# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=578

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 579

---

## [Multilevel aggregation does not show correct results as compare to total hits](https://discuss.elastic.co/t/multilevel-aggregation-does-not-show-correct-results-as-compare-to-total-hits/283760)

<div class="topic-metadata">

**Author:** [@Khurram\_Fraz](https://discuss.elastic.co/u/Khurram_Fraz)\
**Replies:** 7\
**Last updated:** [September 10, 2021, 9:27am UTC](https://discuss.elastic.co/t/multilevel-aggregation-does-not-show-correct-results-as-compare-to-total-hits/283760 "2021-09-10T09:27:56Z")

</div>

Hi I am facing issue in aggregation withing aggregation as results count does not match with total hits, but when I search aggregation on single record without second level aggregation then shows correct counts. I have…

---

## [Running up Cluster in Docker with TLS on a Mac - Issues](https://discuss.elastic.co/t/running-up-cluster-in-docker-with-tls-on-a-mac-issues/283748)

<div class="topic-metadata">

**Author:** [@neil6323](https://discuss.elastic.co/u/neil6323)\
**Replies:** 1\
**Last updated:** [September 10, 2021, 6:27am UTC](https://discuss.elastic.co/t/running-up-cluster-in-docker-with-tls-on-a-mac-issues/283748 "2021-09-10T06:27:03Z")

</div>

I'm trying to run up an ES cluster which has TLS using Docker on a Mac. I'm using the instructions given in https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html Versions are all latest available. …

---

## [Warm data nodes receiving documents without warm data ILM](https://discuss.elastic.co/t/warm-data-nodes-receiving-documents-without-warm-data-ilm/283486)

<div class="topic-metadata">

**Author:** [@Derick\_Jansen](https://discuss.elastic.co/u/Derick_Jansen)\
**Replies:** 9\
**Last updated:** [September 10, 2021, 4:38am UTC](https://discuss.elastic.co/t/warm-data-nodes-receiving-documents-without-warm-data-ilm/283486 "2021-09-10T04:38:58Z")

</div>

Today I added 2 warm data nodes to our 3 node cluster. This is the first time we are using anything besides hot nodes so I have some observations and questions. The 3 hot data nodes have roles as below "roles" : \[…

---

## [The need of gpgkey](https://discuss.elastic.co/t/the-need-of-gpgkey/283774)

<div class="topic-metadata">

**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 11:37pm UTC](https://discuss.elastic.co/t/the-need-of-gpgkey/283774 "2021-09-09T23:37:03Z")

</div>

I am performing my installation of Kibana (full ELK stack) in my production environment now. As I am going through the documentation I see that when installing it indicates the need to add the lines : baseurl=https://…

---

## [Trial license expired](https://discuss.elastic.co/t/trial-license-expired/283705)

<div class="topic-metadata">

**Author:** [@eh2021-elastic](https://discuss.elastic.co/u/eh2021-elastic)\
**Replies:** 9\
**Last updated:** [September 9, 2021, 11:26pm UTC](https://discuss.elastic.co/t/trial-license-expired/283705 "2021-09-09T23:26:48Z")

</div>

I am running elastic 7.11 and had the enterprise trial license installed. We have xpack security enabled via the elastic configs and I noticed it says when reverting to basic the security will be disabled. Does changing …

---

## [Install ES stack in a k8s cluster composed of multiple machines](https://discuss.elastic.co/t/install-es-stack-in-a-k8s-cluster-composed-of-multiple-machines/283373)

<div class="topic-metadata">

**Author:** [@bigESFan](https://discuss.elastic.co/u/bigESFan)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 11:25pm UTC](https://discuss.elastic.co/t/install-es-stack-in-a-k8s-cluster-composed-of-multiple-machines/283373 "2021-09-09T23:25:00Z")

</div>

I want to install ES stack in a K8s cluster composed of multiple machines which runs vanilla K8s. These machines are all on-prem machines running Ubuntu, hence I need to install ES stack on in-house servers, not on any …

---

## [Removing \_source increases size of index](https://discuss.elastic.co/t/removing-source-increases-size-of-index/283699)

<div class="topic-metadata">

**Author:** [@Dan\_Christensen](https://discuss.elastic.co/u/Dan_Christensen)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 10:06pm UTC](https://discuss.elastic.co/t/removing-source-increases-size-of-index/283699 "2021-09-09T22:06:00Z")

</div>

I've been trying to find ways to optimize my index size in Elasticsearch. In order to understand the size impact of the \_source field, I dumped an index and re-indexed into another index with \_source {enabled:false}. The…

---

## [Disable swap on Linux?](https://discuss.elastic.co/t/disable-swap-on-linux/283266)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 5\
**Last updated:** [September 9, 2021, 3:04pm UTC](https://discuss.elastic.co/t/disable-swap-on-linux/283266 "2021-09-09T15:04:22Z")

