# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=647

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 648

---

## [Unable to start Elasticsearch as a service](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-a-service/272722)

<div class="topic-metadata">

**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\
**Replies:** 5\
**Last updated:** [May 12, 2021, 2:21pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-a-service/272722 "2021-05-12T14:21:26Z")

</div>

Elasticsearch version: 7.12 Elasticsearch is installed as an RPM on RHEL 7.9 server. We running ELK on a single VM. For the path.data we have an NFS mounted. When I try to start elasticsearch with path.data set to /var…

---

## [Elasticsearch cannot parse the string value in json？](https://discuss.elastic.co/t/elasticsearch-cannot-parse-the-string-value-in-json/272793)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 1:06pm UTC](https://discuss.elastic.co/t/elasticsearch-cannot-parse-the-string-value-in-json/272793 "2021-05-12T13:06:40Z")

</div>

Failure when writing some json data to es with logstash. {"type"=\>"mapper\_parsing\_exception", "reason"=\>"object mapping for \[Data.responsedto\] tried to parse field \[responsedto\] as object, but found a concrete value"} …

---

## [Java/RestClient Render/Dump/Log the BulkRequest issued](https://discuss.elastic.co/t/java-restclient-render-dump-log-the-bulkrequest-issued/272806)

<div class="topic-metadata">

**Author:** [@ibexit](https://discuss.elastic.co/u/ibexit)\
**Replies:** 0\
**Last updated:** [May 12, 2021, 12:19pm UTC](https://discuss.elastic.co/t/java-restclient-render-dump-log-the-bulkrequest-issued/272806 "2021-05-12T12:19:24Z")

</div>

We´re able to access the RequestBody sent by the client for searches - pretty easy. But is there a way to have this for BulkRequests too? Or in other words: I need access to the \_bulk payloads compiled/send by the java-…

---

## [Upgraded from 7.1 to 7.10 when re-index found this error "unknown parameter \[dynamic\] on mapper"](https://discuss.elastic.co/t/upgraded-from-7-1-to-7-10-when-re-index-found-this-error-unknown-parameter-dynamic-on-mapper/272789)

<div class="topic-metadata">

**Author:** [@guokoko](https://discuss.elastic.co/u/guokoko)\
**Replies:** 2\
**Last updated:** [May 12, 2021, 12:19pm UTC](https://discuss.elastic.co/t/upgraded-from-7-1-to-7-10-when-re-index-found-this-error-unknown-parameter-dynamic-on-mapper/272789 "2021-05-12T12:19:22Z")

</div>

Upgraded from 7.1 to 7.10 when re-index found this error "unknown parameter \[dynamic\] on mapper" anyone found this before? please help This error "failures" : \[ { "index" : "xxx\_product\_202105\_test", "type" : "\_doc", …

---

## [Elasticsearch Helm chart- node type clarification](https://discuss.elastic.co/t/elasticsearch-helm-chart-node-type-clarification/272803)

<div class="topic-metadata">

**Author:** [@mrudrego](https://discuss.elastic.co/u/mrudrego)\
**Replies:** 0\
**Last updated:** [May 12, 2021, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-helm-chart-node-type-clarification/272803 "2021-05-12T11:46:14Z")

</div>

Hi, With the default Elasticsearch helm charts configuration all elasticsearch pods plays all roles(master,data, client). Also there is example configuration for setting different roles. Wanted to understand which is …

---

## [JSON Schema of the Elasticsearch Query DSL](https://discuss.elastic.co/t/json-schema-of-the-elasticsearch-query-dsl/272600)

<div class="topic-metadata">

**Author:** [@kyoh86](https://discuss.elastic.co/u/kyoh86)\
**Replies:** 1\
**Last updated:** [May 12, 2021, 10:19am UTC](https://discuss.elastic.co/t/json-schema-of-the-elasticsearch-query-dsl/272600 "2021-05-12T10:19:39Z")

</div>

Recently, it has become quite common to define JSON Schema for various JSON format documents and publish them to assist editors and other development environments. For example, JSON Schema Store is a very good example o…

---

## [Aggregating fields within document](https://discuss.elastic.co/t/aggregating-fields-within-document/272773)

<div class="topic-metadata">

**Author:** [@agKaspar](https://discuss.elastic.co/u/agKaspar)\
**Replies:** 6\
**Last updated:** [May 12, 2021, 10:00am UTC](https://discuss.elastic.co/t/aggregating-fields-within-document/272773 "2021-05-12T10:00:08Z")

</div>

Hi, We have a mechanism which handles a queue of database operations (INSERT, DELETE and UPDATE operations) for various tables, I am now working on creating a Kibana dashboard with some metrics about this queue, but am h…

