# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=622

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 623

---

## [Documents doesn't get updated after the version is updated & response is successful in ES](https://discuss.elastic.co/t/documents-doesnt-get-updated-after-the-version-is-updated-response-is-successful-in-es/276742)

<div class="topic-metadata">

**Author:** [@Farah\_Zaidi](https://discuss.elastic.co/u/Farah_Zaidi)\
**Replies:** 13\
**Last updated:** [June 23, 2021, 9:22am UTC](https://discuss.elastic.co/t/documents-doesnt-get-updated-after-the-version-is-updated-response-is-successful-in-es/276742 "2021-06-23T09:22:34Z")

</div>

Hi , I am facing an issue on AWS Elastic search instance. I am sending POST api request to create/update the document in ES , somehow the version gets updated but on querying the record , it still shows the old re…

---

## [Understanding Jvm memory calculation with docker](https://discuss.elastic.co/t/understanding-jvm-memory-calculation-with-docker/276628)

<div class="topic-metadata">

**Author:** [@marcs42](https://discuss.elastic.co/u/marcs42)\
**Replies:** 2\
**Last updated:** [June 23, 2021, 9:06am UTC](https://discuss.elastic.co/t/understanding-jvm-memory-calculation-with-docker/276628 "2021-06-23T09:06:33Z")

</div>

I'm having issues understanding the memory requirements. Hope somebody can shine some lights on this. Situation: 1 single machine with 20GB ram Base OS ubuntu 20.04 LTS Runs docker containers of Elasticsearch, Logstas…

---

## [Elasticsearch mirrors the Data](https://discuss.elastic.co/t/elasticsearch-mirrors-the-data/275844)

<div class="topic-metadata">

**Author:** [@sven\_begis](https://discuss.elastic.co/u/sven_begis)\
**Replies:** 8\
**Last updated:** [June 23, 2021, 9:03am UTC](https://discuss.elastic.co/t/elasticsearch-mirrors-the-data/275844 "2021-06-23T09:03:46Z")

</div>

Hello, I have build my first Graylog Cluster based on these Tutorials Now I have added another dater node, this works also, but I found out it just mirrors the Data. What …

---

## [Search as you type vs max expansions](https://discuss.elastic.co/t/search-as-you-type-vs-max-expansions/276752)

<div class="topic-metadata">

**Author:** [@newbees](https://discuss.elastic.co/u/newbees)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 9:01am UTC](https://discuss.elastic.co/t/search-as-you-type-vs-max-expansions/276752 "2021-06-23T09:01:46Z")

</div>

While retrieving the results I cant find any major difference between search as you type and max\_expansions while creating the index.. Which scenario should it be used? Does max\_expansion degrades the performance as w…

---

## [Elastic search issues (Synonyms Issue)](https://discuss.elastic.co/t/elastic-search-issues-synonyms-issue/276750)

<div class="topic-metadata">

**Author:** [@newbees](https://discuss.elastic.co/u/newbees)\
**Replies:** 0\
**Last updated:** [June 23, 2021, 8:49am UTC](https://discuss.elastic.co/t/elastic-search-issues-synonyms-issue/276750 "2021-06-23T08:49:40Z")

</div>

Hi All We have created a synonym file .. this file contains following contents Create synonym.txt file. apt, unit, apartment, Apt, Apartment, Unit Southeast, SouthEast, se, SE, South East, southeast Southwest, South…

---

## [Is changes number of replicas and mapping in index blocks parallel queries to index?](https://discuss.elastic.co/t/is-changes-number-of-replicas-and-mapping-in-index-blocks-parallel-queries-to-index/276747)

<div class="topic-metadata">

**Author:** [@lotera87](https://discuss.elastic.co/u/lotera87)\
**Replies:** 1\
**Last updated:** [June 23, 2021, 8:45am UTC](https://discuss.elastic.co/t/is-changes-number-of-replicas-and-mapping-in-index-blocks-parallel-queries-to-index/276747 "2021-06-23T08:45:49Z")

</div>

Hi, I am want to change number of replicas in index. Is this operation blocks to retrieve documents from this index to time number of replicas changed? And same question. If i add field to mapping in index is this oper…

