# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=594

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 595

---

## [Vulnerability - HTTP DELETE Method Enabled](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057)

<div class="topic-metadata">

**Author:** [@sujivisva](https://discuss.elastic.co/u/sujivisva)\
**Replies:** 1\
**Last updated:** [August 11, 2021, 1:21pm UTC](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057 "2021-08-11T13:21:41Z")

</div>

We are using ElasticSearch software for our application in our Project. But we are getting the following vulnerabilities from the security team HTTP DELETE Method Enabled The Web server contains a flaw that may allow a…

---

## [Minimal snapshots](https://discuss.elastic.co/t/minimal-snapshots/280962)

<div class="topic-metadata">

**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 12:28pm UTC](https://discuss.elastic.co/t/minimal-snapshots/280962 "2021-08-11T12:28:31Z")

</div>

Under the Data management section on the elastic.co/subscriptions page I see an entry for "Minimal snapshots". What is that referring to? I can not find any information in the documentation.

---

## [CEPH Storage For Elasticsearch](https://discuss.elastic.co/t/ceph-storage-for-elasticsearch/280775)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 4\
**Last updated:** [August 11, 2021, 11:59am UTC](https://discuss.elastic.co/t/ceph-storage-for-elasticsearch/280775 "2021-08-11T11:59:09Z")

</div>

We are planning to create an Elasticsearch cluster over Kubernetes, and for this CEPH distributed file system would be used as Storage, I understand that elastic recommends using local storage, however are there any know…

---

## [How to Map dynamic columns of a class in Elastic](https://discuss.elastic.co/t/how-to-map-dynamic-columns-of-a-class-in-elastic/281042)

<div class="topic-metadata">

**Author:** [@SUSANTA\_PRADHAN](https://discuss.elastic.co/u/SUSANTA_PRADHAN)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-map-dynamic-columns-of-a-class-in-elastic/281042 "2021-08-11T11:02:11Z")

</div>

I have a class say Employee having two columns like Key and Value. I get response from one api response like (the response has key value pairs like key1: value1 and the response is dynamic in nature) { "notes":\[ "title…

---

## [Parsing query part from Apache log](https://discuss.elastic.co/t/parsing-query-part-from-apache-log/281048)

<div class="topic-metadata">

**Author:** [@Greg\_R](https://discuss.elastic.co/u/Greg_R)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 11:22am UTC](https://discuss.elastic.co/t/parsing-query-part-from-apache-log/281048 "2021-08-11T11:22:14Z")

</div>

Greetings I'm completly new to Elastic ; I've set up Apache to send logs to ElasticSearch through FileBeat (I'm not using LogStash). I can see the logs entries in Kibana. Now I'd like to use the parameters from the que…

---

## [Kafka-Elastic search sink connector showing high CPU usage](https://discuss.elastic.co/t/kafka-elastic-search-sink-connector-showing-high-cpu-usage/281043)

<div class="topic-metadata">

**Author:** [@kushaq\_flier](https://discuss.elastic.co/u/kushaq_flier)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 11:06am UTC](https://discuss.elastic.co/t/kafka-elastic-search-sink-connector-showing-high-cpu-usage/281043 "2021-08-11T11:06:20Z")

</div>

I am using elastic search sink connector in distributed mode(2 instance). With task of 8 and about 20 to 25 topics to be sink’ed to elastic search. Even when there are no records to sink, the worker java process is show…

---

## [Query\_string not match with Should Condions](https://discuss.elastic.co/t/query-string-not-match-with-should-condions/281038)

<div class="topic-metadata">

**Author:** [@enrico.bellanti](https://discuss.elastic.co/u/enrico.bellanti)\
**Replies:** 1\
**Last updated:** [August 11, 2021, 11:00am UTC](https://discuss.elastic.co/t/query-string-not-match-with-should-condions/281038 "2021-08-11T11:00:43Z")

</div>

My intention is to find a word in all documents which have this condions: ("type" =\> "Faq") OR ("type" =\> "NormativeDoc") OR ("type" =\> "Document" AND "profile\_id\_document" =\> X). I tried this but it doesn't work: $pa…

---

## [Filtering for wildcard domains](https://discuss.elastic.co/t/filtering-for-wildcard-domains/280834)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 3\
**Last updated:** [August 11, 2021, 10:08am UTC](https://discuss.elastic.co/t/filtering-for-wildcard-domains/280834 "2021-08-11T10:08:38Z")

</div>

Hi there, I have to write a query that has to find documents where one of the fields (type: text, also available: keyword) matches a list of wildcard domains. I know that it's sub-optimal but that's what I have to work …

