# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=646

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 647

---

## [Share Synonym Path for multiple nodes](https://discuss.elastic.co/t/share-synonym-path-for-multiple-nodes/272940)

<div class="topic-metadata">

**Author:** [@Coder\_Cub](https://discuss.elastic.co/u/Coder_Cub)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 5:35pm UTC](https://discuss.elastic.co/t/share-synonym-path-for-multiple-nodes/272940 "2021-05-13T17:35:45Z")

</div>

Hi, I have 3 nodes for my index. I am using synonym filter with synonym .txt for few fields in my index. Is it possible to use one file for all 3 nodes? Something like keeping it in network path and using that in Synon…

---

## [Elastic sharding strategy](https://discuss.elastic.co/t/elastic-sharding-strategy/272925)

<div class="topic-metadata">

**Author:** [@alexs1](https://discuss.elastic.co/u/alexs1)\
**Replies:** 3\
**Last updated:** [May 13, 2021, 5:28pm UTC](https://discuss.elastic.co/t/elastic-sharding-strategy/272925 "2021-05-13T17:28:50Z")

</div>

Hello, I have a question about sharding strategy and performance please: when creating an index, the default number of shards is 1 and 1 replica. when creating an ILM policy, the default rollover is 30days/ 50gb. So …

---

## [Version Conflict Engine Exception - seqNo question](https://discuss.elastic.co/t/version-conflict-engine-exception-seqno-question/272930)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 1\
**Last updated:** [May 13, 2021, 5:11pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception-seqno-question/272930 "2021-05-13T17:11:49Z")

</div>

Hi All, I'm getting version\_conflict\_engine\_exception when doing an update by query in an index with one shard and no replicas. I do not understand well why is this situation happening. Is there any place in the doc …

---

## [Kibana and custom-es exporter cannot connect to Elastic search](https://discuss.elastic.co/t/kibana-and-custom-es-exporter-cannot-connect-to-elastic-search/272550)

<div class="topic-metadata">

**Author:** [@harsh9](https://discuss.elastic.co/u/harsh9)\
**Replies:** 3\
**Last updated:** [May 13, 2021, 4:54pm UTC](https://discuss.elastic.co/t/kibana-and-custom-es-exporter-cannot-connect-to-elastic-search/272550 "2021-05-13T16:54:57Z")

</div>

I cannot connect to my es from my kibana pod and my custom-es-exporter pod, the error which is thrown is Version of elastic search we are using is 7.7.1 Error from the custom-es-exporter logs

---

## [Bulk retry drops whole BulkResponse if only one BulkItemResponse can not be retried](https://discuss.elastic.co/t/bulk-retry-drops-whole-bulkresponse-if-only-one-bulkitemresponse-can-not-be-retried/272936)

<div class="topic-metadata">

**Author:** [@Chobicus](https://discuss.elastic.co/u/Chobicus)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 4:41pm UTC](https://discuss.elastic.co/t/bulk-retry-drops-whole-bulkresponse-if-only-one-bulkitemresponse-can-not-be-retried/272936 "2021-05-13T16:41:04Z")

</div>

Hello. Not sure if canRetry method is intended to behave like this. I have an index where sometimes I try to index the document that is already indexed getting CONFLICT(409) which is fine and should not be retried. Som…

---

## [Rollover very slow to occurr](https://discuss.elastic.co/t/rollover-very-slow-to-occurr/272414)

<div class="topic-metadata">

**Author:** [@Ronaldo\_Lanhellas](https://discuss.elastic.co/u/Ronaldo_Lanhellas)\
**Replies:** 2\
**Last updated:** [May 13, 2021, 4:01pm UTC](https://discuss.elastic.co/t/rollover-very-slow-to-occurr/272414 "2021-05-13T16:01:04Z")

</div>

I'm trying to apply the following policy with rollover: \` "policy": { "phases": { "hot":{ "actions": { "rollover":{ "max\_size": "2GB" } } }, "warm": …

---

## [Facing error while create new index](https://discuss.elastic.co/t/facing-error-while-create-new-index/272890)

<div class="topic-metadata">

**Author:** [@Dhiraj\_Gurav](https://discuss.elastic.co/u/Dhiraj_Gurav)\
**Replies:** 3\
**Last updated:** [May 13, 2021, 3:31pm UTC](https://discuss.elastic.co/t/facing-error-while-create-new-index/272890 "2021-05-13T15:31:18Z")

</div>

Hello, 1)While creating new index as : PUT logstash-test/logs/1 { "demo" : "demo" } I am facing error as : { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", "reason": "Rejecting mapping up…

