# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=577 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 578 --- ## [How to fix one field in elasticsearch by using document\_id?](https://discuss.elastic.co/t/how-to-fix-one-field-in-elasticsearch-by-using-document-id/283538)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 2:12pm UTC](https://discuss.elastic.co/t/how-to-fix-one-field-in-elasticsearch-by-using-document-id/283538 "2021-09-13T14:12:17Z")
I am getting multiple messages in different queues and I am also using document\_id to avoid duplicates values. But the problem with docuemnt\_id is, it is overwriting the existing data with a new one But I want to fix one… --- ## [Watcher Field Value Based Alerts](https://discuss.elastic.co/t/watcher-field-value-based-alerts/283871)
**Author:** [@Zunera\_Nayyar](https://discuss.elastic.co/u/Zunera_Nayyar)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 2:09pm UTC](https://discuss.elastic.co/t/watcher-field-value-based-alerts/283871 "2021-09-13T14:09:54Z")
Hi, I have an app which returns different statuscodes based on URL being hit. I want to generate make a watcher alert based on the values in the same field with different outputs. I do not want the collective count/agg… --- ## [Script\_score query does not support \[query\]](https://discuss.elastic.co/t/script-score-query-does-not-support-query/284076)
**Author:** [@Ahmed\_ZERHOUNI](https://discuss.elastic.co/u/Ahmed_ZERHOUNI)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 1:06pm UTC](https://discuss.elastic.co/t/script-score-query-does-not-support-query/284076 "2021-09-13T13:06:38Z")
\*\*Hey everyone, i'm trying to apply a custom score using script score but i'm facing this issue...i would really appreciate your help Here's the query i'm using for that. my query was based on the documentation of Ela… --- ## [Maximum number of inputs in filter section terms](https://discuss.elastic.co/t/maximum-number-of-inputs-in-filter-section-terms/283807)
**Author:** [@manjurgani](https://discuss.elastic.co/u/manjurgani)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 12:00pm UTC](https://discuss.elastic.co/t/maximum-number-of-inputs-in-filter-section-terms/283807 "2021-09-13T12:00:45Z")
GET example3/\_search?size=0 { "query": { "bool": { "filter": \[ { "terms": { "userId": \[ 199196,199195 \] }} \] } }, "aggs": { "top-tags": { "terms": { "field": "userId", "size": 10 }, "aggs": { "to-answe… --- ## [Is there a way to save Index Templates?](https://discuss.elastic.co/t/is-there-a-way-to-save-index-templates/284019)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 2\ **Last updated:** [September 13, 2021, 11:14am UTC](https://discuss.elastic.co/t/is-there-a-way-to-save-index-templates/284019 "2021-09-13T11:14:07Z")
Hello, Is there a way to save index templates , in the UI (under "actions") i don't see an option that lets one save an index template . I have a few log types that would probably require a few index templates and pr… --- ## [Monitoring Elastic Stack?](https://discuss.elastic.co/t/monitoring-elastic-stack/283791)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 8:44am UTC](https://discuss.elastic.co/t/monitoring-elastic-stack/283791 "2021-09-13T08:44:09Z")
Hello We have a monitoring system that watchest the Elastic Stack but the CPU and memory randomly shoot up to 94% (in case of memory) and all of a sudden, go back down to 70% or so. Are there any metrics that I should … --- ## [Circuit break exception - version 7.7.0](https://discuss.elastic.co/t/circuit-break-exception-version-7-7-0/281568)
**Author:** [@ravindrababua](https://discuss.elastic.co/u/ravindrababua)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 8:35am UTC](https://discuss.elastic.co/t/circuit-break-exception-version-7-7-0/281568 "2021-09-13T08:35:18Z")
We have configured 3node cluster (2masters and 1data node),we have two sites prod and DR. between prod and DR we configured replication via kafka. We have observed below errors in logstash, and elasticsearch on DR site,… --- ## [Equivalent of 'Group By' along with significant\_text aggregation](https://discuss.elastic.co/t/equivalent-of-group-by-along-with-significant-text-aggregation/283944)
