# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=600

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 601

---

## [Continuously merging documents from multiple indexes](https://discuss.elastic.co/t/continuously-merging-documents-from-multiple-indexes/279953)

<div class="topic-metadata">

**Author:** [@roll](https://discuss.elastic.co/u/roll)\
**Replies:** 2\
**Last updated:** [July 30, 2021, 10:50am UTC](https://discuss.elastic.co/t/continuously-merging-documents-from-multiple-indexes/279953 "2021-07-30T10:50:38Z")

</div>

Hi all, I'm fairly new to elasticsearch and have a question regarding merging of documents and removing duplicates. I got the following data structure: topic1: { "\_id": “a12345", "userId" : "x123”, …

---

## [Unknown setting \[index.lifecycl.parse\_origination\_date\]](https://discuss.elastic.co/t/unknown-setting-index-lifecycl-parse-origination-date/279937)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [July 30, 2021, 9:17am UTC](https://discuss.elastic.co/t/unknown-setting-index-lifecycl-parse-origination-date/279937 "2021-07-30T09:17:36Z")

</div>

I wan to reindex my old index.If i do reindexing it will create new index and the old index which should be deleted on 30 days of rollover (that time) and new index will delete after 30 days even if delete old index man…

---

## [API Authorization](https://discuss.elastic.co/t/api-authorization/280033)

<div class="topic-metadata">

**Author:** [@shashikant.deshmukh](https://discuss.elastic.co/u/shashikant.deshmukh)\
**Replies:** 2\
**Last updated:** [July 30, 2021, 6:14am UTC](https://discuss.elastic.co/t/api-authorization/280033 "2021-07-30T06:14:18Z")

</div>

Dear Expert, I am new to ELK. I need your help to achieve below Request API 1 =\> https://\*\*\*\*\*\*\*\*\*\*\*/api/Account/Authenticate Parameter to pass { "tenancyName": "", "usernameOrEmailAddress": "", "password": "\*\*\*\*…

---

## [How to calculate the elapsed time of a flag status per day?](https://discuss.elastic.co/t/how-to-calculate-the-elapsed-time-of-a-flag-status-per-day/279494)

<div class="topic-metadata">

**Author:** [@MaximeG](https://discuss.elastic.co/u/MaximeG)\
**Replies:** 11\
**Last updated:** [July 30, 2021, 6:35am UTC](https://discuss.elastic.co/t/how-to-calculate-the-elapsed-time-of-a-flag-status-per-day/279494 "2021-07-30T06:35:11Z")

</div>

I'd like to figure out the elapsed time between flag status changes. Simplified example : a person can only be sad or happy. I'd like to know how long each mood was active until it changed. I'm looking for a general be…

---

## [Seeing if its possible to add a timeout to the sample web session detail script](https://discuss.elastic.co/t/seeing-if-its-possible-to-add-a-timeout-to-the-sample-web-session-detail-script/279737)

<div class="topic-metadata">

**Author:** [@jjammin92](https://discuss.elastic.co/u/jjammin92)\
**Replies:** 5\
**Last updated:** [July 30, 2021, 6:22am UTC](https://discuss.elastic.co/t/seeing-if-its-possible-to-add-a-timeout-to-the-sample-web-session-detail-script/279737 "2021-07-30T06:22:08Z")

</div>

Hello, I've been reviewing different ways to aggregate log messages together that have a start event but no end event. Been struggling with the logstash aggregate filter plugin and was looking at retrofitting an old en…

---

## [How do I set the mandatory insertion of all fields when creating a document](https://discuss.elastic.co/t/how-do-i-set-the-mandatory-insertion-of-all-fields-when-creating-a-document/279849)

<div class="topic-metadata">

**Author:** [@myly-zyr](https://discuss.elastic.co/u/myly-zyr)\
**Replies:** 10\
**Last updated:** [July 30, 2021, 6:00am UTC](https://discuss.elastic.co/t/how-do-i-set-the-mandatory-insertion-of-all-fields-when-creating-a-document/279849 "2021-07-30T06:00:30Z")

</div>

In our project, a program does not insert all fields when creating a document, and other programs will report errors when reading the document. I want to set elasticsearch to insert all fields when creating a document. H…

