# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=620 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 621 --- ## [Elasticsearch build failure](https://discuss.elastic.co/t/elasticsearch-build-failure/276965)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 3\ **Last updated:** [June 25, 2021, 6:55pm UTC](https://discuss.elastic.co/t/elasticsearch-build-failure/276965 "2021-06-25T18:55:57Z")
Hello, I was running ELK from source, and today I run "git pull" and tried to build again, but when I run "./gradlew assemble" I am getting these errors : FAILURE: Build failed with an exception. \* What went wrong: A … --- ## [Breaking change in 7.12-13: Date processor](https://discuss.elastic.co/t/breaking-change-in-7-12-13-date-processor/277092)
**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\ **Replies:** 4\ **Last updated:** [June 25, 2021, 6:22pm UTC](https://discuss.elastic.co/t/breaking-change-in-7-12-13-date-processor/277092 "2021-06-25T18:22:40Z")
I'd like to report a major breaking change that occurred in 7.12.1 (as originally reported and described here: Date filter problems after upgrade), and which I personally experienced when I upgraded from 7.11.1 to 7.13.2… --- ## [Update Query not working in Elastic 7](https://discuss.elastic.co/t/update-query-not-working-in-elastic-7/277029)
**Author:** [@rohitj559](https://discuss.elastic.co/u/rohitj559)\ **Replies:** 3\ **Last updated:** [June 25, 2021, 3:12pm UTC](https://discuss.elastic.co/t/update-query-not-working-in-elastic-7/277029 "2021-06-25T15:12:00Z")
I am trying to update(POST) a elastic record using below query but i am getting back a weird error. Request: \_update\_by\_query { "script": "{ctx.\_source.orderDocuments\[0\] = newobj};", "params": { "newobj": { … --- ## [Elasticsearch 7.4.1 java stats\_buckets](https://discuss.elastic.co/t/elasticsearch-7-4-1-java-stats-buckets/277055)
**Author:** [@jey](https://discuss.elastic.co/u/jey)\ **Replies:** 0\ **Last updated:** [June 25, 2021, 11:47am UTC](https://discuss.elastic.co/t/elasticsearch-7-4-1-java-stats-buckets/277055 "2021-06-25T11:47:21Z")
I made an elasticsearch request in json with aggregation and stats\_buckets. I have an error: org.elasticsearch.action.ActionRequestValidationException: Validation Failed: 1: No aggregation found for path \[terms\_caller… --- ## [Annotated text highlighter identifies incorrect phrase hit when wrapped in function\_score query](https://discuss.elastic.co/t/annotated-text-highlighter-identifies-incorrect-phrase-hit-when-wrapped-in-function-score-query/277073)
**Author:** [@robmartin11](https://discuss.elastic.co/u/robmartin11)\ **Replies:** 0\ **Last updated:** [June 25, 2021, 2:15pm UTC](https://discuss.elastic.co/t/annotated-text-highlighter-identifies-incorrect-phrase-hit-when-wrapped-in-function-score-query/277073 "2021-06-25T14:15:52Z")
Wondering if the following could be a bug or just user error? Given I create a new index with annotated text fields: PUT test\_index { "mappings": { "properties": { "a": { "type":… --- ## [Signs of too few shards? Number of documents per shard?](https://discuss.elastic.co/t/signs-of-too-few-shards-number-of-documents-per-shard/276972)
**Author:** [@egalpin](https://discuss.elastic.co/u/egalpin)\ **Replies:** 2\ **Last updated:** [June 25, 2021, 1:13pm UTC](https://discuss.elastic.co/t/signs-of-too-few-shards-number-of-documents-per-shard/276972 "2021-06-25T13:13:49Z")
Hi all, I'm experiencing performance challenges with an ES cluster. The cluster consists of 6 data nodes (3 hot w/ ~30GB heap, 3 warm w/ ~15GB heap). The cluster holds around 4TB of data total, with a total of 20,000,00… --- ## [Is it possible to reindex using a source index including a wildcard?](https://discuss.elastic.co/t/is-it-possible-to-reindex-using-a-source-index-including-a-wildcard/277059)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 0\ **Last updated:** [June 25, 2021, 12:47pm UTC](https://discuss.elastic.co/t/is-it-possible-to-reindex-using-a-source-index-including-a-wildcard/277059 "2021-06-25T12:47:02Z")
Hello, I'm trying to perform a reindex where the source index is split up into a number of indices all starting with my\_index. Also, I'm limiting the data I want between a certain range. The syntax I have is as follow… --- ## [Should I route "get by \_id" queries to improve performance?](https://discuss.elastic.co/t/should-i-route-get-by-id-queries-to-improve-performance/277046)
