# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=603 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 604 --- ## [How can I add secret to the keystore using API](https://discuss.elastic.co/t/how-can-i-add-secret-to-the-keystore-using-api/279532)
**Author:** [@idelix](https://discuss.elastic.co/u/idelix)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 6:09am UTC](https://discuss.elastic.co/t/how-can-i-add-secret-to-the-keystore-using-api/279532 "2021-07-26T06:09:26Z")
I deployed elastic cloud in Azure and now I'm trying to add keystore secret but not through UI as it will have to be automated in CI/CD. Could you please advise how this can be achieved via either API or some remote co… --- ## [Keep data for X days only](https://discuss.elastic.co/t/keep-data-for-x-days-only/279214)
**Author:** [@Elitlogik](https://discuss.elastic.co/u/Elitlogik)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 5:13am UTC](https://discuss.elastic.co/t/keep-data-for-x-days-only/279214 "2021-07-26T05:13:16Z")
I have a demo computer with limited storage. Therefore I need to delete all indexed data older than 7 days or 5 GB. How would a life cycle policy look like to fulfill that need? Thank you very much for your support! --- ## [How to add an already existing ElasticSearch server to Cluster?](https://discuss.elastic.co/t/how-to-add-an-already-existing-elasticsearch-server-to-cluster/279575)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 4\ **Last updated:** [July 26, 2021, 5:04am UTC](https://discuss.elastic.co/t/how-to-add-an-already-existing-elasticsearch-server-to-cluster/279575 "2021-07-26T05:04:45Z")
We have a standalone ElasticSearch server having around 50 indices. We want to add this server to a cluster of 3 nodes which are new (having no data/indices). Is it achievable in Elastic search? Please suggest. --- ## [How to add Load more button or infinte scrolling?](https://discuss.elastic.co/t/how-to-add-load-more-button-or-infinte-scrolling/279151)
**Author:** [@pradeep14](https://discuss.elastic.co/u/pradeep14)\ **Replies:** 5\ **Last updated:** [July 26, 2021, 4:53am UTC](https://discuss.elastic.co/t/how-to-add-load-more-button-or-infinte-scrolling/279151 "2021-07-26T04:53:13Z")
Hi guys I'm new in ES and I want to add a load more button because instead of pagination so could you please hel me --- ## [Query chinese resp?](https://discuss.elastic.co/t/query-chinese-resp/279587)
**Author:** [@GaiserChen](https://discuss.elastic.co/u/GaiserChen)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 4:48am UTC](https://discuss.elastic.co/t/query-chinese-resp/279587 "2021-07-26T04:48:20Z")
when I curl it work succ but when I search in java high level client it work on ??? thanks --- ## [How to prevent kubernetes bring down more than 1 data node during the deployment](https://discuss.elastic.co/t/how-to-prevent-kubernetes-bring-down-more-than-1-data-node-during-the-deployment/279104)
**Author:** [@junhuangli](https://discuss.elastic.co/u/junhuangli)\ **Replies:** 6\ **Last updated:** [July 26, 2021, 2:01am UTC](https://discuss.elastic.co/t/how-to-prevent-kubernetes-bring-down-more-than-1-data-node-during-the-deployment/279104 "2021-07-26T02:01:58Z")
Not sure if this is a question for kubernetes or for elasticsearch. We are hosting elasticsearch on kubernetes. And during the deployment, the kubernetes brings down the pods 1 by 1. But it doesn't wait for the data nod… --- ## [How to find disk space usage of logs returned by query](https://discuss.elastic.co/t/how-to-find-disk-space-usage-of-logs-returned-by-query/279220)
**Author:** [@jteare](https://discuss.elastic.co/u/jteare)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 12:29am UTC](https://discuss.elastic.co/t/how-to-find-disk-space-usage-of-logs-returned-by-query/279220 "2021-07-26T00:29:05Z")
I am attempting to determine storage requirements for logging various systems. It's convenient when all logs for the system in question are going into one index e.g. all firewall logs going into a firewall index, I can j… --- ## [Index lifecycle management not working. automatic reverting of policy](https://discuss.elastic.co/t/index-lifecycle-management-not-working-automatic-reverting-of-policy/279509)
