# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=561 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 562 --- ## [How to install elastic/kibana/logstash in custom path?](https://discuss.elastic.co/t/how-to-install-elastic-kibana-logstash-in-custom-path/286366)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 12:52pm UTC](https://discuss.elastic.co/t/how-to-install-elastic-kibana-logstash-in-custom-path/286366 "2021-10-11T12:52:41Z")
I need to install Elasticsearch in /opt/elasticsearch, kibana and logstash like this. And then autostart via systemctl. So, I tried like this Install Elasticsearch with RPM | Elasticsearch Reference \[6.2\] | Elastic I e… --- ## [Details/Insights on how switching the index behind an alias works](https://discuss.elastic.co/t/details-insights-on-how-switching-the-index-behind-an-alias-works/286146)
**Author:** [@Nexonus](https://discuss.elastic.co/u/Nexonus)\ **Replies:** 4\ **Last updated:** [October 11, 2021, 12:42pm UTC](https://discuss.elastic.co/t/details-insights-on-how-switching-the-index-behind-an-alias-works/286146 "2021-10-11T12:42:44Z")
I would like to get some insight information about how an alias switch works. Our scenario We observed a scenario in our cluster (only 3 nodes) where we did an alias switch and still queried the old data from the old in… --- ## [ELK stack basic license query for use](https://discuss.elastic.co/t/elk-stack-basic-license-query-for-use/286342)
**Author:** [@jaykansagara](https://discuss.elastic.co/u/jaykansagara)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 11:56am UTC](https://discuss.elastic.co/t/elk-stack-basic-license-query-for-use/286342 "2021-10-11T11:56:41Z")
Hi, Currently we are using ELK stack oss version. We are not take any charges from our client like for number of users. We just take charges of our service only. Now I want to know that, If I give basic version of ELK … --- ## [Size mapper plugin - how to see it in Kibana?](https://discuss.elastic.co/t/size-mapper-plugin-how-to-see-it-in-kibana/286247)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 11:19am UTC](https://discuss.elastic.co/t/size-mapper-plugin-how-to-see-it-in-kibana/286247 "2021-10-11T11:19:39Z")
I am going to try that again, since there where already some topics about it: I have installed: Mapper Size Plugin | Elasticsearch Plugins and Integrations \[7.15\] | Elastic on my 7.13.2 cluster and I have created a new … --- ## [Java API Client Documentation](https://discuss.elastic.co/t/java-api-client-documentation/286132)
**Author:** [@blueJ](https://discuss.elastic.co/u/blueJ)\ **Replies:** 3\ **Last updated:** [October 11, 2021, 11:17am UTC](https://discuss.elastic.co/t/java-api-client-documentation/286132 "2021-10-11T11:17:41Z")
Hey everyone, could You help me to find documentation for Java API Client (this beta solution that replaces Java High Level REST Client)? I mean something like the official oracle java libraries documentation? Kind reg… --- ## [Elastic agents reporting error: status code: 429, fleet-server returned an error: MaxLimit](https://discuss.elastic.co/t/elastic-agents-reporting-error-status-code-429-fleet-server-returned-an-error-maxlimit/286348)
**Author:** [@chippey5](https://discuss.elastic.co/u/chippey5)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 8:46am UTC](https://discuss.elastic.co/t/elastic-agents-reporting-error-status-code-429-fleet-server-returned-an-error-maxlimit/286348 "2021-10-11T08:46:10Z")
Hi, Lately we've been receving a lot of Could not communicate with fleet-server Checking API will retry, error: status code: 429, fleet-server returned an error: MaxLimit, message: exceeded the max limit messages from o… --- ## [Best way to index hierarchical types](https://discuss.elastic.co/t/best-way-to-index-hierarchical-types/286242)
**Author:** [@lovrodoe](https://discuss.elastic.co/u/lovrodoe)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 8:03am UTC](https://discuss.elastic.co/t/best-way-to-index-hierarchical-types/286242 "2021-10-11T08:03:22Z")
Let's say I have hierarchical types such as in example below: base\_type child\_type1 child\_type3 child\_type2 child\_type1 and child\_type2 inherit metadata properties from base\_type. child\_type3 has all pr… --- ## [Indexing strategy for hierarchical types](https://discuss.elastic.co/t/indexing-strategy-for-hierarchical-types/286343)