---

## [Is Rust client for Elasticsearch safe for corporation/production use?](https://discuss.elastic.co/t/is-rust-client-for-elasticsearch-safe-for-corporation-production-use/277138)

<div class="topic-metadata">

**Author:** [@odyssey\_2001](https://discuss.elastic.co/u/odyssey_2001)\
**Replies:** 10\
**Last updated:** [July 30, 2021, 2:10am UTC](https://discuss.elastic.co/t/is-rust-client-for-elasticsearch-safe-for-corporation-production-use/277138 "2021-07-30T02:10:48Z")

</div>

Hi, I was on Github and I saw that apparently there is an official client for Elasticsearch written in Rust which is a language that I admire a lot. Here is the link. However they say: The project is still very much …

---

## [Error in Elasticsearch cluster on Openshift after restarting nodes](https://discuss.elastic.co/t/error-in-elasticsearch-cluster-on-openshift-after-restarting-nodes/280010)

<div class="topic-metadata">

**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\
**Replies:** 7\
**Last updated:** [July 30, 2021, 1:20am UTC](https://discuss.elastic.co/t/error-in-elasticsearch-cluster-on-openshift-after-restarting-nodes/280010 "2021-07-30T01:20:02Z")

</div>

Hi there, I have an Elasticsearch cluster 7.13.2 : 2 data nodes 3 master nodes 2 client nodes all of them deployed on Openshift with minimal security enabled. TLS security is not enabled, is not necessary in our case…

---

## [Circuit Breaker Exception - version 5.2.0](https://discuss.elastic.co/t/circuit-breaker-exception-version-5-2-0/279799)

<div class="topic-metadata">

**Author:** [@chateesh](https://discuss.elastic.co/u/chateesh)\
**Replies:** 5\
**Last updated:** [July 30, 2021, 12:26am UTC](https://discuss.elastic.co/t/circuit-breaker-exception-version-5-2-0/279799 "2021-07-30T00:26:18Z")

</div>

Hi, Client node is unresponsive and getting error as below "org.elasticsearch.common.breaker.CircuitBreakingException: \[parent\] Data too large, data for \[\<http\_request\>\] would be larger than limit of \[24003005644/22.3g…

---

## [What all shards are included in "open shards": (active / unassigned /relocating / initializing) all of them?](https://discuss.elastic.co/t/what-all-shards-are-included-in-open-shards-active-unassigned-relocating-initializing-all-of-them/279754)

<div class="topic-metadata">

**Author:** [@Bhavik92](https://discuss.elastic.co/u/Bhavik92)\
**Replies:** 2\
**Last updated:** [July 29, 2021, 8:02pm UTC](https://discuss.elastic.co/t/what-all-shards-are-included-in-open-shards-active-unassigned-relocating-initializing-all-of-them/279754 "2021-07-29T20:02:23Z")

</div>

I'm trying to build some monitoring to avoid the errors like this: " this cluster currently has \[999\]/\[1000\] maximum shards open Looking at response from cluster\_health I see shards in 4 categories: active / unassigned…

---

## [400 Bad Request when trying to query elasticsearch using HttpClient](https://discuss.elastic.co/t/400-bad-request-when-trying-to-query-elasticsearch-using-httpclient/279898)

<div class="topic-metadata">

**Author:** [@MarkCo](https://discuss.elastic.co/u/MarkCo)\
**Replies:** 5\
**Last updated:** [July 29, 2021, 5:58pm UTC](https://discuss.elastic.co/t/400-bad-request-when-trying-to-query-elasticsearch-using-httpclient/279898 "2021-07-29T17:58:42Z")

</div>

I am trying to perform a query searching in elasticsearch using httpclient. Whenever I do so though, I get an error when hitting my HttpResponseMessage response variable. It tells me it is a 400 (Bad request). I checked…

---

## [Elasticsearch query to return all records](https://discuss.elastic.co/t/elasticsearch-query-to-return-all-records/279998)

<div class="topic-metadata">

**Author:** [@varsha\_dusa](https://discuss.elastic.co/u/varsha_dusa)\
**Replies:** 1\
**Last updated:** [July 29, 2021, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-return-all-records/279998 "2021-07-29T15:27:21Z")

