# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=566 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 567 --- ## [How to use Analyze index disk usage API?](https://discuss.elastic.co/t/how-to-use-analyze-index-disk-usage-api/285119)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 7\ **Last updated:** [September 30, 2021, 5:22pm UTC](https://discuss.elastic.co/t/how-to-use-analyze-index-disk-usage-api/285119 "2021-09-30T17:22:32Z")
Hi, We'd like to know how to use \_disk\_usage api. We are trying to figure out how much disk is used by individual fields in an index. The example mentioned in the doc is a POST request but it has no example data… --- ## [Define ordering in wildcard query](https://discuss.elastic.co/t/define-ordering-in-wildcard-query/285601)
**Author:** [@v\_kumar](https://discuss.elastic.co/u/v_kumar)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 5:11pm UTC](https://discuss.elastic.co/t/define-ordering-in-wildcard-query/285601 "2021-09-30T17:11:44Z")
Hi, In one of our use-case we're using a wildcard query on a field("cmpy") with searchQuery(val). Let's say values on different documents for "cmpy" field is "val", "1 val", "a value". Ask is, is there a way to order th… --- ## [Sort by term position, ignoring term freqs](https://discuss.elastic.co/t/sort-by-term-position-ignoring-term-freqs/285611)
**Author:** [@maurienvy](https://discuss.elastic.co/u/maurienvy)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 3:36pm UTC](https://discuss.elastic.co/t/sort-by-term-position-ignoring-term-freqs/285611 "2021-09-30T15:36:16Z")
Hello everyone! I want to do a search that allows me to sort the results depending on wether the terms that I am looking for are closer to the beggining of the text field, and ignore term frequency altogether. So for ex… --- ## [Data/write/bulk tasks appearing on master nodes](https://discuss.elastic.co/t/data-write-bulk-tasks-appearing-on-master-nodes/285375)
**Author:** [@skijash](https://discuss.elastic.co/u/skijash)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 11:58am UTC](https://discuss.elastic.co/t/data-write-bulk-tasks-appearing-on-master-nodes/285375 "2021-09-30T11:58:27Z")
I'm seeing some strange usage patters on dedicated master nodes in a 5.6.16 Elasticsearch cluster. Master nodes seem to be having excessive heap pressure during some workloads, causing them to crash with OOM errors. Whe… --- ## [Strings shown as Multifields](https://discuss.elastic.co/t/strings-shown-as-multifields/285580)
**Author:** [@KarlosA](https://discuss.elastic.co/u/KarlosA)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 11:14am UTC](https://discuss.elastic.co/t/strings-shown-as-multifields/285580 "2021-09-30T11:14:19Z")
Hello, Using Elasticsearch 7.8.1 the following mapping: "mappings": { "\_routing": { "required": true }, "properties": { "qualified\_host": { … --- ## [Extremely Large Documents: Querying and Dealing with](https://discuss.elastic.co/t/extremely-large-documents-querying-and-dealing-with/284393)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 16\ **Last updated:** [September 30, 2021, 11:19am UTC](https://discuss.elastic.co/t/extremely-large-documents-querying-and-dealing-with/284393 "2021-09-30T11:19:31Z")
We are in a situation where extremely large documents were indexed (to text fields) and our ElasticSearch instance has been going down/crazy recently with out of disk and out of memory. We've also run into HTTP response … --- ## [Metricbeat creates a Standalone Cluster](https://discuss.elastic.co/t/metricbeat-creates-a-standalone-cluster/285492)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [September 30, 2021, 11:15am UTC](https://discuss.elastic.co/t/metricbeat-creates-a-standalone-cluster/285492 "2021-09-30T11:15:00Z")
Hi folks, I have running 3 nodes elastic cluster and 2 nodes of logstash and I use metricbeat to monitor them and filebeat to collect logs. Everything is in 7.13.2 version Currently I am experiencing following issue wh… --- ## [Reindexing Api is not copying the data](https://discuss.elastic.co/t/reindexing-api-is-not-copying-the-data/285454)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 9:42am UTC](https://discuss.elastic.co/t/reindexing-api-is-not-copying-the-data/285454 "2021-09-30T09:42:19Z")