---

## [Primaries shards not evenly balanced accross the nodes - Is it normal behavior?](https://discuss.elastic.co/t/primaries-shards-not-evenly-balanced-accross-the-nodes-is-it-normal-behavior/276739)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 2\
**Last updated:** [June 23, 2021, 8:45am UTC](https://discuss.elastic.co/t/primaries-shards-not-evenly-balanced-accross-the-nodes-is-it-normal-behavior/276739 "2021-06-23T08:45:47Z")

</div>

Hello, While doing some tests, I noticed that after creating an index (with no data) in a five (data) nodes cluster, primaries shards are not evenly balanced : GET \_cat/nodes 192.168.2.158 67 96 94 2.47 1.56 0.77 dlmr…

---

## [ILM strategy for filebeat, metricbeat and apm indices](https://discuss.elastic.co/t/ilm-strategy-for-filebeat-metricbeat-and-apm-indices/276008)

<div class="topic-metadata">

**Author:** [@aksh\_18](https://discuss.elastic.co/u/aksh_18)\
**Replies:** 4\
**Last updated:** [June 23, 2021, 8:42am UTC](https://discuss.elastic.co/t/ilm-strategy-for-filebeat-metricbeat-and-apm-indices/276008 "2021-06-23T08:42:04Z")

</div>

Hi Team, I have 1 node elasticsearch cluster, which has 60GB RAM , 1.2 TB disk. I have 1 filebeat and 1 metricbeat index each receiving 6 GB data per day and 1 apm index which is receiving 10GB data per day. I want to r…

---

## [Elastic Stack SLES 12 SP5](https://discuss.elastic.co/t/elastic-stack-sles-12-sp5/276724)

<div class="topic-metadata">

**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Replies:** 1\
**Last updated:** [June 23, 2021, 8:29am UTC](https://discuss.elastic.co/t/elastic-stack-sles-12-sp5/276724 "2021-06-23T08:29:02Z")

</div>

Hi there, in the support matrix there is the compatibily with SLES 12. I wonder if this support is for the SP5 patch too; beacuse is not explicitly indicated. Thank you very much. Alessio

---

## [CCR user permission issue. \[indices:admin/seq\_no/renew\_retention\_lease\] is unauthorized for user \[ccr\_user\]](https://discuss.elastic.co/t/ccr-user-permission-issue-indices-admin-seq-no-renew-retention-lease-is-unauthorized-for-user-ccr-user/276677)

<div class="topic-metadata">

**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\
**Replies:** 4\
**Last updated:** [June 23, 2021, 8:12am UTC](https://discuss.elastic.co/t/ccr-user-permission-issue-indices-admin-seq-no-renew-retention-lease-is-unauthorized-for-user-ccr-user/276677 "2021-06-23T08:12:31Z")

</div>

I have two clusters 7.7.1 deployed, tested CCR, using super user. Now I defined ccr\_user with two newly created roles (ccr\_leader, ccr\_follower), which I am using on both leader and follower clusters. Roles looks like …

---

## [Edit System Template with API call?](https://discuss.elastic.co/t/edit-system-template-with-api-call/276655)

<div class="topic-metadata">

**Author:** [@kodka](https://discuss.elastic.co/u/kodka)\
**Replies:** 2\
**Last updated:** [June 23, 2021, 6:47am UTC](https://discuss.elastic.co/t/edit-system-template-with-api-call/276655 "2021-06-23T06:47:00Z")

</div>

I want to create ILP to elasticsearch monitoring index, i have ILP created, and now i want to link it to the System template ".monitoring-es" but in order to have everything persistent and ready to be reused, we impleme…

---

## [Prebuilt dashboards for esrally](https://discuss.elastic.co/t/prebuilt-dashboards-for-esrally/276674)

<div class="topic-metadata">

**Author:** [@purushothamkdr143](https://discuss.elastic.co/u/purushothamkdr143)\
**Replies:** 4\
**Last updated:** [June 23, 2021, 5:57am UTC](https://discuss.elastic.co/t/prebuilt-dashboards-for-esrally/276674 "2021-06-23T05:57:14Z")

</div>

Hi All, I have pushed the esrally metrics to dedicated elasticsearch cluster. are there any existing dashboards available so that I can make use of them for esrally metrics visualizations in kibana?