**Author:** [@mw77](https://discuss.elastic.co/u/mw77)\ **Replies:** 2\ **Last updated:** [July 26, 2021, 12:22am UTC](https://discuss.elastic.co/t/index-lifecycle-management-not-working-automatic-reverting-of-policy/279509 "2021-07-26T00:22:10Z")
Hi Guys, I am reposting this. I have create a ILM policy which has around 90 indices attached to it. from the UI I have created a policy and below is the request when I click on show request. I am enabling the delete… --- ## [Snapshot policy which is only triggered by ILM and not on its own schedule](https://discuss.elastic.co/t/snapshot-policy-which-is-only-triggered-by-ilm-and-not-on-its-own-schedule/277758)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 6\ **Last updated:** [July 25, 2021, 11:43pm UTC](https://discuss.elastic.co/t/snapshot-policy-which-is-only-triggered-by-ilm-and-not-on-its-own-schedule/277758 "2021-07-25T23:43:53Z")
Hi, Is it possible to have a snapshot policy which does not have a schedule? I wanted the ILM to create a snapshot by invoking the snapshot policy just before the index is deleted at the end of cold phase. I want to us… --- ## [Monitoring cluster](https://discuss.elastic.co/t/monitoring-cluster/279331)
**Author:** [@jungsoo](https://discuss.elastic.co/u/jungsoo)\ **Replies:** 1\ **Last updated:** [July 25, 2021, 11:21pm UTC](https://discuss.elastic.co/t/monitoring-cluster/279331 "2021-07-25T23:21:23Z")
Hello, My company is using monitoring cluster and want to upgrade production cluster from 7.11 to 7.13 where monitoring cluster is 7.11. The document says " \* Ideally the monitoring cluster and the production cluster … --- ## [Basic License XPack Security for ES 5.2.1](https://discuss.elastic.co/t/basic-license-xpack-security-for-es-5-2-1/279396)
**Author:** [@spr](https://discuss.elastic.co/u/spr)\ **Replies:** 2\ **Last updated:** [July 25, 2021, 11:20pm UTC](https://discuss.elastic.co/t/basic-license-xpack-security-for-es-5-2-1/279396 "2021-07-25T23:20:12Z")
Hi, I'm trying to use the following basic license which is supposed to have xpack security available. However when I deploy the same. I get the following error {"error":{"root\_cause":\[{"type":"security\_exception","reas… --- ## [Problems adding the prerequisites for cross cluster replication](https://discuss.elastic.co/t/problems-adding-the-prerequisites-for-cross-cluster-replication/279430)
**Author:** [@Francisco\_Yanez](https://discuss.elastic.co/u/Francisco_Yanez)\ **Replies:** 1\ **Last updated:** [July 25, 2021, 11:18pm UTC](https://discuss.elastic.co/t/problems-adding-the-prerequisites-for-cross-cluster-replication/279430 "2021-07-25T23:18:02Z")
I am trying to add the prerequisites as pointed on the Tutorial: Set up cross-cluster replication | Elasticsearch Guide \[7.13\] | Elastic so I added to my k8s elastic yaml in the local cluster: ccr\_user: cluster: - man… --- ## [Are the logs lost if elastic search down](https://discuss.elastic.co/t/are-the-logs-lost-if-elastic-search-down/279561)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 3\ **Last updated:** [July 25, 2021, 6:04pm UTC](https://discuss.elastic.co/t/are-the-logs-lost-if-elastic-search-down/279561 "2021-07-25T18:04:39Z")
Hello every body, I have a question about the fate of the logs when the elasticsearch is down. if the logs are lost during the inactivity of elasticsearch, how can we get around this problem? Best regards, --- ## [Fscrawler image file text extraction](https://discuss.elastic.co/t/fscrawler-image-file-text-extraction/279538)
**Author:** [@Jenya87](https://discuss.elastic.co/u/Jenya87)\ **Replies:** 6\ **Last updated:** [July 25, 2021, 5:50pm UTC](https://discuss.elastic.co/t/fscrawler-image-file-text-extraction/279538 "2021-07-25T17:50:54Z")
Hello! I use FScrawler 2.7 on Windows 7 to ingest files content into Elastic 7.13 node on centos 7. It works really greate for .pdf and .docx extensions, but not for imge files such as .jpg or .png and .txt files. My… --- ## [Howto configure log4j2.properties to log to /dev/log](https://discuss.elastic.co/t/howto-configure-log4j2-properties-to-log-to-dev-log/279566)
**Author:** [@f1outsourcing](https://discuss.elastic.co/u/f1outsourcing)\ **Replies:** 0\ **Last updated:** [July 25, 2021, 2:01pm UTC](https://discuss.elastic.co/t/howto-configure-log4j2-properties-to-log-to-dev-log/279566 "2021-07-25T14:01:30Z")
I can get this to work, but I prefer to log to /dev/log appender.syslog.type = Syslog appender.syslog.name = syslog appender.syslog.host = xxxxxxxx.local appender.syslog.port = 514 appender.syslog.protocol = UDP ap… --- ## [How to run multiple nodes with esplugin / testsClusters?](https://discuss.elastic.co/t/how-to-run-multiple-nodes-with-esplugin-testsclusters/279562)