---

## [Add field to search results](https://discuss.elastic.co/t/add-field-to-search-results/272928)

<div class="topic-metadata">

**Author:** [@fast.fart](https://discuss.elastic.co/u/fast.fart)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 3:31pm UTC](https://discuss.elastic.co/t/add-field-to-search-results/272928 "2021-05-13T15:31:03Z")

</div>

Hi, I want to set field value in search results. Let's say for some documents field xxx is not so I need to set the value based on other fields. I tried to use a simple script below but it only adds fields object but …

---

## [Enrich processor debug statements](https://discuss.elastic.co/t/enrich-processor-debug-statements/272921)

<div class="topic-metadata">

**Author:** [@sulsulatoff](https://discuss.elastic.co/u/sulsulatoff)\
**Replies:** 1\
**Last updated:** [May 13, 2021, 3:22pm UTC](https://discuss.elastic.co/t/enrich-processor-debug-statements/272921 "2021-05-13T15:22:04Z")

</div>

I am using enrich processor with ingest pipeline. The enrichment works when I simulate the pipeline but fails when ingesting a doc. How can I debug what is going wrong? Verified that the Pipeline is indeed been invoked …

---

## [Preventing too\_long\_frame\_exception on GetAlias Rest client](https://discuss.elastic.co/t/preventing-too-long-frame-exception-on-getalias-rest-client/272917)

<div class="topic-metadata">

**Author:** [@amishar](https://discuss.elastic.co/u/amishar)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 2:24pm UTC](https://discuss.elastic.co/t/preventing-too-long-frame-exception-on-getalias-rest-client/272917 "2021-05-13T14:24:16Z")

</div>

We are on Elasticsearch 6.8 and recently start using rest client. Some of the rest API endpoints like getAlias(\_alias) requests are GET requests with index names are included in the URL. When there are too many indices, …

---

## [Unique count exact value](https://discuss.elastic.co/t/unique-count-exact-value/272910)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 12:50pm UTC](https://discuss.elastic.co/t/unique-count-exact-value/272910 "2021-05-13T12:50:47Z")

</div>

hi , we trying to use unique count in Elasticsearch we know its Cardinality Aggregation and give approximate count . we also tried using "precision\_threshold":10000 , but still count is not exact. let me give info - …

---

## [Update by query rejected despite having index privilege on index alias](https://discuss.elastic.co/t/update-by-query-rejected-despite-having-index-privilege-on-index-alias/272425)

<div class="topic-metadata">

**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\
**Replies:** 2\
**Last updated:** [May 13, 2021, 12:48pm UTC](https://discuss.elastic.co/t/update-by-query-rejected-despite-having-index-privilege-on-index-alias/272425 "2021-05-13T12:48:54Z")

</div>

I have a set of concrete indexes named like myindex-v1 with aliases like myindex. For my roles, I've granted privileges as needed to all of the aliases and not the concrete indexes. That all works fine except when I atte…

---

## [Implement Hot-Warm-Cold-Frozen-Delete phases with only one node but multiple storage destinations?](https://discuss.elastic.co/t/implement-hot-warm-cold-frozen-delete-phases-with-only-one-node-but-multiple-storage-destinations/272901)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 4\
**Last updated:** [May 13, 2021, 12:36pm UTC](https://discuss.elastic.co/t/implement-hot-warm-cold-frozen-delete-phases-with-only-one-node-but-multiple-storage-destinations/272901 "2021-05-13T12:36:32Z")

</div>

Hello We are looking to implement Hot-Warm-Cold-Frozen-Delete phases for a client but the idea is to move the indexes to other storage: For example, keep hot on local SSDs but move frozen to offsite HDDs (just a example…

---

## [Elastic Query for single field on multiple values](https://discuss.elastic.co/t/elastic-query-for-single-field-on-multiple-values/272903)

<div class="topic-metadata">

**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 11:19am UTC](https://discuss.elastic.co/t/elastic-query-for-single-field-on-multiple-values/272903 "2021-05-13T11:19:10Z")

</div>

Hi, I am not able to come up with a solution how to implement this query. So if someone could help that will be great. My doc looks something like this { a: "val", b: "val1", c: "val3" } I want to g…

---

## [Children aggregation not returning results](https://discuss.elastic.co/t/children-aggregation-not-returning-results/272896)

<div class="topic-metadata">

**Author:** [@brjisc](https://discuss.elastic.co/u/brjisc)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 9:14am UTC](https://discuss.elastic.co/t/children-aggregation-not-returning-results/272896 "2021-05-13T09:14:26Z")

