# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=676

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 677

---

## [ElasticSearch for realtime metrics/KPIs of a system](https://discuss.elastic.co/t/elasticsearch-for-realtime-metrics-kpis-of-a-system/267845)

<div class="topic-metadata">

**Author:** [@Nuno\_Centeio](https://discuss.elastic.co/u/Nuno_Centeio)\
**Replies:** 8\
**Last updated:** [March 25, 2021, 2:38pm UTC](https://discuss.elastic.co/t/elasticsearch-for-realtime-metrics-kpis-of-a-system/267845 "2021-03-25T14:38:41Z")

</div>

Hi! I need an advice. This is a very simplified version of what I have. I've developed an API that returns some metrics of things that happens on my system. For example, how many time the user is logged, the number of …

---

## [Unable to Start Elasticsearch 7.12 in Ubuntu 18.04](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-12-in-ubuntu-18-04/268330)

<div class="topic-metadata">

**Author:** [@chinkleet](https://discuss.elastic.co/u/chinkleet)\
**Replies:** 3\
**Last updated:** [March 25, 2021, 2:09pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-12-in-ubuntu-18-04/268330 "2021-03-25T14:09:05Z")

</div>

I have installed "elasticsearch" 7.12 version on Ubuntu 18.04 machine. when trying to start the "elasticsearch" service getting below error: (base) extramarks@extramarks-Latitude-3400:~/Downloads$ systemctl status ela…

---

## [Elasticsearch - JMX Exporter](https://discuss.elastic.co/t/elasticsearch-jmx-exporter/268332)

<div class="topic-metadata">

**Author:** [@Joshua3](https://discuss.elastic.co/u/Joshua3)\
**Replies:** 0\
**Last updated:** [March 25, 2021, 11:53am UTC](https://discuss.elastic.co/t/elasticsearch-jmx-exporter/268332 "2021-03-25T11:53:25Z")

</div>

Hello, i'm using JMX Exporter to get MBeans from Elasticsearch running in Docker container. This is part of Docker environment to parsing in to container to run Java JMX exporter as JavaAgent -e ES\_JAVA\_OPTS=-javaagent…

---

## [How can I match multimatch with NEST in elasticsearch?](https://discuss.elastic.co/t/how-can-i-match-multimatch-with-nest-in-elasticsearch/268304)

<div class="topic-metadata">

**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\
**Replies:** 3\
**Last updated:** [March 25, 2021, 11:23am UTC](https://discuss.elastic.co/t/how-can-i-match-multimatch-with-nest-in-elasticsearch/268304 "2021-03-25T11:23:44Z")

</div>

I want to search with RegisterNumber and Title at the same time. But how can I match both at the same time? Also, when I press the space character, I cannot make calls after the space. How can I solve this? Currently sea…

---

## [Recommendation to use search after instead of scrolling](https://discuss.elastic.co/t/recommendation-to-use-search-after-instead-of-scrolling/268293)

<div class="topic-metadata">

**Author:** [@prelator](https://discuss.elastic.co/u/prelator)\
**Replies:** 4\
**Last updated:** [March 25, 2021, 9:58am UTC](https://discuss.elastic.co/t/recommendation-to-use-search-after-instead-of-scrolling/268293 "2021-03-25T09:58:20Z")

</div>

Hello everybody If you want to read an index completely, you can read in the documentation that the search after function should be used from 10,000 documents (instead of scroll). We have now tested this and unfortunat…

---

## [BulkProcessor using BulkRequest with wait\_for](https://discuss.elastic.co/t/bulkprocessor-using-bulkrequest-with-wait-for/268308)

<div class="topic-metadata">

**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 9:49am UTC](https://discuss.elastic.co/t/bulkprocessor-using-bulkrequest-with-wait-for/268308 "2021-03-25T09:49:24Z")

</div>

Hello, We are trying to set a "wait\_for" refresh policy for every bulk request we are performing. It seems the only way is setting this policy on the 'beforeBulk' method on the bulk listener in this way: public void be…