**Author:** [@lovrodoe](https://discuss.elastic.co/u/lovrodoe)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 7:58am UTC](https://discuss.elastic.co/t/indexing-strategy-for-hierarchical-types/286343 "2021-10-11T07:58:09Z")
Hello, I wrote a post on Friday (here) and since I didn't get a reply, I'll give it another go with a different question. Just a quick summary (check my previous post for a more detailed explanation): Currently on Elas… --- ## [Different index output using ingest pipeline](https://discuss.elastic.co/t/different-index-output-using-ingest-pipeline/286325)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 7\ **Last updated:** [October 11, 2021, 5:57am UTC](https://discuss.elastic.co/t/different-index-output-using-ingest-pipeline/286325 "2021-10-11T05:57:43Z")
Hello, I'm trying to use ingest pipeline to get different index output. Here's my case: I have fluentd to hit input on Elasticsearch, fluentd make index input on Elasticsearch named as "app-write", I want to filter from… --- ## [Elasticsearch-certutil http](https://discuss.elastic.co/t/elasticsearch-certutil-http/286230)
**Author:** [@karpaz](https://discuss.elastic.co/u/karpaz)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 5:25am UTC](https://discuss.elastic.co/t/elasticsearch-certutil-http/286230 "2021-10-11T05:25:12Z")
Hello everyone, I figured out that when generating http certificates by tool ./bin/elasticsearch-certutil http than it didn't work when I have password protected \*.pem/\*.key files. It does generate certs only if it's us… --- ## [Get "readiness probe failed" error when deploy to K8S](https://discuss.elastic.co/t/get-readiness-probe-failed-error-when-deploy-to-k8s/286333)
**Author:** [@zhaoyi0113](https://discuss.elastic.co/u/zhaoyi0113)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 5:11am UTC](https://discuss.elastic.co/t/get-readiness-probe-failed-error-when-deploy-to-k8s/286333 "2021-10-11T05:11:05Z")
I am trying to deploy Elasticsearch cluster to AWS EKS. I have this spec: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name: datasource spec: version: 7.14.0 nodeSets: - name: node … --- ## [How to call Explain with a NEST SearchDescriptor object?](https://discuss.elastic.co/t/how-to-call-explain-with-a-nest-searchdescriptor-object/286327)
**Author:** [@chm](https://discuss.elastic.co/u/chm)\ **Replies:** 0\ **Last updated:** [October 11, 2021, 4:04am UTC](https://discuss.elastic.co/t/how-to-call-explain-with-a-nest-searchdescriptor-object/286327 "2021-10-11T04:04:30Z")
I'm running a search calling Nest's SearchAsync with a SearchDescriptor object. I want to be able to reuse that SearchDescriptor object in a call to the Explain API with a particular document id, to see why that doc was/… --- ## [Index size is different from ILM index size](https://discuss.elastic.co/t/index-size-is-different-from-ilm-index-size/286000)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [October 11, 2021, 1:41am UTC](https://discuss.elastic.co/t/index-size-is-different-from-ilm-index-size/286000 "2021-10-11T01:41:57Z")
Why my index size is different from ilm index size property health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open log-wlb-sysmon-20… --- ## [Is Elasticsearch the right solution for regularly updated content search?](https://discuss.elastic.co/t/is-elasticsearch-the-right-solution-for-regularly-updated-content-search/286322)
**Author:** [@renegademarketer](https://discuss.elastic.co/u/renegademarketer)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 1:24am UTC](https://discuss.elastic.co/t/is-elasticsearch-the-right-solution-for-regularly-updated-content-search/286322 "2021-10-11T01:24:26Z")
I have the following use case and I'm not sure if Elasticsearch/Elasticpress is the right solution. I want to do the following: User will search WordPress custom post types (CPT), its taxonomies, custom fields (CF), an… --- ## [What is proper index naming policy for log monitoring?](https://discuss.elastic.co/t/what-is-proper-index-naming-policy-for-log-monitoring/285898)
**Author:** [@Hur](https://discuss.elastic.co/u/Hur)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 1:14am UTC](https://discuss.elastic.co/t/what-is-proper-index-naming-policy-for-log-monitoring/285898 "2021-10-11T01:14:09Z")
Hello, I have an question about the index naming policy for log monitoring. As a purpose of saving log, what is the recommended index naming policy? Are there any good ES skills to handle a number of indices? Simply, … --- ## [No alive nodes found in your cluster](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster/285946)