Using multi-node Elasticsearch version 7.14 I am facing an issue while doing reindexing.I want reindex all the indices given below health status index uuid pri rep docs.coun… --- ## [Query DSL: Aggregation of fields and also value of fields](https://discuss.elastic.co/t/query-dsl-aggregation-of-fields-and-also-value-of-fields/285083)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 2\ **Last updated:** [September 24, 2021, 3:11pm UTC](https://discuss.elastic.co/t/query-dsl-aggregation-of-fields-and-also-value-of-fields/285083 "2021-09-24T15:11:07Z")
My data structure is as follows username,department,salary bob,finance,2000 joe,HR,2200 chan,finance,3000 bobby,finance,2500 don,HR,1800 I was looking for a Splunk's equivalent command of ... | stats values(salary) b… --- ## [Query DSL: How to use WILDCARD queries on \_id](https://discuss.elastic.co/t/query-dsl-how-to-use-wildcard-queries-on-id/285547)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 0\ **Last updated:** [September 30, 2021, 7:29am UTC](https://discuss.elastic.co/t/query-dsl-how-to-use-wildcard-queries-on-id/285547 "2021-09-30T07:29:44Z")
How to use WILDCARD queries on \_id While searching for specific type of Watcher runs (triggered\_watches), I was looking for a run of a specific type of watcher which contains a keyword in the \_id. But when I do a wildca… --- ## [IndexNotFoundException during reindexing](https://discuss.elastic.co/t/indexnotfoundexception-during-reindexing/285486)
**Author:** [@Junaid\_Usman](https://discuss.elastic.co/u/Junaid_Usman)\ **Replies:** 2\ **Last updated:** [September 30, 2021, 7:22am UTC](https://discuss.elastic.co/t/indexnotfoundexception-during-reindexing/285486 "2021-09-30T07:22:49Z")
Hi All, Recently we changed the Java JDK library from Oracle to RedHat default OpenJDK. Since this change, whenever I am trying to perform reindexing I am getting the IndexNotFoundException: no such index. Does anyone h… --- ## [Sliced scroll with sort](https://discuss.elastic.co/t/sliced-scroll-with-sort/284874)
**Author:** [@Burak](https://discuss.elastic.co/u/Burak)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 7:05am UTC](https://discuss.elastic.co/t/sliced-scroll-with-sort/284874 "2021-09-30T07:05:05Z")
Hello guys. How does actually Elasticsearch perform sorting under the hood for shard and for index? I can find it neither in documentation or books. I am going to use a sliced scroll with sort but in some cases, I have… --- ## [Coordinates precision](https://discuss.elastic.co/t/coordinates-precision/285434)
**Author:** [@dariusz](https://discuss.elastic.co/u/dariusz)\ **Replies:** 4\ **Last updated:** [September 30, 2021, 7:03am UTC](https://discuss.elastic.co/t/coordinates-precision/285434 "2021-09-30T07:03:46Z")
Hello, What is the precision of the floats for the coordinates in shapes, like Polygon? We tried to store a polygon without intersections with coordinates having 6 decimal digits but we got "Unable to Tessellate shape" … --- ## [Failed to migrate index to cold storage because another index with the same name already exists in cold storage](https://discuss.elastic.co/t/failed-to-migrate-index-to-cold-storage-because-another-index-with-the-same-name-already-exists-in-cold-storage/285517)
**Author:** [@techenthusiast](https://discuss.elastic.co/u/techenthusiast)\ **Replies:** 3\ **Last updated:** [September 30, 2021, 1:39am UTC](https://discuss.elastic.co/t/failed-to-migrate-index-to-cold-storage-because-another-index-with-the-same-name-already-exists-in-cold-storage/285517 "2021-09-30T01:39:06Z")
Team, I am getting below issue when i implemented cold storage on an existing Elasticsearch cluster. Failed to migrate index to cold storage because another index with the same name already exists in cold storage. Need… --- ## [Single-node, manage data with more than one path](https://discuss.elastic.co/t/single-node-manage-data-with-more-than-one-path/285485)
**Author:** [@glitz](https://discuss.elastic.co/u/glitz)\ **Replies:** 1\ **Last updated:** [September 29, 2021, 9:36pm UTC](https://discuss.elastic.co/t/single-node-manage-data-with-more-than-one-path/285485 "2021-09-29T21:36:13Z")
Hello, I have a little yet productive (then important) single-node ELK stack version 7.9.3. In my unexperience I didn't properly took care of disk space...so I have a 200GB data partition at around at 90% disk usage, w… --- ## [Auto split an index's shard when certain size reached](https://discuss.elastic.co/t/auto-split-an-indexs-shard-when-certain-size-reached/285521)
