# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=668 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 669 --- ## [Elastic No mapping found for \[\_shard\_doc\] in order to sort on](https://discuss.elastic.co/t/elastic-no-mapping-found-for-shard-doc-in-order-to-sort-on/268188)
**Author:** [@111452](https://discuss.elastic.co/u/111452)\ **Replies:** 4\ **Last updated:** [April 8, 2021, 2:11pm UTC](https://discuss.elastic.co/t/elastic-no-mapping-found-for-shard-doc-in-order-to-sort-on/268188 "2021-04-08T14:11:32Z")
I'm trying to use search after parameter in the query to retrieve the next page as it says in Paginate search results | Elasticsearch Reference \[7.12\] | Elastic. If I sort it like "sort": \[ {"@timestamp": "asc"}, … --- ## [Remote Access Available But Local Access Not Available](https://discuss.elastic.co/t/remote-access-available-but-local-access-not-available/268752)
**Author:** [@sewox](https://discuss.elastic.co/u/sewox)\ **Replies:** 22\ **Last updated:** [April 8, 2021, 1:53pm UTC](https://discuss.elastic.co/t/remote-access-available-but-local-access-not-available/268752 "2021-04-08T13:53:43Z")
Hi Everyone, I can access it remotely elasticsearch but I can't access local with PHP driver. \ **Author:** [@AneskaFrisbib](https://discuss.elastic.co/u/AneskaFrisbib)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 1:05pm UTC](https://discuss.elastic.co/t/dot-in-field-names-in-es7-11/269588 "2021-04-08T13:05:31Z") Hello, I currently have the same problem as the one described here : How to handle dot in field names in ES 7.0 Unfortunately, I can't modify the document field names as suggested in the last update. Is there any othe… --- ## [Elasticsearch query time range issue](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 50\ **Last updated:** [April 8, 2021, 12:41pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-range-issue/268672 "2021-04-08T12:41:54Z")
Hello Experts, I am not able to retrieve all the status\_code values with below query. It has given only less value than actual values. \*\*My query\*\* "\_source": \[ "status\_code", "referrer", "timestamp" \], "query":… --- ## [Actual values in ML single metric viewer doesnt match the raw data](https://discuss.elastic.co/t/actual-values-in-ml-single-metric-viewer-doesnt-match-the-raw-data/269539)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 11:20am UTC](https://discuss.elastic.co/t/actual-values-in-ml-single-metric-viewer-doesnt-match-the-raw-data/269539 "2021-04-08T11:20:27Z")
In th first image the actual is 2.987, but the values displayed in the Y axis, and the value displayed in the second image, that is next to this anomaly , aren't near the value of the actual, and it seems the typical is … --- ## [How to delete specific indexes from snapshot?](https://discuss.elastic.co/t/how-to-delete-specific-indexes-from-snapshot/269581)
**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\ **Replies:** 1\ **Last updated:** [April 8, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-to-delete-specific-indexes-from-snapshot/269581 "2021-04-08T11:24:43Z")
Hi Team, We use daily indices in elasticsearch and each day we take the snapshot of previous day in our snapshot repository. We want to delete specific indexes matching some pattern from the snapshots. Is it possible … --- ## [How to sort primarily on one score, and secondarily on another score](https://discuss.elastic.co/t/how-to-sort-primarily-on-one-score-and-secondarily-on-another-score/269564)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 3\ **Last updated:** [April 8, 2021, 10:19am UTC](https://discuss.elastic.co/t/how-to-sort-primarily-on-one-score-and-secondarily-on-another-score/269564 "2021-04-08T10:19:11Z")
Hi I have n terms ie: "Cheese","Robot" and "Cake" I wish to do a primary sorting strictly on number of these terms matched, and secondarily on the total score of the three terms. I know a way to sort by number of hit… --- ## [Watcher multiple condition script error](https://discuss.elastic.co/t/watcher-multiple-condition-script-error/269263)
**Author:** [@Smit108](https://discuss.elastic.co/u/Smit108)\ **Replies:** 0\ **Last updated:** [April 5, 2021, 7:37pm UTC](https://discuss.elastic.co/t/watcher-multiple-condition-script-error/269263 "2021-04-05T19:37:33Z")
HI i'm trying to set cluster health with condition in script but getting error while i'm execute it. { “trigger”: { “schedule”: { “interval”: “10s” } }, “input”: { “http”: { “request… --- ## [ELK rollover renamed indexes](https://discuss.elastic.co/t/elk-rollover-renamed-indexes/269426)
