# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=651

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 652

---

## [Data stream index Rollover exception "..names need to be unique.."](https://discuss.elastic.co/t/data-stream-index-rollover-exception-names-need-to-be-unique/272239)

<div class="topic-metadata">

**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\
**Replies:** 1\
**Last updated:** [May 6, 2021, 9:38am UTC](https://discuss.elastic.co/t/data-stream-index-rollover-exception-names-need-to-be-unique/272239 "2021-05-06T09:38:57Z")

</div>

Hi, We have an index .ds-logs-network.azure-default-000001 that is returning: illegal\_state\_exception: index, alias, and data stream names need to be unique, but the following duplicates were found \[logs-network.azure-…

---

## [Elasticsearch is built with known username & password and need to access with java api](https://discuss.elastic.co/t/elasticsearch-is-built-with-known-username-password-and-need-to-access-with-java-api/272247)

<div class="topic-metadata">

**Author:** [@KK\_LL](https://discuss.elastic.co/u/KK_LL)\
**Replies:** 1\
**Last updated:** [May 6, 2021, 8:11am UTC](https://discuss.elastic.co/t/elasticsearch-is-built-with-known-username-password-and-need-to-access-with-java-api/272247 "2021-05-06T08:11:18Z")

</div>

I have built and up an elasticsearch on my computer. And set the xpack.security.enabled: true xpack.security.authc.api\_key.enabled: true to enable basic security. The elastic username password is also generated automa…

---

## [Multiple index search. One with routing](https://discuss.elastic.co/t/multiple-index-search-one-with-routing/272204)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 5\
**Last updated:** [May 6, 2021, 7:20am UTC](https://discuss.elastic.co/t/multiple-index-search-one-with-routing/272204 "2021-05-06T07:20:06Z")

</div>

Hello, Is it possible to query multiple indices at the same time, where one of them requires routing? For example if index1 requires routing but index 2 doesn't. Get index1,index2/\_search?routing=..? Thanks

---

## [Low log rate per agent.hostname](https://discuss.elastic.co/t/low-log-rate-per-agent-hostname/272162)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 6\
**Last updated:** [May 6, 2021, 7:34am UTC](https://discuss.elastic.co/t/low-log-rate-per-agent-hostname/272162 "2021-05-06T07:34:56Z")

</div>

Hello everybody, I have created a machine learning job to be able to detect when beats stop sending logs to my cluster. Job Type: Multi-metric Metric: Low count(Event rate) split field: agent.hostname an example of …

---

## [Metricbeat on elasticserach 7.10](https://discuss.elastic.co/t/metricbeat-on-elasticserach-7-10/272147)

<div class="topic-metadata">

**Author:** [@SafiaSo](https://discuss.elastic.co/u/SafiaSo)\
**Replies:** 4\
**Last updated:** [May 6, 2021, 7:27am UTC](https://discuss.elastic.co/t/metricbeat-on-elasticserach-7-10/272147 "2021-05-06T07:27:19Z")

</div>

Hi Should we install metricbeat on elasticsearch 7.10 ?

---

## [Basic security Setup multi Node Cluster Query](https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232)

<div class="topic-metadata">

**Author:** [@Boris\_Joseph](https://discuss.elastic.co/u/Boris_Joseph)\
**Replies:** 3\
**Last updated:** [May 6, 2021, 5:09am UTC](https://discuss.elastic.co/t/basic-security-setup-multi-node-cluster-query/271232 "2021-05-06T05:09:32Z")

</div>

Hi Elastic team, Below reference indicates, that before proceeding with basic security, the minimal security steps must be completed for every node in the cluster. Does that mean we must bring down all ES nodes in s…

---

## [Moustache script syntax for aggregated buckets](https://discuss.elastic.co/t/moustache-script-syntax-for-aggregated-buckets/272145)