**Author:** [@Dor\_Levi](https://discuss.elastic.co/u/Dor_Levi)\ **Replies:** 0\ **Last updated:** [July 25, 2021, 1:15pm UTC](https://discuss.elastic.co/t/how-to-run-multiple-nodes-with-esplugin-testsclusters/279562 "2021-07-25T13:15:13Z")
Hi, I'm working on a plugin for Elasticsearch, and want to try and test it in a multi-node cluster. I'm building it with gradle and the esplugin/testcluster plugins. Everything works great when it's just one node, but… --- ## [I forgot to index a field](https://discuss.elastic.co/t/i-forgot-to-index-a-field/279552)
**Author:** [@Zongxian\_Feng](https://discuss.elastic.co/u/Zongxian_Feng)\ **Replies:** 1\ **Last updated:** [July 25, 2021, 9:27am UTC](https://discuss.elastic.co/t/i-forgot-to-index-a-field/279552 "2021-07-25T09:27:53Z")
Hi. I forgot to index a field called "n\_citation" which is in type "integer". When mapping the dataset, I decide to map the necessary fields (like "title" and "abstract") only to save my time. Now, it turns out that th… --- ## [Is there any character limit on term filter?](https://discuss.elastic.co/t/is-there-any-character-limit-on-term-filter/279544)
**Author:** [@dotel](https://discuss.elastic.co/u/dotel)\ **Replies:** 4\ **Last updated:** [July 25, 2021, 5:47am UTC](https://discuss.elastic.co/t/is-there-any-character-limit-on-term-filter/279544 "2021-07-25T05:47:29Z")
I'm trying to check if a certain attachment is previously indexed or not to avoid reindexing that document. But the problem is, for longer text fields, the term filter isn't working. I didn't find any mention of this lim… --- ## [What's the difference between Id's query and Term Query when finding documents by “\_id”?](https://discuss.elastic.co/t/whats-the-difference-between-ids-query-and-term-query-when-finding-documents-by-id/279523)
**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\ **Replies:** 2\ **Last updated:** [July 24, 2021, 7:11am UTC](https://discuss.elastic.co/t/whats-the-difference-between-ids-query-and-term-query-when-finding-documents-by-id/279523 "2021-07-24T07:11:39Z")
I want to get document by "\_id", I have 3 choices: GET document by "\_id" GET order/\_doc/001 Use Id's Query, GET order/\_search { "query": { "ids" : { "values" : \["001"\] } } } Though Id's query takes array of Id's but I … --- ## [Perfomance optimization for nested aggregations](https://discuss.elastic.co/t/perfomance-optimization-for-nested-aggregations/279518)
**Author:** [@treasures78](https://discuss.elastic.co/u/treasures78)\ **Replies:** 0\ **Last updated:** [July 23, 2021, 11:45pm UTC](https://discuss.elastic.co/t/perfomance-optimization-for-nested-aggregations/279518 "2021-07-23T23:45:41Z")
Hi, please help me figure out, is there any way to optimize this request? At the moment, the request is being executed for about 30-40 seconds. The index stores information about the call history. The query builds a re… --- ## [Trying to create role for some applications and got error](https://discuss.elastic.co/t/trying-to-create-role-for-some-applications-and-got-error/279365)
**Author:** [@gelfandbein](https://discuss.elastic.co/u/gelfandbein)\ **Replies:** 1\ **Last updated:** [July 23, 2021, 9:17pm UTC](https://discuss.elastic.co/t/trying-to-create-role-for-some-applications-and-got-error/279365 "2021-07-23T21:17:37Z")
Hello! I try to create some basic roles for some application what connecting to ES 6.8.15, but stuck on simple query: curl -XGET http://localhost:9200/images/\_search -u server:password output: { "error" : { "ro… --- ## [How to update elasticsearch.yml if I am using Elastic cloud through API](https://discuss.elastic.co/t/how-to-update-elasticsearch-yml-if-i-am-using-elastic-cloud-through-api/279505)
**Author:** [@idelix](https://discuss.elastic.co/u/idelix)\ **Replies:** 5\ **Last updated:** [July 23, 2021, 5:30pm UTC](https://discuss.elastic.co/t/how-to-update-elasticsearch-yml-if-i-am-using-elastic-cloud-through-api/279505 "2021-07-23T17:30:05Z")
Hello, I'm trying to update elasticsearch.yml and kibana.yml in elastic cloud through API but I cannot find any reference. Basically I need to be able to configure it fully through API as it will be done by ci/cd pipel… --- ## [Are the shingles in the search-as-you-type field type \*words\* or \*letters\*?](https://discuss.elastic.co/t/are-the-shingles-in-the-search-as-you-type-field-type-words-or-letters/279463)
**Author:** [@Markus\_Jevring](https://discuss.elastic.co/u/Markus_Jevring)\ **Replies:** 2\ **Last updated:** [July 23, 2021, 12:24pm UTC](https://discuss.elastic.co/t/are-the-shingles-in-the-search-as-you-type-field-type-words-or-letters/279463 "2021-07-23T12:24:03Z")
I assumed they were letters, but I can't get the field to behave the way I want (which is to have it support infix searches, like searching for "ethylpre" should match "methylprednisolone"). --- ## [How update ILM for exist indexes after changes steps ILM policy?](https://discuss.elastic.co/t/how-update-ilm-for-exist-indexes-after-changes-steps-ilm-policy/279471)
