# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=659

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 660

---

## [Sending data to Multiple elasticsearch containers](https://discuss.elastic.co/t/sending-data-to-multiple-elasticsearch-containers/270532)

<div class="topic-metadata">

**Author:** [@safura\_zaheer](https://discuss.elastic.co/u/safura_zaheer)\
**Replies:** 10\
**Last updated:** [April 23, 2021, 7:58am UTC](https://discuss.elastic.co/t/sending-data-to-multiple-elasticsearch-containers/270532 "2021-04-23T07:58:00Z")

</div>

Hi all, I am having 3 docker containers of elasticsearch running on a single host on different ports, Now I want to send data to all the 3 containers so that I don't have any single point of failure . What are the diff…

---

## [Add tags or booleans to speed up queries?](https://discuss.elastic.co/t/add-tags-or-booleans-to-speed-up-queries/270947)

<div class="topic-metadata">

**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\
**Replies:** 4\
**Last updated:** [April 22, 2021, 12:37pm UTC](https://discuss.elastic.co/t/add-tags-or-booleans-to-speed-up-queries/270947 "2021-04-22T12:37:45Z")

</div>

Hello, I want to query documents if the length of a field is more than 1k or 10k, etc. I'm trying to follow an Elasticsearch best practice to avoid doing queries like "if field\_length\> 1000" (Tune for search speed | El…

---

## [Cross-Cluster search Implementation Issues](https://discuss.elastic.co/t/cross-cluster-search-implementation-issues/270651)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 7\
**Last updated:** [April 23, 2021, 6:37am UTC](https://discuss.elastic.co/t/cross-cluster-search-implementation-issues/270651 "2021-04-23T06:37:15Z")

</div>

Hello Team We have implemented Cross-Cluster Search in Elasticsearch version 7.8.0 clusters. For example Cluster-A and Cluster-B. Cluster-A elasticsearch.yml file has below parameters : cluster.remote.Cluster-B.seeds…

---

## [A different version of the library has been downloaded](https://discuss.elastic.co/t/a-different-version-of-the-library-has-been-downloaded/271038)

<div class="topic-metadata">

**Author:** [@tom-shumi](https://discuss.elastic.co/u/tom-shumi)\
**Replies:** 0\
**Last updated:** [April 23, 2021, 5:30am UTC](https://discuss.elastic.co/t/a-different-version-of-the-library-has-been-downloaded/271038 "2021-04-23T05:30:55Z")

</div>

I have defined version 6.8.6 Elasticsearch in build.gradle. implementation group: 'org.elasticsearch', name: 'elasticsearch', version: '6.8.6' Then version 6.8.6 and version 7.6.2 were downloaded. Why? Moreover, due …

---

## [Nested aggregation of runtime nested field returns empty buckets](https://discuss.elastic.co/t/nested-aggregation-of-runtime-nested-field-returns-empty-buckets/271015)

<div class="topic-metadata">

**Author:** [@matheus.mohr](https://discuss.elastic.co/u/matheus.mohr)\
**Replies:** 0\
**Last updated:** [April 22, 2021, 8:40pm UTC](https://discuss.elastic.co/t/nested-aggregation-of-runtime-nested-field-returns-empty-buckets/271015 "2021-04-22T20:40:09Z")

</div>

Before I describe the issue, it's worth noting that this issue is happening at the end of a long process of migrating a 2.4 ES cluster to 7.12, with multiple updates to mappings and queries, so please have in mind that I…

---

## [Dense\_vector element-wise operation](https://discuss.elastic.co/t/dense-vector-element-wise-operation/270181)

<div class="topic-metadata">

**Author:** [@ruodingt\_trendii](https://discuss.elastic.co/u/ruodingt_trendii)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 7:40pm UTC](https://discuss.elastic.co/t/dense-vector-element-wise-operation/270181 "2021-04-22T19:40:17Z")

</div>

Hi mates, I just encountered an issue with dense\_vector I am trying to implement an additive\_chi2\_kernel as my score function. additive\_chi2\_kernel is a way to compare similarity of two histogram The function is as s…

