
**Author:** [@ggiovinazzo](https://discuss.elastic.co/u/ggiovinazzo)\ **Replies:** 0\ **Last updated:** [October 20, 2021, 7:53am UTC](https://discuss.elastic.co/t/cannot-start-docker-image-elasticsearch-6-8/287161 "2021-10-20T07:53:05Z")
Hi all, This morning I updated my Ubuntu (20.4) dev machine kernel to version 5.4.0-89.100. When restarted my dev instance of Elasticsearch (6.8.2) was crashing with the following exception: \[2021-10-20T07:09:58,338\]\[… --- ## [Remove buckets from being returned in Aggregation](https://discuss.elastic.co/t/remove-buckets-from-being-returned-in-aggregation/287107)
**Author:** [@EricPSU](https://discuss.elastic.co/u/EricPSU)\ **Replies:** 4\ **Last updated:** [October 19, 2021, 3:44pm UTC](https://discuss.elastic.co/t/remove-buckets-from-being-returned-in-aggregation/287107 "2021-10-19T15:44:58Z")
Is there a way to prevent the buckets array from being returned as a part of the aggregation result? I am using a sum\_bucket to total all of the buckets and I don't need all of the buckets to be returned. I'm just usin… --- ## [How do I implement the synonym dictionary - step-by-step?](https://discuss.elastic.co/t/how-do-i-implement-the-synonym-dictionary-step-by-step/287094)
**Author:** [@Nick\_N](https://discuss.elastic.co/u/Nick_N)\ **Replies:** 1\ **Last updated:** [October 20, 2021, 2:43am UTC](https://discuss.elastic.co/t/how-do-i-implement-the-synonym-dictionary-step-by-step/287094 "2021-10-20T02:43:58Z")
I want to look for all the jackets that are blue (in the "name" and "tags" fields). But the color blue has many shades. How do I implement the dictionary of synonyms? (I tried many things, without conclusive results w… --- ## [Last value of each interface in the match phrase query](https://discuss.elastic.co/t/last-value-of-each-interface-in-the-match-phrase-query/287135)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [October 20, 2021, 1:49am UTC](https://discuss.elastic.co/t/last-value-of-each-interface-in-the-match-phrase-query/287135 "2021-10-20T01:49:18Z")
Hi, How can I get the last value of each interface in the match phrase query? I have tried with max timestamp, but I get a time out error GET /metrics-inf-\*/\_search { "query": { "bool": { "filter": \[ … --- ## [Cross Cluster Replication Issue](https://discuss.elastic.co/t/cross-cluster-replication-issue/286943)
**Author:** [@Prabakar](https://discuss.elastic.co/u/Prabakar)\ **Replies:** 11\ **Last updated:** [October 19, 2021, 10:28pm UTC](https://discuss.elastic.co/t/cross-cluster-replication-issue/286943 "2021-10-19T22:28:45Z")
We are using Elasticsearch open source 7.13. We are trying to perform Cross Cluster Replication. We followed below steps. Created Index (Leader Index) on Cluster 1. Created cluster 1 as a remote cluster for cluster 2 … --- ## [Looking for the best way to manage a somewhat "hot" and "warm" environment for indices](https://discuss.elastic.co/t/looking-for-the-best-way-to-manage-a-somewhat-hot-and-warm-environment-for-indices/287124)
**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\ **Replies:** 1\ **Last updated:** [October 19, 2021, 9:11pm UTC](https://discuss.elastic.co/t/looking-for-the-best-way-to-manage-a-somewhat-hot-and-warm-environment-for-indices/287124 "2021-10-19T21:11:49Z")
Hello, First, thank you for your patience while I attempt to illustrate my issue. I hope I'm being coherent enough. I am using Apache NiFi to route data into Elasticsearch. Data being ingested into Elasticsearch has … --- ## [Dynamic input (file hashes) for HTTP JSON data collection](https://discuss.elastic.co/t/dynamic-input-file-hashes-for-http-json-data-collection/287016)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 5\ **Last updated:** [October 19, 2021, 7:20pm UTC](https://discuss.elastic.co/t/dynamic-input-file-hashes-for-http-json-data-collection/287016 "2021-10-19T19:20:47Z")
Hello, I hope you and your loved ones are safe and healthy. I want to ingest data from an API endpoint that uses JSON for both request and response. (https://developers.virustotal.com/reference) I am aware that filebe… --- ## [Received plaintext http traffic on an https channel](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel/286987)