**Author:** [@zakabluk](https://discuss.elastic.co/u/zakabluk)\ **Replies:** 0\ **Last updated:** [July 23, 2021, 10:54am UTC](https://discuss.elastic.co/t/how-update-ilm-for-exist-indexes-after-changes-steps-ilm-policy/279471 "2021-07-23T10:54:28Z")
Hi! I Use ELK 7.13.3. I was updated my cluster from 7.9.3 for fixet bug with datastream deliting. I have datastream which storing 7/14/30/60 days. I was change ILM policy and removed rollover step. Now I have only delet… --- ## [Failure load balance](https://discuss.elastic.co/t/failure-load-balance/279373)
**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\ **Replies:** 4\ **Last updated:** [July 23, 2021, 9:16am UTC](https://discuss.elastic.co/t/failure-load-balance/279373 "2021-07-23T09:16:10Z")
Hi all, New, RHEL based, 5-node elasticsearch cluster installed here (ver 7.13.3). Elasticsearch clients are Logstash and some In-house applications. My main concern is node failure. I know that logstash would load b… --- ## [How to lower the score of documents that match a specific field and value using ElasticSearch DSL C#](https://discuss.elastic.co/t/how-to-lower-the-score-of-documents-that-match-a-specific-field-and-value-using-elasticsearch-dsl-c/279459)
**Author:** [@Jay2](https://discuss.elastic.co/u/Jay2)\ **Replies:** 0\ **Last updated:** [July 23, 2021, 8:48am UTC](https://discuss.elastic.co/t/how-to-lower-the-score-of-documents-that-match-a-specific-field-and-value-using-elasticsearch-dsl-c/279459 "2021-07-23T08:48:41Z")
When I carry out a search I look for documents with a lang code of 'en' and 'gen', im trying to ensure that the 'en' ones appear before the 'gen' ones do. So after looking around, I found this Boosting that might fit the… --- ## [Problem after upgrade to 7.13.3 "source primary is allocated on another node" and CLONE\_TEMP\_TO\_TARGET -\> CLONE\_TEMP\_TO\_TARGET](https://discuss.elastic.co/t/problem-after-upgrade-to-7-13-3-source-primary-is-allocated-on-another-node-and-clone-temp-to-target-clone-temp-to-target/279404)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 1\ **Last updated:** [July 23, 2021, 8:48am UTC](https://discuss.elastic.co/t/problem-after-upgrade-to-7-13-3-source-primary-is-allocated-on-another-node-and-clone-temp-to-target-clone-temp-to-target/279404 "2021-07-23T08:48:23Z")
After we upgraded Elastic from 7.9 to 7.13.3 (on VM Centos7) all elasticsearch nodes has started but we couldnt start kibana the reason was it tries to migrate .kibana which si blocked by error "source primary is all… --- ## [ElasticSearch doesn't support date math for alias when create index template yet?](https://discuss.elastic.co/t/elasticsearch-doesnt-support-date-math-for-alias-when-create-index-template-yet/279368)
**Author:** [@JohnPhilip](https://discuss.elastic.co/u/JohnPhilip)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 8:27am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-support-date-math-for-alias-when-create-index-template-yet/279368 "2021-07-23T08:27:19Z")
It seems that date math support index alias names in 7.13, but using date math when creating index template is still wrong, here is the curl cmd and result I get when create template with date math alias #cmd curl -XPUT… --- ## [Unable to print Error message into a watcher alert](https://discuss.elastic.co/t/unable-to-print-error-message-into-a-watcher-alert/278765)
**Author:** [@Diyatom](https://discuss.elastic.co/u/Diyatom)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 8:04am UTC](https://discuss.elastic.co/t/unable-to-print-error-message-into-a-watcher-alert/278765 "2021-07-23T08:04:33Z")
Hi, I want to print out the error message from my logs into my mail. However, its giving me this error. Below is the alert jason code i am using: Can you please help. I am new in elastic search and am trying to pr… --- ## [Error handling geopoint values](https://discuss.elastic.co/t/error-handling-geopoint-values/279337)
**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\ **Replies:** 3\ **Last updated:** [July 23, 2021, 7:53am UTC](https://discuss.elastic.co/t/error-handling-geopoint-values/279337 "2021-07-23T07:53:06Z")
Hi all For geopoint fields, is ignore\_malformed option the proper way to keep non-geopoint formats not indexed? My concern is whether there is any performance impact if my data has a lot of null and out of range latl… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=602) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=604)