# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=639 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 640 --- ## [Make all current indexes use another Index Lifecycle Management policy that has a hot-delete phase?](https://discuss.elastic.co/t/make-all-current-indexes-use-another-index-lifecycle-management-policy-that-has-a-hot-delete-phase/273444)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 10:57pm UTC](https://discuss.elastic.co/t/make-all-current-indexes-use-another-index-lifecycle-management-policy-that-has-a-hot-delete-phase/273444 "2021-05-26T22:57:36Z")
Hello Piggybacking on my previous topic, Implement Hot-Warm-Cold-Frozen-Delete phases with only one node but multiple storage destinations? I created a Index Lifecycle Management policy that has a hot phase, rollsover t… --- ## [Strange reindex behaviour](https://discuss.elastic.co/t/strange-reindex-behaviour/274108)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 6:38pm UTC](https://discuss.elastic.co/t/strange-reindex-behaviour/274108 "2021-05-26T18:38:04Z")
I'm doing some reindex of daily index to monthly ones and sometimes the reindex process enters in a loop and starts again after it already reindexed the documents. For example, considering the index indexName-2021.05.01 … --- ## [GET \_nodes/stats in 7.13 includes large amount of potentially unwanted "clients" information by default](https://discuss.elastic.co/t/get-nodes-stats-in-7-13-includes-large-amount-of-potentially-unwanted-clients-information-by-default/274090)
**Author:** [@Presence](https://discuss.elastic.co/u/Presence)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 10:36pm UTC](https://discuss.elastic.co/t/get-nodes-stats-in-7-13-includes-large-amount-of-potentially-unwanted-clients-information-by-default/274090 "2021-05-26T22:36:16Z")
Having just upgraded our Elastic Cloud cluster from 7.12.1 to 7.13.0 we've found that GET \_nodes/stats now includes a fairly large chunk of data about "clients" which wasn't present before. This could be useful, but I'm … --- ## [GET \_snapshot/\_status returns 404 "repository\_missing\_exception" even though the repository exists and works](https://discuss.elastic.co/t/get-snapshot-status-returns-404-repository-missing-exception-even-though-the-repository-exists-and-works/274098)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 9:52pm UTC](https://discuss.elastic.co/t/get-snapshot-status-returns-404-repository-missing-exception-even-though-the-repository-exists-and-works/274098 "2021-05-26T21:52:13Z")
I'm using Elasticsearch 6.8.3 The reason I discovered this is because curator calls GET \_snapshot/\_status before it starts doing snapshots, and it is failing with a 404 response. I've confirmed that the response to tha… --- ## [Elasticsearch 7.12.1](https://discuss.elastic.co/t/elasticsearch-7-12-1/273919)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 9\ **Last updated:** [May 26, 2021, 7:01pm UTC](https://discuss.elastic.co/t/elasticsearch-7-12-1/273919 "2021-05-26T19:01:08Z")
● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since mar. 2021-05-25 12:38:45 CEST; 3s ago D… --- ## [What is the best approach to combine multiple aggregations based in same key](https://discuss.elastic.co/t/what-is-the-best-approach-to-combine-multiple-aggregations-based-in-same-key/274094)
**Author:** [@jasl](https://discuss.elastic.co/u/jasl)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 4:28pm UTC](https://discuss.elastic.co/t/what-is-the-best-approach-to-combine-multiple-aggregations-based-in-same-key/274094 "2021-05-26T16:28:09Z")
This is the query I am playing with: { "aggs": { "by\_foo": { "terms": { "field": "foo.keyword", "size": 100, "exclude": \[ "Unknown" \] } }, "by\_bar": { … --- ## [Docker Compose for CRON job](https://discuss.elastic.co/t/docker-compose-for-cron-job/274087)
**Author:** [@Ashish\_Jindal](https://discuss.elastic.co/u/Ashish_Jindal)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 3:33pm UTC](https://discuss.elastic.co/t/docker-compose-for-cron-job/274087 "2021-05-26T15:33:44Z")
We had a task to Create a docker file with ubuntu image Create a print.sh file which has code to print date and time Write a cron file named "hello-cron" which includes the print.sh to run for every 1 min. The docker i… --- ## [SIngle URL for elastic cluster](https://discuss.elastic.co/t/single-url-for-elastic-cluster/274062)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 2:18pm UTC](https://discuss.elastic.co/t/single-url-for-elastic-cluster/274062 "2021-05-26T14:18:13Z")
