# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=652

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 653

---

## [Creating password to default users](https://discuss.elastic.co/t/creating-password-to-default-users/272006)

<div class="topic-metadata">

**Author:** [@Antonio\_Marques](https://discuss.elastic.co/u/Antonio_Marques)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 3:48pm UTC](https://discuss.elastic.co/t/creating-password-to-default-users/272006 "2021-05-04T15:48:06Z")

</div>

Hey gurus! I want to automate the process of my docker installation. I don't want to setup an elasticsearch instance to run docker exec elasticsearch-1 /bin/bash -c "bin/elasticsearch-setup-passwords auto --batch --url…

---

## [Elasticsearch nodes are going to out of memory when ~100 fluentd tries to contact it](https://discuss.elastic.co/t/elasticsearch-nodes-are-going-to-out-of-memory-when-100-fluentd-tries-to-contact-it/272073)

<div class="topic-metadata">

**Author:** [@chaitra\_hegde](https://discuss.elastic.co/u/chaitra_hegde)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 3:47pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes-are-going-to-out-of-memory-when-100-fluentd-tries-to-contact-it/272073 "2021-05-04T15:47:38Z")

</div>

Hi, I am using Elasticsearch 7.8.0 in k8s environment. I have 20 ES ingest nodes for serving traffic, 25 data nodes , 3 master nodes. I have around 100 fluentd's for pushing data to ES(data push is not uniform. Some day…

---

## [Elasticsearch stuck with cluster\_uuid NA](https://discuss.elastic.co/t/elasticsearch-stuck-with-cluster-uuid-na/271870)

<div class="topic-metadata">

**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\
**Replies:** 6\
**Last updated:** [May 4, 2021, 2:46pm UTC](https://discuss.elastic.co/t/elasticsearch-stuck-with-cluster-uuid-na/271870 "2021-05-04T14:46:21Z")

</div>

We have a production elastic cluster with a 1.0.1 operator version. We planned to upgrade the version to the latest 1.5 so that we can opt for the dynamic storage changes. When we ran upgrade of the operator; pods in th…

---

## [Master node failure](https://discuss.elastic.co/t/master-node-failure/272080)

<div class="topic-metadata">

**Author:** [@Mohammad\_N](https://discuss.elastic.co/u/Mohammad_N)\
**Replies:** 0\
**Last updated:** [May 4, 2021, 2:43pm UTC](https://discuss.elastic.co/t/master-node-failure/272080 "2021-05-04T14:43:27Z")

</div>

I have a k3s kubernetes cluster and an elasticsearch cluster deployment. I am trying to install minhash plugin and playing around with the plugin. everything is normal and I can restore some old snapshots successfuly in…

---

## [Link elasticsearch to S3](https://discuss.elastic.co/t/link-elasticsearch-to-s3/270713)

<div class="topic-metadata">

**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\
**Replies:** 11\
**Last updated:** [May 4, 2021, 1:53pm UTC](https://discuss.elastic.co/t/link-elasticsearch-to-s3/270713 "2021-05-04T13:53:29Z")

</div>

Hello, My goal is to link my graylog/elasticsearch server to aws S3 to send indexes After having already exchanged a lot on the elasticsearch forums, here is where I am: -On AWS, I created a bucket mysiem -I also cre…

---

## [Google OIDC SSO with Mapping (Google) Groups onto (Kibana) Roles](https://discuss.elastic.co/t/google-oidc-sso-with-mapping-google-groups-onto-kibana-roles/271762)

<div class="topic-metadata">

**Author:** [@MartynF](https://discuss.elastic.co/u/MartynF)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 1:05pm UTC](https://discuss.elastic.co/t/google-oidc-sso-with-mapping-google-groups-onto-kibana-roles/271762 "2021-05-04T13:05:07Z")

</div>

Hi We're using Elastic Cloud hosted version of the Elastic stack and attempting to integration Google SSO with OIDC. I have the authentication working and can use role mapping with usernames to map specific users onto …