---

## [Nest, Routing\_missing\_exception](https://discuss.elastic.co/t/nest-routing-missing-exception/272791)

<div class="topic-metadata">

**Author:** [@bjni](https://discuss.elastic.co/u/bjni)\
**Replies:** 0\
**Last updated:** [May 12, 2021, 9:50am UTC](https://discuss.elastic.co/t/nest-routing-missing-exception/272791 "2021-05-12T09:50:08Z")

</div>

Hi, We want to implement elastic search in our application and are now in a bit of the research phase. We first played around a bit with the dev-tools of Kibana, and we could index different documents with routing. We…

---

## [Using PIT for searching but update a doc an be able to see it change](https://discuss.elastic.co/t/using-pit-for-searching-but-update-a-doc-an-be-able-to-see-it-change/272263)

<div class="topic-metadata">

**Author:** [@Eyal\_Borovsky](https://discuss.elastic.co/u/Eyal_Borovsky)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 9:20am UTC](https://discuss.elastic.co/t/using-pit-for-searching-but-update-a-doc-an-be-able-to-see-it-change/272263 "2021-05-12T09:20:51Z")

</div>

I am using a search query and I save a snapshot of the results using PIT(point in time). My problem is that I updated one of the document that is in the result. when I paginate between the pages I still get the old statu…

---

## [How to make filed as aggregatable in Elastic search](https://discuss.elastic.co/t/how-to-make-filed-as-aggregatable-in-elastic-search/272636)

<div class="topic-metadata">

**Author:** [@Suvarna\_S](https://discuss.elastic.co/u/Suvarna_S)\
**Replies:** 7\
**Last updated:** [May 12, 2021, 9:00am UTC](https://discuss.elastic.co/t/how-to-make-filed-as-aggregatable-in-elastic-search/272636 "2021-05-12T09:00:59Z")

</div>

Hi Team, I am new to elastic search/kibana. I have a field "exceptions". I want to make this field as aggregatable, so that I can use this field for my visualization dashboard to fetch the count of exceptions. Kindly h…

---

## [Monitoring string with dynamic data](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647)

<div class="topic-metadata">

**Author:** [@RustyP](https://discuss.elastic.co/u/RustyP)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 8:57am UTC](https://discuss.elastic.co/t/monitoring-string-with-dynamic-data/272647 "2021-05-12T08:57:47Z")

</div>

Hi I have a string which has a dynamic number in the middle of it, how woud i go about monitoring the string considering it wont be the same every time due to the changing number? eg: (ISO-host-async-XXX) Unknown Exce…

---

## [Unnable to list snapshots in Elasticsearch repository](https://discuss.elastic.co/t/unnable-to-list-snapshots-in-elasticsearch-repository/271425)

<div class="topic-metadata">

**Author:** [@KA3AXCTAH](https://discuss.elastic.co/u/KA3AXCTAH)\
**Replies:** 38\
**Last updated:** [May 12, 2021, 8:35am UTC](https://discuss.elastic.co/t/unnable-to-list-snapshots-in-elasticsearch-repository/271425 "2021-05-12T08:35:15Z")

</div>

I have an Elasticsearch snapshot repository configured to folder on NFS share, and i'm unable to do list snapshots because of strange errors curl -X GET "10.0.1.159:9200/\_cat/snapshots/temp\_elastic\_backup?v&s=id&pretty"…

---

## [Node not joining Elasticsearch cluster](https://discuss.elastic.co/t/node-not-joining-elasticsearch-cluster/272667)

<div class="topic-metadata">

**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\
**Replies:** 8\
**Last updated:** [May 12, 2021, 7:33am UTC](https://discuss.elastic.co/t/node-not-joining-elasticsearch-cluster/272667 "2021-05-12T07:33:04Z")

</div>

I have made an Elasticsearch cluster of 3 nodes but one of the node is not joining the cluster. Below are my elasticsearch.yml file for all 3 nodes. NODE1 cluster.name: ES-Cluster node.name: node-1 node.master: true …

---

## [Access policy issue](https://discuss.elastic.co/t/access-policy-issue/272761)

<div class="topic-metadata">

**Author:** [@ANSON\_SHAJI](https://discuss.elastic.co/u/ANSON_SHAJI)\
**Replies:** 2\
**Last updated:** [May 12, 2021, 7:04am UTC](https://discuss.elastic.co/t/access-policy-issue/272761 "2021-05-12T07:04:53Z")

</div>

Hi, I created an elastic search domain using amplify framework using the @searchable method. It creates a domain in elastic search. But I can't able to modify the access policy to allow open access to the domain. There …

---

## [Elastic Index Allocation](https://discuss.elastic.co/t/elastic-index-allocation/272222)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 7\
**Last updated:** [May 7, 2021, 5:41am UTC](https://discuss.elastic.co/t/elastic-index-allocation/272222 "2021-05-07T05:41:54Z")