Hi, Can we create a single URL for elastic cluster if we have a cluster with 10 12 nodes so we can use a single URL in beats or logstash output. Regards, Bryce Fernandes. --- ## [Elastic search exclude few fields while reading](https://discuss.elastic.co/t/elastic-search-exclude-few-fields-while-reading/274065)
**Author:** [@whiletruelearn](https://discuss.elastic.co/u/whiletruelearn)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 2:11pm UTC](https://discuss.elastic.co/t/elastic-search-exclude-few-fields-while-reading/274065 "2021-05-26T14:11:55Z")
Hi, I am using elasticsearch spark connector and trying to use es.read.field.exclude to exclude reading two fields. In the documentation there is this example given es.read.field.exclude = company.income I have two … --- ## [Java: cannot find symbol class RestHighLevelClient](https://discuss.elastic.co/t/java-cannot-find-symbol-class-resthighlevelclient/274028)
**Author:** [@pinto](https://discuss.elastic.co/u/pinto)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 9:57am UTC](https://discuss.elastic.co/t/java-cannot-find-symbol-class-resthighlevelclient/274028 "2021-05-26T09:57:42Z")
Following Java High Level REST Client Getting started documentation. Added to the POM.xml (in IntelliJ): \ ... \ \ \org.elasticsearch.client\ … --- ## [Which node ip address should I specify in Multi-Node elasticsearch cluster to store data into an elasticsearch index?](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 12:59pm UTC](https://discuss.elastic.co/t/which-node-ip-address-should-i-specify-in-multi-node-elasticsearch-cluster-to-store-data-into-an-elasticsearch-index/273962 "2021-05-26T12:59:55Z")
Hii.I am creating a Multi-Node Elasticsearch Cluster.I will collect logs from different server's using filebeat and store them into an elasticsearch index.I am little bit confuse that which elasticsearch node ip address … --- ## [Geo-bounding box query does not support \`topLeft\` & \`bottomLeft\`](https://discuss.elastic.co/t/geo-bounding-box-query-does-not-support-topleft-bottomleft/273792)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 11:36am UTC](https://discuss.elastic.co/t/geo-bounding-box-query-does-not-support-topleft-bottomleft/273792 "2021-05-26T11:36:55Z")
The documentation states that: More over the names topLeft , bottomRight , topRight and bottomLeft are supported However, using topLeft & bottomRight causes an error: { "error": { "root\_cause": \[ { … --- ## [Browser was closed unexpectedly error when sending report](https://discuss.elastic.co/t/browser-was-closed-unexpectedly-error-when-sending-report/270671)
**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\ **Replies:** 8\ **Last updated:** [May 26, 2021, 10:56am UTC](https://discuss.elastic.co/t/browser-was-closed-unexpectedly-error-when-sending-report/270671 "2021-05-26T10:56:57Z")
Hi In ElasticCloud 7.12 and I have a watcher with a reporting action which sends a report at 5pm each day. It works about 50% of the time with the other times producing the following error "Reporting generation failed… --- ## [CLA checking in Pull Request for Elasticsearch](https://discuss.elastic.co/t/cla-checking-in-pull-request-for-elasticsearch/273989)
**Author:** [@bhargavkn](https://discuss.elastic.co/u/bhargavkn)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 10:55am UTC](https://discuss.elastic.co/t/cla-checking-in-pull-request-for-elasticsearch/273989 "2021-05-26T10:55:58Z")
Hi, I have created a Pull Request and signed Contributors License Agreement but the cla-checker-service bot is failing. I tried closing the PR as well as creating a new one, but the CLA checker still fails. Can someone … --- ## [Plugin versions](https://discuss.elastic.co/t/plugin-versions/273787)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 10:12am UTC](https://discuss.elastic.co/t/plugin-versions/273787 "2021-05-26T10:12:01Z")