</div>

Using a mapping with: "stats\_rel": { "type": "join", "relations": { "metadata": "stat" } }\`\`\` and sample data of: \`\`\`{ "\_index": "irustest", "\_type": "\_doc", "\_id": …

---

## [Snapshot restore failing](https://discuss.elastic.co/t/snapshot-restore-failing/272117)

<div class="topic-metadata">

**Author:** [@kommineni24](https://discuss.elastic.co/u/kommineni24)\
**Replies:** 4\
**Last updated:** [May 13, 2021, 8:31am UTC](https://discuss.elastic.co/t/snapshot-restore-failing/272117 "2021-05-13T08:31:02Z")

</div>

Hi Team, I am trying to migrate data from Cluster 1(Elasticsearch version-6.4) to Cluster-2(Elasticsearch version-7.12). Have taken the snapshot and trying to restore the snapshot and seeing the error shown in the atta…

---

## [Remote Client not able to connect to Elasticsearch Cluster via SSL in place](https://discuss.elastic.co/t/remote-client-not-able-to-connect-to-elasticsearch-cluster-via-ssl-in-place/272766)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 6\
**Last updated:** [May 13, 2021, 7:52am UTC](https://discuss.elastic.co/t/remote-client-not-able-to-connect-to-elasticsearch-cluster-via-ssl-in-place/272766 "2021-05-13T07:52:54Z")

</div>

Hello I am using Elasticsearch version 7.8.0 with 5 node cluster. This cluster has SSL enabled and user auth security enabled too. For inter-commmunication port used is 9300. I am using external client \[ Oracle Golden…

---

## [Verifying Install of Proposed Setup](https://discuss.elastic.co/t/verifying-install-of-proposed-setup/272609)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 4\
**Last updated:** [May 13, 2021, 5:24am UTC](https://discuss.elastic.co/t/verifying-install-of-proposed-setup/272609 "2021-05-13T05:24:20Z")

</div>

Good Day, I've been working with many of you in the past few weeks and you all have been ULTRA HELPFUL. SO thanks for that. With that said, I'm finalizing my final setup / re-install and want to verify this works... I…

---

## [Query that return similar words](https://discuss.elastic.co/t/query-that-return-similar-words/272825)

<div class="topic-metadata">

**Author:** [@abdess](https://discuss.elastic.co/u/abdess)\
**Replies:** 3\
**Last updated:** [May 13, 2021, 5:16am UTC](https://discuss.elastic.co/t/query-that-return-similar-words/272825 "2021-05-13T05:16:43Z")

</div>

I have a document that contains "chnik" word in a field and i want to return it in the result if i search for "china" word. Query used: { "query": { "query\_string": { "query": "\*china\* \*chin\* …

---

## [\[Question\] Use aggregation result to query documents in a single query to optimise calls to ES](https://discuss.elastic.co/t/question-use-aggregation-result-to-query-documents-in-a-single-query-to-optimise-calls-to-es/272775)

<div class="topic-metadata">

**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\
**Replies:** 4\
**Last updated:** [May 13, 2021, 3:42am UTC](https://discuss.elastic.co/t/question-use-aggregation-result-to-query-documents-in-a-single-query-to-optimise-calls-to-es/272775 "2021-05-13T03:42:35Z")

</div>

Aggregate a max for a field and then query only those documents which contain the field equal to that aggregated result. Can we perform this operation so that we get the queried results also rather than giving an aggreg…

---

## [Daily Indexing (at Midnight)](https://discuss.elastic.co/t/daily-indexing-at-midnight/272867)

<div class="topic-metadata">

**Author:** [@inf](https://discuss.elastic.co/u/inf)\
**Replies:** 6\
**Last updated:** [May 13, 2021, 2:25am UTC](https://discuss.elastic.co/t/daily-indexing-at-midnight/272867 "2021-05-13T02:25:17Z")

</div>

Hi there, As I understand from this GitHub post and this Elastic Discuss post about having a new daily index (at midnight for my case), the solution to it is not Index Lifecycle Management. Instead, it should be using d…

---

## [How to check per day logs size?](https://discuss.elastic.co/t/how-to-check-per-day-logs-size/272638)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 2\
**Last updated:** [May 13, 2021, 2:19am UTC](https://discuss.elastic.co/t/how-to-check-per-day-logs-size/272638 "2021-05-13T02:19:10Z")

</div>

I want to check per day log size.It was very easy earlier because logstash created index on daily basis,but now we are using ILM policy , so it create new index when an index reaches to specific gb or it create new index…

---

## [Open Source Projects That Use The ES Python API](https://discuss.elastic.co/t/open-source-projects-that-use-the-es-python-api/272866)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 0\
**Last updated:** [May 13, 2021, 12:37am UTC](https://discuss.elastic.co/t/open-source-projects-that-use-the-es-python-api/272866 "2021-05-13T00:37:16Z")