**Author:** [@armughan](https://discuss.elastic.co/u/armughan)\ **Replies:** 2\ **Last updated:** [October 19, 2021, 6:54pm UTC](https://discuss.elastic.co/t/received-plaintext-http-traffic-on-an-https-channel/286987 "2021-10-19T18:54:24Z")
I'm configuring a single node Elasticsearch & Kibana (7.15.1) set up with FQDN behind Nginx Proxy on a single EC2 instance. Everything is correctly set up when I tried to turn on Alerts in heartbeat (Observability) it s… --- ## [POST api using watcher](https://discuss.elastic.co/t/post-api-using-watcher/286803)
**Author:** [@vicky\_rock](https://discuss.elastic.co/u/vicky_rock)\ **Replies:** 2\ **Last updated:** [October 19, 2021, 6:07pm UTC](https://discuss.elastic.co/t/post-api-using-watcher/286803 "2021-10-19T18:07:24Z")
Hi Experts, I am using 7.9.3 Elasticsearch with searchguard authentication. I want to create a index daily with POST. I want to schedule this POST api . Is any chance to fo that. And I am new for this so please send m… --- ## [Enrich Processor: Match Longest](https://discuss.elastic.co/t/enrich-processor-match-longest/287116)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 0\ **Last updated:** [October 19, 2021, 3:19pm UTC](https://discuss.elastic.co/t/enrich-processor-match-longest/287116 "2021-10-19T15:19:10Z")
We are enriching documents via Ingest pipeline. It looks like the enrichment processor is only able to enrich by exact match. But what I need is that it enriches incoming documents by longest match. Lets assume I'm enric… --- ## [Does sum\_other\_doc\_count include docs without that field?](https://discuss.elastic.co/t/does-sum-other-doc-count-include-docs-without-that-field/286028)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [October 19, 2021, 2:46pm UTC](https://discuss.elastic.co/t/does-sum-other-doc-count-include-docs-without-that-field/286028 "2021-10-19T14:46:21Z")
I'm performing a terms agg that gives me 5 top buckets and a sum\_other\_doc\_count against a specific field. Not every document in my index has that field. Does sum\_other\_doc\_count include a count of documents without th… --- ## [Perform a pipelines aggregation over the full set of potential buckets](https://discuss.elastic.co/t/perform-a-pipelines-aggregation-over-the-full-set-of-potential-buckets/287097)
**Author:** [@seanletendre](https://discuss.elastic.co/u/seanletendre)\ **Replies:** 0\ **Last updated:** [October 19, 2021, 1:38pm UTC](https://discuss.elastic.co/t/perform-a-pipelines-aggregation-over-the-full-set-of-potential-buckets/287097 "2021-10-19T13:38:58Z")
When using the \_search API of Elasticsearch, if you set size to 10, and perform an avg metric aggregation, the average will be of all values across the dataset matching the query, not just the average of the 10 items ret… --- ## [What is the best way to get the average number of documents per bucket in Elasticsearch](https://discuss.elastic.co/t/what-is-the-best-way-to-get-the-average-number-of-documents-per-bucket-in-elasticsearch/287096)
**Author:** [@seanletendre](https://discuss.elastic.co/u/seanletendre)\ **Replies:** 0\ **Last updated:** [October 19, 2021, 1:31pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-get-the-average-number-of-documents-per-bucket-in-elasticsearch/287096 "2021-10-19T13:31:43Z")
Suppose that we are hat maker and have an Elasticsearch index where each document corresponds to the sale of one hat. Part of the sales record is the name of the store at which the hat was sold. I want to find out the n… --- ## [Unable to get values after searching for a Special Character](https://discuss.elastic.co/t/unable-to-get-values-after-searching-for-a-special-character/287095)
**Author:** [@paramzvik](https://discuss.elastic.co/u/paramzvik)\ **Replies:** 0\ **Last updated:** [October 19, 2021, 1:23pm UTC](https://discuss.elastic.co/t/unable-to-get-values-after-searching-for-a-special-character/287095 "2021-10-19T13:23:11Z")
Hi Fellow Developers, I am using the following query to fetch data for the titles having + as a field in them but not returning any value. Can someone help me out in rectifying the issue. "query\_string":{"query":"\\+",… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=554) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=556)