---

## [Match entities where field with specific value does not exists](https://discuss.elastic.co/t/match-entities-where-field-with-specific-value-does-not-exists/280902)

<div class="topic-metadata">

**Author:** [@farkasaba](https://discuss.elastic.co/u/farkasaba)\
**Replies:** 7\
**Last updated:** [August 11, 2021, 9:18am UTC](https://discuss.elastic.co/t/match-entities-where-field-with-specific-value-does-not-exists/280902 "2021-08-11T09:18:44Z")

</div>

Hello there, I have my documents indexed in the following format: { ... "special\_id"=1, "phase"="create" }, { ... "special\_id"=1, "phase"="update" }, { ... "special\_id"=2, "phase"="update" }, { ... "special\_id"=3, "pha…

---

## [Unable to retrieve version information from Elasticsearch nodes. unable to get local issuer certificate](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-get-local-issuer-certificate/281008)

<div class="topic-metadata">

**Author:** [@auasad](https://discuss.elastic.co/u/auasad)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 7:44am UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-get-local-issuer-certificate/281008 "2021-08-11T07:44:16Z")

</div>

Hello community, I have setup an elk stack following the URL; Run in Docker with TLS enabled everything setup successfully with elastic default settings, but I want to configure Letsencrypt SSL for http instead of es0…

---

## [How to get all closed indicies?](https://discuss.elastic.co/t/how-to-get-all-closed-indicies/281004)

<div class="topic-metadata">

**Author:** [@grrkaan](https://discuss.elastic.co/u/grrkaan)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 7:20am UTC](https://discuss.elastic.co/t/how-to-get-all-closed-indicies/281004 "2021-08-11T07:20:11Z")

</div>

I have a cluseter and a few open and closed indexes inside.I want to get only closed indexes. GET \_cat/indices?v&s=status this query getting all indicies. I need a GET \_cat/indices?v&s=status:'close' like this query. I…

---

## [Enriching data from nested field query](https://discuss.elastic.co/t/enriching-data-from-nested-field-query/280993)

<div class="topic-metadata">

**Author:** [@amamdouh](https://discuss.elastic.co/u/amamdouh)\
**Replies:** 0\
**Last updated:** [August 11, 2021, 6:39am UTC](https://discuss.elastic.co/t/enriching-data-from-nested-field-query/280993 "2021-08-11T06:39:35Z")

</div>

Hi there.., I'm trying to setup an enrich policy that matches a nested field and then returns the parent object, but couldn't find a way so far.. My index mapping looks like this: { "lkp\_persons": { "mappings…

---

## [Upgrade elk from 6.3.2 to 7.14](https://discuss.elastic.co/t/upgrade-elk-from-6-3-2-to-7-14/280982)

<div class="topic-metadata">

**Author:** [@praseeb\_kdas](https://discuss.elastic.co/u/praseeb_kdas)\
**Replies:** 3\
**Last updated:** [August 11, 2021, 5:27am UTC](https://discuss.elastic.co/t/upgrade-elk-from-6-3-2-to-7-14/280982 "2021-08-11T05:27:41Z")

</div>

We are planning to upgrade our ELK 6.3.2 to 7.14,can we know the steps which we need to perform so there wont any data loss for us.

---

## [New nodes failing to join cluster](https://discuss.elastic.co/t/new-nodes-failing-to-join-cluster/280980)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 2\
**Last updated:** [August 11, 2021, 5:11am UTC](https://discuss.elastic.co/t/new-nodes-failing-to-join-cluster/280980 "2021-08-11T05:11:39Z")

</div>

I have two nodes that have been out of the cluster for some time and I have just tried to bring them back in. Both fail in the same manner: connection timed out. Tcpdump running on one of the cluster members shows the …

---

## [Help! I can't filter out docs with bad ids in reindex](https://discuss.elastic.co/t/help-i-cant-filter-out-docs-with-bad-ids-in-reindex/280968)

<div class="topic-metadata">

**Author:** [@tasslehawf](https://discuss.elastic.co/u/tasslehawf)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 11:28pm UTC](https://discuss.elastic.co/t/help-i-cant-filter-out-docs-with-bad-ids-in-reindex/280968 "2021-08-10T23:28:40Z")

</div>

Our index has a number of docs with bad ids. They were set by this script during a previous reindex: def lowerCaseAuthor = ctx.author\_string != null ? ctx.author\_string.toLowerCase() : null; def lowerCasePub = ctx.publi…

---

## [Questions On Setting Up A Production Ready Elastic Stack](https://discuss.elastic.co/t/questions-on-setting-up-a-production-ready-elastic-stack/280973)