---

## [Time difference](https://discuss.elastic.co/t/time-difference/276300)

<div class="topic-metadata">

**Author:** [@Cgr\_EQ](https://discuss.elastic.co/u/Cgr_EQ)\
**Replies:** 2\
**Last updated:** [June 23, 2021, 4:10am UTC](https://discuss.elastic.co/t/time-difference/276300 "2021-06-23T04:10:07Z")

</div>

I have 2 documents and each document fields are as follow: Timestamp / ID / Field 2021-06-15 12:00:00 / 1 / Start (doc1) 2021-06-15 12…

---

## [How to find all String Type Methods of Painless](https://discuss.elastic.co/t/how-to-find-all-string-type-methods-of-painless/276623)

<div class="topic-metadata">

**Author:** [@john.zhang](https://discuss.elastic.co/u/john.zhang)\
**Replies:** 3\
**Last updated:** [June 23, 2021, 3:53am UTC](https://discuss.elastic.co/t/how-to-find-all-string-type-methods-of-painless/276623 "2021-06-23T03:53:11Z")

</div>

Hi All, I am a newer. I am curious , why not find any document for string type method of painless language. Please help tell me where to find? Thank you

---

## [I want to ask about elasticsearch and Ubuntu](https://discuss.elastic.co/t/i-want-to-ask-about-elasticsearch-and-ubuntu/276716)

<div class="topic-metadata">

**Author:** [@an\_dinh](https://discuss.elastic.co/u/an_dinh)\
**Replies:** 1\
**Last updated:** [June 23, 2021, 3:46am UTC](https://discuss.elastic.co/t/i-want-to-ask-about-elasticsearch-and-ubuntu/276716 "2021-06-23T03:46:24Z")

</div>

When I setup Elasticsearch on Ubuntu, I made a mistake when putting 7.11.2 to: echo "deb https://artifacts.elastic.co/packages/7.11.2/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-7.11.2.list so now, wh…

---

## [Is it okay to make 7 nodes of cluster in one machine(server)?](https://discuss.elastic.co/t/is-it-okay-to-make-7-nodes-of-cluster-in-one-machine-server/276614)

<div class="topic-metadata">

**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\
**Replies:** 10\
**Last updated:** [June 23, 2021, 3:23am UTC](https://discuss.elastic.co/t/is-it-okay-to-make-7-nodes-of-cluster-in-one-machine-server/276614 "2021-06-23T03:23:58Z")

</div>

Hello. I am running ELK and this has only one node of cluster on server.(ELK version is 6.8) The indices size per a day is about below 100GB but it's gonna increase. So I need to divide nodes to master node and data no…

---

## [Check pattern in scripted field](https://discuss.elastic.co/t/check-pattern-in-scripted-field/276158)

<div class="topic-metadata">

**Author:** [@goncalobsantos](https://discuss.elastic.co/u/goncalobsantos)\
**Replies:** 3\
**Last updated:** [June 23, 2021, 2:12am UTC](https://discuss.elastic.co/t/check-pattern-in-scripted-field/276158 "2021-06-23T02:12:57Z")

</div>

I have a field "a" that sometimes gets values that satisfy the following pattern: "AAA\_BBB\_CCC\_DDD". The relevant feature of this pattern is the occurrence of the four underscores "\_". The lenght of the A's, B's, C's an…

---

## [The elasticsearch system user](https://discuss.elastic.co/t/the-elasticsearch-system-user/276629)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 2\
**Last updated:** [June 23, 2021, 1:53am UTC](https://discuss.elastic.co/t/the-elasticsearch-system-user/276629 "2021-06-23T01:53:44Z")

</div>

hello everyone. is the elasticsearch's user has a password? if not is there any documentation about this?