---

## [Problem when splitting a nested JSON array](https://discuss.elastic.co/t/problem-when-splitting-a-nested-json-array/270864)

<div class="topic-metadata">

**Author:** [@pedro\_gonzalez](https://discuss.elastic.co/u/pedro_gonzalez)\
**Replies:** 4\
**Last updated:** [April 22, 2021, 5:59pm UTC](https://discuss.elastic.co/t/problem-when-splitting-a-nested-json-array/270864 "2021-04-22T17:59:15Z")

</div>

Hi, I have seen multiple thread talking about this problem but with some differences. I have the following log schema: "messageId": 123, "timestamp": "2020-09-14T03:35:37", "extra": { "name": "typefood", "food\_…

---

## [Winlogbeat unable to connect ELK Ubuntu](https://discuss.elastic.co/t/winlogbeat-unable-to-connect-elk-ubuntu/270675)

<div class="topic-metadata">

**Author:** [@Coeus.IT](https://discuss.elastic.co/u/Coeus.IT)\
**Replies:** 3\
**Last updated:** [April 22, 2021, 5:21pm UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-connect-elk-ubuntu/270675 "2021-04-22T17:21:43Z")

</div>

Hi Good Day, I have setup a Ubuntu with ELK installed. Wants to receive logs from Windows 10 machine. The ELK and the Windows currently on same network since testing. Have enabled xpack.security to true. Get auto gener…

---

## [CORS multi-value response headers don't work in IE](https://discuss.elastic.co/t/cors-multi-value-response-headers-dont-work-in-ie/270618)

<div class="topic-metadata">

**Author:** [@JohT](https://discuss.elastic.co/u/JohT)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 4:10pm UTC](https://discuss.elastic.co/t/cors-multi-value-response-headers-dont-work-in-ie/270618 "2021-04-22T16:10:50Z")

</div>

Hi, i've installed the latest version 7.12. of elasticsearch on windows. While trying out a multi search api call from my local live server with XHR i got the same problem that had already been reported here: GitHub I…

---

## [Elasticsearch service runs for 10s and then goes down](https://discuss.elastic.co/t/elasticsearch-service-runs-for-10s-and-then-goes-down/270975)

<div class="topic-metadata">

**Author:** [@Pawan\_Kumar](https://discuss.elastic.co/u/Pawan_Kumar)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 3:31pm UTC](https://discuss.elastic.co/t/elasticsearch-service-runs-for-10s-and-then-goes-down/270975 "2021-04-22T15:31:40Z")

</div>

OS: CentOS hostnamectl:- Virtualization: kvm Operating System: CentOS Linux 7 (AltArch) CPE OS Name: cpe:/o:centos:centos:7:server Kernel: Linux 3.10.0-1160.21.1.el7.ppc64le Architecture: ppc64-le Elasticsearch ve…

---

## [Please Help to understand performance problem](https://discuss.elastic.co/t/please-help-to-understand-performance-problem/270862)

<div class="topic-metadata">

**Author:** [@evgeniy777](https://discuss.elastic.co/u/evgeniy777)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 3:13pm UTC](https://discuss.elastic.co/t/please-help-to-understand-performance-problem/270862 "2021-04-22T15:13:49Z")

</div>

We just started to use Elastic Cloud solution. When swithced a part of our services to it - we started to have performance degradation. My deployment have 2 data nodes HOT, and 2 nodes for WARM storage. Instance #0 …

---

## [OS upgrade removed my ES Install](https://discuss.elastic.co/t/os-upgrade-removed-my-es-install/270397)

<div class="topic-metadata">

**Author:** [@cis4life](https://discuss.elastic.co/u/cis4life)\
**Replies:** 4\
**Last updated:** [April 22, 2021, 2:58pm UTC](https://discuss.elastic.co/t/os-upgrade-removed-my-es-install/270397 "2021-04-22T14:58:41Z")