---

## [\[ES v7.9.1\] DateHistogram - OutOfMemory](https://discuss.elastic.co/t/es-v7-9-1-datehistogram-outofmemory/271840)

<div class="topic-metadata">

**Author:** [@sag-tobias-frey](https://discuss.elastic.co/u/sag-tobias-frey)\
**Replies:** 7\
**Last updated:** [May 4, 2021, 12:11pm UTC](https://discuss.elastic.co/t/es-v7-9-1-datehistogram-outofmemory/271840 "2021-05-04T12:11:28Z")

</div>

Hi, I have noticed that when using DateHistograms I'm often running out of memory and my Elasticsearch is crashing. Especially with lower configured intervals. I have tried to tweak Elasticsearch circuit breaker setting…

---

## [How to trace/log all delete action](https://discuss.elastic.co/t/how-to-trace-log-all-delete-action/272054)

<div class="topic-metadata">

**Author:** [@Michael\_Oullion](https://discuss.elastic.co/u/Michael_Oullion)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 9:44am UTC](https://discuss.elastic.co/t/how-to-trace-log-all-delete-action/272054 "2021-05-04T09:44:21Z")

</div>

Hi, I have a shared ELK in my Enterprise and we need to trace/log 2 type of action : Delete Index by API DELETE Call Delete doc by Delete\_by\_query I try without success with Audit and slowlog. Is there a way to have…

---

## [Elasticsearch 7.9, set or not manually JVM heap memory](https://discuss.elastic.co/t/elasticsearch-7-9-set-or-not-manually-jvm-heap-memory/272041)

<div class="topic-metadata">

**Author:** [@parallelism](https://discuss.elastic.co/u/parallelism)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 8:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-9-set-or-not-manually-jvm-heap-memory/272041 "2021-05-04T08:22:51Z")

</div>

Hello, We are deploying an Elasticsearch 7.9.3 cluster in a production environment. About setting or not the Java heap memory assignment, we find in the documentation something that seems a little contradictory. Accord…

---

## [Is Elasticsearch going to sleep after some hours?](https://discuss.elastic.co/t/is-elasticsearch-going-to-sleep-after-some-hours/272035)

<div class="topic-metadata">

**Author:** [@JdKock](https://discuss.elastic.co/u/JdKock)\
**Replies:** 9\
**Last updated:** [May 4, 2021, 8:20am UTC](https://discuss.elastic.co/t/is-elasticsearch-going-to-sleep-after-some-hours/272035 "2021-05-04T08:20:34Z")

</div>

We are using Elasticsearch (v7.3.2) for our search solution and we use a Java API to get the search results from Elasticsearch. This is working fine. In the Test environment we are not using Elasticsearch everyday. What…

---

## [Thread Pool max Size and Number of Processor](https://discuss.elastic.co/t/thread-pool-max-size-and-number-of-processor/271971)

<div class="topic-metadata">

**Author:** [@mani1](https://discuss.elastic.co/u/mani1)\
**Replies:** 10\
**Last updated:** [May 4, 2021, 7:25am UTC](https://discuss.elastic.co/t/thread-pool-max-size-and-number-of-processor/271971 "2021-05-04T07:25:03Z")

</div>

Hi, In latest elasticSearch Version 7 series, How to decide the maximum Search Thread Pool Size, will it depends on number of vCPUs , and decided by the formula (vCPU\*3/2)+1 OR the max size still is based on 32 vCPUs a…

---

## [Synonym filter not working within a Multiplexer Filter](https://discuss.elastic.co/t/synonym-filter-not-working-within-a-multiplexer-filter/271719)

<div class="topic-metadata">

**Author:** [@gquaire](https://discuss.elastic.co/u/gquaire)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 5:53am UTC](https://discuss.elastic.co/t/synonym-filter-not-working-within-a-multiplexer-filter/271719 "2021-05-04T05:53:06Z")

</div>

Hello, I'm using Elasticsearch v7.6.2. I am currently trying to create an custom analyser that uses a MultiplexerFilter with only one filters branc. This branch contains only a SynonymFilter. My goal is to keep original…