---

## [Elastic cannot restore incremental snapshot in new cluster](https://discuss.elastic.co/t/elastic-cannot-restore-incremental-snapshot-in-new-cluster/268052)

<div class="topic-metadata">

**Author:** [@Adrian\_Birladeanu](https://discuss.elastic.co/u/Adrian_Birladeanu)\
**Replies:** 14\
**Last updated:** [March 25, 2021, 9:41am UTC](https://discuss.elastic.co/t/elastic-cannot-restore-incremental-snapshot-in-new-cluster/268052 "2021-03-25T09:41:27Z")

</div>

Hello. I have created an s3 repository and created a full snapshot and several incremental snapshots (though the data didn't change since the full snapshot was taken. I'm still working on the development infrastructure).…

---

## [Hourly rate pricing](https://discuss.elastic.co/t/hourly-rate-pricing/268231)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 5\
**Last updated:** [March 25, 2021, 9:15am UTC](https://discuss.elastic.co/t/hourly-rate-pricing/268231 "2021-03-25T09:15:39Z")

</div>

Hi, I've created a new account in Elastic Cloud, with a trial period. Out of curiosity I wanted to check the "Billing" section and I noticed a strange cost. $ 0.2714 of "hourly rate" for "Cloud Standard Data High I…

---

## [Elastic snapshot repository - hidden .snapshot/ directory](https://discuss.elastic.co/t/elastic-snapshot-repository-hidden-snapshot-directory/268306)

<div class="topic-metadata">

**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 9:09am UTC](https://discuss.elastic.co/t/elastic-snapshot-repository-hidden-snapshot-directory/268306 "2021-03-25T09:09:46Z")

</div>

Hi, I recently set up a snapshot repository. After a couple of hesitations and tests, I adopted a final setting. And ran the first snaphots after defining my policy. Now, I am facing a disk space issue. I noticed a …

---

## [Server](https://discuss.elastic.co/t/server/268274)

<div class="topic-metadata">

**Author:** [@amazonas\_ecommerce](https://discuss.elastic.co/u/amazonas_ecommerce)\
**Replies:** 2\
**Last updated:** [March 25, 2021, 8:39am UTC](https://discuss.elastic.co/t/server/268274 "2021-03-25T08:39:48Z")

</div>

I installed Elasticsearch 7 on the ubunto AWS Lightsail. It's working perfectly on localhost. However, I have Magento2.4 on another EC2 AWS server, but I don't know how to use Elasticsearch on another server, I have alr…

---

## [What is the correct way to specify mappings for "geo point" data type to index geo information documents in an elasticsearch index?](https://discuss.elastic.co/t/what-is-the-correct-way-to-specify-mappings-for-geo-point-data-type-to-index-geo-information-documents-in-an-elasticsearch-index/268200)

<div class="topic-metadata">

**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\
**Replies:** 6\
**Last updated:** [March 25, 2021, 8:08am UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-specify-mappings-for-geo-point-data-type-to-index-geo-information-documents-in-an-elasticsearch-index/268200 "2021-03-25T08:08:52Z")

</div>

I have configured a logstash pipeline in which I have used filter "logstash-filter-geoip" for getting geo information about the IP Address.I have specified mapping before indexing documents into elasticsearch but it is s…

---

## [Using \_reindex to convert a string field to a float](https://discuss.elastic.co/t/using-reindex-to-convert-a-string-field-to-a-float/268284)

<div class="topic-metadata">

**Author:** [@drdwilcox](https://discuss.elastic.co/u/drdwilcox)\
**Replies:** 0\
**Last updated:** [March 25, 2021, 1:55am UTC](https://discuss.elastic.co/t/using-reindex-to-convert-a-string-field-to-a-float/268284 "2021-03-25T01:55:46Z")

</div>

The subject says it all. I have a field that is intermittently being saved in an index as: { "index\_with\_string" : { "mappings" : { "timeElapsed" : { "full\_name" : "timeElapsed", "mapping" : …