</div>

Can anyone recommend any well written open source projects that use the ES Python API? I've written a ES Class with a bunch of functions inside that create a connection to ES and execute various queries and deal with th…

---

## [Mount permission denied for snapshots](https://discuss.elastic.co/t/mount-permission-denied-for-snapshots/272312)

<div class="topic-metadata">

**Author:** [@guthurti](https://discuss.elastic.co/u/guthurti)\
**Replies:** 2\
**Last updated:** [May 12, 2021, 9:40pm UTC](https://discuss.elastic.co/t/mount-permission-denied-for-snapshots/272312 "2021-05-12T21:40:02Z")

</div>

Team, I have an 11 node cluster and trying NFS mounting for Snapshots in Data and Master nodes. It's throwing mount permission denied. The entire cluster was deployed Mesos Container framework. Can someone help me with …

---

## [ElasticSearch not starting after configuring ip address ov VM](https://discuss.elastic.co/t/elasticsearch-not-starting-after-configuring-ip-address-ov-vm/272701)

<div class="topic-metadata">

**Author:** [@ps1304](https://discuss.elastic.co/u/ps1304)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 9:37pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-configuring-ip-address-ov-vm/272701 "2021-05-12T21:37:54Z")

</div>

Hi folks, just started my experence with ES - one challenge I now have: Elasticsearch working on localhost - when editing elasticsearch.yml and adding my ip address of the vm (VirtualBox) - elasticsearch is not starting…

---

## [Spark - reading index with no type](https://discuss.elastic.co/t/spark-reading-index-with-no-type/272843)

<div class="topic-metadata">

**Author:** [@Elan1](https://discuss.elastic.co/u/Elan1)\
**Replies:** 0\
**Last updated:** [May 12, 2021, 7:05pm UTC](https://discuss.elastic.co/t/spark-reading-index-with-no-type/272843 "2021-05-12T19:05:07Z")

</div>

Hi I am using ES 7.1 and created an index. Now I am trying to read it from Spark but getting an error because my index does not have a type. I am following the examples located here GitHub - elastic/elasticsearch-hadoop…

---

## [Recommended Setup and Settings for Very Large Data](https://discuss.elastic.co/t/recommended-setup-and-settings-for-very-large-data/272833)

<div class="topic-metadata">

**Author:** [@jessie.velayo](https://discuss.elastic.co/u/jessie.velayo)\
**Replies:** 1\
**Last updated:** [May 12, 2021, 6:33pm UTC](https://discuss.elastic.co/t/recommended-setup-and-settings-for-very-large-data/272833 "2021-05-12T18:33:34Z")

</div>

Hi, Just want to ask your help what's the recommended cluster setup and settings for the data below: Given: To index: 32 billion records (around 7 TB) Node specs: 8 CPUs x 64 RAM x 1.7 TB disk Query complexity: 5 l…

---

## [ML watcher issues v7.5](https://discuss.elastic.co/t/ml-watcher-issues-v7-5/272517)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [May 12, 2021, 4:28pm UTC](https://discuss.elastic.co/t/ml-watcher-issues-v7-5/272517 "2021-05-12T16:28:55Z")

</div>

Hi, I got some problems with my watchers lately, the are not sending mail, and the last issue is that it keep in firing state, but never send mail, the jobs are constantly suggesting me that I set a larger query delay to…

---

## [Searching Does not Return Results - Challenge](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832)

<div class="topic-metadata">

**Author:** [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Replies:** 29\
**Last updated:** [May 12, 2021, 2:56pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832 "2021-05-12T14:56:59Z")

</div>

I have this log message in Elastic: ExtendedProperties \[{"Name":"UserAgent","Value":"Microsoft Office/16.0 (Windows NT 10.0; Microsoft Outlook 16.0.13426; Pro)"} {"Name":"UserAuthenticationMethod","Value":"1"} {"Name":…

---

## [Is Elast alert available for Elasticsearch 7.9.3?](https://discuss.elastic.co/t/is-elast-alert-available-for-elasticsearch-7-9-3/272141)

<div class="topic-metadata">

**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 2:24pm UTC](https://discuss.elastic.co/t/is-elast-alert-available-for-elasticsearch-7-9-3/272141 "2021-05-12T14:24:20Z")

</div>

We are using Elasticsearch with Basic license. Kibana Alerts / Watchers are not available for the Basic License. Ours is a completely open source project, and we are trying to achieve alerting with open source options a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=645)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=647)