---

## [Security-exception-action-\[indices:admin/settings/update\] is unauthorized for user \[kibana\] on indices \[apm-7.6.0-error-000001\]](https://discuss.elastic.co/t/security-exception-action-indices-admin-settings-update-is-unauthorized-for-user-kibana-on-indices-apm-7-6-0-error-000001/271737)

<div class="topic-metadata">

**Author:** [@Kevin\_Christopher](https://discuss.elastic.co/u/Kevin_Christopher)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 4:24am UTC](https://discuss.elastic.co/t/security-exception-action-indices-admin-settings-update-is-unauthorized-for-user-kibana-on-indices-apm-7-6-0-error-000001/271737 "2021-05-04T04:24:05Z")

</div>

I have the elasticsearch,kibana,apm-server in a single ec2 instance. Able to get apm agent data from other application servers. When I look into Index Management I can see index errors for all apm indices ilm.step:ERR…

---

## [Connect to sql](https://discuss.elastic.co/t/connect-to-sql/272021)

<div class="topic-metadata">

**Author:** [@Jeancarlos\_Netto](https://discuss.elastic.co/u/Jeancarlos_Netto)\
**Replies:** 2\
**Last updated:** [May 4, 2021, 4:01am UTC](https://discuss.elastic.co/t/connect-to-sql/272021 "2021-05-04T04:01:28Z")

</div>

I am new here I would like to make a query in a sql database and store the results of this query in elastic, can someone help me to configure the application to work this way?

---

## [Some problems about index life cycle](https://discuss.elastic.co/t/some-problems-about-index-life-cycle/271953)

<div class="topic-metadata">

**Author:** [@ktpktr0](https://discuss.elastic.co/u/ktpktr0)\
**Replies:** 8\
**Last updated:** [May 4, 2021, 3:20am UTC](https://discuss.elastic.co/t/some-problems-about-index-life-cycle/271953 "2021-05-04T03:20:43Z")

</div>

I use logstash to add fields to dynamically generate indexes. index =\> "%{\[service\]}-%{+YYYY.MM.dd}" I configure the following index template to match the generated index { "index\_templates" : \[ { "name" :…

---

## [Get number of unique results from multiple indices](https://discuss.elastic.co/t/get-number-of-unique-results-from-multiple-indices/271401)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 2\
**Last updated:** [May 3, 2021, 7:37pm UTC](https://discuss.elastic.co/t/get-number-of-unique-results-from-multiple-indices/271401 "2021-05-03T19:37:21Z")

</div>

I have 5 indices: all of them with the same schema, so each one of them represents a dataset among many datasets. Each one of them is around 1Tb of size. I want to issue a query to all of the indices at the same time and…

---

## [Different field type on couple shards](https://discuss.elastic.co/t/different-field-type-on-couple-shards/272019)

<div class="topic-metadata">

**Author:** [@rh\_es](https://discuss.elastic.co/u/rh_es)\
**Replies:** 1\
**Last updated:** [May 4, 2021, 12:09am UTC](https://discuss.elastic.co/t/different-field-type-on-couple-shards/272019 "2021-05-04T00:09:42Z")

</div>

Hello. Somehow the type of one field in two shards is different of type at entire index and rest of the shards. As result some queries that rely on the field having specific type (number) are impacted. I know that it is …

---

## [Failed to start Kibana with HTTPS](https://discuss.elastic.co/t/failed-to-start-kibana-with-https/271943)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 12\
**Last updated:** [May 3, 2021, 10:48pm UTC](https://discuss.elastic.co/t/failed-to-start-kibana-with-https/271943 "2021-05-03T22:48:30Z")

</div>

Hi I have a cluster with two nodes and two nginx I configured ssl tls and https between 2nodes and kibana, but unfortunately my kibana does not open :frowning\_face: I followed step by step with the bellow link: This…

