# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=633 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 634 --- ## [Range query](https://discuss.elastic.co/t/range-query/275116)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 8:13am UTC](https://discuss.elastic.co/t/range-query/275116 "2021-06-07T08:13:21Z")
i am using the below range query to read data from elasticsearch using spark and in kibana i have set Asia/Riyadh Timezone for date formatting. .set("es.query","""{ "query": { "range": { "@timestamp": { "gte": "now… --- ## [Elassandra 6.2.3 to Elasticsearch 7.7.1 data migration process](https://discuss.elastic.co/t/elassandra-6-2-3-to-elasticsearch-7-7-1-data-migration-process/275100)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 14\ **Last updated:** [June 7, 2021, 8:10am UTC](https://discuss.elastic.co/t/elassandra-6-2-3-to-elasticsearch-7-7-1-data-migration-process/275100 "2021-06-07T08:10:23Z")
I want to migrate the data from Elassandra 6.2.3 cluster to Elasticsearch 7.7.1 cluster. Let's suppose that Elasticsearch 7.7.1 has the same index schemas, templates and aliases. (Except maybe changes related to breakin… --- ## [Elasticsearch Conflict Error](https://discuss.elastic.co/t/elasticsearch-conflict-error/275104)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 7:50am UTC](https://discuss.elastic.co/t/elasticsearch-conflict-error/275104 "2021-06-07T07:50:05Z")
Below is my query and code for delete\_by\_query. While code is running after some time i get Elasticsearch conflict error. What do i do wrong? How can i solve this ? body\_val = { "query": { "bool": … --- ## [Indices is not deleting after 60 days of retention](https://discuss.elastic.co/t/indices-is-not-deleting-after-60-days-of-retention/275106)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [June 7, 2021, 7:43am UTC](https://discuss.elastic.co/t/indices-is-not-deleting-after-60-days-of-retention/275106 "2021-06-07T07:43:40Z")
Using ELK 7.11 Following are the indicies that should be deleted health status index uuid pri rep docs.count docs.deleted store.size pri.store.size green open log-pb-flow-20… --- ## [Lifecycle Policy doesn't delete documents correctly](https://discuss.elastic.co/t/lifecycle-policy-doesnt-delete-documents-correctly/275105)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 7:31am UTC](https://discuss.elastic.co/t/lifecycle-policy-doesnt-delete-documents-correctly/275105 "2021-06-07T07:31:47Z")
Good morning! I set up a lifecycle policy as follows last week, in the hope that documents older than 3 days would be deleted but it hasn't worked, can you tell me why? My intention is to store the data for only that lo… --- ## [Timestamp](https://discuss.elastic.co/t/timestamp/274734)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 12\ **Last updated:** [June 7, 2021, 7:25am UTC](https://discuss.elastic.co/t/timestamp/274734 "2021-06-07T07:25:33Z")
Hello Expert, If i would like to insert old data for example last year data in ES, could I change the timestamp as date of last year? If No, then what is the solution to insert the data which correspondence the time? T… --- ## [Configuration issue](https://discuss.elastic.co/t/configuration-issue/274839)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 5\ **Last updated:** [June 7, 2021, 6:48am UTC](https://discuss.elastic.co/t/configuration-issue/274839 "2021-06-07T06:48:19Z")
I am running in my cluster 3 master nodes, two data nodes and three client nodes. I am facing an issue that we are not able to create new indexes in Elastic. I can see lot's of exceptions in the elastic search. It sta… --- ## [Kibana Elasticsearch -\> after 7 Days elastic user pw changed](https://discuss.elastic.co/t/kibana-elasticsearch-after-7-days-elastic-user-pw-changed/274180)
**Author:** [@CleanerOne](https://discuss.elastic.co/u/CleanerOne)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 6:47am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-after-7-days-elastic-user-pw-changed/274180 "2021-06-07T06:47:34Z")
Hello Community Hello dear community, I have a problem ... I did Kibana and Elasticsearch after this tutorial installed in an AKS (Azure Kubernetes cluster). everything runs well until after 7 days the setup thinks… --- ## [Timeouts in cluster management requests ES 7.11.2 leading to nodes in the cluster freezing](https://discuss.elastic.co/t/timeouts-in-cluster-management-requests-es-7-11-2-leading-to-nodes-in-the-cluster-freezing/272882)