**Author:** [@firasd](https://discuss.elastic.co/u/firasd)\ **Replies:** 4\ **Last updated:** [September 13, 2021, 8:25am UTC](https://discuss.elastic.co/t/equivalent-of-group-by-along-with-significant-text-aggregation/283944 "2021-09-13T08:25:06Z")
Hi folks.. I'm looking for some equivalent of SQL's 'group by' or 'distinct' ... basically I have this query { "query": { "range": { "post\_date": { "from": "2016-04-14 00:00:00", "to": "2016-04-15 00:00:0… --- ## [How to use BulkProcessor in synchronous processing?](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-synchronous-processing/283968)
**Author:** [@avocato](https://discuss.elastic.co/u/avocato)\ **Replies:** 7\ **Last updated:** [September 13, 2021, 7:50am UTC](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-synchronous-processing/283968 "2021-09-13T07:50:38Z")
Hello, I am trying to figure out how to use BulkProcessor \[Bulk API | Java REST Client \[7.14\] | Elastic\] during synchronous processing (bulk method) so that I could write something like this: val processor = BulkPr… --- ## [Elastic search shutdown automatically](https://discuss.elastic.co/t/elastic-search-shutdown-automatically/283927)
**Author:** [@DANISH\_MAHER](https://discuss.elastic.co/u/DANISH_MAHER)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 6:01am UTC](https://discuss.elastic.co/t/elastic-search-shutdown-automatically/283927 "2021-09-13T06:01:29Z")
Elastic search shutdown automatically every hour can you tell me solution i am using magento 2 VPS cent os --- ## [Elasticsearch backup only hot indices](https://discuss.elastic.co/t/elasticsearch-backup-only-hot-indices/283856)
**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-backup-only-hot-indices/283856 "2021-09-13T05:54:45Z")
I have a cluster of elastiсsearch consisting of 6 nodes. 5 indexes are created per day (each index consume about 10 to 250 gigabytes) we now have a snapshot repository (which is located on the NFS share) where these indi… --- ## [What is this java\_pid%pid\_number%.hprof and can it be deleted](https://discuss.elastic.co/t/what-is-this-java-pid-pid-number-hprof-and-can-it-be-deleted/283907)
**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\ **Replies:** 1\ **Last updated:** [September 13, 2021, 1:50am UTC](https://discuss.elastic.co/t/what-is-this-java-pid-pid-number-hprof-and-can-it-be-deleted/283907 "2021-09-13T01:50:29Z")
I have my ES data and ES Logs going to another location, but in my /var/lib/elasticsearch I have a file named java\_pid%pid\_number%.hprof that has cause my OS drive to be out of space. which is now causing me issues. Wha… --- ## ['More than one write index' errors still occurring in version 7.13.4](https://discuss.elastic.co/t/more-than-one-write-index-errors-still-occurring-in-version-7-13-4/283993)
**Author:** [@bvilnis](https://discuss.elastic.co/u/bvilnis)\ **Replies:** 0\ **Last updated:** [September 13, 2021, 12:18am UTC](https://discuss.elastic.co/t/more-than-one-write-index-errors-still-occurring-in-version-7-13-4/283993 "2021-09-13T00:18:00Z")
This issue has previously been raised here, but to summarise our current issue: We are currently seeing our APM stack (Elastic APM, Elasticsearch, Kibana) produce the following error: alias \[apm-7.13.4-metric\] has mor… --- ## [Expanding non-LVM Disk with Elasticsearch indicies stored on](https://discuss.elastic.co/t/expanding-non-lvm-disk-with-elasticsearch-indicies-stored-on/283779)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 1:03am UTC](https://discuss.elastic.co/t/expanding-non-lvm-disk-with-elasticsearch-indicies-stored-on/283779 "2021-09-13T01:03:26Z")
We have a capacity problem with our worker nodes (ELK stack) oot@xxx03:/elkdata# yum list | grep elasticsearch | grep \\.12 apm-server.i686 7.12.0-1 elasticsearch-7.x apm-s… --- ## [Comment added to case or event](https://discuss.elastic.co/t/comment-added-to-case-or-event/283694)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 12:59am UTC](https://discuss.elastic.co/t/comment-added-to-case-or-event/283694 "2021-09-13T00:59:24Z")
Hello every body, I have a question about the notes added by the user in ELK, it is possible to have the visibility of them in ONE place? Best regards, --- ## [Elasticsearch enable watcher - email notifications](https://discuss.elastic.co/t/elasticsearch-enable-watcher-email-notifications/283794)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 9\ **Last updated:** [September 12, 2021, 6:30pm UTC](https://discuss.elastic.co/t/elasticsearch-enable-watcher-email-notifications/283794 "2021-09-12T18:30:02Z")