<div class="topic-metadata">

**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\
**Replies:** 2\
**Last updated:** [May 6, 2021, 4:32am UTC](https://discuss.elastic.co/t/moustache-script-syntax-for-aggregated-buckets/272145 "2021-05-06T04:32:16Z")

</div>

Hi All, I'm sure this is a no brainer question. I have a search followed by this aggregation: "aggs": { "destination\_ip": { "significant\_terms": { …

---

## [Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/272235)

<div class="topic-metadata">

**Author:** [@Pablo\_Andres\_Santama](https://discuss.elastic.co/u/Pablo_Andres_Santama)\
**Replies:** 0\
**Last updated:** [May 6, 2021, 3:43am UTC](https://discuss.elastic.co/t/authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/272235 "2021-05-06T03:43:01Z")

</div>

Hello All I have a cluster which was running in 7.7.0 version without issues and I just update it to 7.12.1 version and when I scale out the cluster the new instance is able to join the cluster but after a minute shows …

---

## [Sync Clusters](https://discuss.elastic.co/t/sync-clusters/272169)

<div class="topic-metadata">

**Author:** [@Chen\_Levi](https://discuss.elastic.co/u/Chen_Levi)\
**Replies:** 1\
**Last updated:** [May 6, 2021, 12:28am UTC](https://discuss.elastic.co/t/sync-clusters/272169 "2021-05-06T00:28:48Z")

</div>

Hi i have a Prod ES Cluster (elastic.co) and a Staging one. i want to create a nightly process that sync the Prod cluster into Staging cluster so we will have updated data from prod. the way i want to do that is the f…

---

## [Rollover illegal\_state\_exception and illegal\_argument\_exception](https://discuss.elastic.co/t/rollover-illegal-state-exception-and-illegal-argument-exception/272197)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 0\
**Last updated:** [May 5, 2021, 1:45pm UTC](https://discuss.elastic.co/t/rollover-illegal-state-exception-and-illegal-argument-exception/272197 "2021-05-05T13:45:45Z")

</div>

I implemented rollover index myapp ant it works like a charm for a long time. Today, I find out in Kibana that two of my indices encounter errors: 2 indices have lifecycle errors. GET /\_cat/aliases/myapp?v=true alias in…

---

## [How to get License for on-premise stack](https://discuss.elastic.co/t/how-to-get-license-for-on-premise-stack/271799)

<div class="topic-metadata">

**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\
**Replies:** 2\
**Last updated:** [May 5, 2021, 10:46pm UTC](https://discuss.elastic.co/t/how-to-get-license-for-on-premise-stack/271799 "2021-05-05T22:46:43Z")

</div>

Hello, I have been using some Gold features on trial and now we have decided to buy and implement the license into our on-prem ES and Kibana setup. I have been trying to find where do we select the license type, pay an…

---

## [Unknown field \[has\_parent\] while parsing valid query using XContentParser](https://discuss.elastic.co/t/unknown-field-has-parent-while-parsing-valid-query-using-xcontentparser/272210)

<div class="topic-metadata">

**Author:** [@avj](https://discuss.elastic.co/u/avj)\
**Replies:** 1\
**Last updated:** [May 5, 2021, 5:34pm UTC](https://discuss.elastic.co/t/unknown-field-has-parent-while-parsing-valid-query-using-xcontentparser/272210 "2021-05-05T17:34:55Z")

</div>

ES 7.7.0, Getting the following exception, although "has\_parent" query is valid and works in ES index, getting an exception when trying to parse using ES parser API Output : ssb = {"query":{"term":{"\_tenant\_id":{"value…

---

## [How to create rolling index with date as the index name?](https://discuss.elastic.co/t/how-to-create-rolling-index-with-date-as-the-index-name/272156)

<div class="topic-metadata">

**Author:** [@Sumeet\_Singh](https://discuss.elastic.co/u/Sumeet_Singh)\
**Replies:** 5\
**Last updated:** [May 5, 2021, 4:58pm UTC](https://discuss.elastic.co/t/how-to-create-rolling-index-with-date-as-the-index-name/272156 "2021-05-05T16:58:48Z")

