# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=609 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 610 --- ## [Can Elasticsearch share plugin directory](https://discuss.elastic.co/t/can-elasticsearch-share-plugin-directory/278523)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 2\ **Last updated:** [July 14, 2021, 9:23am UTC](https://discuss.elastic.co/t/can-elasticsearch-share-plugin-directory/278523 "2021-07-14T09:23:34Z")
I have docker swarm of 3 nodes. I run ES with 5 nodes (3 data/master nodes and 2 coordinating nodes). I would like to use S3 bucket plugin to backup ES cluster. Plugin must be installed on all nodes, that means, plugin d… --- ## [Elasticsearch consistently showing data as now - 24h](https://discuss.elastic.co/t/elasticsearch-consistently-showing-data-as-now-24h/278561)
**Author:** [@mkorayem](https://discuss.elastic.co/u/mkorayem)\ **Replies:** 2\ **Last updated:** [July 14, 2021, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-consistently-showing-data-as-now-24h/278561 "2021-07-14T09:02:21Z")
Hi, Elasticsearch only showing data as now-24h, either by using curl or kibana. I am sure data is moved from logstash to elasticsearch as number of documents keep increasing and size too. This is happening with all in… --- ## [Setup replication servers with basic security](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 4\ **Last updated:** [July 14, 2021, 8:28am UTC](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541 "2021-07-14T08:28:09Z")
Hello i have two cluster with basic security. And i want to setup bi-directional replication. All nodes 7.13 version. Bi-directional replication with Elasticsearch cross-cluster replication (CCR) | Elastic Blog 1t clus… --- ## [Multiple OR and AND conditions with Elasticsearch php](https://discuss.elastic.co/t/multiple-or-and-and-conditions-with-elasticsearch-php/278286)
**Author:** [@hmastery](https://discuss.elastic.co/u/hmastery)\ **Replies:** 7\ **Last updated:** [July 14, 2021, 8:42am UTC](https://discuss.elastic.co/t/multiple-or-and-and-conditions-with-elasticsearch-php/278286 "2021-07-14T08:42:28Z")
I would like to achieve the following query with ElasticSearch : product\_shipper = 1 AND ((product\_type = product and price\>0) OR (product\_type = product\_variation and price=0)) I've built the following query but it do… --- ## [Java driver - Filter queries migration](https://discuss.elastic.co/t/java-driver-filter-queries-migration/278499)
**Author:** [@Leuteris](https://discuss.elastic.co/u/Leuteris)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 8:30am UTC](https://discuss.elastic.co/t/java-driver-filter-queries-migration/278499 "2021-07-14T08:30:29Z")
I need to translate my filter / query syntax (Elasticsearch 1.4) to Elasticsearch 7.x syntax. For FilterBuilders.andFilter I found that I should use boolquery() with filter clause and it works. But what about FilterBuild… --- ## [Method code too large error in Elasticsearch logs](https://discuss.elastic.co/t/method-code-too-large-error-in-elasticsearch-logs/278540)
**Author:** [@Nikolaj\_K](https://discuss.elastic.co/u/Nikolaj_K)\ **Replies:** 5\ **Last updated:** [July 14, 2021, 8:29am UTC](https://discuss.elastic.co/t/method-code-too-large-error-in-elasticsearch-logs/278540 "2021-07-14T08:29:59Z")
Hello, I am investigation performance issues of Elasticsearch cluster and in the logs of the cluster I keep finding the following error: nested: NotSerializableExceptionWrapper\[runtime\_exception: Method code too large!… --- ## [Error start elasticsearch in centos7](https://discuss.elastic.co/t/error-start-elasticsearch-in-centos7/278391)
**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\ **Replies:** 9\ **Last updated:** [July 14, 2021, 8:29am UTC](https://discuss.elastic.co/t/error-start-elasticsearch-in-centos7/278391 "2021-07-14T08:29:24Z")
hello i found a problem when starting elasticsearch, and an error like this : Jul 12 05:05:34 bigdata systemd-entrypoint\[22275\]: Likely root cause: java.nio.file.AccessDeniedException: /etc/elasticsearch/elasticsearch.k… --- ## [Adding Elasticsearch Data Node To Cluster](https://discuss.elastic.co/t/adding-elasticsearch-data-node-to-cluster/278466)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [July 14, 2021, 5:30am UTC](https://discuss.elastic.co/t/adding-elasticsearch-data-node-to-cluster/278466 "2021-07-14T05:30:32Z")
