# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=665 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 666 --- ## [“No processor type exists with name \[attachment\]”](https://discuss.elastic.co/t/no-processor-type-exists-with-name-attachment/270076)
**Author:** [@judy369](https://discuss.elastic.co/u/judy369)\ **Replies:** 1\ **Last updated:** [April 14, 2021, 3:43am UTC](https://discuss.elastic.co/t/no-processor-type-exists-with-name-attachment/270076 "2021-04-14T03:43:02Z")
when i create pipline, curl --user elastic:ny123456 -H 'Content-Type: application/json' -XPUT 'http://192.168.250.49:9200/\_ingest/pipeline/attachment' -d' { "description" : "Extract attachment information", "… --- ## [503 Service Unavailable at search](https://discuss.elastic.co/t/503-service-unavailable-at-search/270070)
**Author:** [@Francisco\_Gomez1](https://discuss.elastic.co/u/Francisco_Gomez1)\ **Replies:** 10\ **Last updated:** [April 14, 2021, 1:54am UTC](https://discuss.elastic.co/t/503-service-unavailable-at-search/270070 "2021-04-14T01:54:13Z")
Hi, Im trying to access my cluster from the web to be able to show my index using flexmonster, at this point all goes great. I manage to connect and access all my information, the problem is that... for example i can acc… --- ## [Elasticsearch (Docker) - failed to set monitoring pipeline](https://discuss.elastic.co/t/elasticsearch-docker-failed-to-set-monitoring-pipeline/269904)
**Author:** [@chainhead](https://discuss.elastic.co/u/chainhead)\ **Replies:** 1\ **Last updated:** [April 14, 2021, 12:25am UTC](https://discuss.elastic.co/t/elasticsearch-docker-failed-to-set-monitoring-pipeline/269904 "2021-04-14T00:25:16Z")
I am using Elasticsearch with Docker elasticsearch/elasticsearch:7.12.0 and this is what I see in the logs. It is probably for these blogs, Kibana never gets to connect to Elasticsearch rendering my EFK stack unusable. C… --- ## [Creating ingest node pipeline with if condition](https://discuss.elastic.co/t/creating-ingest-node-pipeline-with-if-condition/269991)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 3\ **Last updated:** [April 14, 2021, 12:20am UTC](https://discuss.elastic.co/t/creating-ingest-node-pipeline-with-if-condition/269991 "2021-04-14T00:20:27Z")
Hello, I need to create ingest node pipeline that will tag every document with a specific field based on IP. I need to make it for 4 different groups with over 200 IP addresses. So far I have tried something like this … --- ## [Feature Request: Enforce consistent position\_increment\_gap in multi-fields for multi-values](https://discuss.elastic.co/t/feature-request-enforce-consistent-position-increment-gap-in-multi-fields-for-multi-values/270067)
**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\ **Replies:** 3\ **Last updated:** [April 13, 2021, 10:55pm UTC](https://discuss.elastic.co/t/feature-request-enforce-consistent-position-increment-gap-in-multi-fields-for-multi-values/270067 "2021-04-13T22:55:47Z")
Hi ES Community, I recently found some confusing behavior with a mapping and multi-fields, and it would be nice if Elasticsearch would prevent you from shooting yourself in the foot (like I did). The issue arises when … --- ## [Moving disk to another data node](https://discuss.elastic.co/t/moving-disk-to-another-data-node/270020)
**Author:** [@Feedy](https://discuss.elastic.co/u/Feedy)\ **Replies:** 2\ **Last updated:** [April 13, 2021, 10:46pm UTC](https://discuss.elastic.co/t/moving-disk-to-another-data-node/270020 "2021-04-13T22:46:13Z")
Running out of space with current 4 node cluster w/replica. I would like to install new larger disk drives but it may require moving disk drives from one data node to another. Does the master node have the ability to rec… --- ## [Elastic operator TLS self-signed certificates](https://discuss.elastic.co/t/elastic-operator-tls-self-signed-certificates/270049)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 0\ **Last updated:** [April 13, 2021, 6:15pm UTC](https://discuss.elastic.co/t/elastic-operator-tls-self-signed-certificates/270049 "2021-04-13T18:15:09Z")
Hi, Using ECK we have set up a cluster with a self-signed certificate. However the documentation (TLS certificates | Elastic Cloud on Kubernetes \[1.5\] | Elastic) is not clear how to set/install this certificate in the … --- ## [Rollups](https://discuss.elastic.co/t/rollups/270062)