</div>

Hi, my elastic search index will ingest thousands of documents per second. The service which puts documents in the index doesn't creates a new index, instead it just gets current data in nodejs and indexes docs in "log-Y…

---

## [Restore data from 7.12 to 7.10.2](https://discuss.elastic.co/t/restore-data-from-7-12-to-7-10-2/272201)

<div class="topic-metadata">

**Author:** [@mahomedsh](https://discuss.elastic.co/u/mahomedsh)\
**Replies:** 1\
**Last updated:** [May 5, 2021, 2:41pm UTC](https://discuss.elastic.co/t/restore-data-from-7-12-to-7-10-2/272201 "2021-05-05T14:41:40Z")

</div>

Hi I am using Graylog with Elasticsearch installed on the same server. Unfortunately I ran an apt upgrade which updated Elasticsearch to 7.12 before I realised that Graylog is currently not compatible with this version.…

---

## [Back up Kibana Cluster Data ? Where and How?](https://discuss.elastic.co/t/back-up-kibana-cluster-data-where-and-how/272095)

<div class="topic-metadata">

**Author:** [@LuigiDelavega](https://discuss.elastic.co/u/LuigiDelavega)\
**Replies:** 2\
**Last updated:** [May 5, 2021, 12:31pm UTC](https://discuss.elastic.co/t/back-up-kibana-cluster-data-where-and-how/272095 "2021-05-05T12:31:39Z")

</div>

Hello, I'm trying to migrate my Kibana Data configurations from one server to a new one, with snapshots. I already have a saved objects back up with the API, and now i want to back up my index templates, policies, roll…

---

## [How to handle lots of small indices](https://discuss.elastic.co/t/how-to-handle-lots-of-small-indices/272063)

<div class="topic-metadata">

**Author:** [@fillg1](https://discuss.elastic.co/u/fillg1)\
**Replies:** 8\
**Last updated:** [May 5, 2021, 12:13pm UTC](https://discuss.elastic.co/t/how-to-handle-lots-of-small-indices/272063 "2021-05-05T12:13:31Z")

</div>

Hi folks We are using Elasticsearch as a kind of backend for our application. Due to security and privacy reasons, we create a per user index which is opened/ closed by the application. This size of the index is small…

---

## [Curator failed to connect to local Elasticsearch (on Ubuntu VM)](https://discuss.elastic.co/t/curator-failed-to-connect-to-local-elasticsearch-on-ubuntu-vm/272060)

<div class="topic-metadata">

**Author:** [@111441](https://discuss.elastic.co/u/111441)\
**Replies:** 4\
**Last updated:** [May 5, 2021, 10:56am UTC](https://discuss.elastic.co/t/curator-failed-to-connect-to-local-elasticsearch-on-ubuntu-vm/272060 "2021-05-05T10:56:23Z")

</div>

I have Elasticsearch on Ubuntu VM. I installed curator on the hosting windows server and succeeded to connect to elasticsearch, using the VM IP in the config file (and also succeeded to delete indices) But when I insta…

---

## [Is it possible to grant another Elastic Cloud SSO user access to my Elasticsearch instance on Elastic Cloud?](https://discuss.elastic.co/t/is-it-possible-to-grant-another-elastic-cloud-sso-user-access-to-my-elasticsearch-instance-on-elastic-cloud/272069)

<div class="topic-metadata">

**Author:** [@Rich\_Kuzsma](https://discuss.elastic.co/u/Rich_Kuzsma)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 12:50pm UTC](https://discuss.elastic.co/t/is-it-possible-to-grant-another-elastic-cloud-sso-user-access-to-my-elasticsearch-instance-on-elastic-cloud/272069 "2021-05-04T12:50:02Z")