**Author:** [@parapar](https://discuss.elastic.co/u/parapar)\ **Replies:** 7\ **Last updated:** [June 7, 2021, 6:44am UTC](https://discuss.elastic.co/t/timeouts-in-cluster-management-requests-es-7-11-2-leading-to-nodes-in-the-cluster-freezing/272882 "2021-06-07T06:44:57Z")
Hi, I opened this bug https://github.com/elastic/elasticsearch/issues/72853, but the elastic team did not consider it a bug. My situation is quite similar to this other Kibana ticket https://github.com/elastic/kibana/is… --- ## [Mix HTTPS & HTTP nodes in the same cluster](https://discuss.elastic.co/t/mix-https-http-nodes-in-the-same-cluster/274987)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 6:38am UTC](https://discuss.elastic.co/t/mix-https-http-nodes-in-the-same-cluster/274987 "2021-06-07T06:38:50Z")
Using ELK 7.13.0 - Plat. licence - xpack security - on k8s - elastic Helm charts. We run a 2 clients nodes / X data nodes / 3 master nodes cluster, with security (transport TLS) without https. Everything is OK. Since I… --- ## [Migration from single to multi-index increased searchRate and overall search time](https://discuss.elastic.co/t/migration-from-single-to-multi-index-increased-searchrate-and-overall-search-time/275102)
**Author:** [@code\_merchant](https://discuss.elastic.co/u/code_merchant)\ **Replies:** 6\ **Last updated:** [June 7, 2021, 6:27am UTC](https://discuss.elastic.co/t/migration-from-single-to-multi-index-increased-searchrate-and-overall-search-time/275102 "2021-06-07T06:27:58Z")
Earlier, we had only 1 index of storing all the data of the cluster of around 400GB. We migrated from that architecture to a new one that has monthly indices each of size around 30 GB (recommended index size in ES). Afte… --- ## [In elasticsearch audit, for data/write/bulk event, what is the target index?](https://discuss.elastic.co/t/in-elasticsearch-audit-for-data-write-bulk-event-what-is-the-target-index/275001)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 6:20am UTC](https://discuss.elastic.co/t/in-elasticsearch-audit-for-data-write-bulk-event-what-is-the-target-index/275001 "2021-06-07T06:20:08Z")
I'm trying to debug a winlogbeat ingest, I'm seeing data/write/bulk events for the host and user in the audit logs, but it doesn't show the target index name. That seems like a useful audit item. I'm trying to get winl… --- ## [Only give access to create and manage alias and not update setting/mapping](https://discuss.elastic.co/t/only-give-access-to-create-and-manage-alias-and-not-update-setting-mapping/274868)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 0\ **Last updated:** [June 3, 2021, 12:29pm UTC](https://discuss.elastic.co/t/only-give-access-to-create-and-manage-alias-and-not-update-setting-mapping/274868 "2021-06-03T12:29:17Z")
Is it possible to have access create and mange alias only and not other things like template etc which comes with manage role ? \*\*create\_index\*\* = Privilege to create an index or data stream. A create index request may … --- ## [Need to write DSL to check if these 4 events occur within 1 second](https://discuss.elastic.co/t/need-to-write-dsl-to-check-if-these-4-events-occur-within-1-second/275096)
**Author:** [@abhishek\_s1](https://discuss.elastic.co/u/abhishek_s1)\ **Replies:** 0\ **Last updated:** [June 7, 2021, 4:40am UTC](https://discuss.elastic.co/t/need-to-write-dsl-to-check-if-these-4-events-occur-within-1-second/275096 "2021-06-07T04:40:02Z")
1. 31628 2021-02-13T00:20:49.325893Z - xyz svn/repos open 2. 31628 2021-02-13T00:20:49.607437Z - xyz svn/repos get-latest 3. 31628 2021-02-13T00:20:49.888794Z - xyz svn/repos reparent 4. 31628 2021-02-13T00:20:50.170101… --- ## [Is it possible to recover the data if we delete the segment file for the index?](https://discuss.elastic.co/t/is-it-possible-to-recover-the-data-if-we-delete-the-segment-file-for-the-index/274941)
**Author:** [@Josephyan](https://discuss.elastic.co/u/Josephyan)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 4:29am UTC](https://discuss.elastic.co/t/is-it-possible-to-recover-the-data-if-we-delete-the-segment-file-for-the-index/274941 "2021-06-07T04:29:13Z")
Hi Everyone, If the segment files were deleted for the index, is it possible to recover the index's data? Thanks a lot for your great help! Elasticsearch version: 2.1 Regards, Joe --- ## [Building elasticsearch on windows 10](https://discuss.elastic.co/t/building-elasticsearch-on-windows-10/275021)