Hello, I would like to ask You for help, I have one-node elasticsearch with kibana on kubernetes. I need to have on kibana watcher email notifications enabled but don't know how to do from elasticsearch yml file. Rig… --- ## [Significant Text Aggregation always returning zero buckets](https://discuss.elastic.co/t/significant-text-aggregation-always-returning-zero-buckets/283976)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 2\ **Last updated:** [September 12, 2021, 5:09pm UTC](https://discuss.elastic.co/t/significant-text-aggregation-always-returning-zero-buckets/283976 "2021-09-12T17:09:31Z")
Hi All, I'm attempting to use the significant\_text aggregation with a field that is stored as a text field and analyzed via the english analyzer but I'm having an issue where no buckets are being returned. I'm essentia… --- ## [IOPS for a Data node is extremely high while other not](https://discuss.elastic.co/t/iops-for-a-data-node-is-extremely-high-while-other-not/282772)
**Author:** [@bugb](https://discuss.elastic.co/u/bugb)\ **Replies:** 8\ **Last updated:** [September 12, 2021, 4:57pm UTC](https://discuss.elastic.co/t/iops-for-a-data-node-is-extremely-high-while-other-not/282772 "2021-09-12T16:57:45Z")
Version: Elastic Search 7.13 I am running 3 master nodes, 2 client nodes and 10 data nodes (199-399 Gb each node) And one day I have seen the IOPS for a Data node is extremely high while other not Could you please … --- ## [Primary shard](https://discuss.elastic.co/t/primary-shard/283964)
**Author:** [@Lixing\_Yi](https://discuss.elastic.co/u/Lixing_Yi)\ **Replies:** 1\ **Last updated:** [September 12, 2021, 12:35pm UTC](https://discuss.elastic.co/t/primary-shard/283964 "2021-09-12T12:35:09Z")
situaiton: In the case that the primary itself fails, the node hosting the primary will send a message to the master about it. The indexing operation will wait (up to 1 minute) for the master to promote one of the repli… --- ## [ELASTIC SEARCH 7.9.3 not able to start on OPEN JDK](https://discuss.elastic.co/t/elastic-search-7-9-3-not-able-to-start-on-open-jdk/283940)
**Author:** [@devin](https://discuss.elastic.co/u/devin)\ **Replies:** 2\ **Last updated:** [September 11, 2021, 4:16pm UTC](https://discuss.elastic.co/t/elastic-search-7-9-3-not-able-to-start-on-open-jdk/283940 "2021-09-11T16:16:34Z")
I want to use open jdk for my elastic search rather than bundled jdk. I have set up .bash\_profile variables as below but Elastic search keeps on failing to start up with below error.PLEASE HELP !! could not find java in… --- ## [Data restore with elasticdump](https://discuss.elastic.co/t/data-restore-with-elasticdump/283945)
**Author:** [@Ravi\_Gusain](https://discuss.elastic.co/u/Ravi_Gusain)\ **Replies:** 0\ **Last updated:** [September 11, 2021, 3:15pm UTC](https://discuss.elastic.co/t/data-restore-with-elasticdump/283945 "2021-09-11T15:15:10Z")
Hi, I am making use of elasticdump to restore data from one Elastic cluster to another Elastic cluster. I have restored all the data of previous day till midnight with the help of snapshots and now need to restore all t… --- ## [Can I use x-pack features on a self-hosted cluster?](https://discuss.elastic.co/t/can-i-use-x-pack-features-on-a-self-hosted-cluster/283928)
**Author:** [@blunckr](https://discuss.elastic.co/u/blunckr)\ **Replies:** 2\ **Last updated:** [September 11, 2021, 6:34am UTC](https://discuss.elastic.co/t/can-i-use-x-pack-features-on-a-self-hosted-cluster/283928 "2021-09-11T06:34:25Z")
Hi there, I'm looking into using the wildcard field type, I noticed it was part of 'x-pack' which I was not familiar with previously. After reading a bit about it, I'm quite confused. It seems to me that parts of x-pack… --- ## [Monitoring ingress pipelines](https://discuss.elastic.co/t/monitoring-ingress-pipelines/283823)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [September 11, 2021, 5:03am UTC](https://discuss.elastic.co/t/monitoring-ingress-pipelines/283823 "2021-09-11T05:03:44Z")
