# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=664 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 665 --- ## [Does ElasticSearch itself have access logs?](https://discuss.elastic.co/t/does-elasticsearch-itself-have-access-logs/270236)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 2\ **Last updated:** [April 15, 2021, 1:25pm UTC](https://discuss.elastic.co/t/does-elasticsearch-itself-have-access-logs/270236 "2021-04-15T13:25:23Z")
Does ElasticSearch have a feature similar to Tomcat access logs? So that I can see the history of requests at a specific time --- ## [How to run rally against an existing on-premise cluster](https://discuss.elastic.co/t/how-to-run-rally-against-an-existing-on-premise-cluster/270228)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 1\ **Last updated:** [April 15, 2021, 1:17pm UTC](https://discuss.elastic.co/t/how-to-run-rally-against-an-existing-on-premise-cluster/270228 "2021-04-15T13:17:11Z")
I am running my elasticsearch (version 7.11) cluster on an on-premise kubernetes cluster. security is enabled in the cluster. to run rally i have created a separate pod --chart.yaml-- apiVersion: v1 kind: Pod … --- ## [\[Elasticsearch cluster status red\] : path: /.apm-agent-configuration/\_search, params: {index=.apm-agent-configuration} org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed](https://discuss.elastic.co/t/elasticsearch-cluster-status-red-path-apm-agent-configuration-search-params-index-apm-agent-configuration-org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/270215)
**Author:** [@abi.mc](https://discuss.elastic.co/u/abi.mc)\ **Replies:** 2\ **Last updated:** [April 15, 2021, 12:49pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-red-path-apm-agent-configuration-search-params-index-apm-agent-configuration-org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/270215 "2021-04-15T12:49:34Z")
Our two node elasticsearch cluster status shows red. The cluster is configured with HTTP and TLS encryption. Please find below the error from elasticsearch logs. Could you please let us know how the cluster status can be… --- ## [Multi-tenant design](https://discuss.elastic.co/t/multi-tenant-design/268278)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 7\ **Last updated:** [March 25, 2021, 5:07am UTC](https://discuss.elastic.co/t/multi-tenant-design/268278 "2021-03-25T05:07:20Z")
Hi, I'm currently in the process of designing a multi-tenant indexing strategy for my system. I'm generally aware of the approaches commonly used in such cases - Index per tenant Shared index across tenants Some variat… --- ## [Is it possible to do a write operation on indices which are on warm nodes in elastic search](https://discuss.elastic.co/t/is-it-possible-to-do-a-write-operation-on-indices-which-are-on-warm-nodes-in-elastic-search/270212)
**Author:** [@sagar7645](https://discuss.elastic.co/u/sagar7645)\ **Replies:** 1\ **Last updated:** [April 15, 2021, 10:24am UTC](https://discuss.elastic.co/t/is-it-possible-to-do-a-write-operation-on-indices-which-are-on-warm-nodes-in-elastic-search/270212 "2021-04-15T10:24:16Z")
is it possible to do a write operation on indices which are on warm nodes in elastic search --- ## [Activate x-pack](https://discuss.elastic.co/t/activate-x-pack/269829)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 26\ **Last updated:** [April 15, 2021, 10:15am UTC](https://discuss.elastic.co/t/activate-x-pack/269829 "2021-04-15T10:15:39Z")
how to activate the x-pack? and where i should access to activate the x-pack? --- ## [Query terms search miss content depending on what is searched](https://discuss.elastic.co/t/query-terms-search-miss-content-depending-on-what-is-searched/270193)
**Author:** [@pyrovoice](https://discuss.elastic.co/u/pyrovoice)\ **Replies:** 3\ **Last updated:** [April 15, 2021, 9:18am UTC](https://discuss.elastic.co/t/query-terms-search-miss-content-depending-on-what-is-searched/270193 "2021-04-15T09:18:27Z")
Hello, I have a strange issue with the ES query search: When searching for an array of ID, some of them will be skipped, but looking for those IDs individually of in a different array will return the skipped IDs correctl… --- ## [Timeouts on shard relocations and overhead on garbage collection](https://discuss.elastic.co/t/timeouts-on-shard-relocations-and-overhead-on-garbage-collection/269996)