</div>

Good Day, We currently run ES 5.x ( we are in the process of upgrading ) but we were running our install on an Ubuntu 16.04 server. So the team went and upgraded the OS of the server to 18.04 and when it was said and d…

---

## [Logstash run pipeline but not send data to output](https://discuss.elastic.co/t/logstash-run-pipeline-but-not-send-data-to-output/270960)

<div class="topic-metadata">

**Author:** [@Omar1](https://discuss.elastic.co/u/Omar1)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 2:57pm UTC](https://discuss.elastic.co/t/logstash-run-pipeline-but-not-send-data-to-output/270960 "2021-04-22T14:57:30Z")

</div>

I'm trying to use logstash Jdbc plugin to synchronize data from a Postgres database to some ouput (elastic, rabbitMq). The problem is that logstash is running well every hour (I configured the cronJob like that). Logst…

---

## [Route search request by using the date in index name](https://discuss.elastic.co/t/route-search-request-by-using-the-date-in-index-name/269533)

<div class="topic-metadata">

**Author:** [@india](https://discuss.elastic.co/u/india)\
**Replies:** 10\
**Last updated:** [April 22, 2021, 1:43pm UTC](https://discuss.elastic.co/t/route-search-request-by-using-the-date-in-index-name/269533 "2021-04-22T13:43:08Z")

</div>

Hi, I am testing ILM, this is my configuration: ILM Policy: PUT \_ilm/policy/test\_policy { "policy": { "phases": { "hot": { "actions": { "rollover": { "max\_…

---

## [\[null-valued setting found for key \[xpack.security.authc.realms.active\_directory\]](https://discuss.elastic.co/t/null-valued-setting-found-for-key-xpack-security-authc-realms-active-directory/270309)

<div class="topic-metadata">

**Author:** [@hubertn](https://discuss.elastic.co/u/hubertn)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 1:41pm UTC](https://discuss.elastic.co/t/null-valued-setting-found-for-key-xpack-security-authc-realms-active-directory/270309 "2021-04-22T13:41:39Z")

</div>

set active\_directory security in elasticsearch.yml. After setting up xpack configuration in the yml file, Elastic service did not start anymore, it indicates that the \[null-valued setting found for the active\_director…

---

## [Composite Aggregation - Too many buckets](https://discuss.elastic.co/t/composite-aggregation-too-many-buckets/270962)

<div class="topic-metadata">

**Author:** [@vands](https://discuss.elastic.co/u/vands)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 1:26pm UTC](https://discuss.elastic.co/t/composite-aggregation-too-many-buckets/270962 "2021-04-22T13:26:58Z")

</div>

Hi All , Facing the below issue while using composite aggregation and get buckets data \[Elasticsearch exception \[type=too\_many\_buckets\_exception, reason=Trying to create too many buckets. Must be less than or equal to:…

---

## [Elasticsearch Transform not triggering](https://discuss.elastic.co/t/elasticsearch-transform-not-triggering/270897)

<div class="topic-metadata">

**Author:** [@jplonghi](https://discuss.elastic.co/u/jplonghi)\
**Replies:** 5\
**Last updated:** [April 22, 2021, 12:40pm UTC](https://discuss.elastic.co/t/elasticsearch-transform-not-triggering/270897 "2021-04-22T12:40:32Z")

</div>

Hello, hope you can help me with a transform issue. I already created a very simple transform to test, set the frequency to 5s, and then used the \_transform/mytransform/\_start. The stats said the transform is started and…

---

## [ConnectionClosedException: When trying to connect to Elasticsearch using Java High Level Client](https://discuss.elastic.co/t/connectionclosedexception-when-trying-to-connect-to-elasticsearch-using-java-high-level-client/270661)

<div class="topic-metadata">

**Author:** [@Jenisha\_Ramanathan](https://discuss.elastic.co/u/Jenisha_Ramanathan)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 12:07pm UTC](https://discuss.elastic.co/t/connectionclosedexception-when-trying-to-connect-to-elasticsearch-using-java-high-level-client/270661 "2021-04-22T12:07:54Z")