**Author:** [@dreamte](https://discuss.elastic.co/u/dreamte)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 1:13am UTC](https://discuss.elastic.co/t/no-alive-nodes-found-in-your-cluster/285946 "2021-10-11T01:13:05Z")
Hello, periodically (with an increase in the frequency of the number of additions to the index) an error occurs - no active nodes were found in your cluster. My configuration: cluster.name: elk\_test node.name: elk\_tes… --- ## [ES Migrated from 7.7.0 to 7.15.0 - all application 'logs-\*' legacy templates superseded by new managed logs index](https://discuss.elastic.co/t/es-migrated-from-7-7-0-to-7-15-0-all-application-logs-legacy-templates-superseded-by-new-managed-logs-index/285913)
**Author:** [@Nazar\_Aziz](https://discuss.elastic.co/u/Nazar_Aziz)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 1:12am UTC](https://discuss.elastic.co/t/es-migrated-from-7-7-0-to-7-15-0-all-application-logs-legacy-templates-superseded-by-new-managed-logs-index/285913 "2021-10-11T01:12:38Z")
Greetings! We have a simple Elasticsearch/Kibana cloud deployment primarily used for application logs against which we generate graphs and dashboard. Logs are shipped directly from applications directly to ES search, i.… --- ## [Using Elastic Services with XenForo Forum software](https://discuss.elastic.co/t/using-elastic-services-with-xenforo-forum-software/285960)
**Author:** [@tommythejoat](https://discuss.elastic.co/u/tommythejoat)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 1:10am UTC](https://discuss.elastic.co/t/using-elastic-services-with-xenforo-forum-software/285960 "2021-10-11T01:10:27Z")
Does anyone have experience using Elastic services like Eastic Cloud with third party products like the Extended Search facility for XenForo forum system? We are currently running Elasticsearch 7.14.0 on an in house sys… --- ## [Indexed documents with composite \_id collide](https://discuss.elastic.co/t/indexed-documents-with-composite-id-collide/286073)
**Author:** [@Jason-Leap](https://discuss.elastic.co/u/Jason-Leap)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 1:02am UTC](https://discuss.elastic.co/t/indexed-documents-with-composite-id-collide/286073 "2021-10-11T01:02:16Z")
Hi guys. I've found some interesting behaviour that I was hoping to get some clarification on. Let's say I perform a bulk index of two documents like so: curl --request POST \\ --url \/\/\_bulk \\ --header… --- ## [Add data nodes in peak time](https://discuss.elastic.co/t/add-data-nodes-in-peak-time/286175)
**Author:** [@yukai](https://discuss.elastic.co/u/yukai)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 12:36am UTC](https://discuss.elastic.co/t/add-data-nodes-in-peak-time/286175 "2021-10-11T00:36:34Z")
Hi, I have a self-managed Elasticsearch cluster with 3 dedicated master nodes, in peak time I would simply add data nodes to increase cluster throughput. And I don't think this action would bring any side affects to the… --- ## [Snapshot Lifecycle Management (SLM) in Python 3](https://discuss.elastic.co/t/snapshot-lifecycle-management-slm-in-python-3/286208)
**Author:** [@ttttien](https://discuss.elastic.co/u/ttttien)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 8:57am UTC](https://discuss.elastic.co/t/snapshot-lifecycle-management-slm-in-python-3/286208 "2021-10-08T08:57:28Z")
Hello, I had done "snapshot" for the indexes in an database Elasticsearch by script : es.snapshot.create(repository=repository\_name, snapshot=snapshot\_name) I would like to Automatic backup with SML. I really need you… --- ## [New ElasticSearch Node.js client "@elastic/elasticsearch" slower than legacy ElasticSearch Node.js client "elasticsearch" in searches](https://discuss.elastic.co/t/new-elasticsearch-node-js-client-elastic-elasticsearch-slower-than-legacy-elasticsearch-node-js-client-elasticsearch-in-searches/286216)
**Author:** [@luce](https://discuss.elastic.co/u/luce)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 9:36am UTC](https://discuss.elastic.co/t/new-elasticsearch-node-js-client-elastic-elasticsearch-slower-than-legacy-elasticsearch-node-js-client-elasticsearch-in-searches/286216 "2021-10-08T09:36:28Z")
Hi folk, We are using ES version 7.9.0, the application that uses ES is on the NodeJS platform. We have currently replaced the legacy ES client library ("Elasticsearch": "16.7.2"), with the new ES client library "@elast… --- ## [Elasticsearch cluster query logic by ElastAlert](https://discuss.elastic.co/t/elasticsearch-cluster-query-logic-by-elastalert/286301)