**Author:** [@Tony79](https://discuss.elastic.co/u/Tony79)\ **Replies:** 3\ **Last updated:** [April 15, 2021, 8:16am UTC](https://discuss.elastic.co/t/timeouts-on-shard-relocations-and-overhead-on-garbage-collection/269996 "2021-04-15T08:16:26Z")
Hi, In my setup of Elasticsearch cluster version 6.8 i've had big problems with handling the huge amount of indices and shards related to this. We use a frontend application from a third-party vendor so we have very li… --- ## [Top hits does not work with significant text aggregation](https://discuss.elastic.co/t/top-hits-does-not-work-with-significant-text-aggregation/270188)
**Author:** [@sj12345](https://discuss.elastic.co/u/sj12345)\ **Replies:** 1\ **Last updated:** [April 15, 2021, 7:33am UTC](https://discuss.elastic.co/t/top-hits-does-not-work-with-significant-text-aggregation/270188 "2021-04-15T07:33:20Z")
Is there any workaround for getting the original documents based on the buckets for a significant text aggregation ? The solution outlined here does not work for "significant text" How to get documents from the buckets… --- ## [Must\_not is not excluding results when used in query](https://discuss.elastic.co/t/must-not-is-not-excluding-results-when-used-in-query/270194)
**Author:** [@M\_Gibbs](https://discuss.elastic.co/u/M_Gibbs)\ **Replies:** 2\ **Last updated:** [April 15, 2021, 7:24am UTC](https://discuss.elastic.co/t/must-not-is-not-excluding-results-when-used-in-query/270194 "2021-04-15T07:24:27Z")
Hi all, Having some issues, this is my query below. I'm returning results, but the must\_not section is not succesfully removing results. It's narrowing, to include the word developer. So I'm getting results with web des… --- ## [Query\_string with wildcard](https://discuss.elastic.co/t/query-string-with-wildcard/270061)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 4\ **Last updated:** [April 15, 2021, 6:57am UTC](https://discuss.elastic.co/t/query-string-with-wildcard/270061 "2021-04-15T06:57:53Z")
I am having latest ES and set a field in mapping to keyword and index: true. I need to use wildcard so this example from your web is perfect match: { "query": { "query\_string" : { "query" : … --- ## [Restart elasticseach master overriding some index template](https://discuss.elastic.co/t/restart-elasticseach-master-overriding-some-index-template/270187)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 2\ **Last updated:** [April 15, 2021, 6:47am UTC](https://discuss.elastic.co/t/restart-elasticseach-master-overriding-some-index-template/270187 "2021-04-15T06:47:00Z")
We have faced some weird issue. restarting master node overriding alias name in index template. we have an three master and couple of data nodes index\_template before restart master node. "aliases" : { "pmetrics-mobi… --- ## [How to create a single document with fields from multi documents](https://discuss.elastic.co/t/how-to-create-a-single-document-with-fields-from-multi-documents/270141)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 1\ **Last updated:** [April 14, 2021, 11:29pm UTC](https://discuss.elastic.co/t/how-to-create-a-single-document-with-fields-from-multi-documents/270141 "2021-04-14T23:29:48Z")
Hi, I have 4 documents with the below fields {sessionid :1, callid:0001, service: 001} {sessionid :1, state:login, city: hyderabad} {sessionid :1, state:login, service:002} {sessionid :1, state:logout, handset: mobi… --- ## [Dynamic mapping strict to true](https://discuss.elastic.co/t/dynamic-mapping-strict-to-true/269912)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 10\ **Last updated:** [April 14, 2021, 9:41pm UTC](https://discuss.elastic.co/t/dynamic-mapping-strict-to-true/269912 "2021-04-14T21:41:30Z")
I have a index template that I define with strict dynamic mapping. Now I would like to add a field I have remove template, recreated with dynamic=true but it still gives me error on adding field 'error': {'type': 'stri… --- ## [Terms Lookup on Ip fields and the too\_many\_clauses: maxClauseCount issue](https://discuss.elastic.co/t/terms-lookup-on-ip-fields-and-the-too-many-clauses-maxclausecount-issue/270130)
**Author:** [@Giovanni\_Bismondo](https://discuss.elastic.co/u/Giovanni_Bismondo)\ **Replies:** 0\ **Last updated:** [April 14, 2021, 4:17pm UTC](https://discuss.elastic.co/t/terms-lookup-on-ip-fields-and-the-too-many-clauses-maxclausecount-issue/270130 "2021-04-14T16:17:31Z")
Hi, I'm trying to make a query with Terms Lookup to filter an index by ip addresses included in an array (of another document in another index). I get the too\_many\_clauses: maxClauseCount issue, but I found in question… --- ## [ElastiCloud Index lifecycle policy error](https://discuss.elastic.co/t/elasticloud-index-lifecycle-policy-error/270121)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 2\ **Last updated:** [April 14, 2021, 2:19pm UTC](https://discuss.elastic.co/t/elasticloud-index-lifecycle-policy-error/270121 "2021-04-14T14:19:09Z")