</div>

Asking and answering my own question in case it helps others in the future. For now, it is not possible to grant other Elastic Cloud SSO users access to an Elasticsearch instance on Elastic Cloud. However, you can add n…

---

## [How is ES data distributed in each data nodes](https://discuss.elastic.co/t/how-is-es-data-distributed-in-each-data-nodes/272079)

<div class="topic-metadata">

**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\
**Replies:** 1\
**Last updated:** [May 5, 2021, 9:57am UTC](https://discuss.elastic.co/t/how-is-es-data-distributed-in-each-data-nodes/272079 "2021-05-05T09:57:56Z")

</div>

Hi, I am using Elasticsearch 7.8.0 in k8s environment. I have 20 ES ingest nodes for serving traffic, 25 data nodes , 3 master nodes. How is the data stored getting distributed across all ES data nodes because I see on …

---

## [Slow ingestion speeds](https://discuss.elastic.co/t/slow-ingestion-speeds/271761)

<div class="topic-metadata">

**Author:** [@jamesm1](https://discuss.elastic.co/u/jamesm1)\
**Replies:** 7\
**Last updated:** [May 5, 2021, 7:48am UTC](https://discuss.elastic.co/t/slow-ingestion-speeds/271761 "2021-05-05T07:48:47Z")

</div>

Good Morning all, I have noticed that i appear to be having some ingestion speed issues... in a nut shell, if i look at historical data from a couple of hours ago and keep refreshing my screen, the amount of records inc…

---

## [Unable to authenticate user for REST request](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/272116)

<div class="topic-metadata">

**Author:** [@Egid](https://discuss.elastic.co/u/Egid)\
**Replies:** 3\
**Last updated:** [May 5, 2021, 7:30am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-for-rest-request/272116 "2021-05-05T07:30:47Z")

</div>

Hi I am running the folowing comand: docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" -e "ELASTICSEARCH\_USERNAME=egid" -e "ELASTICSEARCH\_PASSWORD=black" -e "xpack.security.enabled=true" docker.elast…

---

## [ES 7.11.2 / Kibana error : index has lifecycle error](https://discuss.elastic.co/t/es-7-11-2-kibana-error-index-has-lifecycle-error/272098)

<div class="topic-metadata">

**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 10:46pm UTC](https://discuss.elastic.co/t/es-7-11-2-kibana-error-index-has-lifecycle-error/272098 "2021-05-04T22:46:44Z")

</div>

Hello guys, could you help me please fixing this issue? Index lifecycle error illegal\_argument\_exception: setting \[index.lifecycle.rollover\_alias\] for index \[myindex\] is empty or not defined index setting: { "in…

---

## [Two nodes cluster questions](https://discuss.elastic.co/t/two-nodes-cluster-questions/272115)

<div class="topic-metadata">

**Author:** [@nuzolx](https://discuss.elastic.co/u/nuzolx)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 9:06pm UTC](https://discuss.elastic.co/t/two-nodes-cluster-questions/272115 "2021-05-04T21:06:48Z")

</div>

Hi, I have a two nodes cluster in production. I know this not good but, right now, I cant afford a 3th node. I have read: Resilience in small clusters | Elasticsearch Guide \[7.12\] | Elastic For example node1 is maste…

---

## [Classes descontinuadas](https://discuss.elastic.co/t/classes-descontinuadas/272113)

<div class="topic-metadata">

**Author:** [@Jair\_Gomes](https://discuss.elastic.co/u/Jair_Gomes)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 8:29pm UTC](https://discuss.elastic.co/t/classes-descontinuadas/272113 "2021-05-04T20:29:28Z")

</div>

Eu estou atualizando um antigo código de um modelo de ranqueamento que utiliza as antigas classes (Acredito que sejam classes das versões 2.X ou 5.X): import org.elasticsearch.action.fieldstats.FieldStats; import org.el…