**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\ **Replies:** 0\ **Last updated:** [April 13, 2021, 9:34pm UTC](https://discuss.elastic.co/t/rollups/270062 "2021-04-13T21:34:04Z")
Hi, When I rollup my data, an additional field myfield.terms.\_count is created for every field in my input. Is it possible to avoid this? However, I do want a running count of all my documents so I can use it in Kibana… --- ## [Creation of PIT using Rest High Level Client in Java SDK](https://discuss.elastic.co/t/creation-of-pit-using-rest-high-level-client-in-java-sdk/270039)
**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\ **Replies:** 6\ **Last updated:** [April 13, 2021, 10:00pm UTC](https://discuss.elastic.co/t/creation-of-pit-using-rest-high-level-client-in-java-sdk/270039 "2021-04-13T22:00:22Z")
I was going through the Rest High-Level Client and wasn't able to get a method to create a Point In Time via the java SDK of the client. Is there a way to do it programmatically? I went through a earlier post which add… --- ## [Time based indexing alternatives](https://discuss.elastic.co/t/time-based-indexing-alternatives/270064)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 1\ **Last updated:** [April 13, 2021, 9:57pm UTC](https://discuss.elastic.co/t/time-based-indexing-alternatives/270064 "2021-04-13T21:57:36Z")
Hi, We are building a search system on top of document style data(ie. a document that has a few states over its lifecycle and gets updated over time). Most indexing strategies I see are some form of time-based indexing… --- ## [Adding PIT id to the Search request body through Java SDK](https://discuss.elastic.co/t/adding-pit-id-to-the-search-request-body-through-java-sdk/270057)
**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\ **Replies:** 3\ **Last updated:** [April 13, 2021, 8:24pm UTC](https://discuss.elastic.co/t/adding-pit-id-to-the-search-request-body-through-java-sdk/270057 "2021-04-13T20:24:02Z")
While fetching paginated results back from elastic search we need to construct a query like this { "size": 10000, "query": { "match" : { "user.id" : "elkbee" } }, "pit": { "id": "46ToAwMDaWR5… --- ## [Getting master\_not\_discovered\_exception from node](https://discuss.elastic.co/t/getting-master-not-discovered-exception-from-node/269840)
**Author:** [@arielman2304](https://discuss.elastic.co/u/arielman2304)\ **Replies:** 6\ **Last updated:** [April 13, 2021, 3:20pm UTC](https://discuss.elastic.co/t/getting-master-not-discovered-exception-from-node/269840 "2021-04-13T15:20:19Z")
Hi I created 3 EC2 clusters in AWS, and I'm trying to set 2 of them as nodes. I followed this guideline: However, nothing helps and I'm still getting this exception from the nodes. all ES are up and return response t… --- ## [Invalid value for MonthOfYear and nested JSON mapping](https://discuss.elastic.co/t/invalid-value-for-monthofyear-and-nested-json-mapping/270019)
**Author:** [@tommycahir](https://discuss.elastic.co/u/tommycahir)\ **Replies:** 0\ **Last updated:** [April 13, 2021, 2:02pm UTC](https://discuss.elastic.co/t/invalid-value-for-monthofyear-and-nested-json-mapping/270019 "2021-04-13T14:02:41Z")
Hi Folks, I am very new to Elastic Stack and am trying to insert a JSON list of JSON API responses to an index from a python script and am getting the error: elasticsearch.exceptions.RequestError: RequestError(400, 'ma… --- ## [Reindex nested to non-nested](https://discuss.elastic.co/t/reindex-nested-to-non-nested/269961)
**Author:** [@ajitha](https://discuss.elastic.co/u/ajitha)\ **Replies:** 0\ **Last updated:** [April 13, 2021, 2:07am UTC](https://discuss.elastic.co/t/reindex-nested-to-non-nested/269961 "2021-04-13T02:07:55Z")
Does the script in the "reindex API" support mapping of nested fields to non nested fields? If i do use the script I keep getting cannot create source field in dest index, even though I have "remove". What is the issu… --- ## [How to use the full tracks instead of 1k](https://discuss.elastic.co/t/how-to-use-the-full-tracks-instead-of-1k/269994)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 1\ **Last updated:** [April 13, 2021, 10:53am UTC](https://discuss.elastic.co/t/how-to-use-the-full-tracks-instead-of-1k/269994 "2021-04-13T10:53:46Z")
hey there, I am using the Docker image to try several benchmarks. Can you say to me how to use the full tracks instead of just 1k docs? Running a basic command elastic/rally race --track=nyc\_taxis --test-mode --pipelin… --- ## [Elastic logging plugin doesn’t work with self-signed certificate](https://discuss.elastic.co/t/elastic-logging-plugin-doesn-t-work-with-self-signed-certificate/268406)