version 7.14 I have just started trying to use an ingest pipeline on some indices produced by winlogbeats. There are two indices because there are two different versions of the agent. I have a very simple pipeline wit… --- ## [Use of wait\_until for deleteByQuery in java rest client](https://discuss.elastic.co/t/use-of-wait-until-for-deletebyquery-in-java-rest-client/283923)
**Author:** [@douglm](https://discuss.elastic.co/u/douglm)\ **Replies:** 7\ **Last updated:** [September 11, 2021, 3:26am UTC](https://discuss.elastic.co/t/use-of-wait-until-for-deletebyquery-in-java-rest-client/283923 "2021-09-11T03:26:50Z")
I have the following code for a deletion (ES 7.13): final DeleteByQueryRequest delQreq = new DeleteByQueryRequest(targetIndex); final ESQueryFilter esq = getFilters(null); final QueryBuilder qb… --- ## [Reindex API and slightly different document counts](https://discuss.elastic.co/t/reindex-api-and-slightly-different-document-counts/283852)
**Author:** [@MattG1](https://discuss.elastic.co/u/MattG1)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 11:00pm UTC](https://discuss.elastic.co/t/reindex-api-and-slightly-different-document-counts/283852 "2021-09-10T23:00:48Z")
Hello, I have recently created a new index via the reindex API. I am now running both indexes at the same time and indexing/deleting documents to both. I have noticed that the document counts between the two indexes are… --- ## [Enabling TLS communication betweeb Kibana & Elasticsearch](https://discuss.elastic.co/t/enabling-tls-communication-betweeb-kibana-elasticsearch/283808)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 1\ **Last updated:** [September 10, 2021, 6:10pm UTC](https://discuss.elastic.co/t/enabling-tls-communication-betweeb-kibana-elasticsearch/283808 "2021-09-10T18:10:55Z")
Hi - I'm trying to establish TLS communication between Kibana and ES clusters so that I could explore the Kibana alerting for anomaly detection in ML (since this is a pre-requisite for Kibana alerts). Existing setup: E… --- ## [Add normal field filter to nested field aggregation](https://discuss.elastic.co/t/add-normal-field-filter-to-nested-field-aggregation/283864)
**Author:** [@jiajun](https://discuss.elastic.co/u/jiajun)\ **Replies:** 0\ **Last updated:** [September 10, 2021, 11:01am UTC](https://discuss.elastic.co/t/add-normal-field-filter-to-nested-field-aggregation/283864 "2021-09-10T11:01:27Z")
I have document structure like below in ES: { customer\_id: 1, is\_member: true, purchases: \[ { pur\_id: 1, pur\_channel\_id: 1, pur\_amount: 100.00, pur\_date: '2021-08-01' }, { … --- ## [Kibana server is not ready yet (license: null)](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-license-null/283551)
**Author:** [@jceddy](https://discuss.elastic.co/u/jceddy)\ **Replies:** 7\ **Last updated:** [September 10, 2021, 3:39pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-license-null/283551 "2021-09-10T15:39:44Z")
I am attempting to set up an Elasticsearch cluster consisting of three master-eligible nodes. elasticsearch.yml looks like this on all of the nodes: cluster.name: elkdev node.name: {machinename}.dev.company.local netwo… --- ## [Multi tenancy drawbacks](https://discuss.elastic.co/t/multi-tenancy-drawbacks/283766)
**Author:** [@BentoumiTech](https://discuss.elastic.co/u/BentoumiTech)\ **Replies:** 2\ **Last updated:** [September 10, 2021, 1:12pm UTC](https://discuss.elastic.co/t/multi-tenancy-drawbacks/283766 "2021-09-10T13:12:02Z")
Hello, I'm currently using ElasticSearch and storing all the data in one index for all my users. The data sent by each user is by nature different for each user which makes my index fields number growing rapidly and ex… --- ## [\[rally\] Could not connect to your Elasticsearch metrics store](https://discuss.elastic.co/t/rally-could-not-connect-to-your-elasticsearch-metrics-store/283762)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 8\ **Last updated:** [September 10, 2021, 12:43pm UTC](https://discuss.elastic.co/t/rally-could-not-connect-to-your-elasticsearch-metrics-store/283762 "2021-09-10T12:43:39Z")
In long: Hey, I am trying to do a benchmark test against a cluster. The cluster in question contains 3 nodes in virtualbox, with no ssl restriction or authentication (fully for test). Then I have another cluster hosted … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=576) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=578)