</div>

Hello Reading this Disable swapping | Elasticsearch Guide \[master\] | Elastic it seems the general advice is to disable swap completely....That being said, I have Elastic, Logstash and Kibana all installed on the same se…

---

## [Encrypt or hide ES credentials in td-agent configuration file](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770)

<div class="topic-metadata">

**Author:** [@Swathi\_Nayak](https://discuss.elastic.co/u/Swathi_Nayak)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 1:49pm UTC](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770 "2021-09-09T13:49:51Z")

</div>

We have a td-agent configuration file that connects to elastic search with SSL enabled. User and password is used for safe connection. But these credentials are in plain text. How to encrypt or hide these credentials? \<m…

---

## [Elastic Agent won't enroll](https://discuss.elastic.co/t/elastic-agent-wont-enroll/282212)

<div class="topic-metadata">

**Author:** [@greggailly](https://discuss.elastic.co/u/greggailly)\
**Replies:** 11\
**Last updated:** [September 9, 2021, 12:23pm UTC](https://discuss.elastic.co/t/elastic-agent-wont-enroll/282212 "2021-09-09T12:23:07Z")

</div>

Hi, We are having difficulties with some agents not enrolling properly into fleet especially on Windows machines. The setup seems to be ok as we can enroll from some servers. However on other servers when launching th…

---

## [Java Heap dump consuming disk space](https://discuss.elastic.co/t/java-heap-dump-consuming-disk-space/283068)

<div class="topic-metadata">

**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\
**Replies:** 11\
**Last updated:** [September 9, 2021, 11:35am UTC](https://discuss.elastic.co/t/java-heap-dump-consuming-disk-space/283068 "2021-09-09T11:35:41Z")

</div>

We have been getting java heap out of memory errors quite regularly, so this time we decided to take the heap dump and analyze it. But, unfortunately its tough for us to make anything out of it. So we are seeking for …

---

## [How get sum for example with integer fields of each doc](https://discuss.elastic.co/t/how-get-sum-for-example-with-integer-fields-of-each-doc/283747)

<div class="topic-metadata">

**Author:** [@Grigor\_Martirosyan](https://discuss.elastic.co/u/Grigor_Martirosyan)\
**Replies:** 5\
**Last updated:** [September 9, 2021, 10:39am UTC](https://discuss.elastic.co/t/how-get-sum-for-example-with-integer-fields-of-each-doc/283747 "2021-09-09T10:39:33Z")

</div>

I use elastic with spring boot ,and have integer fields in my doc and now I need to do some calculation with those fields for each doc ,is that possible?? this is some try Script script = new Script("{\\n" + …

---

## [Index.number\_of\_replicas setting is not applied during ES startup](https://discuss.elastic.co/t/index-number-of-replicas-setting-is-not-applied-during-es-startup/281946)

<div class="topic-metadata">

**Author:** [@Viktor\_H](https://discuss.elastic.co/u/Viktor_H)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 6:43am UTC](https://discuss.elastic.co/t/index-number-of-replicas-setting-is-not-applied-during-es-startup/281946 "2021-09-09T06:43:20Z")

</div>

I have a question regarding index.number\_of\_replicas setting in elasticsearch.yml. I'm using elastisearch 2.4. Let me explain the situation. I mirror the ES index from single (PROD) node into 3 nodes, which together form…

---

## [Fail to match query](https://discuss.elastic.co/t/fail-to-match-query/283737)

<div class="topic-metadata">

**Author:** [@ekrx](https://discuss.elastic.co/u/ekrx)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 6:41am UTC](https://discuss.elastic.co/t/fail-to-match-query/283737 "2021-09-09T06:41:55Z")

</div>

Hi Im using multimatch with cross fields and im failing to match a query where the query contains more information than the field in the index. for example in the index I have "countryName": "United states of America" …

---

## [Setting up elastic cluster](https://discuss.elastic.co/t/setting-up-elastic-cluster/283673)

<div class="topic-metadata">

**Author:** [@elastic\_dev](https://discuss.elastic.co/u/elastic_dev)\
**Replies:** 2\
**Last updated:** [September 9, 2021, 5:25am UTC](https://discuss.elastic.co/t/setting-up-elastic-cluster/283673 "2021-09-09T05:25:28Z")

</div>

Hi, I am setting up the Elasticsearch with 2 nodes. whenever I start my node-2 it gives me error as below '\[2021-09-08T19:24:43,093\]\[ERROR\]\[o.e.i.g.DatabaseRegistry \] \[node-2\] failed to download database \[GeoLite2-ASN.m…

---

## [I need to have multiple index based on the path of log file](https://discuss.elastic.co/t/i-need-to-have-multiple-index-based-on-the-path-of-log-file/283667)