---

## [How to retrieve only latest index](https://discuss.elastic.co/t/how-to-retrieve-only-latest-index/268264)

<div class="topic-metadata">

**Author:** [@harper\_S](https://discuss.elastic.co/u/harper_S)\
**Replies:** 7\
**Last updated:** [March 24, 2021, 10:51pm UTC](https://discuss.elastic.co/t/how-to-retrieve-only-latest-index/268264 "2021-03-24T22:51:30Z")

</div>

I have created a python api which will accept the \*.json file. for ex: abc.json { "service\_name": "httpd", "service\_status": "DOWN", "host\_name": "host1", "time": "1616600149.014236" } and, push the da…

---

## [Elasticsearch 7.2.0 Cluster - Performance Recovery Help](https://discuss.elastic.co/t/elasticsearch-7-2-0-cluster-performance-recovery-help/267472)

<div class="topic-metadata">

**Author:** [@Owen\_Watson](https://discuss.elastic.co/u/Owen_Watson)\
**Replies:** 3\
**Last updated:** [March 24, 2021, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-cluster-performance-recovery-help/267472 "2021-03-24T20:13:39Z")

</div>

I am new to elasticsearch management and have some issues with a cluster I am working with. Currently, the cluster is recovering from a node failure, but I would like to stop the recovery and delete a handful of indices…

---

## [Import mapping via index template](https://discuss.elastic.co/t/import-mapping-via-index-template/267393)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 4\
**Last updated:** [March 24, 2021, 6:52pm UTC](https://discuss.elastic.co/t/import-mapping-via-index-template/267393 "2021-03-24T18:52:06Z")

</div>

I want to import an index template with a mapping for the fields of the index pmdata\* in order to set as type of the field counter\_value float. After the import of the template with counter\_value type float, I imported …

---

## [Reindexing with new nested property changes dot to json representation](https://discuss.elastic.co/t/reindexing-with-new-nested-property-changes-dot-to-json-representation/268256)

<div class="topic-metadata">

**Author:** [@makmnr](https://discuss.elastic.co/u/makmnr)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 6:49pm UTC](https://discuss.elastic.co/t/reindexing-with-new-nested-property-changes-dot-to-json-representation/268256 "2021-03-24T18:49:19Z")

</div>

I am trying to reindex in order to make field renames. But there are a lot of challenges as the fields to be renamed and old fields are objects. Following is a sample code to represent the issue: Processor Simulate@POST…

---

## [Ingest pipeline with update\_by\_query on failure causes version\_conflict\_engine\_exception](https://discuss.elastic.co/t/ingest-pipeline-with-update-by-query-on-failure-causes-version-conflict-engine-exception/266816)

<div class="topic-metadata">

**Author:** [@nuketro0p3r](https://discuss.elastic.co/u/nuketro0p3r)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 1:19pm UTC](https://discuss.elastic.co/t/ingest-pipeline-with-update-by-query-on-failure-causes-version-conflict-engine-exception/266816 "2021-03-24T13:19:32Z")

</div>

Situation: I set the "on\_failure" statement to an existing pipeline like follows (for the whole pipeline): "on\_failure" : \[ { "set" : { "field" : "\_index", "value" : "failed-{{ \_in…

---

## [Group Results of terms aggs in "parent" bucket](https://discuss.elastic.co/t/group-results-of-terms-aggs-in-parent-bucket/268205)

<div class="topic-metadata">

**Author:** [@Leander1](https://discuss.elastic.co/u/Leander1)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 11:57am UTC](https://discuss.elastic.co/t/group-results-of-terms-aggs-in-parent-bucket/268205 "2021-03-24T11:57:14Z")

</div>

Hey, I'm trying to group results which I get after doing the terms aggregation. I'm getting the following results: hospital 1, doc\_count 20; hospital 2, doc\_count 32; hospital 3, doc\_count 21; facility 1, doc\_count 11;…