I have set up a lifecycle policy in order to delete index data when it is older that 50 gb Here is how it looks like below: PUT \_ilm/policy/deleting\_policy { "policy": { "phases": { "hot… --- ## [Elasticsearch Certificates and Elasticsearch.Net (Could not create SSL/TLS secure channel...)](https://discuss.elastic.co/t/elasticsearch-certificates-and-elasticsearch-net-could-not-create-ssl-tls-secure-channel/270024)
**Author:** [@christopher.farmer](https://discuss.elastic.co/u/christopher.farmer)\ **Replies:** 0\ **Last updated:** [April 13, 2021, 3:03pm UTC](https://discuss.elastic.co/t/elasticsearch-certificates-and-elasticsearch-net-could-not-create-ssl-tls-secure-channel/270024 "2021-04-13T15:03:26Z")
I would think this would be a common and a straight-forward situation as I am using certificates generated by the elasticsearch-certutil tool for setting up transport and client SSL/TLS communication. The problem I am h… --- ## [Ingestion have been stoped at 70%, would my ingested data will get lost when I reingest?](https://discuss.elastic.co/t/ingestion-have-been-stoped-at-70-would-my-ingested-data-will-get-lost-when-i-reingest/270099)
**Author:** [@sanjaysh](https://discuss.elastic.co/u/sanjaysh)\ **Replies:** 14\ **Last updated:** [April 14, 2021, 12:49pm UTC](https://discuss.elastic.co/t/ingestion-have-been-stoped-at-70-would-my-ingested-data-will-get-lost-when-i-reingest/270099 "2021-04-14T12:49:21Z")
I am ingesting data on EC and I have almost ingested my 70% of data but the ingestion process have suddenly got stopped, and now I have to ingest again with the remaining data so would the remaining data will lost or wou… --- ## [Issues trying to search with ngram tokenizer](https://discuss.elastic.co/t/issues-trying-to-search-with-ngram-tokenizer/269946)
**Author:** [@nealdan0](https://discuss.elastic.co/u/nealdan0)\ **Replies:** 1\ **Last updated:** [April 14, 2021, 12:00pm UTC](https://discuss.elastic.co/t/issues-trying-to-search-with-ngram-tokenizer/269946 "2021-04-14T12:00:43Z")
Hi, Recently we upgraded our version of elastic search to 7.10. Since then I've had issues querying with an ngram tokenizer from the java api. Specifically, searching for a text value only returns results if using a… --- ## [Hot/Warm/Cold storage architecture 1 node](https://discuss.elastic.co/t/hot-warm-cold-storage-architecture-1-node/270102)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 3\ **Last updated:** [April 14, 2021, 10:21am UTC](https://discuss.elastic.co/t/hot-warm-cold-storage-architecture-1-node/270102 "2021-04-14T10:21:02Z")
I am pretty sure it is not possible but still would like to know this for sure. It's possible to use 3 types(Martix,SSD,HDD) of storage for one elasticserach node and configure which index should be stored on which stora… --- ## [Flood storage Disk Watermark exceeded error](https://discuss.elastic.co/t/flood-storage-disk-watermark-exceeded-error/269411)
**Author:** [@Daud\_Ahmed1](https://discuss.elastic.co/u/Daud_Ahmed1)\ **Replies:** 6\ **Last updated:** [April 14, 2021, 9:50am UTC](https://discuss.elastic.co/t/flood-storage-disk-watermark-exceeded-error/269411 "2021-04-14T09:50:54Z")
I am getting the following error Elasticsearch error: cluster\_block\_exception \[FORBIDDEN/12/index read-only / allow delete (api)\], flood stage disk watermark exceeded Even though I have three data nodes each with 1TB s… --- ## [Memory problems / Circuit breaking exception with small data](https://discuss.elastic.co/t/memory-problems-circuit-breaking-exception-with-small-data/270091)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 9\ **Last updated:** [April 14, 2021, 8:57am UTC](https://discuss.elastic.co/t/memory-problems-circuit-breaking-exception-with-small-data/270091 "2021-04-14T08:57:04Z")
I am experiencing an odd situation. I have 3 node cluster (two data nodes, one master node) with the following resources node1 24GB RAM, 12CPU node2 16GB RAM, 8CPU master 8GB RAM, 4CPU I am ingesting firewall logs wit… --- ## [Elasticsearch SQL ODBC taking more time than previous version](https://discuss.elastic.co/t/elasticsearch-sql-odbc-taking-more-time-than-previous-version/269442)
