# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=558 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 559 --- ## [CountAsync can't consume descriptor like SearchAsync](https://discuss.elastic.co/t/countasync-cant-consume-descriptor-like-searchasync/286794)
**Author:** [@puksigon](https://discuss.elastic.co/u/puksigon)\ **Replies:** 0\ **Last updated:** [October 15, 2021, 5:14am UTC](https://discuss.elastic.co/t/countasync-cant-consume-descriptor-like-searchasync/286794 "2021-10-15T05:14:02Z")
I use Nest lib in my project. I try to use repository pattern with base repository class. For search method, is work fine with "SearchDescriptor", but for count method, is't work with "CountDescriptor" like search me… --- ## [Can not upgrade 7.11.1 -\> 7.15.0 (docker-compose. dev.env)](https://discuss.elastic.co/t/can-not-upgrade-7-11-1-7-15-0-docker-compose-dev-env/286676)
**Author:** [@zpsx](https://discuss.elastic.co/u/zpsx)\ **Replies:** 6\ **Last updated:** [October 15, 2021, 12:54am UTC](https://discuss.elastic.co/t/can-not-upgrade-7-11-1-7-15-0-docker-compose-dev-env/286676 "2021-10-15T00:54:44Z")
I am currently using the elastic stack in my development environment. I'm using a single elastic stack system with docker compose. The version used is 7.11.1. I found out that 7.15.0 was released recently. Change onl… --- ## [JVM spikes over 85% and baseline doesn't drop back down](https://discuss.elastic.co/t/jvm-spikes-over-85-and-baseline-doesnt-drop-back-down/286730)
**Author:** [@cshawler](https://discuss.elastic.co/u/cshawler)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 12:27am UTC](https://discuss.elastic.co/t/jvm-spikes-over-85-and-baseline-doesnt-drop-back-down/286730 "2021-10-15T00:27:16Z")
We have watchers setup to notify when our JVM increases over 85% we have noticed that once the watcher is triggered the alerts keep firing and the jvm usage never drops back down. Is this normal behavior? We have … --- ## [Securing Elastic Stack: Logstash](https://discuss.elastic.co/t/securing-elastic-stack-logstash/286782)
**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\ **Replies:** 2\ **Last updated:** [October 15, 2021, 12:09am UTC](https://discuss.elastic.co/t/securing-elastic-stack-logstash/286782 "2021-10-15T00:09:53Z")
I have been working on securing my elastic stack, and am now stuck on getting Logstash to communicate with Elasticsearch securely. I have a cluster with three nodes (call them elk1, elk2, and elk3), each running an Elas… --- ## [Multiple Synonym lists for the same field controlled by other field in Elastic Search](https://discuss.elastic.co/t/multiple-synonym-lists-for-the-same-field-controlled-by-other-field-in-elastic-search/286784)
**Author:** [@twisha](https://discuss.elastic.co/u/twisha)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 11:48pm UTC](https://discuss.elastic.co/t/multiple-synonym-lists-for-the-same-field-controlled-by-other-field-in-elastic-search/286784 "2021-10-14T23:48:58Z")
Is there a way to define multiple synonym lists in Elasticsearch 7 based on languages and some specific field in the Elasticsearch document? The use case is, I have a field "A" with possible values "Y" and "Z". Now, depe… --- ## [Elasticsearch cluster data nodes are being removed from cluster by timeout](https://discuss.elastic.co/t/elasticsearch-cluster-data-nodes-are-being-removed-from-cluster-by-timeout/285635)
**Author:** [@Vadym](https://discuss.elastic.co/u/Vadym)\ **Replies:** 17\ **Last updated:** [October 14, 2021, 10:43pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-data-nodes-are-being-removed-from-cluster-by-timeout/285635 "2021-10-14T22:43:52Z")
Hi everyone, I have an issue while deleting rather big 800Gb Elasticsearch index. Shortly after index deletion data nodes are getting disconnected, cluster loses all data nodes and switches into "red" state for ~10 minu… --- ## [What is the content of the segment file in node/0/\_state](https://discuss.elastic.co/t/what-is-the-content-of-the-segment-file-in-node-0-state/286698)
**Author:** [@verdantyang](https://discuss.elastic.co/u/verdantyang)\ **Replies:** 2\ **Last updated:** [October 14, 2021, 6:44pm UTC](https://discuss.elastic.co/t/what-is-the-content-of-the-segment-file-in-node-0-state/286698 "2021-10-14T18:44:07Z")
Hello, ES 6.\* only stores .st files in the /nodes/0/\_state directory to record node status information. But under the ES 7.12 version, I found segment-related file in /nodes/0/\_state directory, such as segment\_N and .s… --- ## [Match only N queries in a large boolean query for a single result](https://discuss.elastic.co/t/match-only-n-queries-in-a-large-boolean-query-for-a-single-result/286754)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 4:20pm UTC](https://discuss.elastic.co/t/match-only-n-queries-in-a-large-boolean-query-for-a-single-result/286754 "2021-10-14T16:20:57Z")