</div>

I have a small database in Elasticsearch and for testing purposes would like to pull all records back. I am attempting to use a URL of the form... http://localhost:9200/foo/\_search?pretty=true&q={'matchAll':{''}} Can s…

---

## [How to use string interpolation for query string - Elasticsearch](https://discuss.elastic.co/t/how-to-use-string-interpolation-for-query-string-elasticsearch/280001)

<div class="topic-metadata">

**Author:** [@MarkCo](https://discuss.elastic.co/u/MarkCo)\
**Replies:** 0\
**Last updated:** [July 29, 2021, 2:58pm UTC](https://discuss.elastic.co/t/how-to-use-string-interpolation-for-query-string-elasticsearch/280001 "2021-07-29T14:58:45Z")

</div>

I am trying to perform string interpolation to my variable that contains of a string of JSON Objects. Below is my original query: var query = "{\\"size\\": 1000,\\"query\\": {\\"bool\\": {\\"should\\":\[ {\\"match\\": { \\"level\\"…

---

## [Snapshot restoration failures - FileAlreadyExistsException](https://discuss.elastic.co/t/snapshot-restoration-failures-filealreadyexistsexception/279976)

<div class="topic-metadata">

**Author:** [@Vamsi\_Htc](https://discuss.elastic.co/u/Vamsi_Htc)\
**Replies:** 3\
**Last updated:** [July 29, 2021, 2:33pm UTC](https://discuss.elastic.co/t/snapshot-restoration-failures-filealreadyexistsexception/279976 "2021-07-29T14:33:18Z")

</div>

We are facing issues with restoring a snapshot from s3 bucket and the we are seeing below error. ES version 5.6.3 Two of our nodes went down which got both primary and replicas which resulted in cluster turning into re…

---

## [Esrally ingesting to two indices parallelly](https://discuss.elastic.co/t/esrally-ingesting-to-two-indices-parallelly/279933)

<div class="topic-metadata">

**Author:** [@Sameera\_De\_Silva](https://discuss.elastic.co/u/Sameera_De_Silva)\
**Replies:** 5\
**Last updated:** [July 29, 2021, 1:44pm UTC](https://discuss.elastic.co/t/esrally-ingesting-to-two-indices-parallelly/279933 "2021-07-29T13:44:57Z")

</div>

I want to add documents to two indices simultaneously. For that, I tried with parallel option . But it stills run sequentially and add data to firstly mentioned index and later to the second one . Is this supported is …

---

## [Synonym filter and preserve originals](https://discuss.elastic.co/t/synonym-filter-and-preserve-originals/279989)

<div class="topic-metadata">

**Author:** [@JoeSouthpaw](https://discuss.elastic.co/u/JoeSouthpaw)\
**Replies:** 0\
**Last updated:** [July 29, 2021, 1:32pm UTC](https://discuss.elastic.co/t/synonym-filter-and-preserve-originals/279989 "2021-07-29T13:32:42Z")

</div>

Hi there! I'm using elasticsearch for full-text front end search and have set up a custom search analyser with a large solr-format synonym filter attached. Unfortunately, some of these synonyms address business cases wh…

---

## [Escaping field names in queries](https://discuss.elastic.co/t/escaping-field-names-in-queries/279861)

<div class="topic-metadata">

**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\
**Replies:** 7\
**Last updated:** [July 29, 2021, 1:29pm UTC](https://discuss.elastic.co/t/escaping-field-names-in-queries/279861 "2021-07-29T13:29:11Z")

</div>

We have discovered that some documents in our index contain a source that resembles the following { "a": { "b" : \["test1"\] }, "a.b" : \["test2"\] } I'm aware of how to perform queries with "exists", but how do…

---

## [CentOS 7 unable to start elastic search searcive](https://discuss.elastic.co/t/centos-7-unable-to-start-elastic-search-searcive/278770)

<div class="topic-metadata">

**Author:** [@rdewan](https://discuss.elastic.co/u/rdewan)\
**Replies:** 2\
**Last updated:** [July 29, 2021, 1:25pm UTC](https://discuss.elastic.co/t/centos-7-unable-to-start-elastic-search-searcive/278770 "2021-07-29T13:25:39Z")