---

## [Elastic Cloud vs AWS ELK as a service](https://discuss.elastic.co/t/elastic-cloud-vs-aws-elk-as-a-service/268192)

<div class="topic-metadata">

**Author:** [@evgeniy777](https://discuss.elastic.co/u/evgeniy777)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 10:46am UTC](https://discuss.elastic.co/t/elastic-cloud-vs-aws-elk-as-a-service/268192 "2021-03-24T10:46:26Z")

</div>

Hi all ! Can you please explain what the cons and pros of using both solutions ? VS https://cloud.elastic.co/ Thanks in advance

---

## [Calculate the correct recovery.max\_bytes\_per\_sec](https://discuss.elastic.co/t/calculate-the-correct-recovery-max-bytes-per-sec/268194)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 10:41am UTC](https://discuss.elastic.co/t/calculate-the-correct-recovery-max-bytes-per-sec/268194 "2021-03-24T10:41:47Z")

</div>

Hey there, is there a way to calculate the correct value of indices.recovery.max\_bytes\_per\_sec ?

---

## [Is there an API to get the read and write performance data?](https://discuss.elastic.co/t/is-there-an-api-to-get-the-read-and-write-performance-data/267642)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 9\
**Last updated:** [March 24, 2021, 8:43am UTC](https://discuss.elastic.co/t/is-there-an-api-to-get-the-read-and-write-performance-data/267642 "2021-03-24T08:43:45Z")

</div>

ES version: 6.3.0 My ES cluster block sometimes when perform search and bulk operations, but the cluster status is green, it is strange. The cat.thread\_pool api can output some related info, but i do not know how to de…

---

## [Elasticsearch high cpu load on snapshot creation](https://discuss.elastic.co/t/elasticsearch-high-cpu-load-on-snapshot-creation/265650)

<div class="topic-metadata">

**Author:** [@farmean](https://discuss.elastic.co/u/farmean)\
**Replies:** 6\
**Last updated:** [March 24, 2021, 8:24am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-load-on-snapshot-creation/265650 "2021-03-24T08:24:13Z")

</div>

Hey everyone! We've got some issue that's making us scratch our heads for a while. We have pretty straightforward setup, 13 nodes, 1 index, 1000 shards, 2 replicas for each, a lot of nested document, high write load an…

---

## [Elasticsearch - high load CPU](https://discuss.elastic.co/t/elasticsearch-high-load-cpu/268165)

<div class="topic-metadata">

**Author:** [@Jefferson\_Ferrari](https://discuss.elastic.co/u/Jefferson_Ferrari)\
**Replies:** 22\
**Last updated:** [March 24, 2021, 7:35am UTC](https://discuss.elastic.co/t/elasticsearch-high-load-cpu/268165 "2021-03-24T07:35:28Z")

</div>

Hello guys, We have a problem with elasticserach performance. My env is: 3 masters: AWS t3.large VM on premises CPU: 2 Memory: 8GB VM on premises CPU: 2 Memory: 8GB 15 Datas AWS 5 EC2 instance m5.4xlarge 10 VMs…

---

## [My problem about Geo-bounding box query indexed](https://discuss.elastic.co/t/my-problem-about-geo-bounding-box-query-indexed/267597)

<div class="topic-metadata">

**Author:** [@Sakura1996](https://discuss.elastic.co/u/Sakura1996)\
**Replies:** 9\
**Last updated:** [March 24, 2021, 6:42am UTC](https://discuss.elastic.co/t/my-problem-about-geo-bounding-box-query-indexed/267597 "2021-03-24T06:42:31Z")

</div>

Hi, I encountered 2 problems when following the doc, ES version is 7.9. As the doc when use type="indexed" option in bounding box query, the geo-point type must have lat and lon indexed, but I want to know how to do i…

---

## [Unable to load SSL configuration for Elasticsearch](https://discuss.elastic.co/t/unable-to-load-ssl-configuration-for-elasticsearch/268087)

