# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=655 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 656 --- ## [Update a single field vs Inserting the whole document again](https://discuss.elastic.co/t/update-a-single-field-vs-inserting-the-whole-document-again/271607)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 11:33am UTC](https://discuss.elastic.co/t/update-a-single-field-vs-inserting-the-whole-document-again/271607 "2021-04-29T11:33:44Z")
Which one is more costly operation? Suppose I have 50 fields per document in an index. Updating a single field in a document Or, Re-inserting the complete whole document with that changed field. Basically \_update vs … --- ## [Can't we get total number of matches in \_search api?](https://discuss.elastic.co/t/cant-we-get-total-number-of-matches-in-search-api/271612)
**Author:** [@raja\_augstin](https://discuss.elastic.co/u/raja_augstin)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 11:29am UTC](https://discuss.elastic.co/t/cant-we-get-total-number-of-matches-in-search-api/271612 "2021-04-29T11:29:48Z")
can't we get total number of matches in \_search api? i'm using following search api to get total matched document and to find number of match for the given query. in this we don't receive the actual total match for th… --- ## [Indexing with deprecated \_type field](https://discuss.elastic.co/t/indexing-with-deprecated-type-field/271478)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 16\ **Last updated:** [April 29, 2021, 11:11am UTC](https://discuss.elastic.co/t/indexing-with-deprecated-type-field/271478 "2021-04-29T11:11:52Z")
Hello community. I have a question. What happens in elasticsearch 7.10 if a write attempt occurs with deprecated \_type field (we use apache metron, that tries to write to elastic), something like this "{"index":{"\_ind… --- ## [Reindex remote: not authorized](https://discuss.elastic.co/t/reindex-remote-not-authorized/271621)
**Author:** [@Davide\_Barbato](https://discuss.elastic.co/u/Davide_Barbato)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 10:31am UTC](https://discuss.elastic.co/t/reindex-remote-not-authorized/271621 "2021-04-29T10:31:27Z")
Hello there :wave: I'm trying to configure reindex from remote on an ECK instance with ES version 6.8.15 I feel I've configured everything correctly but still get the infamous "not authorized". This is the configurati… --- ## [Remote node cluster join](https://discuss.elastic.co/t/remote-node-cluster-join/271488)
**Author:** [@Makss39](https://discuss.elastic.co/u/Makss39)\ **Replies:** 12\ **Last updated:** [April 29, 2021, 9:31am UTC](https://discuss.elastic.co/t/remote-node-cluster-join/271488 "2021-04-29T09:31:40Z")
Hi, I've a 3 node cluster on my local network, it works like a charm. I just want to add a 4th node, but on another nework. But i'm not able to perform the discovery, my local master is well discovered by the remote no… --- ## [Search - keyword vs text and ngram](https://discuss.elastic.co/t/search-keyword-vs-text-and-ngram/271606)
**Author:** [@lele15](https://discuss.elastic.co/u/lele15)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 9:21am UTC](https://discuss.elastic.co/t/search-keyword-vs-text-and-ngram/271606 "2021-04-29T09:21:36Z")
Hi, I have an index like: "name": { "type": "keyword" }, "address": { "type": "keyword" }, "addressText": { "type": "text", "analyzer": "autocomplete", "search\_analyzer": "autocomplete\_search" }, "nameText":… --- ## [Mapping Explosion for Kubernetes/Openshift Index](https://discuss.elastic.co/t/mapping-explosion-for-kubernetes-openshift-index/271418)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 5\ **Last updated:** [April 29, 2021, 8:54am UTC](https://discuss.elastic.co/t/mapping-explosion-for-kubernetes-openshift-index/271418 "2021-04-29T08:54:21Z")
Hi folks, I am shipping application logs using filebeat daemonset (7.9.0) from openshift to elasticsearch (7.6.2) Right now I am running into following warnings: "Limit of total fields \[10000\] in index \[filebeat-opens… --- ## [Redindex, version\_type external](https://discuss.elastic.co/t/redindex-version-type-external/271587)
**Author:** [@Kalpa](https://discuss.elastic.co/u/Kalpa)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 8:42am UTC](https://discuss.elastic.co/t/redindex-version-type-external/271587 "2021-04-29T08:42:56Z")
HI All, Reindex can be done multiple times as per the documentation, during this phase, for example. reindexed at time 1. deleted some docs from the source added some docs to the source. reindex with version\_type ext… --- ## [Elasticsearch Disk indices storage greater than the indices used space](https://discuss.elastic.co/t/elasticsearch-disk-indices-storage-greater-than-the-indices-used-space/271328)