Hi everyone, What is the best way of versioning plugins. If we plan to have multiple versions of our plugin, and support multiple versions of ElasticSearch how would we do that? Is there anyway that we say that our pl… --- ## [READ ONLY LATEST RECORDS FROM AN INDEX USING SPARK-SCALA API](https://discuss.elastic.co/t/read-only-latest-records-from-an-index-using-spark-scala-api/274035)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 9:49am UTC](https://discuss.elastic.co/t/read-only-latest-records-from-an-index-using-spark-scala-api/274035 "2021-05-26T09:49:59Z")
i want to read only the latest records from an index so i am passing the below query in my spark-scala code conf.set("es.query","""{ "query": { "match\_all": {} }, "sort": \[ { "@timestamp": { "order": "desc" } } … --- ## [Increasing number of pending tasks despite small number of shards](https://discuss.elastic.co/t/increasing-number-of-pending-tasks-despite-small-number-of-shards/273562)
**Author:** [@crl](https://discuss.elastic.co/u/crl)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 9:16am UTC](https://discuss.elastic.co/t/increasing-number-of-pending-tasks-despite-small-number-of-shards/273562 "2021-05-26T09:16:46Z")
Hi I'm fairly new to Elasticsearch and I'm trying to maintain a small cluster. Currently I'm having trouble with a growing number of pending tasks. In all other threads that I have looked at the issue have been caused … --- ## [Version 7.12 does not work on Windows](https://discuss.elastic.co/t/version-7-12-does-not-work-on-windows/271203)
**Author:** [@Andrey\_Tomilin](https://discuss.elastic.co/u/Andrey_Tomilin)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 7:24am UTC](https://discuss.elastic.co/t/version-7-12-does-not-work-on-windows/271203 "2021-05-26T07:24:52Z")
Can't install version 7.12 on Windows 10 Pro, getting this error: Error: Could not find or load main class org.elasticsearch.tools.java\_version\_checker.JavaVersionChecker Caused by: java.lang.ClassNotFoundException: o… --- ## [Cannot search new documents after reindexing](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911)
**Author:** [@Andrey2](https://discuss.elastic.co/u/Andrey2)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 3:10am UTC](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911 "2021-05-26T03:10:11Z")
Hi all, I'm having a problem with reindexing. I have an index called emails, after reindexing, I can get/post documents to this index normally. But for new documents, I cannot get these when search by property or show… --- ## [Nest - Search path](https://discuss.elastic.co/t/nest-search-path/273946)
**Author:** [@silentw](https://discuss.elastic.co/u/silentw)\ **Replies:** 10\ **Last updated:** [May 26, 2021, 1:18am UTC](https://discuss.elastic.co/t/nest-search-path/273946 "2021-05-26T01:18:28Z")
I am trying to use the Nest client to consume an Elasticsearch instance. However, the /\_search endpoint is in fact /search . Is there any possible way to change the behavior of the client to reflect this change? I hav… --- ## [Single node, large database index performance](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865)
**Author:** [@twbarr](https://discuss.elastic.co/u/twbarr)\ **Replies:** 8\ **Last updated:** [May 26, 2021, 12:34am UTC](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865 "2021-05-26T00:34:12Z")
I have a set of documents that I'm trying to load into a single large index on a single node. About seven million documents, about 400gb of text. The fields are in different files, so I'm just using a script that loads e… --- ## [Cannot restore index](https://discuss.elastic.co/t/cannot-restore-index/273910)
**Author:** [@Tuyen](https://discuss.elastic.co/u/Tuyen)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 11:08pm UTC](https://discuss.elastic.co/t/cannot-restore-index/273910 "2021-05-25T23:08:04Z")
Backup and index to a gzip using stdout: elasticdump --input=http://production.es.com:9200/my\_index --output=$ | gzip \> /data/my\_index.json.gz After dump index to my\_index.json.gz success I cannot restore them. So… --- ## [Security Vulnerability in ELK stack during docker scan by twistlock](https://discuss.elastic.co/t/security-vulnerability-in-elk-stack-during-docker-scan-by-twistlock/273927)