**Author:** [@nvb97](https://discuss.elastic.co/u/nvb97)\ **Replies:** 4\ **Last updated:** [April 13, 2021, 10:05am UTC](https://discuss.elastic.co/t/elastic-logging-plugin-doesn-t-work-with-self-signed-certificate/268406 "2021-04-13T10:05:41Z")
Hi all, I have installed Elastic Logging Plugin for Docker (v.7.11.1) which should send the data to Elasticsearch where the security is enabled, but the log events from the docker container don’t arrive in elastic index… --- ## [Bulk insert with python](https://discuss.elastic.co/t/bulk-insert-with-python/269883)
**Author:** [@eliase](https://discuss.elastic.co/u/eliase)\ **Replies:** 1\ **Last updated:** [April 13, 2021, 9:08am UTC](https://discuss.elastic.co/t/bulk-insert-with-python/269883 "2021-04-13T09:08:15Z")
Hi everyone, just as a foreword: I'm new to elasticsearch (and this forum :slightly\_smiling\_face:) and still figuring out a lot. So, I successfully tried to use bulk insertion from a file with the following content: {… --- ## [How can we configure ELK Stack and Filebeat for production environment?](https://discuss.elastic.co/t/how-can-we-configure-elk-stack-and-filebeat-for-production-environment/269968)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 3\ **Last updated:** [April 13, 2021, 8:45am UTC](https://discuss.elastic.co/t/how-can-we-configure-elk-stack-and-filebeat-for-production-environment/269968 "2021-04-13T08:45:00Z")
Hello.Currently I am running ELK Stack and Filebeat for development and testing purpose.After some time I want to run ELK Stack and Filebeat in production environment.How can I do this?What are the configurations to run … --- ## [Hot warm architecture in ES](https://discuss.elastic.co/t/hot-warm-architecture-in-es/269915)
**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\ **Replies:** 2\ **Last updated:** [April 13, 2021, 6:12am UTC](https://discuss.elastic.co/t/hot-warm-architecture-in-es/269915 "2021-04-13T06:12:22Z")
How to configure Hot warm architecture of elastic serach in kubernetes cluster? Is this comes under community edition or x-pack? Could you please share urls to configure. --- ## [Kibana visualization built with context of other logs](https://discuss.elastic.co/t/kibana-visualization-built-with-context-of-other-logs/269745)
**Author:** [@mbrad](https://discuss.elastic.co/u/mbrad)\ **Replies:** 4\ **Last updated:** [April 13, 2021, 4:39am UTC](https://discuss.elastic.co/t/kibana-visualization-built-with-context-of-other-logs/269745 "2021-04-13T04:39:05Z")
Hello - My team is using ElasticSearch/Kibana for security metric related things and we are having trouble with a specific use case: When a finding is open, a document is created with alerts.status:open associated to t… --- ## [Can Significant text aggregation work on copy\_to fields](https://discuss.elastic.co/t/can-significant-text-aggregation-work-on-copy-to-fields/269908)
**Author:** [@sj12345](https://discuss.elastic.co/u/sj12345)\ **Replies:** 2\ **Last updated:** [April 13, 2021, 3:14am UTC](https://discuss.elastic.co/t/can-significant-text-aggregation-work-on-copy-to-fields/269908 "2021-04-13T03:14:34Z")
I want to do a significant text aggregation on a field which was copied from few other fields (i.e. its a copy\_to field) "combined\_fields" : { "type" : "text", "store" : true, "norms" : fa… --- ## [Update vs Reindex](https://discuss.elastic.co/t/update-vs-reindex/269929)
**Author:** [@abhishekc92](https://discuss.elastic.co/u/abhishekc92)\ **Replies:** 5\ **Last updated:** [April 12, 2021, 10:04pm UTC](https://discuss.elastic.co/t/update-vs-reindex/269929 "2021-04-12T22:04:31Z")
Hello, I am evaluating a few ways of organizing my indices. One of the questions I had was generally speaking, what is the difference in overhead(if any) between updating a document within an index vs using the reindex … --- ## [Issue with Date with Python importing data into Elastic](https://discuss.elastic.co/t/issue-with-date-with-python-importing-data-into-elastic/269918)
**Author:** [@fallenour](https://discuss.elastic.co/u/fallenour)\ **Replies:** 0\ **Last updated:** [April 12, 2021, 5:07pm UTC](https://discuss.elastic.co/t/issue-with-date-with-python-importing-data-into-elastic/269918 "2021-04-12T17:07:37Z")
Hey I have a quick issue regarding using python to connect to elastic. When I go to import data as a date field, its giving me a time error due to time format, but Ive tried everything, including datestamp instead of jus… --- ## [ILM Policy not sticking to index template](https://discuss.elastic.co/t/ilm-policy-not-sticking-to-index-template/269940)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 9:36pm UTC](https://discuss.elastic.co/t/ilm-policy-not-sticking-to-index-template/269940 "2021-04-12T21:36:59Z")