**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-disk-indices-storage-greater-than-the-indices-used-space/271328 "2021-04-29T08:07:54Z")
I have an issue with disk space as the disk indices greater than size of index as shown in the attached file. can anyone help me to understand why the data much greater than actual index size as sum of storage o… --- ## [\[processors\] required property is missing](https://discuss.elastic.co/t/processors-required-property-is-missing/271554)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 7:17am UTC](https://discuss.elastic.co/t/processors-required-property-is-missing/271554 "2021-04-29T07:17:26Z")
I am creating a ingest pipeline for custom index for Azure activity log with same configurations it has for Filebeat index. I copied pipeline content from \_ingest/pipeline. Due to character limit, I am unable to paste th… --- ## [Index sorting causes illegal\_state\_exception](https://discuss.elastic.co/t/index-sorting-causes-illegal-state-exception/271592)
**Author:** [@buinauskas\_evaldas](https://discuss.elastic.co/u/buinauskas_evaldas)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 6:23am UTC](https://discuss.elastic.co/t/index-sorting-causes-illegal-state-exception/271592 "2021-04-29T06:23:52Z")
Heavily inspired by the Introducing Index Sorting in Elasticsearch 6.0 | Elastic Blog article I went to try index sorting out for faster AND conjunctions. This is my index structure: { "index\_name": { "mappings":… --- ## [Elasticsearch SSL Configuration with existing certificate](https://discuss.elastic.co/t/elasticsearch-ssl-configuration-with-existing-certificate/271589)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 5:56am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-configuration-with-existing-certificate/271589 "2021-04-29T05:56:35Z")
I'm trying to use my own company.cer file for elasticsearch's ssl configuration. However, I've failed with some cases. The first case, I use cer extension of the certificate file in below configuration xpack.security.… --- ## [Individual Tokens are not searched when a synonym rule is matched](https://discuss.elastic.co/t/individual-tokens-are-not-searched-when-a-synonym-rule-is-matched/270933)
**Author:** [@jacksumit](https://discuss.elastic.co/u/jacksumit)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 4:50am UTC](https://discuss.elastic.co/t/individual-tokens-are-not-searched-when-a-synonym-rule-is-matched/270933 "2021-04-29T04:50:08Z")
Elasticsearch 7.10.2 Description: When using synonym\_graph filter, and if a synonym rule is matched, Elastic is not searching for individual tokens. I have defined below synonym rule. "synonyms": \[ … --- ## [How to List Indices based on their settings](https://discuss.elastic.co/t/how-to-list-indices-based-on-their-settings/271345)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 4:47am UTC](https://discuss.elastic.co/t/how-to-list-indices-based-on-their-settings/271345 "2021-04-29T04:47:01Z")
Hello Team I am using Elasticsearch 5.6.3 version. I know its old , we are in process of upgrading the cluster. I have a question , How to list Indexes which are having particular settings like : The ones which are ma… --- ## [Sorting logevent datetime in asc order](https://discuss.elastic.co/t/sorting-logevent-datetime-in-asc-order/271532)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 3:57am UTC](https://discuss.elastic.co/t/sorting-logevent-datetime-in-asc-order/271532 "2021-04-29T03:57:27Z")
Hello Team, We have multiple logline for requestID & responseID. we need to identify which requestID & responseID come first and calculate difference between theses requestID time & responseID time. Request Log: OUT 2… --- ## [How to expand elasticsearch memory disk size](https://discuss.elastic.co/t/how-to-expand-elasticsearch-memory-disk-size/271348)
**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\ **Replies:** 6\ **Last updated:** [April 29, 2021, 2:51am UTC](https://discuss.elastic.co/t/how-to-expand-elasticsearch-memory-disk-size/271348 "2021-04-29T02:51:02Z")
Hi elasticsearch team, I have this case where my VM size is 110gb. Then my freshly installed elasticsearch have 58gb maximum disk available. How do I Optimize my elasticsearch disk available? This cluster is a single n… --- ## [Wildcard query string](https://discuss.elastic.co/t/wildcard-query-string/271572)