---

## ['m having trouble with PROBLEM CHILD GITHUB CODE](https://discuss.elastic.co/t/m-having-trouble-with-problem-child-github-code/276649)

<div class="topic-metadata">

**Author:** [@legend](https://discuss.elastic.co/u/legend)\
**Replies:** 2\
**Last updated:** [June 22, 2021, 9:48pm UTC](https://discuss.elastic.co/t/m-having-trouble-with-problem-child-github-code/276649 "2021-06-22T21:48:33Z")

</div>

\</\> POST scripts/painless/execute { "script": { "lang": "painless", "source": """ String nGramAtPosition(String field, int fieldcount, int n) { if (fieldcount+n\>field.length()) { return '' } else { return fie…

---

## [Elasticsearch cluster without replication](https://discuss.elastic.co/t/elasticsearch-cluster-without-replication/276682)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 1\
**Last updated:** [June 22, 2021, 5:17pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-without-replication/276682 "2021-06-22T17:17:51Z")

</div>

Can I create Elasticsearch cluster without replication? Which all settings needed to be taken care of, if I want to use it only for scaling and not for high availability.

---

## [Elasticsearch Python not raising error when no hits and several shards have failed](https://discuss.elastic.co/t/elasticsearch-python-not-raising-error-when-no-hits-and-several-shards-have-failed/276679)

<div class="topic-metadata">

**Author:** [@mcdecoderdude](https://discuss.elastic.co/u/mcdecoderdude)\
**Replies:** 0\
**Last updated:** [June 22, 2021, 4:36pm UTC](https://discuss.elastic.co/t/elasticsearch-python-not-raising-error-when-no-hits-and-several-shards-have-failed/276679 "2021-06-22T16:36:31Z")

</div>

Elasticsearch python library is not raising error when no hits and several shards have failed. Since there are no hits being returned the error handing is not being called after the hits are yielded. This is in the scan …

---

## [How to query n-gram completions that match phrase prefix?](https://discuss.elastic.co/t/how-to-query-n-gram-completions-that-match-phrase-prefix/276607)

<div class="topic-metadata">

**Author:** [@sabetai](https://discuss.elastic.co/u/sabetai)\
**Replies:** 2\
**Last updated:** [June 22, 2021, 3:17pm UTC](https://discuss.elastic.co/t/how-to-query-n-gram-completions-that-match-phrase-prefix/276607 "2021-06-22T15:17:02Z")

</div>

How can I query my index to suggest phrases that complete the user's query? I'd like a query similar to match\_phrase\_prefix , except instead of retrieving the entire doc it returns n-grams from the doc fields that comple…

---

## [Searching by \_id returns different results when the search is repeated](https://discuss.elastic.co/t/searching-by-id-returns-different-results-when-the-search-is-repeated/276577)

<div class="topic-metadata">

**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\
**Replies:** 2\
**Last updated:** [June 22, 2021, 3:06pm UTC](https://discuss.elastic.co/t/searching-by-id-returns-different-results-when-the-search-is-repeated/276577 "2021-06-22T15:06:38Z")

</div>

I'm on ES 6.8, with a 3 node cluster, and the status is green. First of all, I'm aware that I can Get by ID, but for this scenario, I am searching by ID. My question is.... Is this a bug, or just a quirk of how distrib…

---

## [Error while installing offline Elasticsearch 7.12](https://discuss.elastic.co/t/error-while-installing-offline-elasticsearch-7-12/276659)

<div class="topic-metadata">

**Author:** [@BenjaminD](https://discuss.elastic.co/u/BenjaminD)\
**Replies:** 4\
**Last updated:** [June 22, 2021, 2:14pm UTC](https://discuss.elastic.co/t/error-while-installing-offline-elasticsearch-7-12/276659 "2021-06-22T14:14:33Z")

</div>

Hi everyone. I'm trying to install Elasticsearch 7.12.1 on a server for a customer. The OS is Ubuntu Server 9.3.0-17 aka 20.04 (the LTS one). OpenJDK 16 included. This server is offline so I downloaded the deb packag…

---

## [Log stoppage alert using Machine learning in ELK 7.12](https://discuss.elastic.co/t/log-stoppage-alert-using-machine-learning-in-elk-7-12/274105)