**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 11:02pm UTC](https://discuss.elastic.co/t/security-vulnerability-in-elk-stack-during-docker-scan-by-twistlock/273927 "2021-05-25T23:02:52Z")
Hello, Below vulnerabilities are flagged during docker image scan. Is there any official response/statement on the docker scan vulnerabilities check from elastic? CVE-2020-25649 CVE-2020-28491 CVE-2017-18640 CVE-202… --- ## [Python module - use master nodes or data nodes?](https://discuss.elastic.co/t/python-module-use-master-nodes-or-data-nodes/273848)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 10:58pm UTC](https://discuss.elastic.co/t/python-module-use-master-nodes-or-data-nodes/273848 "2021-05-25T22:58:28Z")
When using python bulk load should I open connection with master node or data node? elastic\_output = Elasticsearch(\[master1,master2\], http\_auth=(elastic\_admin\_user, elastic\_admin\_passwd),port=9200) and then write data … --- ## [Elasticsearch cluster kibana randomly slow on some requests](https://discuss.elastic.co/t/elasticsearch-cluster-kibana-randomly-slow-on-some-requests/273174)
**Author:** [@arvanMalian](https://discuss.elastic.co/u/arvanMalian)\ **Replies:** 10\ **Last updated:** [May 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-kibana-randomly-slow-on-some-requests/273174 "2021-05-25T22:57:36Z")
Elasticsearch cluster kibana randomly slow on some requests Hi everyone, I have a perfomance issue when navigating on kibana admin interface. It takes a lot of time to display the contents: genearlly on items in SECURT… --- ## [Failed to parse the date format](https://discuss.elastic.co/t/failed-to-parse-the-date-format/273400)
**Author:** [@Ramalakshmi](https://discuss.elastic.co/u/Ramalakshmi)\ **Replies:** 5\ **Last updated:** [May 25, 2021, 10:55pm UTC](https://discuss.elastic.co/t/failed-to-parse-the-date-format/273400 "2021-05-25T22:55:55Z")
Hi, I am not able to parse 06-MAY-21 03.00.01.491228 AM date format into elasticsearch. Please help me out for this Thank you. --- ## [Does an elastic watcher action remain in ackable/acked state during its throttle window?](https://discuss.elastic.co/t/does-an-elastic-watcher-action-remain-in-ackable-acked-state-during-its-throttle-window/273985)
**Author:** [@pranayparmar](https://discuss.elastic.co/u/pranayparmar)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 7:05pm UTC](https://discuss.elastic.co/t/does-an-elastic-watcher-action-remain-in-ackable-acked-state-during-its-throttle-window/273985 "2021-05-25T19:05:53Z")
The Elasticsearch documentation does not specify this but would an action remain in the ackable/acked state if it is throttling until its throttle period end? I have an action with a 30m throttle period and looking at i… --- ## [Getting version\_conflict\_eng (409) while updating in the existing Index](https://discuss.elastic.co/t/getting-version-conflict-eng-409-while-updating-in-the-existing-index/273543)
**Author:** [@Suraj\_Anand](https://discuss.elastic.co/u/Suraj_Anand)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 6:42pm UTC](https://discuss.elastic.co/t/getting-version-conflict-eng-409-while-updating-in-the-existing-index/273543 "2021-05-25T18:42:31Z")
I am trying to update some data in an Elastic Search Index, I am trying to update using this method: Update Method: $params = \[ 'index' =\> 'my\_index', 'id' =\> 'my\_id', 'body' =\> \[… --- ## [Watcher to track specific Drive space](https://discuss.elastic.co/t/watcher-to-track-specific-drive-space/273960)
**Author:** [@mralladin](https://discuss.elastic.co/u/mralladin)\ **Replies:** 0\ **Last updated:** [May 25, 2021, 2:52pm UTC](https://discuss.elastic.co/t/watcher-to-track-specific-drive-space/273960 "2021-05-25T14:52:46Z")
Hello I wanted to create a watcher to track my space on a specific drive (D:/) or even machine later. I am not really experienced with them and I read the documentation and followed some examples but it is not working we… --- ## [Coordination Node Client request stats](https://discuss.elastic.co/t/coordination-node-client-request-stats/272807)
**Author:** [@mani1](https://discuss.elastic.co/u/mani1)\ **Replies:** 6\ **Last updated:** [May 25, 2021, 2:25pm UTC](https://discuss.elastic.co/t/coordination-node-client-request-stats/272807 "2021-05-25T14:25:32Z")
Hi, In our Elasticsearch cluster, there are three coordinatin nodes (dedicated) which are forwarding client search requests to Hot Nodes. There is no load balancer before Coord Nodes. They are receiving client request d… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=638) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=640)