**Author:** [@manishbansal8843](https://discuss.elastic.co/u/manishbansal8843)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 9:50am UTC](https://discuss.elastic.co/t/building-elasticsearch-on-windows-10/275021 "2021-06-05T09:50:51Z")
Hey All! I am trying to build elastic search on my local windows 10 box using jdk 15. As per ReadMe, i have executed gradlew localDistro. But i am getting following error. D:\\OpenSource\\elasticsearch\>gradlew localDi… --- ## [Elasticsearch all shards failed](https://discuss.elastic.co/t/elasticsearch-all-shards-failed/275088)
**Author:** [@jake\_JJ](https://discuss.elastic.co/u/jake_JJ)\ **Replies:** 1\ **Last updated:** [June 7, 2021, 2:41am UTC](https://discuss.elastic.co/t/elasticsearch-all-shards-failed/275088 "2021-06-07T02:41:43Z")
\[2021-06-04T10:27:19,423\]\[WARN \]\[o.e.m.f.FsHealthService \] \[node-9800\] health check of \[/data/elasticsearch-7.12.0-9800/data/nodes/0\] took \[2144291ms\] which is above the warn threshold of \[5s\] \[2021-06-04T10:33:24,887\]\[… --- ## [Log akamai to elastic](https://discuss.elastic.co/t/log-akamai-to-elastic/274960)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 0\ **Last updated:** [June 4, 2021, 8:29am UTC](https://discuss.elastic.co/t/log-akamai-to-elastic/274960 "2021-06-04T08:29:22Z")
i have an akamai, and i want to all log from akamai can detect and analysis with my elastic. what should i do to pull log akamai to elastic? --- ## [Is it necessary to copy synonym.txt to all nodes?](https://discuss.elastic.co/t/is-it-necessary-to-copy-synonym-txt-to-all-nodes/274746)
**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\ **Replies:** 3\ **Last updated:** [June 7, 2021, 1:04am UTC](https://discuss.elastic.co/t/is-it-necessary-to-copy-synonym-txt-to-all-nodes/274746 "2021-06-07T01:04:38Z")
I have a cluster of 3 nodes. My index is located on node-2 (primary shard) and node-3 (replica shard) and node-1 is currently master...Anyway, I have my own synonym.txt and I need to know that, should I have to copy my … --- ## [How to determine how much volume is needed in an Elasticsearch cluster?](https://discuss.elastic.co/t/how-to-determine-how-much-volume-is-needed-in-an-elasticsearch-cluster/275054)
**Author:** [@Barani\_A](https://discuss.elastic.co/u/Barani_A)\ **Replies:** 3\ **Last updated:** [June 6, 2021, 2:43pm UTC](https://discuss.elastic.co/t/how-to-determine-how-much-volume-is-needed-in-an-elasticsearch-cluster/275054 "2021-06-06T14:43:36Z")
Hi All, I have to procure an elasticsearch cluster, part of it is to specify how much volume we would require in GB and how much the size can grow everyday. Is there any way I can calculate the volume needed? My use ca… --- ## [Master takes another cluster UUID when recovers](https://discuss.elastic.co/t/master-takes-another-cluster-uuid-when-recovers/275026)
**Author:** [@akshaygupta2208](https://discuss.elastic.co/u/akshaygupta2208)\ **Replies:** 6\ **Last updated:** [June 6, 2021, 11:30am UTC](https://discuss.elastic.co/t/master-takes-another-cluster-uuid-when-recovers/275026 "2021-06-06T11:30:12Z")
Hello, I am running an Elasticsearch cluster on the Kubernetes cluster. My cluster has the following nodes. Master nodes : 3 Data nodes : 3 Client nodes : minimum 2(they can vary on autoscaling) My Data nodes have … --- ## [CLA signing issue](https://discuss.elastic.co/t/cla-signing-issue/275031)
**Author:** [@hmilkovi](https://discuss.elastic.co/u/hmilkovi)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 9:30am UTC](https://discuss.elastic.co/t/cla-signing-issue/275031 "2021-06-06T09:30:06Z")
Hi all, can please someone from Elastic team help to check CLA signing? First I noticed that I had different email in commits that I fixed in last commit of PR. PR: Handle RecursionError exception in perform\_request (… --- ## [How to use 'Terms' query to return value in my search order?](https://discuss.elastic.co/t/how-to-use-terms-query-to-return-value-in-my-search-order/275052)