<div class="topic-metadata">

**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Replies:** 5\
**Last updated:** [June 22, 2021, 2:02pm UTC](https://discuss.elastic.co/t/log-stoppage-alert-using-machine-learning-in-elk-7-12/274105 "2021-06-22T14:02:06Z")

</div>

Hi, Please help to create a log stoppage alert for critical devices using machine learning. For example: Index "A" contains 10 Active directory server logs. Need to generate an email alert if Elasticsearch stop receiv…

---

## [ML DataFrame Analytic Job on static/stream data Index](https://discuss.elastic.co/t/ml-dataframe-analytic-job-on-static-stream-data-index/275905)

<div class="topic-metadata">

**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\
**Replies:** 2\
**Last updated:** [June 22, 2021, 1:51pm UTC](https://discuss.elastic.co/t/ml-dataframe-analytic-job-on-static-stream-data-index/275905 "2021-06-22T13:51:26Z")

</div>

Is it possible to run a ML analytic job on an index that has static data or streaming data?

---

## [Rolling to 7.13](https://discuss.elastic.co/t/rolling-to-7-13/276165)

<div class="topic-metadata">

**Author:** [@geomario](https://discuss.elastic.co/u/geomario)\
**Replies:** 4\
**Last updated:** [June 22, 2021, 1:45pm UTC](https://discuss.elastic.co/t/rolling-to-7-13/276165 "2021-06-22T13:45:31Z")

</div>

Hola, I am pretty new to ElasticSearch. I am trying to upgrade my node from 7.6 to 7.13. It happened that when I run my new node with 7.13, the console throws a mistake. I have searched without success on how to solve i…

---

## [Error in Databricks 7.6 and Elastic 7.1.1 \*\*java.lang.ClassNotFoundException: Failed to find data source: org.elasticsearch.spark.sql.\*\*](https://discuss.elastic.co/t/error-in-databricks-7-6-and-elastic-7-1-1-java-lang-classnotfoundexception-failed-to-find-data-source-org-elasticsearch-spark-sql/274272)

<div class="topic-metadata">

**Author:** [@mlo](https://discuss.elastic.co/u/mlo)\
**Replies:** 5\
**Last updated:** [June 22, 2021, 1:12pm UTC](https://discuss.elastic.co/t/error-in-databricks-7-6-and-elastic-7-1-1-java-lang-classnotfoundexception-failed-to-find-data-source-org-elasticsearch-spark-sql/274272 "2021-06-22T13:12:23Z")

</div>

We are running Databricks 7.6 (includes Apache Spark 3.0.1, Scala 2.12) and istalled via jip install org.elasticsearch:elasticsearch-spark-30\_2.12:7.12.1 and now I am getting this error java.lang.ClassNotFoundException:…

---

## [Extract exctly/only json docs from ES Index into C# (NEST)](https://discuss.elastic.co/t/extract-exctly-only-json-docs-from-es-index-into-c-nest/273856)

<div class="topic-metadata">

**Author:** [@prgmrESNet](https://discuss.elastic.co/u/prgmrESNet)\
**Replies:** 3\
**Last updated:** [June 22, 2021, 12:55pm UTC](https://discuss.elastic.co/t/extract-exctly-only-json-docs-from-es-index-into-c-nest/273856 "2021-06-22T12:55:07Z")

</div>

Hello elastic.co, New user here, hence am learning the forum rules as well. Forum Admins, if this was asked previously, pardon me. I am an intermediate .Net C# programmer and novice ElasticSearch user. Here is my issu…

---

## [Painless doc values; how to reference grouped fields](https://discuss.elastic.co/t/painless-doc-values-how-to-reference-grouped-fields/276588)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 2\
**Last updated:** [June 22, 2021, 12:15pm UTC](https://discuss.elastic.co/t/painless-doc-values-how-to-reference-grouped-fields/276588 "2021-06-22T12:15:23Z")

</div>

I'm trying to create a scripted field but can't get the doc value. I have: def fpath = doc\['winlog.user\_data.FilePath'\].value; def first = fpath.indexOf("\\\\"); def second = first + 1 + fpath.substring(first + 1).indexO…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=621)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=623)