<div class="topic-metadata">

**Author:** [@akhilkandari](https://discuss.elastic.co/u/akhilkandari)\
**Replies:** 2\
**Last updated:** [September 9, 2021, 4:52am UTC](https://discuss.elastic.co/t/i-need-to-have-multiple-index-based-on-the-path-of-log-file/283667 "2021-09-09T04:52:37Z")

</div>

we have 2 environment one dev & one prod storing logs in dev path & prod path so how can i have 2 separate index for both of these based on path input { stdin{ type =\> "stdin-type" } file{ type…

---

## [elasticsearch.exceptions.RequestError: RequestError(400, 'parse\_exception', 'numeric value expected')](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-parse-exception-numeric-value-expected/283687)

<div class="topic-metadata">

**Author:** [@saltyMcSalt](https://discuss.elastic.co/u/saltyMcSalt)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 12:19am UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-requesterror-requesterror-400-parse-exception-numeric-value-expected/283687 "2021-09-09T00:19:49Z")

</div>

Hi all, I am trying to do a geo-polygon query, running into this exception: elasticsearch.exceptions.RequestError: RequestError(400, 'parse\_exception', 'numeric value expected') Elasticsearch Version 7.5.3 The quer…

---

## [What is the ideal configuration for a Elasticsearch cluster designed for High Availiability?](https://discuss.elastic.co/t/what-is-the-ideal-configuration-for-a-elasticsearch-cluster-designed-for-high-availiability/283654)

<div class="topic-metadata">

**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 11:39pm UTC](https://discuss.elastic.co/t/what-is-the-ideal-configuration-for-a-elasticsearch-cluster-designed-for-high-availiability/283654 "2021-09-08T23:39:46Z")

</div>

Hello, I need to design a elasticsearch cluster for high availability. What is the ideal configuration ( nodes numbers, nodes roles, node configurations, etc ) for elasticsearch? What parameters ( workload, how much se…

---

## [Elasticsearch snapshot settings on statefulset (stack)](https://discuss.elastic.co/t/elasticsearch-snapshot-settings-on-statefulset-stack/283377)

<div class="topic-metadata">

**Author:** [@Asaf\_Moalem](https://discuss.elastic.co/u/Asaf_Moalem)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 8:59pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-settings-on-statefulset-stack/283377 "2021-09-08T20:59:45Z")

</div>

After setting up the stack, unable to activate the path.repo for snapshotting the setup is based on the elasticsearch statefulset setup cant find where to insert: path.repo: \["/mnt/backup"\] error i'm getting: curl…

---

## [Filter on nested field](https://discuss.elastic.co/t/filter-on-nested-field/283697)

<div class="topic-metadata">

**Author:** [@dgastudio](https://discuss.elastic.co/u/dgastudio)\
**Replies:** 3\
**Last updated:** [September 8, 2021, 7:25pm UTC](https://discuss.elastic.co/t/filter-on-nested-field/283697 "2021-09-08T19:25:24Z")

</div>

Hello! I can't understand what i'm doing wrong when filtering on nested field. Mapping { "acc": { "type": "keyword" }, "birthday": { "type": "date", "format": "epoch\_second" }, …

---

## [How does Elasticsearch automatically configure heap size based on available memory?](https://discuss.elastic.co/t/how-does-elasticsearch-automatically-configure-heap-size-based-on-available-memory/283670)

<div class="topic-metadata">

**Author:** [@anto\_gian](https://discuss.elastic.co/u/anto_gian)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 5:49pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-automatically-configure-heap-size-based-on-available-memory/283670 "2021-09-08T17:49:41Z")

</div>

Hi I just setup an Elasticsearch 7.14 cluster with 2 nodes. I was about to configure JVM Heap size and saw this message The heap size is automatically configured by Elasticsearch ## based on the available memory in you…

---

## [Indices replicas are set to 0 during night? \[7.11.2\]](https://discuss.elastic.co/t/indices-replicas-are-set-to-0-during-night-7-11-2/283627)

<div class="topic-metadata">

**Author:** [@mbooh](https://discuss.elastic.co/u/mbooh)\
**Replies:** 3\
**Last updated:** [September 8, 2021, 4:34pm UTC](https://discuss.elastic.co/t/indices-replicas-are-set-to-0-during-night-7-11-2/283627 "2021-09-08T16:34:49Z")

</div>

Hi! I have a strange behavior. During night one of my indices lost a replica setting? Yesterday everything worked fine, they both had 1 replica but this morning it is 0 on one of them meaning when I close one node down …

---

## [Rarely, the "found" key is missing from the multi-get response](https://discuss.elastic.co/t/rarely-the-found-key-is-missing-from-the-multi-get-response/283584)