---

## [Modify documents of a datastream index](https://discuss.elastic.co/t/modify-documents-of-a-datastream-index/271490)

<div class="topic-metadata">

**Author:** [@Reggaeny](https://discuss.elastic.co/u/Reggaeny)\
**Replies:** 4\
**Last updated:** [May 3, 2021, 10:47pm UTC](https://discuss.elastic.co/t/modify-documents-of-a-datastream-index/271490 "2021-05-03T22:47:45Z")

</div>

Coming from classic SQL and NoSql databases, I thought it must be possible to change documents in Elasticsearch datastream indexes. The first attempt via update\_by\_query (REST-Api) worked in the test but not in productiv…

---

## [Control over writing data to a specific drive](https://discuss.elastic.co/t/control-over-writing-data-to-a-specific-drive/271695)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 6\
**Last updated:** [May 3, 2021, 7:52pm UTC](https://discuss.elastic.co/t/control-over-writing-data-to-a-specific-drive/271695 "2021-05-03T19:52:36Z")

</div>

We are planning to use single node Elasticsearch cluster. The node may contain multiple locations for writing indexing data. I would like to know, if it is possible to write the data to a specific indexing location only…

---

## [Disk threshold](https://discuss.elastic.co/t/disk-threshold/271414)

<div class="topic-metadata">

**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\
**Replies:** 6\
**Last updated:** [May 3, 2021, 5:57pm UTC](https://discuss.elastic.co/t/disk-threshold/271414 "2021-05-03T17:57:35Z")

</div>

We are trying to implement single node cluster of Elasticsearch per installation of our application. Our application is on-prem. I was looking at the indexing data location parameters in the Elastic documentation. I came…

---

## [List all the stale data that is no longer referenced by existing snapshots](https://discuss.elastic.co/t/list-all-the-stale-data-that-is-no-longer-referenced-by-existing-snapshots/271988)

<div class="topic-metadata">

**Author:** [@Aeres-u99](https://discuss.elastic.co/u/Aeres-u99)\
**Replies:** 4\
**Last updated:** [May 3, 2021, 5:48pm UTC](https://discuss.elastic.co/t/list-all-the-stale-data-that-is-no-longer-referenced-by-existing-snapshots/271988 "2021-05-03T17:48:34Z")

</div>

We have a small setup where in we have been taking snapshots since last two years and I would like to clean it up to make some storage space on our backup server. I was going through this documentation Clean up snapsho…

---

## [Change mapping of a list of indices (rollover)](https://discuss.elastic.co/t/change-mapping-of-a-list-of-indices-rollover/271614)

<div class="topic-metadata">

**Author:** [@samia](https://discuss.elastic.co/u/samia)\
**Replies:** 7\
**Last updated:** [May 3, 2021, 4:36pm UTC](https://discuss.elastic.co/t/change-mapping-of-a-list-of-indices-rollover/271614 "2021-05-03T16:36:13Z")

</div>

Hi, I'm using Elastic 7.11 I have a series of indices (not DataStreams) which rollover through an ILM policy. There's a legacy index template which refer to them. I would like to change the mapping of the future ind…

---

## [Cluster is frequently lost with no master and data nodes removed after upgrade from 7.2.1 to 7.10.2](https://discuss.elastic.co/t/cluster-is-frequently-lost-with-no-master-and-data-nodes-removed-after-upgrade-from-7-2-1-to-7-10-2/271907)

<div class="topic-metadata">

**Author:** [@rpremnath](https://discuss.elastic.co/u/rpremnath)\
**Replies:** 5\
**Last updated:** [May 3, 2021, 4:46pm UTC](https://discuss.elastic.co/t/cluster-is-frequently-lost-with-no-master-and-data-nodes-removed-after-upgrade-from-7-2-1-to-7-10-2/271907 "2021-05-03T16:46:13Z")

</div>

we are testing upgrade of Elasticsearch from 7.2.1 to 7.10.2 and we have developed custom Rollup and Alias management plugin using NodeClient. In our 3 node set up, all nodes are master, data, ingest nodes. We did not ha…