**Author:** [@Alexander\_Gamanyuk1](https://discuss.elastic.co/u/Alexander_Gamanyuk1)\ **Replies:** 1\ **Last updated:** [June 25, 2021, 12:33pm UTC](https://discuss.elastic.co/t/should-i-route-get-by-id-queries-to-improve-performance/277046 "2021-06-25T12:33:17Z")
I have an Elasticsearch index with hundreds of millions of documents that is used mostly for the "get by id" queries. I consider adding a route to documents when indexing. The route will be a random number from 0 to 9. … --- ## [Unable to use new multi\_terms aggregation via Java Client](https://discuss.elastic.co/t/unable-to-use-new-multi-terms-aggregation-via-java-client/277050)
**Author:** [@IliaIsakhin](https://discuss.elastic.co/u/IliaIsakhin)\ **Replies:** 0\ **Last updated:** [June 25, 2021, 11:19am UTC](https://discuss.elastic.co/t/unable-to-use-new-multi-terms-aggregation-via-java-client/277050 "2021-06-25T11:19:00Z")
Hello! I\`ve updated my ES cluster to the version 7.12 to use brand new multi-terms aggregations I want to do something like this in my Java Rest Client AggregationBuilders.multiTerms(field) But as i see, there is no b… --- ## [Index update](https://discuss.elastic.co/t/index-update/277025)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 1\ **Last updated:** [June 25, 2021, 9:23am UTC](https://discuss.elastic.co/t/index-update/277025 "2021-06-25T09:23:56Z")
I would need to know, if we can take Snapshot of Indices during Index update operation? I know restore demands to keep indices in the close state. --- ## [How to obtain the list of \ associated to a \](https://discuss.elastic.co/t/how-to-obtain-the-list-of-forecast-id-associated-to-a-job-name/276942)
**Author:** [@StephaneB](https://discuss.elastic.co/u/StephaneB)\ **Replies:** 2\ **Last updated:** [June 25, 2021, 8:28am UTC](https://discuss.elastic.co/t/how-to-obtain-the-list-of-forecast-id-associated-to-a-job-name/276942 "2021-06-25T08:28:15Z")
Hi, I would like to get the list of all the \ associated to a specific \. I tried: GET \_ml/anomaly\_detectors/\ but I don't obtain any information about associated forecast GET \_ml/anoma… --- ## [Elasticsearch deployment](https://discuss.elastic.co/t/elasticsearch-deployment/276700)
**Author:** [@porscheme](https://discuss.elastic.co/u/porscheme)\ **Replies:** 2\ **Last updated:** [June 25, 2021, 7:27am UTC](https://discuss.elastic.co/t/elasticsearch-deployment/276700 "2021-06-25T07:27:46Z")
We wanted to build Elasticsearch on cloud Azure. Source data size: 50TB Replicas count: 3 Shard count: 1000 For doing this, we are considering below two VM SKUs. L32sv2 is very processing we wanted to know SLAs for… --- ## [Count unique customers based on date range](https://discuss.elastic.co/t/count-unique-customers-based-on-date-range/277014)
**Author:** [@Sanjay\_Agnani1](https://discuss.elastic.co/u/Sanjay_Agnani1)\ **Replies:** 0\ **Last updated:** [June 25, 2021, 5:55am UTC](https://discuss.elastic.co/t/count-unique-customers-based-on-date-range/277014 "2021-06-25T05:55:53Z")
Need the stats in unique customer: index contains customers orders data. Ex: { "\_index" : "customers\_orders", "\_type" : "\_doc", "\_id" : "109126", "\_score" : 1.0, "\_source" : … --- ## [Question about update sorting](https://discuss.elastic.co/t/question-about-update-sorting/277002)
**Author:** [@111486](https://discuss.elastic.co/u/111486)\ **Replies:** 1\ **Last updated:** [June 25, 2021, 5:07am UTC](https://discuss.elastic.co/t/question-about-update-sorting/277002 "2021-06-25T05:07:32Z")
When updating the content, it was found that the updated content and the read content fields were not in the same order. version is: // 20210625115137 { "name": "372aac1d4b15", "cluster\_name": "tommy-es", "clu… --- ## [Question about indexing large numbers](https://discuss.elastic.co/t/question-about-indexing-large-numbers/276758)
**Author:** [@Jurgen\_Debedts](https://discuss.elastic.co/u/Jurgen_Debedts)\ **Replies:** 2\ **Last updated:** [June 25, 2021, 1:29am UTC](https://discuss.elastic.co/t/question-about-indexing-large-numbers/276758 "2021-06-25T01:29:29Z")
This is somewhat a mix of conceptual and a technical question. I am working on a search integration between an ECM platform and ES. Everything is working fine except for 1 thing. In the ECM platform metadata field also… --- ## [GCS Keystore](https://discuss.elastic.co/t/gcs-keystore/276869)