**Author:** [@josh12](https://discuss.elastic.co/u/josh12)\ **Replies:** 1\ **Last updated:** [October 11, 2021, 12:19am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-query-logic-by-elastalert/286301 "2021-10-11T00:19:45Z")
Hi, I have question. I am planning to use elasticalert for Elasticsearch. I have 1 cluster with 3 node in my docker es01,es02 and es03. Can I know when elasticalert query in es01, if data does not exists will it query in… --- ## [Huge monitoring-es indexes](https://discuss.elastic.co/t/huge-monitoring-es-indexes/285102)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 10\ **Last updated:** [October 10, 2021, 11:06pm UTC](https://discuss.elastic.co/t/huge-monitoring-es-indexes/285102 "2021-10-10T23:06:44Z")
Today my ES cluster on Elastic cloud frozen due to high CPU consumption. There was not too much pressure with requests so I took a look at indexes to check if there is some problem. I found a lot of old indexes from apm… --- ## [Queries about indexing data into elastic search](https://discuss.elastic.co/t/queries-about-indexing-data-into-elastic-search/285542)
**Author:** [@Magesh\_02](https://discuss.elastic.co/u/Magesh_02)\ **Replies:** 3\ **Last updated:** [October 10, 2021, 11:06pm UTC](https://discuss.elastic.co/t/queries-about-indexing-data-into-elastic-search/285542 "2021-10-10T23:06:24Z")
I have some questions regarding indexing the data. In my case, I needed to push 100 million JSON records into a single index on a specific date, and the date had to be included in the JSON field. I imported this data in… --- ## [Nested condition with double action if returns false or true](https://discuss.elastic.co/t/nested-condition-with-double-action-if-returns-false-or-true/286055)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 0\ **Last updated:** [October 6, 2021, 4:30pm UTC](https://discuss.elastic.co/t/nested-condition-with-double-action-if-returns-false-or-true/286055 "2021-10-06T16:30:27Z")
Hello, I have a question, I do not know if you can have a nested condition in an alert in elastisearch, ie I have a condition that if met returns true and send an email, but I also want if it is not met and returns fals… --- ## [Creating alerts for logs](https://discuss.elastic.co/t/creating-alerts-for-logs/286205)
**Author:** [@Kapil\_K](https://discuss.elastic.co/u/Kapil_K)\ **Replies:** 0\ **Last updated:** [October 8, 2021, 8:17am UTC](https://discuss.elastic.co/t/creating-alerts-for-logs/286205 "2021-10-08T08:17:55Z")
Hi all. I need to add alerts to my dashboards. I have deployed Elasticsearch helm chart to deploy in my K8s cluster. I find only stateful set has been deployed. How can I work with Elasticsearch.yml? --- ## [Thread pool queue size suddenly spikes to thousands](https://discuss.elastic.co/t/thread-pool-queue-size-suddenly-spikes-to-thousands/286176)
**Author:** [@vibgy](https://discuss.elastic.co/u/vibgy)\ **Replies:** 4\ **Last updated:** [October 10, 2021, 10:16pm UTC](https://discuss.elastic.co/t/thread-pool-queue-size-suddenly-spikes-to-thousands/286176 "2021-10-10T22:16:57Z")
Every once in a while, thread pool queue size suddenly spike to thousands When this happens, users start to notice that kibana becomes pretty much unresponsive, for minutes. In the above case, it became unresponsive … --- ## [Memory, storage and CPU requirements depending on node roles](https://discuss.elastic.co/t/memory-storage-and-cpu-requirements-depending-on-node-roles/286294)
**Author:** [@flavienbwk](https://discuss.elastic.co/u/flavienbwk)\ **Replies:** 3\ **Last updated:** [October 10, 2021, 2:58pm UTC](https://discuss.elastic.co/t/memory-storage-and-cpu-requirements-depending-on-node-roles/286294 "2021-10-10T14:58:38Z")
Hi, Has anyone any intuition about what are the memory, storage and CPU requirements depending on node roles ? Is the following intuition right ? Coordinating nodes : high CPU, low memory Master-only nodes : high CPU… --- ## [Some thoughts on adding new Analyzer to existing Index without reindex or close](https://discuss.elastic.co/t/some-thoughts-on-adding-new-analyzer-to-existing-index-without-reindex-or-close/285242)
**Author:** [@garyzjq](https://discuss.elastic.co/u/garyzjq)\ **Replies:** 5\ **Last updated:** [October 10, 2021, 12:19pm UTC](https://discuss.elastic.co/t/some-thoughts-on-adding-new-analyzer-to-existing-index-without-reindex-or-close/285242 "2021-10-10T12:19:57Z")
Hi team, (Elasticsearch 7.5) My scenario is to add a new custom Analyzer to an existing Index. Analyzer definition may like below: { "analyzer": { "ngram\_analyzer": { "type": "custom", … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=560) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=562)