I am constructing a query that looks like that: Bool(should=\[Bool(\_name='F002690\_sf3789834989482\_wgs\_hgsc', must=\[Bool(should=\[Terms(samples\_num\_alt\_1=\['S338492778\_HGSC', 'S59=89483927\_HGSC'\]), Terms(samples\_num\_alt\_2=\[… --- ## [Search returning no results after upgrade from 7.9.3 to 7.15.0](https://discuss.elastic.co/t/search-returning-no-results-after-upgrade-from-7-9-3-to-7-15-0/286739)
**Author:** [@williamhbell](https://discuss.elastic.co/u/williamhbell)\ **Replies:** 5\ **Last updated:** [October 14, 2021, 4:57pm UTC](https://discuss.elastic.co/t/search-returning-no-results-after-upgrade-from-7-9-3-to-7-15-0/286739 "2021-10-14T16:57:33Z")
Hi, Our Elasticsearch installation was recently updated from 7.9.3 to 7.15.0. (The host operating system was updated from Ubuntu LTS 18 to 20 at the same time.) Following this update, the search scripts and programs w… --- ## [Unexpected hits when using n-gram](https://discuss.elastic.co/t/unexpected-hits-when-using-n-gram/286760)
**Author:** [@bsharma](https://discuss.elastic.co/u/bsharma)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 4:45pm UTC](https://discuss.elastic.co/t/unexpected-hits-when-using-n-gram/286760 "2021-10-14T16:45:40Z")
Hi, I am using n-gram filter with my index. Index configuration: PUT dev-dk-ngram-test { "settings": { "index": { "max\_ngram\_diff": 2 }, "analysis": { "analyzer": { "default": { … --- ## [Filter Elasticsearch results based on the number of 'matched\_queries'](https://discuss.elastic.co/t/filter-elasticsearch-results-based-on-the-number-of-matched-queries/286741)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 2:59pm UTC](https://discuss.elastic.co/t/filter-elasticsearch-results-based-on-the-number-of-matched-queries/286741 "2021-10-14T14:59:33Z")
There is such a thing in elasticsearch as named queries : When we use it, we get matched\_queries array together with each matched document in each elasticsearch hit. Now, I want to get only documents that matched \> n … --- ## [Shard allocation fails during rebalancing](https://discuss.elastic.co/t/shard-allocation-fails-during-rebalancing/286706)
**Author:** [@bunste](https://discuss.elastic.co/u/bunste)\ **Replies:** 8\ **Last updated:** [October 14, 2021, 3:40pm UTC](https://discuss.elastic.co/t/shard-allocation-fails-during-rebalancing/286706 "2021-10-14T15:40:27Z")
We recently ran into a problem with our Elasticseach Cluster. We took a Data Node out of the cluster and completely reinstalled it with Debian 11. When the node was done and rejoined the cluster, Elasticsearch started r… --- ## [Elastic - flattening multiple fields](https://discuss.elastic.co/t/elastic-flattening-multiple-fields/286246)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 5\ **Last updated:** [October 14, 2021, 2:01pm UTC](https://discuss.elastic.co/t/elastic-flattening-multiple-fields/286246 "2021-10-14T14:01:04Z")
Hi everybody, In one of the Elastic indices, I have a problem with some documents. I receive JSON from filebeat and parse them with the json plugin. But some of them contain a lot of fields. Example response.0.field1… --- ## [Oracle Data into Elastic](https://discuss.elastic.co/t/oracle-data-into-elastic/286719)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 3\ **Last updated:** [October 14, 2021, 1:12pm UTC](https://discuss.elastic.co/t/oracle-data-into-elastic/286719 "2021-10-14T13:12:56Z")
Hi, I have been butting my head against a brick wall for over a week now trying to get the jdbc driver working in logstash, and have rethought the approach for getting data out of Oracle. I am currently trying to protot… --- ## [Out Of Memory crash, few documents & load](https://discuss.elastic.co/t/out-of-memory-crash-few-documents-load/286597)
**Author:** [@cyril.r](https://discuss.elastic.co/u/cyril.r)\ **Replies:** 9\ **Last updated:** [October 14, 2021, 1:05pm UTC](https://discuss.elastic.co/t/out-of-memory-crash-few-documents-load/286597 "2021-10-14T13:05:28Z")
Hi there, I have a small Elasticsearch single node cluster for development purpose that is crashing about one time per month, even when there are no trafic/requests (like in the middle of the night, no one is working on… --- ## [How order aggregations using elasticsearch 7.15](https://discuss.elastic.co/t/how-order-aggregations-using-elasticsearch-7-15/286645)