**Author:** [@jrojasp95](https://discuss.elastic.co/u/jrojasp95)\ **Replies:** 0\ **Last updated:** [April 29, 2021, 12:37am UTC](https://discuss.elastic.co/t/wildcard-query-string/271572 "2021-04-29T00:37:30Z")
Hello I need to use wildcards to query about the full\_name and pedt\_fechanac fields, since the input values ​​come from an OCR, I also need the score to be able to get the best match Any recommendation Thank you FIEL… --- ## [Cross cluster restore is not working with security enabled on one cluster and disabled on second cluster](https://discuss.elastic.co/t/cross-cluster-restore-is-not-working-with-security-enabled-on-one-cluster-and-disabled-on-second-cluster/271495)
**Author:** [@parthv12](https://discuss.elastic.co/u/parthv12)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 12:10am UTC](https://discuss.elastic.co/t/cross-cluster-restore-is-not-working-with-security-enabled-on-one-cluster-and-disabled-on-second-cluster/271495 "2021-04-29T00:10:23Z")
Hello, I have 2 Elasticsearch clusters, one with security enabled and the other with no security. Using the same repository registered on both the clusters. While trying to restore indices from a snapshot taken on clus… --- ## [Domain Login with Elastic Diagnostics tool](https://discuss.elastic.co/t/domain-login-with-elastic-diagnostics-tool/271460)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 12:09am UTC](https://discuss.elastic.co/t/domain-login-with-elastic-diagnostics-tool/271460 "2021-04-29T00:09:46Z")
Hi, We had a problem on our Q-System yesterday so I wanted to look into it using the support diagnostics tool. As we primarily use the active directory login I tried to use the tool with my personal account which has su… --- ## [Parameters for dates](https://discuss.elastic.co/t/parameters-for-dates/271546)
**Author:** [@Pallavibhushan](https://discuss.elastic.co/u/Pallavibhushan)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 6:29pm UTC](https://discuss.elastic.co/t/parameters-for-dates/271546 "2021-04-28T18:29:52Z")
Hi, Below is my use case = % of requests where \[actual\_Date\] \<= \[Planned\_Date\]+24 hrs) I have written below query GET data\_index1/\_search { "size": 1000, "query": { "match\_all": {} }, "aggs": { "NAME": { "val… --- ## [Add users to account on Elastic Cloud](https://discuss.elastic.co/t/add-users-to-account-on-elastic-cloud/271542)
**Author:** [@christhegrand](https://discuss.elastic.co/u/christhegrand)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 12:00am UTC](https://discuss.elastic.co/t/add-users-to-account-on-elastic-cloud/271542 "2021-04-29T00:00:31Z")
How do I create an account for another user on Elastic Cloud? All I see are ways to add users as billing contacts, as operational email contacts, or to a monitoring email whitelist. --- ## [Cluster stops responding when transferring data to relational index](https://discuss.elastic.co/t/cluster-stops-responding-when-transferring-data-to-relational-index/271332)
**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\ **Replies:** 3\ **Last updated:** [April 28, 2021, 11:52pm UTC](https://discuss.elastic.co/t/cluster-stops-responding-when-transferring-data-to-relational-index/271332 "2021-04-28T23:52:11Z")
Hi everyone. I have a cluster of 3 main 13 data nodes. I have a relational index of 40 shards in this set. '\[ERROR\] \[o.e.x.m.c.c.ClusterStatsCollector\] \[main-3\] collector \[cluster\_stats\] timed out while collecting data' … --- ## [Additional data path not used](https://discuss.elastic.co/t/additional-data-path-not-used/270937)
**Author:** [@karlmaresch](https://discuss.elastic.co/u/karlmaresch)\ **Replies:** 7\ **Last updated:** [April 28, 2021, 11:33pm UTC](https://discuss.elastic.co/t/additional-data-path-not-used/270937 "2021-04-28T23:33:28Z")
Hi, We currently have an elasticsearch cluster with two seperate equal servers as two data nodes - one master, one slave. The servers each have 1 TB of diskspace. However, master is now at 81% of disk usage and slave i… --- ## [Moving indices back to ilm hot phase](https://discuss.elastic.co/t/moving-indices-back-to-ilm-hot-phase/271413)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 3\ **Last updated:** [April 28, 2021, 11:31pm UTC](https://discuss.elastic.co/t/moving-indices-back-to-ilm-hot-phase/271413 "2021-04-28T23:31:46Z")