I was using a single node Elastic stack cluster and now adding a data node to my cluster. However, somehow the second node is not reflecting in the Kibana stack monitoring page, even if both elastic nodes are working wit… --- ## [Unable to login to elasticsearch,asking password of old installation](https://discuss.elastic.co/t/unable-to-login-to-elasticsearch-asking-password-of-old-installation/278550)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 12:13am UTC](https://discuss.elastic.co/t/unable-to-login-to-elasticsearch-asking-password-of-old-installation/278550 "2021-07-14T00:13:35Z")
Hi all, I'm trying to install a new version of elasticsearch and kibana. However, when i install, some old cache of previous installation is asking me elastic login and password. I have forgotten old installation elas… --- ## [ECK - all the nodes leaving the cluster often](https://discuss.elastic.co/t/eck-all-the-nodes-leaving-the-cluster-often/277738)
**Author:** [@Kannappan\_Somu](https://discuss.elastic.co/u/Kannappan_Somu)\ **Replies:** 2\ **Last updated:** [July 13, 2021, 8:35pm UTC](https://discuss.elastic.co/t/eck-all-the-nodes-leaving-the-cluster-often/277738 "2021-07-13T20:35:27Z")
in our eck cluster , all data node and master nodes leaving often with node left messages and follower retry count exceeded. from metrics we could see there is no evidence of system overload or cpu overloaded or heap mem… --- ## [Fewer documents indexed when using custom analyzer (NEST client)](https://discuss.elastic.co/t/fewer-documents-indexed-when-using-custom-analyzer-nest-client/278358)
**Author:** [@Mario\_Klisanic](https://discuss.elastic.co/u/Mario_Klisanic)\ **Replies:** 3\ **Last updated:** [July 13, 2021, 6:18pm UTC](https://discuss.elastic.co/t/fewer-documents-indexed-when-using-custom-analyzer-nest-client/278358 "2021-07-13T18:18:56Z")
Hello everyone, while working on a project of mine (using NEST client for .NET), I realized that the total number of documents indexed is different when using an analyzer from the number of documents indexed without the… --- ## [How to add elasticsearch as a service in background in mac OS](https://discuss.elastic.co/t/how-to-add-elasticsearch-as-a-service-in-background-in-mac-os/278563)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [July 13, 2021, 3:43pm UTC](https://discuss.elastic.co/t/how-to-add-elasticsearch-as-a-service-in-background-in-mac-os/278563 "2021-07-13T15:43:55Z")
Hi all, I installed elasticsearch using tar package in mac OS. To run elasticsearch, i run elasticsearch exe file in terminal. If i close the terminal, elasticsearch service stops. How do i run elasticsearch in backg… --- ## [Error When Trying To Setup Basic Security For The Elastic Stack](https://discuss.elastic.co/t/error-when-trying-to-setup-basic-security-for-the-elastic-stack/278473)
**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\ **Replies:** 2\ **Last updated:** [July 13, 2021, 5:20pm UTC](https://discuss.elastic.co/t/error-when-trying-to-setup-basic-security-for-the-elastic-stack/278473 "2021-07-13T17:20:12Z")
Hello Everyone, I am currently trying to get basic security setup for the elastic stack using this tutorial: Set up basic security for the Elastic Stack | Elasticsearch Guide \[7.13\] | Elastic I am using a Ubuntu virtua… --- ## [Incident management with ServiceNow and Elasticsearch](https://discuss.elastic.co/t/incident-management-with-servicenow-and-elasticsearch/278579)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 0\ **Last updated:** [July 13, 2021, 4:39pm UTC](https://discuss.elastic.co/t/incident-management-with-servicenow-and-elasticsearch/278579 "2021-07-13T16:39:40Z")
I have followed part 1 and part 2 Everything works great. Only minor issue is its creating duplicate incidents. If i put throttle period then if some other app has status down , it wont trigger an incident :frowning: if… --- ## [Can I change the elastic built-in user password?](https://discuss.elastic.co/t/can-i-change-the-elastic-built-in-user-password/278573)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [July 13, 2021, 4:00pm UTC](https://discuss.elastic.co/t/can-i-change-the-elastic-built-in-user-password/278573 "2021-07-13T16:00:38Z")