</div>

We have typical deployment of 5000 users per server. We are planning to use Elasticsearch for indexing new data onwards. Our earlier indexing engine was having provision to map one index with one user. It was easier to r…

---

## [Doubt in query](https://discuss.elastic.co/t/doubt-in-query/272759)

<div class="topic-metadata">

**Author:** [@ANSON\_SHAJI](https://discuss.elastic.co/u/ANSON_SHAJI)\
**Replies:** 1\
**Last updated:** [May 12, 2021, 5:56am UTC](https://discuss.elastic.co/t/doubt-in-query/272759 "2021-05-12T05:56:27Z")

</div>

Hi, I have an index named product in elastic search. Each document contains an attribute field. This is shown below. { "category": "xyx", "name": "product-1", "attribute": \[ { "unit": "mm", "name": "Length", "va…

---

## [Can not connect to Elasticsearch from AngularJS](https://discuss.elastic.co/t/can-not-connect-to-elasticsearch-from-angularjs/271865)

<div class="topic-metadata">

**Author:** [@ANSON\_SHAJI](https://discuss.elastic.co/u/ANSON_SHAJI)\
**Replies:** 9\
**Last updated:** [May 12, 2021, 4:04am UTC](https://discuss.elastic.co/t/can-not-connect-to-elasticsearch-from-angularjs/271865 "2021-05-12T04:04:43Z")

</div>

Hi, I am using elastic search. I created a domain of elasticsearch. Is there is any way to connect the elastic search from my Angular 11. I used the elasticsearch.js library, but I can't able to connect with it for doi…

---

## [Mapping es.mapping.id](https://discuss.elastic.co/t/mapping-es-mapping-id/272755)

<div class="topic-metadata">

**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\
**Replies:** 10\
**Last updated:** [May 12, 2021, 3:10am UTC](https://discuss.elastic.co/t/mapping-es-mapping-id/272755 "2021-05-12T03:10:42Z")

</div>

i am reading the data from an elasticsearch index, processing it using spark and finally loading it into a new elasticsearch index. while processing the data i am grouping the data using date(day wise) and driverPkid co…

---

## [How to recover cluster state red in K8s](https://discuss.elastic.co/t/how-to-recover-cluster-state-red-in-k8s/272420)

<div class="topic-metadata">

**Author:** [@dandelion](https://discuss.elastic.co/u/dandelion)\
**Replies:** 1\
**Last updated:** [May 12, 2021, 12:45am UTC](https://discuss.elastic.co/t/how-to-recover-cluster-state-red-in-k8s/272420 "2021-05-12T00:45:44Z")

</div>

We are using Elasticsearch along with Graylog. We have three replicas running. On the Graylog side I noticed that the Elasticsearch cluster status is red. Started to investigate, and noticed that we had run out of disk …

---

## [Does snapshot lifecycle management track the deletion](https://discuss.elastic.co/t/does-snapshot-lifecycle-management-track-the-deletion/272651)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 1\
**Last updated:** [May 12, 2021, 12:23am UTC](https://discuss.elastic.co/t/does-snapshot-lifecycle-management-track-the-deletion/272651 "2021-05-12T00:23:52Z")

</div>

Hi, I just wanted to get this confirmed though I strongly feel that snapshot policy takes a backup only of an index. I have configured ILM to delete indices older than a week. Snapshot policy will be taking backups of …

---

## [Unable to access s3 bucket(snapshot and restore)](https://discuss.elastic.co/t/unable-to-access-s3-bucket-snapshot-and-restore/272676)

<div class="topic-metadata">

**Author:** [@Yash\_Shukla](https://discuss.elastic.co/u/Yash_Shukla)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 11:07pm UTC](https://discuss.elastic.co/t/unable-to-access-s3-bucket-snapshot-and-restore/272676 "2021-05-11T23:07:31Z")

</div>

Hello everyone, I am setting up an EFK cluster(elasticsearch-kibana-fluentd) in the AWS eks cluster. currently i am facing a problem with the snapshot and backup option present in the kibana console - followed followin…

---

## [Encrypted Communications reloading certificate](https://discuss.elastic.co/t/encrypted-communications-reloading-certificate/272686)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 0\
**Last updated:** [May 11, 2021, 11:23am UTC](https://discuss.elastic.co/t/encrypted-communications-reloading-certificate/272686 "2021-05-11T11:23:33Z")

</div>

Hi, ES client allows loading the certificate for trust as described here. But what happens if the certificate changes? Is there a way to reload the certificate (e.g. recreate the sslContext context?) without having to …

---

## [Cluster node roles changed after rolling upgrade](https://discuss.elastic.co/t/cluster-node-roles-changed-after-rolling-upgrade/272685)

<div class="topic-metadata">

**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 11:05pm UTC](https://discuss.elastic.co/t/cluster-node-roles-changed-after-rolling-upgrade/272685 "2021-05-11T23:05:23Z")

</div>

Hi! We did a rolling upgrade from version 7.6.1 to 7.12.1 as documented in Rolling upgrades | Elasticsearch Guide \[7.12\] | Elastic. We have three nodes in our cluster. Before the upgrade each node had roles dilm, but af…

---

## [How the \_source field helps in snapshot](https://discuss.elastic.co/t/how-the-source-field-helps-in-snapshot/272725)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 3\
**Last updated:** [May 11, 2021, 8:19pm UTC](https://discuss.elastic.co/t/how-the-source-field-helps-in-snapshot/272725 "2021-05-11T20:19:51Z")

</div>

Hey Guys, I would need to know how the \_source field helps in the Snapshot and Restore scenario?