We have created an ILM (ex. ILM-1) and have attached it to an index-template (ex. Index-1). However, whenever the index rolls over it for some reason grabs a different, random ILM policy. We will go back to attach the … --- ## ['search\_phase\_execution\_exception', 'action \[indices:data/read/search\[phase/query\]\] is unauthorized for user](https://discuss.elastic.co/t/search-phase-execution-exception-action-indices-data-read-search-phase-query-is-unauthorized-for-user/269657)
**Author:** [@sair\_ramos](https://discuss.elastic.co/u/sair_ramos)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 8:41pm UTC](https://discuss.elastic.co/t/search-phase-execution-exception-action-indices-data-read-search-phase-query-is-unauthorized-for-user/269657 "2021-04-12T20:41:59Z")
i use a script in python to search, index and uptade data and everything works but sometimes give this error many times in a row \*\*'search\_phase\_execution\_exception', 'action \[indices:data/read/search\[phase/query\]\] is un… --- ## [Where are shard relocations and failures logged?](https://discuss.elastic.co/t/where-are-shard-relocations-and-failures-logged/269942)
**Author:** [@Scott\_Merritt](https://discuss.elastic.co/u/Scott_Merritt)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 7:26pm UTC](https://discuss.elastic.co/t/where-are-shard-relocations-and-failures-logged/269942 "2021-04-12T19:26:21Z")
Hi, We would like to detect when a shard fails, begins relocating off of a node, and finishes relocating. We do use the metrics that show the count of these active operations, but would like to additionally know the spe… --- ## [\_id value is getting changed in elastic](https://discuss.elastic.co/t/id-value-is-getting-changed-in-elastic/268905)
**Author:** [@gbandasha](https://discuss.elastic.co/u/gbandasha)\ **Replies:** 12\ **Last updated:** [April 12, 2021, 5:52pm UTC](https://discuss.elastic.co/t/id-value-is-getting-changed-in-elastic/268905 "2021-04-12T17:52:45Z")
I have a unique\_id value in my index and that is also used as the document\_id, but as my document count is increasing drastically I had changed the type from double because that was causing truncation of my values. I cha… --- ## [RemoteTransportException cannot be cast to class org.elasticsearch.index.IndexNotFoundException after upgrade to 7.11.2 from 7.6.0](https://discuss.elastic.co/t/remotetransportexception-cannot-be-cast-to-class-org-elasticsearch-index-indexnotfoundexception-after-upgrade-to-7-11-2-from-7-6-0/268121)
**Author:** [@Brady\_Davis](https://discuss.elastic.co/u/Brady_Davis)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 3:46pm UTC](https://discuss.elastic.co/t/remotetransportexception-cannot-be-cast-to-class-org-elasticsearch-index-indexnotfoundexception-after-upgrade-to-7-11-2-from-7-6-0/268121 "2021-04-12T15:46:19Z")
Hello, We recently upgraded our elasticsearch stack to 7.11.2 from 7.6.0 and are seeing an issue when attempting PUTS on indexes that don't exist: "message": "failed to handle exception response \[org.elasticsearch.tran… --- ## [Is there any alternate way for connecting Elasticsearch from C++ code except ODBC?](https://discuss.elastic.co/t/is-there-any-alternate-way-for-connecting-elasticsearch-from-c-code-except-odbc/269837)
**Author:** [@onkark](https://discuss.elastic.co/u/onkark)\ **Replies:** 6\ **Last updated:** [April 12, 2021, 2:47pm UTC](https://discuss.elastic.co/t/is-there-any-alternate-way-for-connecting-elasticsearch-from-c-code-except-odbc/269837 "2021-04-12T14:47:06Z")
I tried fetching data of Elasticsearch from C++ code using Elasticsearch ODBC. As elasticsearch is known for its fast fetching speed, I'm not getting the expected performance using ODBC as compared to other RDBMS. So, ca… --- ## [Enrich policy access "\_id" field](https://discuss.elastic.co/t/enrich-policy-access-id-field/269868)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 1\ **Last updated:** [April 12, 2021, 2:15pm UTC](https://discuss.elastic.co/t/enrich-policy-access-id-field/269868 "2021-04-12T14:15:42Z")
I am trying to use an enrich policy to match on a filename and return the \_id fields of that doc to add in as a field in my secondary index. I have two indexes the first has 1 entry with field 'filename'. The second inde… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=664) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=666)