**Author:** [@acantepie](https://discuss.elastic.co/u/acantepie)\ **Replies:** 4\ **Last updated:** [October 14, 2021, 12:59pm UTC](https://discuss.elastic.co/t/how-order-aggregations-using-elasticsearch-7-15/286645 "2021-10-14T12:59:09Z")
Hello, I have the following mapping : "COLOR": { "properties": { "order": { "type": "long" }, "value": { "type": "text", "fields": { "keyword": { … --- ## [Elasticsearch and Strapi: How to create "geo\_point" type fields using Strapi cms](https://discuss.elastic.co/t/elasticsearch-and-strapi-how-to-create-geo-point-type-fields-using-strapi-cms/286714)
**Author:** [@GuiPerim](https://discuss.elastic.co/u/GuiPerim)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 11:25am UTC](https://discuss.elastic.co/t/elasticsearch-and-strapi-how-to-create-geo-point-type-fields-using-strapi-cms/286714 "2021-10-14T11:25:12Z")
Hello! I'm pretty new on the React/NodeJs world. That being said, i'm working on an application that is using Strapi (v3.6.7) as the CMS and we are also using Elasticsearch (v7.15). And i'm using the following puglin to… --- ## [Problems with Shard allocation](https://discuss.elastic.co/t/problems-with-shard-allocation/286687)
**Author:** [@Olakunle\_Oladimeji](https://discuss.elastic.co/u/Olakunle_Oladimeji)\ **Replies:** 2\ **Last updated:** [October 14, 2021, 8:09am UTC](https://discuss.elastic.co/t/problems-with-shard-allocation/286687 "2021-10-14T08:09:25Z")
We currently run Elasticsearch version 7.6.1 on three machines with roles dilm for all. Our index is divided into three shards and 2 replicas. Lately we've noticed that shards are not allocated on one node. When I run … --- ## [Ingest pipeline - processor - can't reuse fieldname after rename of fieldname](https://discuss.elastic.co/t/ingest-pipeline-processor-cant-reuse-fieldname-after-rename-of-fieldname/286677)
**Author:** [@justroll](https://discuss.elastic.co/u/justroll)\ **Replies:** 0\ **Last updated:** [October 14, 2021, 6:58am UTC](https://discuss.elastic.co/t/ingest-pipeline-processor-cant-reuse-fieldname-after-rename-of-fieldname/286677 "2021-10-14T06:58:05Z")
Hi I got a logfeed coming from a black box (aka. i can't change a bit in datastructure) and arriving at me ES. We use in all our logging the field "log" to structure our data to (after grok) like log.level, log.thread,… --- ## [Shards Not Being Allocated To Nodes](https://discuss.elastic.co/t/shards-not-being-allocated-to-nodes/286587)
**Author:** [@vilakazil](https://discuss.elastic.co/u/vilakazil)\ **Replies:** 6\ **Last updated:** [October 14, 2021, 6:54am UTC](https://discuss.elastic.co/t/shards-not-being-allocated-to-nodes/286587 "2021-10-14T06:54:04Z")
Hope to get assistance here as I have been struggling. I have 11 nodes that run Elasticsearch, with 2 master node. 5 shards and 1 replica (default) We recently ran patches on the nodes and upgraded the .Net software, t… --- ## [Constant API Key Failures in Logs after enabling security](https://discuss.elastic.co/t/constant-api-key-failures-in-logs-after-enabling-security/286668)
**Author:** [@Heroj04](https://discuss.elastic.co/u/Heroj04)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 4:16am UTC](https://discuss.elastic.co/t/constant-api-key-failures-in-logs-after-enabling-security/286668 "2021-10-14T04:16:38Z")
Just recently set up an Elasticsearch server. after enabling security and SSL I am seeing just constant apikey errors in the logs. Even if I shut down all other parts of the system (kibana/beats/fleet) they are still co… --- ## [Istio with Elastic Stack for Observability](https://discuss.elastic.co/t/istio-with-elastic-stack-for-observability/286607)
**Author:** [@denukak2000](https://discuss.elastic.co/u/denukak2000)\ **Replies:** 0\ **Last updated:** [October 13, 2021, 10:42am UTC](https://discuss.elastic.co/t/istio-with-elastic-stack-for-observability/286607 "2021-10-13T10:42:55Z")
I am currently using Istio as service mesh with Kubernetes (On Prem). I want to implement observability infrastructure with Elastic Stack , I know Istio is supported for jaeger and Prometheus, But I have to capture dist… --- ## [How to perform natural sort on a field in Elasticsearch?](https://discuss.elastic.co/t/how-to-perform-natural-sort-on-a-field-in-elasticsearch/285854)