---

## [ES 7.12 - Different analyzers are getting used for indexing and searching](https://discuss.elastic.co/t/es-7-12-different-analyzers-are-getting-used-for-indexing-and-searching/272186)

<div class="topic-metadata">

**Author:** [@justramesh2000](https://discuss.elastic.co/u/justramesh2000)\
**Replies:** 3\
**Last updated:** [May 11, 2021, 6:23pm UTC](https://discuss.elastic.co/t/es-7-12-different-analyzers-are-getting-used-for-indexing-and-searching/272186 "2021-05-11T18:23:25Z")

</div>

Hello, I have an interesting issue to report for ES 7.12. For one of the dynamically indexed field the analyzer used for indexing is "ngram" but for searching its "standard". I am not sure if this is a bug or an intended…

---

## [Index "\_source.enabled": false does not remove source data and index size does not change at all due to this setting](https://discuss.elastic.co/t/index-source-enabled-false-does-not-remove-source-data-and-index-size-does-not-change-at-all-due-to-this-setting/272677)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 3:38pm UTC](https://discuss.elastic.co/t/index-source-enabled-false-does-not-remove-source-data-and-index-size-does-not-change-at-all-due-to-this-setting/272677 "2021-05-11T15:38:03Z")

</div>

Hi Elastic 7.11.2 I am indexing documents through pipelines (using ingest\_attachment plugin) My pipeline looks like this: PUT \_ingest/pipeline/my\_pipeline { "description": "pipeline for indexing documents", "…

---

## [Search multiple words using wildcard query](https://discuss.elastic.co/t/search-multiple-words-using-wildcard-query/272648)

<div class="topic-metadata">

**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\
**Replies:** 5\
**Last updated:** [May 11, 2021, 3:32pm UTC](https://discuss.elastic.co/t/search-multiple-words-using-wildcard-query/272648 "2021-05-11T15:32:59Z")

</div>

I have documents indexed to elastic search in the following structure - \[{ "firstname" : "john", "lastname" : "cena" } , { "firstname" : "peter", "lastname" : "parker" }\] I am trying to use a bool query that contains…

---

## [Elasticsearch - 'network.host': is not allowed](https://discuss.elastic.co/t/elasticsearch-network-host-is-not-allowed/272669)

<div class="topic-metadata">

**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\
**Replies:** 4\
**Last updated:** [May 11, 2021, 2:52pm UTC](https://discuss.elastic.co/t/elasticsearch-network-host-is-not-allowed/272669 "2021-05-11T14:52:00Z")

</div>

I am using ElasticCloud , version v7.12.1, I have sat up a watcher for health check of cluster that it looks like below: PUT \_watcher/watch/cluster\_health\_watch { "trigger" : { "schedule" : { "cron…

---

## [Removing a field with dots in an ingest pipeline](https://discuss.elastic.co/t/removing-a-field-with-dots-in-an-ingest-pipeline/272570)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 3\
**Last updated:** [May 11, 2021, 2:50pm UTC](https://discuss.elastic.co/t/removing-a-field-with-dots-in-an-ingest-pipeline/272570 "2021-05-11T14:50:21Z")

</div>

Hi all, I'm using filebeat with an ingest simple ingest pipeline and I want to remove some of the host's field, for example the host.os I've defined a ingest pipeline PUT \_ingest/pipeline/appsalutmw { "description":…

---

## [Path not found error when try to add on-prem S3 compatible storage](https://discuss.elastic.co/t/path-not-found-error-when-try-to-add-on-prem-s3-compatible-storage/271463)

<div class="topic-metadata">

**Author:** [@qiratnahraf](https://discuss.elastic.co/u/qiratnahraf)\
**Replies:** 0\
**Last updated:** [April 28, 2021, 4:55am UTC](https://discuss.elastic.co/t/path-not-found-error-when-try-to-add-on-prem-s3-compatible-storage/271463 "2021-04-28T04:55:45Z")

</div>

Hi, I am facing path not found error when try to register S3 compatible storage as repository. API call return with "path is not accessible on master node" following is my environment detail ELK Version 7.12 S3 plugi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=646)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=648)