</div>

Hi Team, I'm trying to connect Java to https Elasticsearch using Java High Level Client. Getting ConnectionClosedException when trying to check for existing index that are available in elasticsearch. And the elasticsea…

---

## [Elasticsearch changes encoding through "import geojson"](https://discuss.elastic.co/t/elasticsearch-changes-encoding-through-import-geojson/270817)

<div class="topic-metadata">

**Author:** [@sieczaa](https://discuss.elastic.co/u/sieczaa)\
**Replies:** 3\
**Last updated:** [April 22, 2021, 11:57am UTC](https://discuss.elastic.co/t/elasticsearch-changes-encoding-through-import-geojson/270817 "2021-04-22T11:57:54Z")

</div>

Hello, we've got elasticsearch 7.8.1, when I import geojson file with coordinates of polish counties, elasticsearch creates index, but changes encoding of polish characters like "ę,ś,ć,ź,ń,ą,ł". I imported sth like th…

---

## [Zipping huge snapshot and unzipping to restore to cluster on demand](https://discuss.elastic.co/t/zipping-huge-snapshot-and-unzipping-to-restore-to-cluster-on-demand/270951)

<div class="topic-metadata">

**Author:** [@Pratik\_Gangan](https://discuss.elastic.co/u/Pratik_Gangan)\
**Replies:** 0\
**Last updated:** [April 22, 2021, 10:43am UTC](https://discuss.elastic.co/t/zipping-huge-snapshot-and-unzipping-to-restore-to-cluster-on-demand/270951 "2021-04-22T10:43:21Z")

</div>

My use case is, We have almost 500 gb of logs everyday. We have cluster size in TBs. We want to keep logs on cluster for 7 days after that I want to zip and store it to other storage. Whenever particular date's log is r…

---

## [How to enable searchable snapshot](https://discuss.elastic.co/t/how-to-enable-searchable-snapshot/270506)

<div class="topic-metadata">

**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Replies:** 3\
**Last updated:** [April 22, 2021, 10:23am UTC](https://discuss.elastic.co/t/how-to-enable-searchable-snapshot/270506 "2021-04-22T10:23:02Z")

</div>

Hi, I want to know how we can enable searchable snapshot in the cluster

---

## [Python client send data to Elastic cloud refused](https://discuss.elastic.co/t/python-client-send-data-to-elastic-cloud-refused/270853)

<div class="topic-metadata">

**Author:** [@erwan22](https://discuss.elastic.co/u/erwan22)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 9:27am UTC](https://discuss.elastic.co/t/python-client-send-data-to-elastic-cloud-refused/270853 "2021-04-22T09:27:09Z")

</div>

Hello, I have been sending data to my localhost (elastic 7.12) easily with Python. I'm trying to do the same with elastic cloud with the following command : es = Elasticsearch( cloud\_id='my\_cloud\_id\_from\_https://cloud…

---

## [Does elastic have data other than the indices data](https://discuss.elastic.co/t/does-elastic-have-data-other-than-the-indices-data/270672)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 5\
**Last updated:** [April 22, 2021, 9:11am UTC](https://discuss.elastic.co/t/does-elastic-have-data-other-than-the-indices-data/270672 "2021-04-22T09:11:56Z")

</div>

this is kibana stack monitoring area: when i run du -ha /var | sort -rh | head -40 see this : 1.7T /var 1.5T /var/lib/elasticsearch/nodes/0/indices 1.5T /var/lib/elasticsearch/nodes/0 1.5T /var/lib/elasticsearch/node…

---

## [How to run more nodes in cluster as service in Centos](https://discuss.elastic.co/t/how-to-run-more-nodes-in-cluster-as-service-in-centos/270549)

<div class="topic-metadata">

**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\
**Replies:** 7\
**Last updated:** [April 22, 2021, 8:00am UTC](https://discuss.elastic.co/t/how-to-run-more-nodes-in-cluster-as-service-in-centos/270549 "2021-04-22T08:00:41Z")