**Author:** [@tranindigo](https://discuss.elastic.co/u/tranindigo)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 8:04pm UTC](https://discuss.elastic.co/t/how-to-perform-natural-sort-on-a-field-in-elasticsearch/285854 "2021-10-13T20:04:02Z")
I have an Elasticsearch keyword field called LocationNumber that I want to sort "alphanumerically" (or "naturally") so that it is easy for users to read. I have been researching this for days and couldn't find any real d… --- ## [Some Fields of index not listed in kibana - discover- under avilable fields , , eventhough shown in in index using GET command](https://discuss.elastic.co/t/some-fields-of-index-not-listed-in-kibana-discover-under-avilable-fields-eventhough-shown-in-in-index-using-get-command/286545)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 6:43pm UTC](https://discuss.elastic.co/t/some-fields-of-index-not-listed-in-kibana-discover-under-avilable-fields-eventhough-shown-in-in-index-using-get-command/286545 "2021-10-13T18:43:07Z")
Following log entries are put in index 2021-09-27T03:35:53.263029+05:30 \_gateway devname="PPFW01" 2021-09-27T03:42:22.549689+05:30 \_gateway devname="PPFW02" 2021-09-27T04:02:36.089881+05:30 \_gateway devname="PPFW03" … --- ## [Adding sort to ES query returns inaccurate results?](https://discuss.elastic.co/t/adding-sort-to-es-query-returns-inaccurate-results/286549)
**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\ **Replies:** 4\ **Last updated:** [October 13, 2021, 6:25pm UTC](https://discuss.elastic.co/t/adding-sort-to-es-query-returns-inaccurate-results/286549 "2021-10-13T18:25:38Z")
My queries are successfully returning the exact results that I am looking for. { "size":100, "from":0, "query":{ "bool":{ "must":\[ { "bool":{ "should"… --- ## [Does it make sense to add timestamp in "index sorting"?](https://discuss.elastic.co/t/does-it-make-sense-to-add-timestamp-in-index-sorting/286551)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 6:05pm UTC](https://discuss.elastic.co/t/does-it-make-sense-to-add-timestamp-in-index-sorting/286551 "2021-10-13T18:05:05Z")
The documentation suggests using low cardinality field(s) for index sorting. We often search documents with some low cardinality ID (like site or org) and then with timestamp. Does it make sense to include timestamp in… --- ## [Can I disable replicas in when index is getting data from logstash?](https://discuss.elastic.co/t/can-i-disable-replicas-in-when-index-is-getting-data-from-logstash/286647)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 5:10pm UTC](https://discuss.elastic.co/t/can-i-disable-replicas-in-when-index-is-getting-data-from-logstash/286647 "2021-10-13T17:10:15Z")
Hi, I have a large quantity of data being indexed in elastic, is taking a long time to do it, so it is posible to disable replicas when data is being indexed to Elasticsearch? can this create any problem? it will speed u… --- ## [New to Elasticsearch](https://discuss.elastic.co/t/new-to-elasticsearch/286631)
**Author:** [@Rodo\_Andrade](https://discuss.elastic.co/u/Rodo_Andrade)\ **Replies:** 0\ **Last updated:** [October 13, 2021, 2:01pm UTC](https://discuss.elastic.co/t/new-to-elasticsearch/286631 "2021-10-13T14:01:14Z")
Hello, I'm fairly new to Elasticsearch. I'm using the NEST (7.11.1) to query a document field \[Text(TermVector = TermVectorOption.WithOffsets)\], it's storying large file text. For the sake of this example, I have 2 PDF… --- ## [Scale ingest node based on number of application](https://discuss.elastic.co/t/scale-ingest-node-based-on-number-of-application/286566)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 8\ **Last updated:** [October 13, 2021, 2:59pm UTC](https://discuss.elastic.co/t/scale-ingest-node-based-on-number-of-application/286566 "2021-10-13T14:59:16Z")
Hello, I have a plan to use ingest pipeline on my cluster, the plan is: 90 application will hit to elastic server, so I'll make around 200 pipeline on my cluster How can I scale the ingest node I need on my cluster to… --- ## [Remote cluster connect time out](https://discuss.elastic.co/t/remote-cluster-connect-time-out/286638)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 0\ **Last updated:** [October 13, 2021, 2:46pm UTC](https://discuss.elastic.co/t/remote-cluster-connect-time-out/286638 "2021-10-13T14:46:11Z")
I have two clusters; the remote cluster is single node on AWS. I have set up the same CA on both clusters, but they cannot connect due to time-out issue. Here is the error in log: \[2021-10-13T14:16:49,749\]\[WARN \]\[o.e.t.… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=557) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=559)