<div class="topic-metadata">

**Author:** [@runchranda](https://discuss.elastic.co/u/runchranda)\
**Replies:** 4\
**Last updated:** [March 24, 2021, 6:20am UTC](https://discuss.elastic.co/t/unable-to-load-ssl-configuration-for-elasticsearch/268087 "2021-03-24T06:20:57Z")

</div>

Hi, I am trying to Encrypt communications in Elasticsearch between nodes. I refer to this, \[Encrypting communications in Elasticsearch\] (Encrypting communications in Elasticsearch | Elasticsearch Reference \[7.11\] | Ela…

---

## [Time based Indexes with the powers of ILM](https://discuss.elastic.co/t/time-based-indexes-with-the-powers-of-ilm/268038)

<div class="topic-metadata">

**Author:** [@Alamgir\_Qazi](https://discuss.elastic.co/u/Alamgir_Qazi)\
**Replies:** 5\
**Last updated:** [March 24, 2021, 5:54am UTC](https://discuss.elastic.co/t/time-based-indexes-with-the-powers-of-ilm/268038 "2021-03-24T05:54:29Z")

</div>

I want to get benefits of ILM (hot, warm, cold) features + the fixed size of indexes without changing the date/time index. Is this possible ? E.g. I have an index events-2021-03-23 and I want ILM to create a new index l…

---

## [How to fuzzy search a subset of the result?](https://discuss.elastic.co/t/how-to-fuzzy-search-a-subset-of-the-result/268164)

<div class="topic-metadata">

**Author:** [@nshimiye.tech](https://discuss.elastic.co/u/nshimiye.tech)\
**Replies:** 0\
**Last updated:** [March 24, 2021, 4:34am UTC](https://discuss.elastic.co/t/how-to-fuzzy-search-a-subset-of-the-result/268164 "2021-03-24T04:34:54Z")

</div>

I have a need to search through collapsed results, is this possible? Something like this { "query": { "match\_all": {} }, "sort": { "createdTime": "desc" }, "collapse": { "field": "name.raw", "query"…

---

## [Cluster status turn yellow everyday morning 8:00](https://discuss.elastic.co/t/cluster-status-turn-yellow-everyday-morning-8-00/268036)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 17\
**Last updated:** [March 24, 2021, 3:10am UTC](https://discuss.elastic.co/t/cluster-status-turn-yellow-everyday-morning-8-00/268036 "2021-03-24T03:10:29Z")

</div>

ES version: 6.3.0 I get the pending tasks and thread pool status, here is the info: { "tasks": \[ { "insert\_order": 327314, "priority": "URGENT", "source": "create-index \[…

---

## [Securing Elasticsearch cluster](https://discuss.elastic.co/t/securing-elasticsearch-cluster/268132)

<div class="topic-metadata">

**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\
**Replies:** 1\
**Last updated:** [March 24, 2021, 2:44am UTC](https://discuss.elastic.co/t/securing-elasticsearch-cluster/268132 "2021-03-24T02:44:22Z")

</div>

We know it is strongly recommended in Linux to disable root user. We know it is also recommended to disable root user in Mysql. I do not know why we can not disable/rename superuser "elastic" in elasticsearch and we ca…

---

## [Restore elastic search 5.5 snapshot in another aws account vpc cluster](https://discuss.elastic.co/t/restore-elastic-search-5-5-snapshot-in-another-aws-account-vpc-cluster/268101)

<div class="topic-metadata">

**Author:** [@swapna](https://discuss.elastic.co/u/swapna)\
**Replies:** 2\
**Last updated:** [March 23, 2021, 11:47pm UTC](https://discuss.elastic.co/t/restore-elastic-search-5-5-snapshot-in-another-aws-account-vpc-cluster/268101 "2021-03-23T23:47:17Z")

</div>

Elastic Search Snapshot and Restore from one account cluster to another account vpc cluster I followed this document Created Role , User and S3 bucket Updated and attached the policies Setup in Postman a) Authoriza…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=675)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=677)