</div>

I have downloaded elasticsearch tar.gz for every nodes. I have modified elasticsearch.yml for each node. I made a script for running each nodes. Script is like below : sh ../node1/bin/elasticsearch sh ../node2/bin/ela…

---

## [Plugin installation on local ElasticSearch](https://discuss.elastic.co/t/plugin-installation-on-local-elasticsearch/270729)

<div class="topic-metadata">

**Author:** [@Lukas\_Smilek](https://discuss.elastic.co/u/Lukas_Smilek)\
**Replies:** 10\
**Last updated:** [April 22, 2021, 7:55am UTC](https://discuss.elastic.co/t/plugin-installation-on-local-elasticsearch/270729 "2021-04-22T07:55:13Z")

</div>

Hello, I was able to successfully install ElasticSearch 7.12.0 on my Mac and also work with it (mapping and indexing first objects via non local network). I want to install a plugin, but I can't get pass this error: \*\*\*…

---

## [Is this the exact information for \_nodes/stats response](https://discuss.elastic.co/t/is-this-the-exact-information-for-nodes-stats-response/270037)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 5\
**Last updated:** [April 22, 2021, 5:46am UTC](https://discuss.elastic.co/t/is-this-the-exact-information-for-nodes-stats-response/270037 "2021-04-22T05:46:39Z")

</div>

I had deployed eck-1.3.0 and elasticsearch 7.9.0 in GKE with 2 data-ingest and 3 master pods. Below is the one when I do get pods: kubectl -n \<ns\> get po NAME READY STATU…

---

## [Can a Custom Realm be installed in Elastic Cloud?](https://discuss.elastic.co/t/can-a-custom-realm-be-installed-in-elastic-cloud/270893)

<div class="topic-metadata">

**Author:** [@pablomartinez](https://discuss.elastic.co/u/pablomartinez)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 2:22am UTC](https://discuss.elastic.co/t/can-a-custom-realm-be-installed-in-elastic-cloud/270893 "2021-04-22T02:22:59Z")

</div>

Just as the title says: Can a Custom Realm be installed in Elastic Cloud?

---

## [Cannot start ElasticSearch service](https://discuss.elastic.co/t/cannot-start-elasticsearch-service/270873)

<div class="topic-metadata">

**Author:** [@Egdar\_Navvasardyan](https://discuss.elastic.co/u/Egdar_Navvasardyan)\
**Replies:** 1\
**Last updated:** [April 21, 2021, 11:17pm UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-service/270873 "2021-04-21T23:17:20Z")

</div>

I am trying to run Elasticsearch doing the following: sudo su systemctl start elasticsearch My .yml file looks like this: cluster.name: petlon-app node.name: my-app-node path.data: /var/lib/elasticsearch path.logs: /…

---

## [Elasticsearch hadoop config](https://discuss.elastic.co/t/elasticsearch-hadoop-config/270889)

<div class="topic-metadata">

**Author:** [@D\_Jerry](https://discuss.elastic.co/u/D_Jerry)\
**Replies:** 0\
**Last updated:** [April 21, 2021, 5:48pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-config/270889 "2021-04-21T17:48:14Z")

</div>

I have docker desktop and I'm trying to do a poc connectivity between ES and Hive. I have ES container running and hive container. I'm adding the jar file to hive before creating the external table. However, it fails…

---

## [F5 load balancer attributes/configuration with Elasticsearch cluster](https://discuss.elastic.co/t/f5-load-balancer-attributes-configuration-with-elasticsearch-cluster/270904)

<div class="topic-metadata">

**Author:** [@fletches](https://discuss.elastic.co/u/fletches)\
**Replies:** 1\
**Last updated:** [April 21, 2021, 10:30pm UTC](https://discuss.elastic.co/t/f5-load-balancer-attributes-configuration-with-elasticsearch-cluster/270904 "2021-04-21T22:30:49Z")

</div>

We will be configuring an F5 load balancer for our Elasticsearch cluster. This question is not about the use of a load balancer vs coordinator role. That discussion is elsewhere in many places. The decision has been made…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=658)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=660)