**Author:** [@arvanMalian](https://discuss.elastic.co/u/arvanMalian)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 9:19am UTC](https://discuss.elastic.co/t/elk-rollover-renamed-indexes/269426 "2021-04-08T09:19:26Z")
Hi, I'm using ELK stack version 7.10.1 ( elasticsearch, kibana, filebeat ) My goal is to apply lifecycle policy to my indexes with ILM. I remaned indexes, it's something like this: filebeat-7.10.1-2021.04.06-000001 (… --- ## [Fill an Elasticsearch index with data from another index on same cluster](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451)
**Author:** [@workaround](https://discuss.elastic.co/u/workaround)\ **Replies:** 6\ **Last updated:** [April 8, 2021, 8:30am UTC](https://discuss.elastic.co/t/fill-an-elasticsearch-index-with-data-from-another-index-on-same-cluster/269451 "2021-04-08T08:30:18Z")
This is kind of a noob question so please be kind. I have an elasticsearch cluster (v5) with 3 nodes and two indexes, lets say indexes X and Y(default). I would like to know if there is a way to write data to the index … --- ## [Bulk upsert of nested document without mapping](https://discuss.elastic.co/t/bulk-upsert-of-nested-document-without-mapping/269563)
**Author:** [@Omri](https://discuss.elastic.co/u/Omri)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 8:04am UTC](https://discuss.elastic.co/t/bulk-upsert-of-nested-document-without-mapping/269563 "2021-04-08T08:04:20Z")
Hello everyone, I'm using the dynamic mapping feature of ES while predefining the mapping of specific index which also contains a nested field and a mapping to the fields in this nested field. When I run a bulk upsert … --- ## [Elasticsearch warm phase on rollover](https://discuss.elastic.co/t/elasticsearch-warm-phase-on-rollover/269503)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 2\ **Last updated:** [April 8, 2021, 7:59am UTC](https://discuss.elastic.co/t/elasticsearch-warm-phase-on-rollover/269503 "2021-04-08T07:59:43Z")
I created a simple policy for rollover using Kibana getting the following request: PUT \_ilm/policy/30d { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "rollover": … --- ## [Using an array as parameter for update script](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/269562)
**Author:** [@yen\_l\_ng\_th](https://discuss.elastic.co/u/yen_l_ng_th)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 7:45am UTC](https://discuss.elastic.co/t/using-an-array-as-parameter-for-update-script/269562 "2021-04-08T07:45:48Z")
I am using ElasticSearch 6.8, I want to update many documents at the same time. So I use update by query \` { "index": "index", "type": "type" "body": { "query" : { "bool" :{ "must" :{ … --- ## [Aggregation on substring of a specific field](https://discuss.elastic.co/t/aggregation-on-substring-of-a-specific-field/269412)
**Author:** [@111457](https://discuss.elastic.co/u/111457)\ **Replies:** 4\ **Last updated:** [April 8, 2021, 6:49am UTC](https://discuss.elastic.co/t/aggregation-on-substring-of-a-specific-field/269412 "2021-04-08T06:49:01Z")
Hi. I'm trying to aggregate on part of strings of a given field. For example, I have 5 documents in an index "Petroglyph". Each documents includes a field called "Site". In "Site", input values follow pattern like 'si… --- ## [Security for Elasticsearch](https://discuss.elastic.co/t/security-for-elasticsearch/269210)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 17\ **Last updated:** [April 8, 2021, 6:18am UTC](https://discuss.elastic.co/t/security-for-elasticsearch/269210 "2021-04-08T06:18:26Z")
I have followed everything on YouTube: Getting Star but I just made 1 elastic not 2 as requested. is that a problem? I have made the cert in / config and also I have followed everything I made the xpack in elasticsearc… --- ## [One ES Data node's CPU jumps to 90%+ suddenly while in production](https://discuss.elastic.co/t/one-es-data-nodes-cpu-jumps-to-90-suddenly-while-in-production/267610)
**Author:** [@zxx\_bd](https://discuss.elastic.co/u/zxx_bd)\ **Replies:** 6\ **Last updated:** [April 8, 2021, 6:13am UTC](https://discuss.elastic.co/t/one-es-data-nodes-cpu-jumps-to-90-suddenly-while-in-production/267610 "2021-04-08T06:13:20Z")
Hi, guys, we are running an ES cluster with 7.1.1 in production, and everything looks good while one day, a data node's CPU jumps to 90%+ suddenly, and all of the queries related to the index on that nodes were time out… --- ## [Multiple highlight on one field](https://discuss.elastic.co/t/multiple-highlight-on-one-field/269549)