---

## [Last empty field](https://discuss.elastic.co/t/last-empty-field/271980)

<div class="topic-metadata">

**Author:** [@Emanuel\_Prado](https://discuss.elastic.co/u/Emanuel_Prado)\
**Replies:** 2\
**Last updated:** [May 3, 2021, 3:29pm UTC](https://discuss.elastic.co/t/last-empty-field/271980 "2021-05-03T15:29:39Z")

</div>

How can I get it to be ingested when the last information field is empty? Example all fields complete: 05.03.2021 06:20:00;BTUC8;10168.00;66.66;66.39;0.00;1.60 05.03.2021 06:20:00;BTUC8;10168.00;66.66;66.39;0.00;1.60 …

---

## [Watcher using metadata array in input terms](https://discuss.elastic.co/t/watcher-using-metadata-array-in-input-terms/271273)

<div class="topic-metadata">

**Author:** [@Destan](https://discuss.elastic.co/u/Destan)\
**Replies:** 2\
**Last updated:** [May 3, 2021, 2:47pm UTC](https://discuss.elastic.co/t/watcher-using-metadata-array-in-input-terms/271273 "2021-05-03T14:47:45Z")

</div>

Hello guys, I would like to know if it's possible to use metadata as an array like this: "metadata": { "MyList": \[ "1", "2", "3", "4" \], "from": "60m" } and use it as a par…

---

## [What is the pricing as well as disadvantages for ElasticCloud on Linux](https://discuss.elastic.co/t/what-is-the-pricing-as-well-as-disadvantages-for-elasticcloud-on-linux/271926)

<div class="topic-metadata">

**Author:** [@Yash\_Srivastava](https://discuss.elastic.co/u/Yash_Srivastava)\
**Replies:** 3\
**Last updated:** [May 3, 2021, 1:59pm UTC](https://discuss.elastic.co/t/what-is-the-pricing-as-well-as-disadvantages-for-elasticcloud-on-linux/271926 "2021-05-03T13:59:55Z")

</div>

what is the pricing as well as disadvantages for ElasticCloud on Linux

---

## [Unable to paginate a PIT search without a sort clause](https://discuss.elastic.co/t/unable-to-paginate-a-pit-search-without-a-sort-clause/271793)

<div class="topic-metadata">

**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\
**Replies:** 3\
**Last updated:** [May 3, 2021, 1:34pm UTC](https://discuss.elastic.co/t/unable-to-paginate-a-pit-search-without-a-sort-clause/271793 "2021-05-03T13:34:01Z")

</div>

Hello, I am trying to paginate a search but I am unable to do so because results don't include the sort field to search after. However, from what I understand reading the search\_after documentation Paginate search resul…

---

## [How to a emit a value for a runtime field of type geo\_point?](https://discuss.elastic.co/t/how-to-a-emit-a-value-for-a-runtime-field-of-type-geo-point/271889)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 8\
**Last updated:** [May 3, 2021, 12:50pm UTC](https://discuss.elastic.co/t/how-to-a-emit-a-value-for-a-runtime-field-of-type-geo-point/271889 "2021-05-03T12:50:00Z")

</div>

I am trying to execute a query for a geo\_point value with a runtime mapping, which according to the docs should work, but it is failing. keywords and long values work fine. For example... Where src.city.name is a keywor…

---

## [Index data on disk between versions](https://discuss.elastic.co/t/index-data-on-disk-between-versions/271857)

<div class="topic-metadata">

**Author:** [@zissop](https://discuss.elastic.co/u/zissop)\
**Replies:** 6\
**Last updated:** [May 3, 2021, 9:12am UTC](https://discuss.elastic.co/t/index-data-on-disk-between-versions/271857 "2021-05-03T09:12:40Z")

</div>

Hello I have setup 2 different elasticsearch instances on 2 different servers. The first is elasticsearch v 7.10 and the other v 7.12 I create the same exact index and use the same exact data for indexing, both are 100…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=651)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=653)