<div class="topic-metadata">

**Author:** [@jesseb](https://discuss.elastic.co/u/jesseb)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 3:23pm UTC](https://discuss.elastic.co/t/rarely-the-found-key-is-missing-from-the-multi-get-response/283584 "2021-09-08T15:23:55Z")

</div>

We are using Elasticsearch 6.8. Our logs show that very very rarely, we get a responses from multi-get where the "found" field is missing, but the expected documents are otherwise intact. Is this ever expected to happen…

---

## [How can I migrate from elasticsearch to postgresql?](https://discuss.elastic.co/t/how-can-i-migrate-from-elasticsearch-to-postgresql/283041)

<div class="topic-metadata">

**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 2:15pm UTC](https://discuss.elastic.co/t/how-can-i-migrate-from-elasticsearch-to-postgresql/283041 "2021-09-08T14:15:01Z")

</div>

I have to migrate from elasticsearch to postgresql. What is the best way to do that? I found this plugin: Elasticsearch output plugin | Logstash Reference \[7.14\] | Elastic Is it useful for my purpose? Thanks …

---

## [Fuzzy search](https://discuss.elastic.co/t/fuzzy-search/283603)

<div class="topic-metadata">

**Author:** [@Danzo](https://discuss.elastic.co/u/Danzo)\
**Replies:** 13\
**Last updated:** [September 8, 2021, 12:35pm UTC](https://discuss.elastic.co/t/fuzzy-search/283603 "2021-09-08T12:35:32Z")

</div>

Hello, I am trying to do a fuzzy search for my data. But my query returns null Create index PUT /test\_index { "mappings": { "properties": { "testt": { "type": "text" } } …

---

## [File corruption occurred on recovery but checksums are ok](https://discuss.elastic.co/t/file-corruption-occurred-on-recovery-but-checksums-are-ok/283505)

<div class="topic-metadata">

**Author:** [@alsimon](https://discuss.elastic.co/u/alsimon)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 12:33pm UTC](https://discuss.elastic.co/t/file-corruption-occurred-on-recovery-but-checksums-are-ok/283505 "2021-09-08T12:33:40Z")

</div>

Hello, I'm looking for direction on this error. Last week after cleaning and reinstanciating a cluster the error appear. RemoteTransportException\[\[es-data-hot-z2-1-x0hxwanma57yajfoe61amoek8\]\[10.0.34.36:9300\]\[internal:i…

---

## [No valid shards](https://discuss.elastic.co/t/no-valid-shards/282344)

<div class="topic-metadata">

**Author:** [@\_bugc4t](https://discuss.elastic.co/u/_bugc4t)\
**Replies:** 9\
**Last updated:** [September 8, 2021, 12:05pm UTC](https://discuss.elastic.co/t/no-valid-shards/282344 "2021-09-08T12:05:20Z")

</div>

I'm having some issues with my index where it won't allocate any shards so I can't create an Index Pattern. I've looked into the Stats on the Index Management page, which gets: "\_shards": { "total": 2, "succes…

---

## [Ranking Evaluation API Inquiry](https://discuss.elastic.co/t/ranking-evaluation-api-inquiry/283648)

<div class="topic-metadata">

**Author:** [@Ahmed\_Elsheikh](https://discuss.elastic.co/u/Ahmed_Elsheikh)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 11:24am UTC](https://discuss.elastic.co/t/ranking-evaluation-api-inquiry/283648 "2021-09-08T11:24:26Z")

</div>

After reading about Ranking Evaluation API, and I am planning to use it in my search engine project, however, the following points were not clear to me Does it enhance search results as per query per user (set of users…

---

## [Connecting React to elasticsearch API without using AppSearch (Enterprise Search)](https://discuss.elastic.co/t/connecting-react-to-elasticsearch-api-without-using-appsearch-enterprise-search/283472)

<div class="topic-metadata">

**Author:** [@juslin03](https://discuss.elastic.co/u/juslin03)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 11:06am UTC](https://discuss.elastic.co/t/connecting-react-to-elasticsearch-api-without-using-appsearch-enterprise-search/283472 "2021-09-08T11:06:19Z")

</div>

Hello everyone. I'm working on a feature that my boss asked me to do but I'm having some trouble. The goal is to connect our React application (generated with Search UI) directly with ElasticSearch without going throug…

---

## [Yum Repo not working?](https://discuss.elastic.co/t/yum-repo-not-working/283639)

<div class="topic-metadata">

**Author:** [@Marco\_Lazzarotto](https://discuss.elastic.co/u/Marco_Lazzarotto)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 9:38am UTC](https://discuss.elastic.co/t/yum-repo-not-working/283639 "2021-09-08T09:38:22Z")

</div>

I have a Spacewalk running on CentOS which I have to replace with Katello. I've added https://artifacts.elastic.co/packages/7.x/yum as a repo to Katello (exactly as on Spacewalk), but when I try to sync with that reposi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=577)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=579)