**Author:** [@raonic](https://discuss.elastic.co/u/raonic)\ **Replies:** 1\ **Last updated:** [September 29, 2021, 9:06pm UTC](https://discuss.elastic.co/t/auto-split-an-indexs-shard-when-certain-size-reached/285521 "2021-09-29T21:06:48Z")
Hello, I am relatively new to Elasticsearch and building an ES cluster for customers. The way I am designing the cluster is that each customer would get an index of their own which they will write to and read from. Pro… --- ## [Kibana missing cpu stats](https://discuss.elastic.co/t/kibana-missing-cpu-stats/285422)
**Author:** [@Jerry\_Hoffmeister](https://discuss.elastic.co/u/Jerry_Hoffmeister)\ **Replies:** 4\ **Last updated:** [September 29, 2021, 8:45pm UTC](https://discuss.elastic.co/t/kibana-missing-cpu-stats/285422 "2021-09-29T20:45:48Z")
We recently upgraded our Elasticsearch prod cluster from 6.4.2-\>6.8.15-\>7.12.1 and we are not seeing cpu data in kibana now: Hovering over the info link suggests that we need to enable cpu quotas but I'm unable to … --- ## [How to search using keywords or tags?](https://discuss.elastic.co/t/how-to-search-using-keywords-or-tags/285516)
**Author:** [@Sebastian\_Marroquin](https://discuss.elastic.co/u/Sebastian_Marroquin)\ **Replies:** 0\ **Last updated:** [September 29, 2021, 7:58pm UTC](https://discuss.elastic.co/t/how-to-search-using-keywords-or-tags/285516 "2021-09-29T19:58:55Z")
Hello everyone, I need help to resolve a question regarding Elasticsearch. I want to use the tags but in a different way. I am using the following composition when making the "tags": #RGB keyboard Is it possible to d… --- ## [How to enrich data based on similar values?](https://discuss.elastic.co/t/how-to-enrich-data-based-on-similar-values/285508)
**Author:** [@rsokolova](https://discuss.elastic.co/u/rsokolova)\ **Replies:** 0\ **Last updated:** [September 29, 2021, 6:53pm UTC](https://discuss.elastic.co/t/how-to-enrich-data-based-on-similar-values/285508 "2021-09-29T18:53:38Z")
Hello, Does Elasticsearch has any capability to enrich data based on possible or close match ? First index: "name" : "Hamilton Law LLC", "risk" : "High" Second index : "name": "Hamilton Company ", "description": " T… --- ## [Monitoring cluster](https://discuss.elastic.co/t/monitoring-cluster/285507)
**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\ **Replies:** 0\ **Last updated:** [September 29, 2021, 6:52pm UTC](https://discuss.elastic.co/t/monitoring-cluster/285507 "2021-09-29T18:52:18Z")
I have a similar question tothe one posted by souravsahoo "Cluster\_stats not sent to monitoring cluster" but no answer was posted. I am having something similar to where I have installed metricbeats on a production clust… --- ## [How does elasticsearch index json](https://discuss.elastic.co/t/how-does-elasticsearch-index-json/285335)
**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\ **Replies:** 2\ **Last updated:** [September 29, 2021, 3:24pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-index-json/285335 "2021-09-29T15:24:25Z")
We are trying to push log into elastic which adhere to Elastic Common Schema (ECS) . Does elastic index data differently for the logs shown below. Both are having same data just the JSON format is different. Format 1 {… --- ## [Elasticsearch DSL query, exists and not exists fields](https://discuss.elastic.co/t/elasticsearch-dsl-query-exists-and-not-exists-fields/285489)
**Author:** [@antonisnyc94](https://discuss.elastic.co/u/antonisnyc94)\ **Replies:** 0\ **Last updated:** [September 29, 2021, 2:46pm UTC](https://discuss.elastic.co/t/elasticsearch-dsl-query-exists-and-not-exists-fields/285489 "2021-09-29T14:46:16Z")
Hello, I am trying to achieve the following with DSL querying ( not\_exists: "data.aws.userIdentity.sessionContext.attributes.mfaAuthenticated" AND data.aws.eventName: ConsoleLogin AND data.aws.additionalEventData.MFAUse… --- ## [Name or service not known](https://discuss.elastic.co/t/name-or-service-not-known/284831)