Hi, I was wandering if I can change the password of the elastic user. after its set trough bin/elasticsearch-setup-passwords ? Thanks. --- ## [Using CCR For Cluster Migration](https://discuss.elastic.co/t/using-ccr-for-cluster-migration/278441)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [July 13, 2021, 3:13pm UTC](https://discuss.elastic.co/t/using-ccr-for-cluster-migration/278441 "2021-07-13T15:13:21Z")
I am looking at standing up a new Elasticsearch cluster and migrating from our current single node. What's the best way for moving our existing data, about 10TB to the new cluster? Would CCR facilitate the move best? I… --- ## [Elasticsearch index life cycle name rollover](https://discuss.elastic.co/t/elasticsearch-index-life-cycle-name-rollover/278544)
**Author:** [@opentokix](https://discuss.elastic.co/u/opentokix)\ **Replies:** 1\ **Last updated:** [July 13, 2021, 2:59pm UTC](https://discuss.elastic.co/t/elasticsearch-index-life-cycle-name-rollover/278544 "2021-07-13T14:59:16Z")
When I configure ILM it will create an index with 000001, what happens when you roll over for 999999? Will it just start over again, and no worries. Only reason it's a large number is to make sure it's not the same twice… --- ## [Can somebody tell me what is in this log?](https://discuss.elastic.co/t/can-somebody-tell-me-what-is-in-this-log/278547)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 6\ **Last updated:** [July 13, 2021, 2:58pm UTC](https://discuss.elastic.co/t/can-somebody-tell-me-what-is-in-this-log/278547 "2021-07-13T14:58:51Z")
I can not start Elastic although I can do it few days before. root@vmi503579:~# journalctl -ex Jul 13 15:27:55 vmi503579.contaboserver.net kernel: \[ 884825\] 33 884825 59113 6477 241664 686 0… --- ## [Permanently retaining all snapshot segments](https://discuss.elastic.co/t/permanently-retaining-all-snapshot-segments/278475)
**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\ **Replies:** 2\ **Last updated:** [July 13, 2021, 1:56pm UTC](https://discuss.elastic.co/t/permanently-retaining-all-snapshot-segments/278475 "2021-07-13T13:56:09Z")
I'm a little confused on the behavior of the snapshotting process, and how to configure it to support our use case. In our use case, we are collecting time-based log events from a variety of different servers that we ho… --- ## [Using Metricbeat to monitor multiple machines at once](https://discuss.elastic.co/t/using-metricbeat-to-monitor-multiple-machines-at-once/278543)
**Author:** [@Farah](https://discuss.elastic.co/u/Farah)\ **Replies:** 0\ **Last updated:** [July 13, 2021, 1:12pm UTC](https://discuss.elastic.co/t/using-metricbeat-to-monitor-multiple-machines-at-once/278543 "2021-07-13T13:12:18Z")
I am using the elastic stack to monitor an IT infrastructure, I'm new to the elk and I want to know what are the best practices. Let's say this solution would be deployed on a NOC would it be better to use Ansible or D… --- ## [Different cluster ID for nodes](https://discuss.elastic.co/t/different-cluster-id-for-nodes/277440)
**Author:** [@Rojal\_Paul](https://discuss.elastic.co/u/Rojal_Paul)\ **Replies:** 2\ **Last updated:** [July 13, 2021, 1:05pm UTC](https://discuss.elastic.co/t/different-cluster-id-for-nodes/277440 "2021-07-13T13:05:50Z")
I tried to join the cluster, when i am see the status the cluster names are correct but cluster ID is different for each nodes. I have 3 nodes ELKN1,ELKN2,ELKN3. I also added the cluster status image it showing … --- ## [SQL query cannot extract SQL indices](https://discuss.elastic.co/t/sql-query-cannot-extract-sql-indices/278192)
**Author:** [@olliegator](https://discuss.elastic.co/u/olliegator)\ **Replies:** 2\ **Last updated:** [July 13, 2021, 1:03pm UTC](https://discuss.elastic.co/t/sql-query-cannot-extract-sql-indices/278192 "2021-07-13T13:03:50Z")
Hi, I am trying to perform a simple query using the Elasticsearch query API in Elasticsearch 7.7.0: POST /\_sql?format=txt { "query": "SELECT my\_field FROM my\_index" } I am getting the following error: { "err… --- ## [Hot shards get allocated to cold nodes](https://discuss.elastic.co/t/hot-shards-get-allocated-to-cold-nodes/278257)