**Author:** [@futorio](https://discuss.elastic.co/u/futorio)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 5:38am UTC](https://discuss.elastic.co/t/multiple-highlight-on-one-field/269549 "2021-04-08T05:38:45Z")
Hello, i need to use 2 highlights on one field. For example: "query": {...}, "highlight": { "fields": { "text": \[ "highlight\_1": {...}, "highlight\_2": {...} … --- ## [Is scroll id always same for one user](https://discuss.elastic.co/t/is-scroll-id-always-same-for-one-user/269517)
**Author:** [@IliaIsakhin](https://discuss.elastic.co/u/IliaIsakhin)\ **Replies:** 5\ **Last updated:** [April 8, 2021, 5:33am UTC](https://discuss.elastic.co/t/is-scroll-id-always-same-for-one-user/269517 "2021-04-08T05:33:52Z")
For example, I have an Elasticsearch cluster with a single user and two different applications that want to retrieve all documents from the index to process them. Both applications are using search with scroll mechanism … --- ## [Conditionally run aggregation](https://discuss.elastic.co/t/conditionally-run-aggregation/269546)
**Author:** [@bhimawan](https://discuss.elastic.co/u/bhimawan)\ **Replies:** 0\ **Last updated:** [April 8, 2021, 5:04am UTC](https://discuss.elastic.co/t/conditionally-run-aggregation/269546 "2021-04-08T05:04:26Z")
I'm wondering if there's any way to run aggregation conditionally. So I have a \_search request that have both query and aggs param. So the aggs is scoped by the query param. Now if the query return no hits, is there a … --- ## [Elasticsearch 7.9.3 fail to start](https://discuss.elastic.co/t/elasticsearch-7-9-3-fail-to-start/269463)
**Author:** [@FOMihai](https://discuss.elastic.co/u/FOMihai)\ **Replies:** 1\ **Last updated:** [April 7, 2021, 10:07pm UTC](https://discuss.elastic.co/t/elasticsearch-7-9-3-fail-to-start/269463 "2021-04-07T22:07:26Z")
Hello, I'm trying to install Elasticsearch 7.9.3 but when I'm trying to start elasticsearch I get this error: \[2021-04-07T14:31:59,501\]\[ERROR\]\[o.e.b.Bootstrap \] \[node-inopvdn23i\] Exception java.lang.IllegalSta… --- ## [Facing issue with occasional slow queries on 5 node ES cluster](https://discuss.elastic.co/t/facing-issue-with-occasional-slow-queries-on-5-node-es-cluster/269228)
**Author:** [@Vikash](https://discuss.elastic.co/u/Vikash)\ **Replies:** 11\ **Last updated:** [April 7, 2021, 9:04pm UTC](https://discuss.elastic.co/t/facing-issue-with-occasional-slow-queries-on-5-node-es-cluster/269228 "2021-04-07T21:04:57Z")
I have a 5 node ES cluster and it's performing well on an average but sometime 0.5% of the queries are taking 1 sec to respond. I have tried all the possible solutions/suggestions, not sure what is causing issue. Overvi… --- ## [Getting NodeClosedException while running the ES 6.8.14 through the systemctl start elasticsearch.service custom made for the zip installable ES](https://discuss.elastic.co/t/getting-nodeclosedexception-while-running-the-es-6-8-14-through-the-systemctl-start-elasticsearch-service-custom-made-for-the-zip-installable-es/269399)
**Author:** [@Amit\_raj\_khurdhara](https://discuss.elastic.co/u/Amit_raj_khurdhara)\ **Replies:** 5\ **Last updated:** [April 7, 2021, 9:01pm UTC](https://discuss.elastic.co/t/getting-nodeclosedexception-while-running-the-es-6-8-14-through-the-systemctl-start-elasticsearch-service-custom-made-for-the-zip-installable-es/269399 "2021-04-07T21:01:35Z")
\[2021-04-06T17:45:52,825\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] \[FN06jOJ\] unexpected error while indexing monitoring document org.elasticsearch.xpack.monitoring.exporter.ExportException: NodeClosedException\[node closed {FN0… --- ## [Anomaly detection job failing to pull any data in](https://discuss.elastic.co/t/anomaly-detection-job-failing-to-pull-any-data-in/268940)