---

## [Getting NaN in our data and its killing our C# code, but returns in Kibana?](https://discuss.elastic.co/t/getting-nan-in-our-data-and-its-killing-our-c-code-but-returns-in-kibana/272112)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 8:10pm UTC](https://discuss.elastic.co/t/getting-nan-in-our-data-and-its-killing-our-c-code-but-returns-in-kibana/272112 "2021-05-04T20:10:26Z")

</div>

Good Day, Maybe you can help me with this. We have data being indexed into our system and appartantly there are times when there are sections of data that are not just there and may not be populated at certain times of…

---

## [Nested Query: Nested document returns unmatched documents](https://discuss.elastic.co/t/nested-query-nested-document-returns-unmatched-documents/272096)

<div class="topic-metadata">

**Author:** [@tkumar](https://discuss.elastic.co/u/tkumar)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 5:17pm UTC](https://discuss.elastic.co/t/nested-query-nested-document-returns-unmatched-documents/272096 "2021-05-04T17:17:23Z")

</div>

Hi - We have indexed the document using nested mapping and the document also created in nested format in the Elasticsearch. But while retrieving using nested query it also returns unmatched documents from both the datas…

---

## [Elasticsearch migrating from mesos container framework to K8s](https://discuss.elastic.co/t/elasticsearch-migrating-from-mesos-container-framework-to-k8s/272104)

<div class="topic-metadata">

**Author:** [@guthurti](https://discuss.elastic.co/u/guthurti)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 6:15pm UTC](https://discuss.elastic.co/t/elasticsearch-migrating-from-mesos-container-framework-to-k8s/272104 "2021-05-04T18:15:54Z")

</div>

Team, Can you please someone suggest what is the best way to migrate Elasticsearch Mesos to k8s. I tried one solution but not succeeded, Mesos mount volume same as used k8s statefulset and pix-boot the nodes. I am not …

---

## [ES 7.12 - Java rest high level - multi\_terms aggregation - response error](https://discuss.elastic.co/t/es-7-12-java-rest-high-level-multi-terms-aggregation-response-error/272101)

<div class="topic-metadata">

**Author:** [@hikemachado](https://discuss.elastic.co/u/hikemachado)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 5:57pm UTC](https://discuss.elastic.co/t/es-7-12-java-rest-high-level-multi-terms-aggregation-response-error/272101 "2021-05-04T17:57:01Z")

</div>

Hi there, I've a request using SearchTemplateRequest the request script uses "multi\_terms" aggregation I can see in the logs that the response comes as expected but the java rest high level throws an exception saying …

---

## [Failed to execute pipeline for a bulk request](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request/271290)

<div class="topic-metadata">

**Author:** [@lacarrillo](https://discuss.elastic.co/u/lacarrillo)\
**Replies:** 12\
**Last updated:** [May 4, 2021, 5:43pm UTC](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk-request/271290 "2021-05-04T17:43:20Z")

</div>

Hello everyone. I have a cluster with 20 data nodes with 4 CPU and 16 GB of RAM. I'm indexing in avg 300 million documents per day (500 GB avg ) into this cluster. The cluster works perfectly during most of the day but e…

---

## [Query\_string with wildcard fields sends "Can't parse boolean value"](https://discuss.elastic.co/t/query-string-with-wildcard-fields-sends-cant-parse-boolean-value/271245)

<div class="topic-metadata">

**Author:** [@CLEMENT\_CAZEAUX](https://discuss.elastic.co/u/CLEMENT_CAZEAUX)\
**Replies:** 7\
**Last updated:** [May 4, 2021, 5:40pm UTC](https://discuss.elastic.co/t/query-string-with-wildcard-fields-sends-cant-parse-boolean-value/271245 "2021-05-04T17:40:41Z")

</div>

Hello, Basic query such as the documentation here Query string query | Elasticsearch Guide \[7.9\] | Elastic results in error: I've tested with version 7.9, I'll try next with the current 7.12 GET \_search?error\_trace=…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=650)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=652)