**Author:** [@Matthew\_Field](https://discuss.elastic.co/u/Matthew_Field)\ **Replies:** 1\ **Last updated:** [July 13, 2021, 11:37am UTC](https://discuss.elastic.co/t/hot-shards-get-allocated-to-cold-nodes/278257 "2021-07-13T11:37:59Z")
Hi, I setup ILM, but was surprised to find that upon index creation my index shards were allocated to both hot and cold nodes. I am on version 7.13.2 I have 3 hot nodes and 2 cold nodes 10.2.6.4 46 88 2 0.25 0.35 0.4… --- ## [Elasticsearch update by query - update ONLY the last document](https://discuss.elastic.co/t/elasticsearch-update-by-query-update-only-the-last-document/278506)
**Author:** [@Savas12.01](https://discuss.elastic.co/u/Savas12.01)\ **Replies:** 2\ **Last updated:** [July 13, 2021, 11:08am UTC](https://discuss.elastic.co/t/elasticsearch-update-by-query-update-only-the-last-document/278506 "2021-07-13T11:08:06Z")
Hello community, I am new to the elasticsearch and I am trying to get the last document from my index and update its list of object. I tried several queries e.g: POST localhost:9200/test-index/\_update\_by\_query { "si… --- ## [Add own snapshot repository in elastic.co](https://discuss.elastic.co/t/add-own-snapshot-repository-in-elastic-co/278519)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 1\ **Last updated:** [July 13, 2021, 10:28am UTC](https://discuss.elastic.co/t/add-own-snapshot-repository-in-elastic-co/278519 "2021-07-13T10:28:16Z")
I am using a managed/hosted ES cluster in elastic.co I want to register a GCS repository using my own bucket. I suppose at some point in time throughout the registration process, I will have to pass the json document h… --- ## [Collapsed results participating in sorting](https://discuss.elastic.co/t/collapsed-results-participating-in-sorting/278512)
**Author:** [@Markos\_Fragkakis](https://discuss.elastic.co/u/Markos_Fragkakis)\ **Replies:** 0\ **Last updated:** [July 13, 2021, 9:28am UTC](https://discuss.elastic.co/t/collapsed-results-participating-in-sorting/278512 "2021-07-13T09:28:32Z")
I am using Elasticsearch and I want to group our results by a specific field, returning only the most recent document per group. When scoring and sorting, I want the documents I am not returning (the ones that are older)… --- ## [Elasticsearch 7.13](https://discuss.elastic.co/t/elasticsearch-7-13/275410)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 25\ **Last updated:** [July 13, 2021, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-7-13/275410 "2021-07-13T09:03:06Z")
\`rypoint\[1835\]: Exception in thread "main" java.lang.RuntimeException: starting java failed with \[1\] rypoint\[1835\]: output: rypoint\[1835\]: \[0.029s\]\[error\]\[logging\] Error opening log file '/var/log/elasticsearch/gc.log': … --- ## [Elasticsearch Azure Snapshot Plugin](https://discuss.elastic.co/t/elasticsearch-azure-snapshot-plugin/278504)
**Author:** [@robinhood\_lko](https://discuss.elastic.co/u/robinhood_lko)\ **Replies:** 0\ **Last updated:** [July 13, 2021, 8:26am UTC](https://discuss.elastic.co/t/elasticsearch-azure-snapshot-plugin/278504 "2021-07-13T08:26:43Z")
Hi Team, We are facing one issue while configuring Snapshots using Azure repository plugin. The plugin is not able to connect to Azure container. Out Network team wants to test the connectivity calls from container. Pl… --- ## [Reindex from remote very slow](https://discuss.elastic.co/t/reindex-from-remote-very-slow/278497)
**Author:** [@bacquelmore](https://discuss.elastic.co/u/bacquelmore)\ **Replies:** 0\ **Last updated:** [July 13, 2021, 7:31am UTC](https://discuss.elastic.co/t/reindex-from-remote-very-slow/278497 "2021-07-13T07:31:52Z")
Hi, I am trying to reindex from remote an index of ~40Gb, single shard, single node, to an index of 8 shards, 3 nodes. The operation is very slow (now a couple of days) and seems to only progress during specific hours o… --- ## [Elasticsearch nodes automatically disconnected](https://discuss.elastic.co/t/elasticsearch-nodes-automatically-disconnected/278266)
**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\ **Replies:** 1\ **Last updated:** [July 13, 2021, 7:39am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-automatically-disconnected/278266 "2021-07-13T07:39:34Z")
Hi Team, we have an 3 nodes(data cum master) cluster,it has 487 primary indices and one replica for the same. ES version : 7.3.2 but sometimes nodes get disconnected and joined later.it happens 2 to 3 times in a month… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=608) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=610)