**Author:** [@timothyhutz](https://discuss.elastic.co/u/timothyhutz)\ **Replies:** 3\ **Last updated:** [April 7, 2021, 7:38pm UTC](https://discuss.elastic.co/t/anomaly-detection-job-failing-to-pull-any-data-in/268940 "2021-04-07T19:38:19Z")
So our ingestion mechanism for ingesting data had stopped for an hour, now my machine learning jobs refuse to pull in any new documents. I have verified it can see new latest document dates but just doesn't pull them in … --- ## [Where data nodes stored in ES Kuberenetes Statefulset](https://discuss.elastic.co/t/where-data-nodes-stored-in-es-kuberenetes-statefulset/269516)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 0\ **Last updated:** [April 7, 2021, 7:28pm UTC](https://discuss.elastic.co/t/where-data-nodes-stored-in-es-kuberenetes-statefulset/269516 "2021-04-07T19:28:27Z")
Hi All, I have deploy Elasticsearch statefulset in my ubuntu terminal after that i check pod of elasticsearch and found that there is not folder with name of /usr/share/elasticsearch/data in ES pod. When i check logs it… --- ## [Configure translog parameters and flush period](https://discuss.elastic.co/t/configure-translog-parameters-and-flush-period/269509)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 0\ **Last updated:** [April 7, 2021, 6:29pm UTC](https://discuss.elastic.co/t/configure-translog-parameters-and-flush-period/269509 "2021-04-07T18:29:32Z")
hey there, I'm trying to understand correctly how to configure translog parameters. Taking a look to official documentation I have a doubt regarding index.translog.sync\_interval I am moving in this scenario: index.tra… --- ## [Connecting Kibana with Runscope](https://discuss.elastic.co/t/connecting-kibana-with-runscope/269460)
**Author:** [@JaroslawNiec](https://discuss.elastic.co/u/JaroslawNiec)\ **Replies:** 2\ **Last updated:** [April 7, 2021, 5:37pm UTC](https://discuss.elastic.co/t/connecting-kibana-with-runscope/269460 "2021-04-07T17:37:27Z")
Hi, I would like to create dashboard in Kibana that will display status of our API tests in Runscope. Runscope has some REST API that could return test metrics in json format. Is this somehow possible to configure Kib… --- ## [Rollover\_alias errors on logstash daily indices from client application (fluentd)](https://discuss.elastic.co/t/rollover-alias-errors-on-logstash-daily-indices-from-client-application-fluentd/267519)
**Author:** [@cotjoey](https://discuss.elastic.co/u/cotjoey)\ **Replies:** 3\ **Last updated:** [April 7, 2021, 4:51pm UTC](https://discuss.elastic.co/t/rollover-alias-errors-on-logstash-daily-indices-from-client-application-fluentd/267519 "2021-04-07T16:51:29Z")
This is the error I am getting on the indices that fluentd is sending directly to Elasticsearch: illegal\_argument\_exception: index.lifecycle.rollover\_alias \[logstash\] does not point to index \[logstash-2021.02.09\] The i… --- ## [Script for basic elastic healthchecks](https://discuss.elastic.co/t/script-for-basic-elastic-healthchecks/269440)
**Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 3\ **Last updated:** [April 7, 2021, 3:44pm UTC](https://discuss.elastic.co/t/script-for-basic-elastic-healthchecks/269440 "2021-04-07T15:44:57Z")
hello, i have a mission of creating a script for automating elastic healthchecks, can anyone who has already worked on the same topic help me please. --- ## [Try to reduce number of mapped field before migrating from elasticsearch 2.4](https://discuss.elastic.co/t/try-to-reduce-number-of-mapped-field-before-migrating-from-elasticsearch-2-4/269496)
**Author:** [@kintetsu](https://discuss.elastic.co/u/kintetsu)\ **Replies:** 0\ **Last updated:** [April 7, 2021, 3:12pm UTC](https://discuss.elastic.co/t/try-to-reduce-number-of-mapped-field-before-migrating-from-elasticsearch-2-4/269496 "2021-04-07T15:12:05Z")
Hi, we are still running elasticsearch 2.4 and planning to migrate to the 7.x in the near future. To prepare for the upgrade we already used the migration plugin and found out that our current mapping is a problem. We h… --- ## [How to recover cluster when 2 master nodes have been lost](https://discuss.elastic.co/t/how-to-recover-cluster-when-2-master-nodes-have-been-lost/269472)
**Author:** [@russinholi](https://discuss.elastic.co/u/russinholi)\ **Replies:** 3\ **Last updated:** [April 7, 2021, 3:05pm UTC](https://discuss.elastic.co/t/how-to-recover-cluster-when-2-master-nodes-have-been-lost/269472 "2021-04-07T15:05:07Z")
Hi everyone, I have the following situation, my cluster is formed by 3 master nodes and 3 data nodes, unfortunately due to a hardware problem we lost 2 master nodes at same time and the left one was not able to assume a… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=667) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=669)