**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\ **Replies:** 8\ **Last updated:** [April 14, 2021, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-sql-odbc-taking-more-time-than-previous-version/269442 "2021-04-14T08:39:29Z")
I'm using SQL ODBC driver to fetch the results from elastic. I'm getting problem while fetching the documents from elastic. The query is as simple as 'select empno, name, address from emp'. In Elasticsearch version 7.6.2… --- ## [Assign Master and ML both roles to same node?](https://discuss.elastic.co/t/assign-master-and-ml-both-roles-to-same-node/270041)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 6\ **Last updated:** [April 14, 2021, 8:36am UTC](https://discuss.elastic.co/t/assign-master-and-ml-both-roles-to-same-node/270041 "2021-04-14T08:36:40Z")
Hi Team, We plan to use Platinum license Can I assign ML and Master both roles on single/same node? From license count perspective, if I use 3 master and 3 ML both roles assigned to those 3 master nodes, will that be … --- ## [Understand "enable: false" mapping setting](https://discuss.elastic.co/t/understand-enable-false-mapping-setting/270084)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 6\ **Last updated:** [April 14, 2021, 8:34am UTC](https://discuss.elastic.co/t/understand-enable-false-mapping-setting/270084 "2021-04-14T08:34:55Z")
Hello all ! I'm trying to understand "enable: false" mapping setting I don't want to index a specific field : syslog\_timestamp To achieve this, I mapped this field with "enabled: false" like this (extract of Index man… --- ## [Check if Elasticsearch index is SEARCHABLE](https://discuss.elastic.co/t/check-if-elasticsearch-index-is-searchable/270000)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 4\ **Last updated:** [April 14, 2021, 8:21am UTC](https://discuss.elastic.co/t/check-if-elasticsearch-index-is-searchable/270000 "2021-04-14T08:21:41Z")
Hello everyone, once again I ran into a wall with ELK stack that I'm unable to overcome by myself so I came here to ask for your help. In my project , I'm creating new index , putting data into it via logstash and then … --- ## [Elastic search](https://discuss.elastic.co/t/elastic-search/270081)
**Author:** [@Daud\_Ahmed1](https://discuss.elastic.co/u/Daud_Ahmed1)\ **Replies:** 1\ **Last updated:** [April 14, 2021, 7:19am UTC](https://discuss.elastic.co/t/elastic-search/270081 "2021-04-14T07:19:55Z")
I am not really able to find anything about this topic. Can anyone help with me will be really appreciated. --- ## [Elasticsearch doesn't display data in the graphs after a certain date](https://discuss.elastic.co/t/elasticsearch-doesnt-display-data-in-the-graphs-after-a-certain-date/270006)
**Author:** [@Borchart](https://discuss.elastic.co/u/Borchart)\ **Replies:** 2\ **Last updated:** [April 14, 2021, 7:11am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-display-data-in-the-graphs-after-a-certain-date/270006 "2021-04-14T07:11:57Z")
Hello everyone, I am new to using Elasticsearch. I have a server with Wazuh, Elasticsearch and Kibana installed, so I only have one node. When I look at the graphs for Wazuh I don't see the data until I put the data of … --- ## [Elasticsearch Multiple terms count filters](https://discuss.elastic.co/t/elasticsearch-multiple-terms-count-filters/270080)
**Author:** [@vkothari](https://discuss.elastic.co/u/vkothari)\ **Replies:** 0\ **Last updated:** [April 14, 2021, 6:32am UTC](https://discuss.elastic.co/t/elasticsearch-multiple-terms-count-filters/270080 "2021-04-14T06:32:03Z")
We are using Elasticsearch to search multiple terms and filter the records based on different filter terms. We are using multiple Keywords to search and filter the records, so I need some other details along with the re… --- ## [Updates on time based indexes](https://discuss.elastic.co/t/updates-on-time-based-indexes/270051)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 2\ **Last updated:** [April 14, 2021, 6:42am UTC](https://discuss.elastic.co/t/updates-on-time-based-indexes/270051 "2021-04-14T06:42:28Z")
I am thinking of a time based index where we manage the lifecycle of a certain type of documents. The rollover API is one of the options vs spawning a new index at a cadence(say monthly). The nature of our documents are … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=663) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=665)