</div>

● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Thu 2021-07-15 10:57:58 UTC; 13min a…

---

## [Keeping same search rate on one index spikes CPU in data nodes vs distributing the same load in two indices](https://discuss.elastic.co/t/keeping-same-search-rate-on-one-index-spikes-cpu-in-data-nodes-vs-distributing-the-same-load-in-two-indices/279985)

<div class="topic-metadata">

**Author:** [@Anurag\_Prajapat](https://discuss.elastic.co/u/Anurag_Prajapat)\
**Replies:** 0\
**Last updated:** [July 29, 2021, 12:56pm UTC](https://discuss.elastic.co/t/keeping-same-search-rate-on-one-index-spikes-cpu-in-data-nodes-vs-distributing-the-same-load-in-two-indices/279985 "2021-07-29T12:56:35Z")

</div>

We tested out two scenarios: 100 TPS search traffic was pointed to one index 20% CPU usage in data nodes and Threadpool search queue spikes observed. Application side there was increase in TP90 by 3x 80-20 TPS sea…

---

## [\_refresh is throwing error \[post /indexname/\_refresh\] does not support having a body](https://discuss.elastic.co/t/refresh-is-throwing-error-post-indexname-refresh-does-not-support-having-a-body/279940)

<div class="topic-metadata">

**Author:** [@Sumit\_Gaud](https://discuss.elastic.co/u/Sumit_Gaud)\
**Replies:** 6\
**Last updated:** [July 29, 2021, 12:50pm UTC](https://discuss.elastic.co/t/refresh-is-throwing-error-post-indexname-refresh-does-not-support-having-a-body/279940 "2021-07-29T12:50:05Z")

</div>

Hi, I deployed a elasticsearch on Azure using Elasticsearch (Self-Managed) I am using NEST nuget package to communicate to elasticsearch api in a .net application. This my application works fine with elastic search ho…

---

## ["Cannot invoke "java.util.List.get(int)" because "nestedParsedSource" is null" when using nested properties + has\_parent + inner\_hits](https://discuss.elastic.co/t/cannot-invoke-java-util-list-get-int-because-nestedparsedsource-is-null-when-using-nested-properties-has-parent-inner-hits/279967)

<div class="topic-metadata">

**Author:** [@pavelfry](https://discuss.elastic.co/u/pavelfry)\
**Replies:** 0\
**Last updated:** [July 29, 2021, 10:38am UTC](https://discuss.elastic.co/t/cannot-invoke-java-util-list-get-int-because-nestedparsedsource-is-null-when-using-nested-properties-has-parent-inner-hits/279967 "2021-07-29T10:38:19Z")

</div>

Hello everyone, I've been banging my head against this for a while and it seems I've reached a dead end. I've tried to simplify the code as much as possible. Problem: I'm using the child/parent relationships and neste…

---

## [Global Search Query](https://discuss.elastic.co/t/global-search-query/279835)

<div class="topic-metadata">

**Author:** [@Ravi\_Chhatwani](https://discuss.elastic.co/u/Ravi_Chhatwani)\
**Replies:** 2\
**Last updated:** [July 29, 2021, 10:12am UTC](https://discuss.elastic.co/t/global-search-query/279835 "2021-07-29T10:12:52Z")

</div>

I am working on the Global Search functionality which include mathematical comparision operation like (=,\>,\<) , I am looking for the solution how to infer the field and then search the text or value meaning I can give us…

---

## [Filter on script hit result](https://discuss.elastic.co/t/filter-on-script-hit-result/279960)

<div class="topic-metadata">

**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\
**Replies:** 0\
**Last updated:** [July 29, 2021, 9:59am UTC](https://discuss.elastic.co/t/filter-on-script-hit-result/279960 "2021-07-29T09:59:55Z")

</div>

Hi all and sorry for my poor english. I'm filtering my index cpes using script (painless). As a a result , I have hits with null values and I need to exclude those hits. I've done this query, but I cannot find a way t…

---

## [Elastic server](https://discuss.elastic.co/t/elastic-server/279831)

<div class="topic-metadata">

**Author:** [@111479](https://discuss.elastic.co/u/111479)\
**Replies:** 5\
**Last updated:** [July 29, 2021, 8:54am UTC](https://discuss.elastic.co/t/elastic-server/279831 "2021-07-29T08:54:39Z")

</div>

Hi, i am want to install an elastic server what are the requirement i need to do it? for exmpale : ram, cpu, operation system? thank you.