<div class="topic-metadata">

**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 11:17pm UTC](https://discuss.elastic.co/t/questions-on-setting-up-a-production-ready-elastic-stack/280973 "2021-08-10T23:17:23Z")

</div>

Hello, After working with the elastic stack as a proof of concept and setting it up accordingly our business is ready to move onto a production level stack. We just had some questions before making the jump. We are hop…

---

## [Create ILM Rollover on existing index](https://discuss.elastic.co/t/create-ilm-rollover-on-existing-index/280814)

<div class="topic-metadata">

**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\
**Replies:** 5\
**Last updated:** [August 10, 2021, 11:02pm UTC](https://discuss.elastic.co/t/create-ilm-rollover-on-existing-index/280814 "2021-08-10T23:02:52Z")

</div>

Hi, I have an existing index that grows too big and I see perf going down (the index is 85Gb for the moment). I created an IL policy, and now trying to create an index template to apply the policy on. Given the existi…

---

## [Help with an if statement in a drop processor](https://discuss.elastic.co/t/help-with-an-if-statement-in-a-drop-processor/280824)

<div class="topic-metadata">

**Author:** [@jjammin92](https://discuss.elastic.co/u/jjammin92)\
**Replies:** 2\
**Last updated:** [August 10, 2021, 9:25pm UTC](https://discuss.elastic.co/t/help-with-an-if-statement-in-a-drop-processor/280824 "2021-08-10T21:25:16Z")

</div>

Hello, I am looking to create a conditional in an elasticsearch drop processor and running into some trouble. This should be rather simple I think, I'm just missing something obvious. I would like to accept all documen…

---

## [Ingest Pipeline that extracts metadata fields into new field](https://discuss.elastic.co/t/ingest-pipeline-that-extracts-metadata-fields-into-new-field/280950)

<div class="topic-metadata">

**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 5:07pm UTC](https://discuss.elastic.co/t/ingest-pipeline-that-extracts-metadata-fields-into-new-field/280950 "2021-08-10T17:07:53Z")

</div>

I'm trying to create an Ingest Pipeline in Elasticsearch 7.4 that will allow me to to take the value of the "\_id" metadata field and copy it into a new field. I've tried using the "set" processor to do this, but I'm unab…

---

## [Is there any way to monitor elastic search application?](https://discuss.elastic.co/t/is-there-any-way-to-monitor-elastic-search-application/280652)

<div class="topic-metadata">

**Author:** [@Rajdeep\_Sahoo](https://discuss.elastic.co/u/Rajdeep_Sahoo)\
**Replies:** 5\
**Last updated:** [August 10, 2021, 4:43pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-monitor-elastic-search-application/280652 "2021-08-10T16:43:25Z")

</div>

I am trying to monitor elastic search application and I have found the below ways, and none of them is working for me , please suggest if there is any way to monitor. As part of elastic search application monitoring I wa…

---

## [Difference between elastic node down and only elasticprocess down](https://discuss.elastic.co/t/difference-between-elastic-node-down-and-only-elasticprocess-down/280913)

<div class="topic-metadata">

**Author:** [@lecko](https://discuss.elastic.co/u/lecko)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 4:06pm UTC](https://discuss.elastic.co/t/difference-between-elastic-node-down-and-only-elasticprocess-down/280913 "2021-08-10T16:06:07Z")

</div>

Hello, Short summary: I noticed this difference in elasticsearch behavior in 2 scenarios: If elastic cluster is green and elasticproces goes down on one node , elastic cluster starts process of reallocting in after som…

---

## [Elasticsearch Shard distribution size differs enormously](https://discuss.elastic.co/t/elasticsearch-shard-distribution-size-differs-enormously/280845)

<div class="topic-metadata">

**Author:** [@sauasmast](https://discuss.elastic.co/u/sauasmast)\
**Replies:** 2\
**Last updated:** [August 10, 2021, 3:09pm UTC](https://discuss.elastic.co/t/elasticsearch-shard-distribution-size-differs-enormously/280845 "2021-08-10T15:09:44Z")

</div>

I need to load 1.2 billion documents in the elasticsearch. As of today we have 6 nodes in the cluster. To equally distribute the shards among the 6 nodes I have mentioned the number of shards to be 42. I use spark and it…

---

## [Cannot view ingested data in discover after index-template creation](https://discuss.elastic.co/t/cannot-view-ingested-data-in-discover-after-index-template-creation/280907)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 1\
**Last updated:** [August 10, 2021, 1:52pm UTC](https://discuss.elastic.co/t/cannot-view-ingested-data-in-discover-after-index-template-creation/280907 "2021-08-10T13:52:26Z")

</div>

Hello, I had created an index template , so that mappings are added automatically when an index of specific pattern is created. However i can't seem to find the data on discover tab ? Here;s the output section : outpu…