**Author:** [@davidwebb535649](https://discuss.elastic.co/u/davidwebb535649)\ **Replies:** 3\ **Last updated:** [June 24, 2021, 11:16pm UTC](https://discuss.elastic.co/t/gcs-keystore/276869 "2021-06-24T23:16:40Z")
I have a Google Cloud instance I would like to work with. The GCS plugin is installed but I'm having trouble adding the Google credentials to the Elastic Keystore but I keep getting an error I have not been able to solve… --- ## [Aggregation to count consecutive instances of a given field value?](https://discuss.elastic.co/t/aggregation-to-count-consecutive-instances-of-a-given-field-value/276982)
**Author:** [@gpaciga](https://discuss.elastic.co/u/gpaciga)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 9:08pm UTC](https://discuss.elastic.co/t/aggregation-to-count-consecutive-instances-of-a-given-field-value/276982 "2021-06-24T21:08:00Z")
I have an index that has a series of events: \[{ @timestamp: "...", jobId: "123", result: "failure", },{ @timestamp: "...", jobId: "567", result: "success", },{ @timestamp: "...", jobId: "12… --- ## [Typical Disk threshold](https://discuss.elastic.co/t/typical-disk-threshold/276960)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 4:27pm UTC](https://discuss.elastic.co/t/typical-disk-threshold/276960 "2021-06-24T16:27:34Z")
We are planning deploy ES as single node cluster. We are planning to use only flood\_stage configuration aslow and high watermark will have no impact. I know the default flood stage is set to 95% but would like to know … --- ## [A document doesn't have a value for a field error, but the field has values](https://discuss.elastic.co/t/a-document-doesnt-have-a-value-for-a-field-error-but-the-field-has-values/276839)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 4\ **Last updated:** [June 24, 2021, 3:34pm UTC](https://discuss.elastic.co/t/a-document-doesnt-have-a-value-for-a-field-error-but-the-field-has-values/276839 "2021-06-24T15:34:27Z")
Hi, i got a field with values like this InstanceName CPU ------------ --- mfemvedr 1,17 % macmnsvc 0,78 % services 0,39 % svchost 0,00 % searchindex… --- ## [Composable templates- how to convert Legacy?](https://discuss.elastic.co/t/composable-templates-how-to-convert-legacy/276934)
**Author:** [@P\_Larsen](https://discuss.elastic.co/u/P_Larsen)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 2:56pm UTC](https://discuss.elastic.co/t/composable-templates-how-to-convert-legacy/276934 "2021-06-24T14:56:20Z")
How do I convert this to the new composable templates without breaking my ILM config? PUT \_template/99999-test\_deleteme\_policy { "index\_patterns": \[ "99999-test\_deleteme-\*" \], "settings": { "index": { "number\_of\_shards"… --- ## [Elasticsearch vs logstash ingest](https://discuss.elastic.co/t/elasticsearch-vs-logstash-ingest/276947)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 2:32pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-logstash-ingest/276947 "2021-06-24T14:32:40Z")
I have been using logstash for a number of years now with a pretty big pipeline. The majority of the systems we monitor are via winlogbeats. We are using elastic cloud and hosting logstash ourselves. With the introduc… --- ## [Help for mapping a field based on a log file path location](https://discuss.elastic.co/t/help-for-mapping-a-field-based-on-a-log-file-path-location/276777)
**Author:** [@sakrayaami](https://discuss.elastic.co/u/sakrayaami)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 2:24pm UTC](https://discuss.elastic.co/t/help-for-mapping-a-field-based-on-a-log-file-path-location/276777 "2021-06-24T14:24:47Z")
Hello, I'm trying to do something very simple I think but I fail to understand how it can be done. So I ask for your help, my setup is the following: Filebeat sends IIS logs through Logstash towards Elastic. Having al… --- ## [Can I upload csv IPs to elastic, and then use it in Grafana](https://discuss.elastic.co/t/can-i-upload-csv-ips-to-elastic-and-then-use-it-in-grafana/276362)