Hello, Is it possible to change the rules of ilm , so that indices will get back to hot node? For example, the original configuration was "move to warm storage after 5 days" , and we want to change it to 90 days. Ide… --- ## [Search over all fields](https://discuss.elastic.co/t/search-over-all-fields/271511)
**Author:** [@Sander\_Marx](https://discuss.elastic.co/u/Sander_Marx)\ **Replies:** 3\ **Last updated:** [April 28, 2021, 8:33pm UTC](https://discuss.elastic.co/t/search-over-all-fields/271511 "2021-04-28T20:33:13Z")
Hi, i have a index with multiple documents with severeal fields. I want to be able to search over all the fields without using multi\_match and manualy writing each field. Is there a way to do this? Here is an example of… --- ## [Elasticsearch query to update one document using data from another document in the same es](https://discuss.elastic.co/t/elasticsearch-query-to-update-one-document-using-data-from-another-document-in-the-same-es/271540)
**Author:** [@chamiduz](https://discuss.elastic.co/u/chamiduz)\ **Replies:** 0\ **Last updated:** [April 28, 2021, 5:06pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-update-one-document-using-data-from-another-document-in-the-same-es/271540 "2021-04-28T17:06:56Z")
Hi, I have static data stored in elasticsearch. for example country name and country id { "id" : 250, "name" : "Sri Lanka" } { "id" : 260, "name" : "India" } I am getting another set of attraction data from a web ser… --- ## [Rally on docker will not list tracks "Cannot list. Could not register track plugin"](https://discuss.elastic.co/t/rally-on-docker-will-not-list-tracks-cannot-list-could-not-register-track-plugin/271510)
**Author:** [@dre](https://discuss.elastic.co/u/dre)\ **Replies:** 2\ **Last updated:** [April 28, 2021, 5:02pm UTC](https://discuss.elastic.co/t/rally-on-docker-will-not-list-tracks-cannot-list-could-not-register-track-plugin/271510 "2021-04-28T17:02:40Z")
Hi, Trying to do the first step with running elastic rally in docker. I get the following issue, both on RHEL VM and on windows. I cannot find anything on this problem in the forum or general searching. Any help apprec… --- ## [Using esrally eql track to test es7.5 with error](https://discuss.elastic.co/t/using-esrally-eql-track-to-test-es7-5-with-error/270548)
**Author:** [@alittlejoy](https://discuss.elastic.co/u/alittlejoy)\ **Replies:** 5\ **Last updated:** [April 28, 2021, 3:39pm UTC](https://discuss.elastic.co/t/using-esrally-eql-track-to-test-es7-5-with-error/270548 "2021-04-28T15:39:52Z")
hello I am using esrally eql track to test ES7.5.1 But I met an error ,does anyone has any idea? \[ERROR\] Cannot race. Error in load generator \[4\] ("Request returned an error. Error type: transport, Description: illeg… --- ## [Configuring and better understanding index.refresh\_interval for an index updated twice a day](https://discuss.elastic.co/t/configuring-and-better-understanding-index-refresh-interval-for-an-index-updated-twice-a-day/271535)
**Author:** [@Catalin](https://discuss.elastic.co/u/Catalin)\ **Replies:** 1\ **Last updated:** [April 28, 2021, 3:33pm UTC](https://discuss.elastic.co/t/configuring-and-better-understanding-index-refresh-interval-for-an-index-updated-twice-a-day/271535 "2021-04-28T15:33:27Z")
How exactly does index.refresh\_interval affect search performance ? I have an index that is updated for 10 mins twice a day. Is it sufficient to refresh it 1 time, once the updating process finishes and disable index.re… --- ## [ElasticsearchRestTemplate After not using it for a period of time: Java.io.ioException: The remote host forced closure of an existing connection](https://discuss.elastic.co/t/elasticsearchresttemplate-after-not-using-it-for-a-period-of-time-java-io-ioexception-the-remote-host-forced-closure-of-an-existing-connection/271172)
**Author:** [@canye666](https://discuss.elastic.co/u/canye666)\ **Replies:** 7\ **Last updated:** [April 28, 2021, 1:57pm UTC](https://discuss.elastic.co/t/elasticsearchresttemplate-after-not-using-it-for-a-period-of-time-java-io-ioexception-the-remote-host-forced-closure-of-an-existing-connection/271172 "2021-04-28T13:57:23Z")
远程主机强迫关闭了一个现有的连接。; nested exception is java.lang.RuntimeException: 远程主机强迫关闭了一个现有的连接。 org.springframework.dao.DataAccessResourceFailureException: 远程主机强迫关闭了一个现有的连接。 at org.springframework.data.elasticsearch.cor… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=654) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=656)