---

## [Elasticsearch service enabled, vendor disabled issue](https://discuss.elastic.co/t/elasticsearch-service-enabled-vendor-disabled-issue/279934)

<div class="topic-metadata">

**Author:** [@ritesh.aduri45](https://discuss.elastic.co/u/ritesh.aduri45)\
**Replies:** 3\
**Last updated:** [July 29, 2021, 6:58am UTC](https://discuss.elastic.co/t/elasticsearch-service-enabled-vendor-disabled-issue/279934 "2021-07-29T06:58:52Z")

</div>

\[root@hib-vm-siemlog elasticsearch\]# systemctl status elasticsearch ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: fail…

---

## [Updated nodes no longer show up in Kibana monitoring](https://discuss.elastic.co/t/updated-nodes-no-longer-show-up-in-kibana-monitoring/279776)

<div class="topic-metadata">

**Author:** [@JSieminski](https://discuss.elastic.co/u/JSieminski)\
**Replies:** 3\
**Last updated:** [July 28, 2021, 11:50pm UTC](https://discuss.elastic.co/t/updated-nodes-no-longer-show-up-in-kibana-monitoring/279776 "2021-07-28T23:50:44Z")

</div>

I have a 8 server cluster, with each server running 4 instances of elasticsearch on it (ie.. ELK001, ELK001-a, ELK001-b, ELK001-c). I have started the rolling update process from 7.7 to 7.13.4. After updating ELK001 to 7…

---

## [No logs for this cluster in Stack Monitoring](https://discuss.elastic.co/t/no-logs-for-this-cluster-in-stack-monitoring/279850)

<div class="topic-metadata">

**Author:** [@ranvijaysanu](https://discuss.elastic.co/u/ranvijaysanu)\
**Replies:** 0\
**Last updated:** [July 28, 2021, 11:42am UTC](https://discuss.elastic.co/t/no-logs-for-this-cluster-in-stack-monitoring/279850 "2021-07-28T11:42:10Z")

</div>

Hi Team, I have setup elasticsearch, kibana and filebeat. I have configured elasticsearch module using autodiscover based on hints and it is sending logs to the kibana.But In the Stack Monitoring Section under Logs I ca…

---

## [Elasticsearch - refresh config](https://discuss.elastic.co/t/elasticsearch-refresh-config/279904)

<div class="topic-metadata">

**Author:** [@Brian\_Z](https://discuss.elastic.co/u/Brian_Z)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 11:38pm UTC](https://discuss.elastic.co/t/elasticsearch-refresh-config/279904 "2021-07-28T23:38:51Z")

</div>

I'm using elastic cloud and I need to configure synonyms. I've done that successfully by uploading a zip file containing a elasticsearch/dictionaries/synonyms.txt file and creating an index that uses them by doing: PUT …

---

## [Alias Index visualization](https://discuss.elastic.co/t/alias-index-visualization/279871)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 11:24pm UTC](https://discuss.elastic.co/t/alias-index-visualization/279871 "2021-07-28T23:24:31Z")

</div>

Hi all, I'm wondering if it is possible to visualize data of 2 differently named indices in a single index pattern. For example , i have a1 index and b1 index. I have a\* index pattern. Is it possible to give alias fo…

---

## [Unable to add node to the Elasticsearch cluster](https://discuss.elastic.co/t/unable-to-add-node-to-the-elasticsearch-cluster/279487)

<div class="topic-metadata">

**Author:** [@Sathiraju\_Eswar](https://discuss.elastic.co/u/Sathiraju_Eswar)\
**Replies:** 3\
**Last updated:** [July 28, 2021, 11:20pm UTC](https://discuss.elastic.co/t/unable-to-add-node-to-the-elasticsearch-cluster/279487 "2021-07-28T23:20:39Z")

</div>

I am newbie to elastic search clustering. I am trying to setup a simple cluster with two nodes(not adviced) for experimental purpose. My nodes are my laptop and my desktop. The master node elastic search configuration : …

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=599)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=601)