---

## [Search by runtime fields using wildcards](https://discuss.elastic.co/t/search-by-runtime-fields-using-wildcards/280933)

<div class="topic-metadata">

**Author:** [@Mark\_Hulevsky](https://discuss.elastic.co/u/Mark_Hulevsky)\
**Replies:** 0\
**Last updated:** [August 10, 2021, 1:37pm UTC](https://discuss.elastic.co/t/search-by-runtime-fields-using-wildcards/280933 "2021-08-10T13:37:10Z")

</div>

Hi, I'm trying to search by runtime field using wildcards. Here is my mapping. "mappings": { "runtime": { "totalCostRounded": { "type": "keyword", "sc…

---

## [ELK Upgrade Error from 7.9.3 to 7.13.4 Using Ansible](https://discuss.elastic.co/t/elk-upgrade-error-from-7-9-3-to-7-13-4-using-ansible/280929)

<div class="topic-metadata">

**Author:** [@BlessingEzeama](https://discuss.elastic.co/u/BlessingEzeama)\
**Replies:** 0\
**Last updated:** [August 10, 2021, 12:50pm UTC](https://discuss.elastic.co/t/elk-upgrade-error-from-7-9-3-to-7-13-4-using-ansible/280929 "2021-08-10T12:50:31Z")

</div>

FAILED! =\> {"msg": "The conditional check 'redhat\_elasticsearch\_install\_from\_repo.rc == 0' failed. The error was: error while evaluating conditional (redhat\_elasticsearch\_install\_from\_repo.rc == 0): 'dict object' has no …

---

## [org.elasticsearch.bootstrap.StartupException: ElasticsearchException \[Failure running machine learning native code](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failure-running-machine-learning-native-code/280865)

<div class="topic-metadata">

**Author:** [@Logenleedev](https://discuss.elastic.co/u/Logenleedev)\
**Replies:** 3\
**Last updated:** [August 10, 2021, 11:11am UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-elasticsearchexception-failure-running-machine-learning-native-code/280865 "2021-08-10T11:11:05Z")

</div>

Hi I am new to elastic search. Currently, I am doing a project that requires machine learning functionality in elasticsearch. Here is the error I get: \[2021-08-10T12:09:08,266\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptio…

---

## [Cluster cannot find nodes](https://discuss.elastic.co/t/cluster-cannot-find-nodes/280507)

<div class="topic-metadata">

**Author:** [@smam](https://discuss.elastic.co/u/smam)\
**Replies:** 2\
**Last updated:** [August 10, 2021, 9:56am UTC](https://discuss.elastic.co/t/cluster-cannot-find-nodes/280507 "2021-08-10T09:56:58Z")

</div>

Hello! I read a lot of Internet Guides on how to set-up an elasticsearch cluster. Yet I was not successful. I will paste one elasticsearch.yml file, so you can maybe tell me what is wrong with it. # ==================…

---

## [Extended bounds on auto-interval date histogram](https://discuss.elastic.co/t/extended-bounds-on-auto-interval-date-histogram/280904)

<div class="topic-metadata">

**Author:** [@rooch](https://discuss.elastic.co/u/rooch)\
**Replies:** 0\
**Last updated:** [August 10, 2021, 9:41am UTC](https://discuss.elastic.co/t/extended-bounds-on-auto-interval-date-histogram/280904 "2021-08-10T09:41:43Z")

</div>

I need to be able to run a query with a set of filters and an auto-interval date histogram aggregation to retrieve a set of bins. I then need to be able to rerun that query but with additional filters, and receive exact…

---

## [Elasticsearch "READ ONLY" Indices](https://discuss.elastic.co/t/elasticsearch-read-only-indices/280837)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 7\
**Last updated:** [August 10, 2021, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-read-only-indices/280837 "2021-08-10T07:36:06Z")

</div>

Hello Team: I am using Elasticsearch version 7.8.0.. I am using Index Settings : index.blocks.read\_only\_allow\_delete: true for my indices ... If i run a CURL command to update my index settings curl -X PUT "localh…

---

## [Memory management for elasticsearch](https://discuss.elastic.co/t/memory-management-for-elasticsearch/280702)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 4\
**Last updated:** [August 10, 2021, 6:32am UTC](https://discuss.elastic.co/t/memory-management-for-elasticsearch/280702 "2021-08-10T06:32:50Z")

</div>

Hi Team, I am trying to calculate good balance of total memory in three node es cluster. If I have three node e.s cluster each with 32G memory, 8 vcpu. Which combination would be more suitable for balancing memory betw…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=593)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=595)