**Author:** [@mahalanobis](https://discuss.elastic.co/u/mahalanobis)\ **Replies:** 6\ **Last updated:** [September 29, 2021, 12:29pm UTC](https://discuss.elastic.co/t/name-or-service-not-known/284831 "2021-09-29T12:29:50Z")
I'm trying to setup an Elasticsearch cluster but I'm getting "Name or service not known" Below you can find configuration and logs first node logs: https://gist.github.com/sintonag/d6ee4e4c68084a0941c28afcf251b519 sec… --- ## [Drop event by field type](https://discuss.elastic.co/t/drop-event-by-field-type/285327)
**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\ **Replies:** 1\ **Last updated:** [September 29, 2021, 11:26am UTC](https://discuss.elastic.co/t/drop-event-by-field-type/285327 "2021-09-29T11:26:18Z")
How to drop the indexing event if the field is not integer ? in the below example i had used 123 it works . if i use abc that event should drop. POST \_ingest/pipeline/\_simulate { "docs": \[ { "\_source": { … --- ## [Inconsistency in parsing timestamps for search\_after](https://discuss.elastic.co/t/inconsistency-in-parsing-timestamps-for-search-after/285463)
**Author:** [@muchawiec](https://discuss.elastic.co/u/muchawiec)\ **Replies:** 0\ **Last updated:** [September 29, 2021, 10:33am UTC](https://discuss.elastic.co/t/inconsistency-in-parsing-timestamps-for-search-after/285463 "2021-09-29T10:33:00Z")
Hello, I've been fighting with pagination using search\_after for dates that might be undefined. When I sort in ascending order and the date is undefined I receive in sort property value 9223372036854775807, which I can… --- ## [Where Condition in \_SQL](https://discuss.elastic.co/t/where-condition-in-sql/285427)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 4\ **Last updated:** [September 29, 2021, 9:10am UTC](https://discuss.elastic.co/t/where-condition-in-sql/285427 "2021-09-29T09:10:40Z")
Hello Team I am using Elasticsearch version 7.8.0 I am in need of \_SQL ... curl -X POST "localhost:9200/\_sql?format=txt&pretty" -H 'Content-Type: application/json' -d' { "query": "SELECT count(\*) FROM \\"my-index-000… --- ## [Can I create a query with multiple filter?](https://discuss.elastic.co/t/can-i-create-a-query-with-multiple-filter/285452)
**Author:** [@psyapathy](https://discuss.elastic.co/u/psyapathy)\ **Replies:** 0\ **Last updated:** [September 29, 2021, 9:02am UTC](https://discuss.elastic.co/t/can-i-create-a-query-with-multiple-filter/285452 "2021-09-29T09:02:44Z")
Hi all! Can I create a query with multiple filter? In my documents i have 2 fields: switch-host and port I want get result with multiple filter. Like: switch-host = host1 and ports = port1,port2,port3 switch-host = … --- ## [About Elastic Cluster status erro](https://discuss.elastic.co/t/about-elastic-cluster-status-erro/285450)
**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\ **Replies:** 1\ **Last updated:** [September 29, 2021, 8:50am UTC](https://discuss.elastic.co/t/about-elastic-cluster-status-erro/285450 "2021-09-29T08:50:39Z")
Elasticsearch version is 7.3.1. Due to the frequent data cleaning of the index in the early morning, memory fusions occur frequently in multiple nodes. At this time, another index is performing a bulk operation, and the… --- ## [JVM automatic heap sizing set too low (version 7.14.1)](https://discuss.elastic.co/t/jvm-automatic-heap-sizing-set-too-low-version-7-14-1/285447)
**Author:** [@simone-smith](https://discuss.elastic.co/u/simone-smith)\ **Replies:** 0\ **Last updated:** [September 29, 2021, 8:07am UTC](https://discuss.elastic.co/t/jvm-automatic-heap-sizing-set-too-low-version-7-14-1/285447 "2021-09-29T08:07:37Z")
I'm running a cluster on version 7.14.1 with the bundled JDK: ubuntu@JaneMisme:/$ /usr/share/elasticsearch/jdk/bin/java -version openjdk version "16.0.2" 2021-07-20 OpenJDK Runtime Environment Temurin-16.0.2+7 (build 16… --- ## [Convert single node to Clustered Nodes](https://discuss.elastic.co/t/convert-single-node-to-clustered-nodes/285432)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 5\ **Last updated:** [September 29, 2021, 7:48am UTC](https://discuss.elastic.co/t/convert-single-node-to-clustered-nodes/285432 "2021-09-29T07:48:23Z")
I have a single node Elasticsearch instance. It had default Elasticsearch yml configuration as below. It has one index with some data. # ======================== Elasticsearch Configuration ========================= # #… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=565) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=567)