**Author:** [@sathiez](https://discuss.elastic.co/u/sathiez)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 7:22am UTC](https://discuss.elastic.co/t/how-to-use-terms-query-to-return-value-in-my-search-order/275052 "2021-06-06T07:22:12Z")
My doc: {"local\_id" : 1654, "universal\_id" : 5412896 } { "local\_id" : 1657, "universal\_id" : 9658742 } { "local\_id" : 1658, "universal\_id" : 6325412 } My query : {"from": 0, "size": 10,"query": { "bool": { "must" : \[… --- ## [Elastic Search architecture](https://discuss.elastic.co/t/elastic-search-architecture/275046)
**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\ **Replies:** 1\ **Last updated:** [June 6, 2021, 5:28am UTC](https://discuss.elastic.co/t/elastic-search-architecture/275046 "2021-06-06T05:28:43Z")
Hi , can someone please share the architecture diagram of es and ELK stack. am interested to know, how the cluster is managed, how do we know when the node went down, data replication etc. it would be really helpful i… --- ## [Max emits for creating runtime field](https://discuss.elastic.co/t/max-emits-for-creating-runtime-field/275042)
**Author:** [@robert-n-stewart](https://discuss.elastic.co/u/robert-n-stewart)\ **Replies:** 2\ **Last updated:** [June 5, 2021, 9:04pm UTC](https://discuss.elastic.co/t/max-emits-for-creating-runtime-field/275042 "2021-06-05T21:04:41Z")
Hello, I'm trying to create a runtime field which takes a multi-value long field and converts it to a multi-value string field. This way I can perform a regex search on it. The following search works, but only for field… --- ## [java.lang.NullPointerException: Cannot invoke "java.util.List.stream()"](https://discuss.elastic.co/t/java-lang-nullpointerexception-cannot-invoke-java-util-list-stream/274937)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 3\ **Last updated:** [June 5, 2021, 4:08pm UTC](https://discuss.elastic.co/t/java-lang-nullpointerexception-cannot-invoke-java-util-list-stream/274937 "2021-06-05T16:08:39Z")
I don't know what's going on. Can the elastic team explain this error report? \[2021-06-04T09:00:01,713\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[es-node01\] collector \[cluster\_stats\] failed to collect data java.lang.N… --- ## [What is network.host](https://discuss.elastic.co/t/what-is-network-host/274426)
**Author:** [@surya3](https://discuss.elastic.co/u/surya3)\ **Replies:** 3\ **Last updated:** [June 5, 2021, 3:19pm UTC](https://discuss.elastic.co/t/what-is-network-host/274426 "2021-06-05T15:19:51Z")
Hello Everyone i am new to elastic search while configuring i found one parameter network.host in elasticsearch.yml file while exploring abt this some one said use 0.0.0.0 to make ur elastic search accessible to publi… --- ## [Modify index naming in ILM](https://discuss.elastic.co/t/modify-index-naming-in-ilm/272451)
**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\ **Replies:** 2\ **Last updated:** [June 5, 2021, 2:27pm UTC](https://discuss.elastic.co/t/modify-index-naming-in-ilm/272451 "2021-06-05T14:27:45Z")
Hello guys, Is it possible to modify index naming in clustered environnement when using Automatic rollover in ES / Kibaba (7.11.2), I used myindex-000001 on monthly basis/max size conditions and would prefer myindex-(yy… --- ## [Search box with ajax results, query with wildcard (but also allow 1-2 typos)](https://discuss.elastic.co/t/search-box-with-ajax-results-query-with-wildcard-but-also-allow-1-2-typos/275032)
**Author:** [@kiko](https://discuss.elastic.co/u/kiko)\ **Replies:** 0\ **Last updated:** [June 5, 2021, 1:44pm UTC](https://discuss.elastic.co/t/search-box-with-ajax-results-query-with-wildcard-but-also-allow-1-2-typos/275032 "2021-06-05T13:44:24Z")
Hi I'm trying to create a search box that returns results from Elastic on keypress. The problem is with the documentation warning not to use both fuzzy and wildcard in a query. Is there an other way to use wildcard and … --- ## [Calculated positional field based on \_score](https://discuss.elastic.co/t/calculated-positional-field-based-on-score/274887)
**Author:** [@jcater](https://discuss.elastic.co/u/jcater)\ **Replies:** 1\ **Last updated:** [June 4, 2021, 10:15pm UTC](https://discuss.elastic.co/t/calculated-positional-field-based-on-score/274887 "2021-06-04T22:15:28Z")
I need to add a position/ordinal field to my Elasticsearch search results, relative to a sort by \_score, regardless of how the actual results are sorted. I'm using the term "field" loosely... I just need access to some … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=632) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=634)