**Author:** [@unico](https://discuss.elastic.co/u/unico)\ **Replies:** 5\ **Last updated:** [June 24, 2021, 12:54pm UTC](https://discuss.elastic.co/t/can-i-upload-csv-ips-to-elastic-and-then-use-it-in-grafana/276362 "2021-06-24T12:54:58Z")
Hello! I have CSV file with some datasets like that: PAIS; IP/PUERTO; CONEXIONES AT,Austria; 52.97.172.13:143; 6 AT,Austria; 52.97.174.21:143; 1 AT,Austria; 52.97.182.189:143; 7004 BR,Brazil; 179.151.1.251:143; 1 BR,Br… --- ## [Two ILM errors - does not point to a write index and does not point to index](https://discuss.elastic.co/t/two-ilm-errors-does-not-point-to-a-write-index-and-does-not-point-to-index/275461)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 2:01pm UTC](https://discuss.elastic.co/t/two-ilm-errors-does-not-point-to-a-write-index-and-does-not-point-to-index/275461 "2021-06-24T14:01:39Z")
I am having two ILM errors for different indexes. My primary error was (and is for the indices where I have not carried our steps mentioned below). illegal\_argument\_exception: index.lifecycle.rollover\_alias "indice nam… --- ## [Component Templates and Nested Components](https://discuss.elastic.co/t/component-templates-and-nested-components/274381)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 1\ **Last updated:** [June 24, 2021, 1:57pm UTC](https://discuss.elastic.co/t/component-templates-and-nested-components/274381 "2021-06-24T13:57:55Z")
I have been playing around with Component Templates, and I absolutely love it! Much easier to centrally manage components of an index template, rather than manually update all templates using the same components. Questi… --- ## [Elasticsearch index size difference after split in to multiple indexes](https://discuss.elastic.co/t/elasticsearch-index-size-difference-after-split-in-to-multiple-indexes/276936)
**Author:** [@Kareemulla\_Dudekula](https://discuss.elastic.co/u/Kareemulla_Dudekula)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 1:53pm UTC](https://discuss.elastic.co/t/elasticsearch-index-size-difference-after-split-in-to-multiple-indexes/276936 "2021-06-24T13:53:07Z")
Hi, I have an index with primary size 1.25 TB. I have divided/reindexed the same index into multiple(~15) indexes based on some condition. When I was sum the document count of all the indexes, the count was matching wit… --- ## [Mismatch cluster status between Kibana and Curl](https://discuss.elastic.co/t/mismatch-cluster-status-between-kibana-and-curl/276660)
**Author:** [@P.A\_Fuentes](https://discuss.elastic.co/u/P.A_Fuentes)\ **Replies:** 10\ **Last updated:** [June 24, 2021, 1:51pm UTC](https://discuss.elastic.co/t/mismatch-cluster-status-between-kibana-and-curl/276660 "2021-06-24T13:51:21Z")
Hello, I'm getting two different output of the same request "cluster status". Here the two outputs \:~ me$ curl -XGET es.mydomain.com:9200/\_cluster/health/status?pretty { "cluster\_name" : "my-es", "s… --- ## [16 Indices that I have not created](https://discuss.elastic.co/t/16-indices-that-i-have-not-created/276905)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 1:39pm UTC](https://discuss.elastic.co/t/16-indices-that-i-have-not-created/276905 "2021-06-24T13:39:52Z")
I have enabled monitoring and I see 16 indices, but I have not created any of them. Do I need them? How do I get rid of them? Below are the indices, .apm-agent-configuration .apm-custom-link .fleet-policies-7 .ki… --- ## [High number of simultaneous searches make the requests response time bigger](https://discuss.elastic.co/t/high-number-of-simultaneous-searches-make-the-requests-response-time-bigger/276927)
**Author:** [@ZoosterCo](https://discuss.elastic.co/u/ZoosterCo)\ **Replies:** 0\ **Last updated:** [June 24, 2021, 1:16pm UTC](https://discuss.elastic.co/t/high-number-of-simultaneous-searches-make-the-requests-response-time-bigger/276927 "2021-06-24T13:16:54Z")
Hello! We have 3 warm zones with 27 indices, each with 2 shards. Each zone has up to 2.2vCPU and 8 GB RAM. Those contain billions of documents and each index has approximately 50 GB of data. We use default AWS on the ES… --- ## [Can't filter by date range when in updated stack](https://discuss.elastic.co/t/cant-filter-by-date-range-when-in-updated-stack/276301)
**Author:** [@caraboy](https://discuss.elastic.co/u/caraboy)\ **Replies:** 2\ **Last updated:** [June 24, 2021, 12:52pm UTC](https://discuss.elastic.co/t/cant-filter-by-date-range-when-in-updated-stack/276301 "2021-06-24T12:52:06Z")
Hi everyone, I'm new to elastic and I'm trying to migrate the ELK 5.8 to 7.11, but I'm having trouble on making the queries (also migrated) to work. I've made some changes in the Indices (doping \_type when mapping for … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=619) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=621)