# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=680 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 681 --- ## [Is this the correct approach of taking a snapshop of an indice which is in production?](https://discuss.elastic.co/t/is-this-the-correct-approach-of-taking-a-snapshop-of-an-indice-which-is-in-production/267526)
**Author:** [@Jax\_dev](https://discuss.elastic.co/u/Jax_dev)\ **Replies:** 10\ **Last updated:** [March 18, 2021, 10:06pm UTC](https://discuss.elastic.co/t/is-this-the-correct-approach-of-taking-a-snapshop-of-an-indice-which-is-in-production/267526 "2021-03-18T22:06:18Z")
I have 4 different elastic nodes in a cluster. Want to take a snapshot from one of the server which is having primary shard. Step 1: sudo systemctl stop elasticsearch Step 2: add path.repo: \["/data/elasticbackup"\] in… --- ## [ElasticSearch V0.90 Faster Than V7.10.1](https://discuss.elastic.co/t/elasticsearch-v0-90-faster-than-v7-10-1/267495)
**Author:** [@ercinakcay](https://discuss.elastic.co/u/ercinakcay)\ **Replies:** 6\ **Last updated:** [March 18, 2021, 8:10pm UTC](https://discuss.elastic.co/t/elasticsearch-v0-90-faster-than-v7-10-1/267495 "2021-03-18T20:10:25Z")
Hi everyone, We are doing migration for ElasticSearch version 0.90 to version 7.10.1. I know this is really big upgrade for a component. While this migration we realized, V7 queries are slower than V0 ones. This slow … --- ## [Troubleshooting resources?](https://discuss.elastic.co/t/troubleshooting-resources/265626)
**Author:** [@jcor](https://discuss.elastic.co/u/jcor)\ **Replies:** 6\ **Last updated:** [March 18, 2021, 6:34pm UTC](https://discuss.elastic.co/t/troubleshooting-resources/265626 "2021-03-18T18:34:56Z")
Hi folks, I have a 8 node cluster with 1 logstash server collecting winlogbeats data. It has been running fine until recently. I added more endpoints and I noticed in Kibana that all the events stopped at the same time. … --- ## [Can't use example plugin in painless script](https://discuss.elastic.co/t/cant-use-example-plugin-in-painless-script/267705)
**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 5:19pm UTC](https://discuss.elastic.co/t/cant-use-example-plugin-in-painless-script/267705 "2021-03-18T17:19:16Z")
Hello everyone ! I am using a ES 7.7.0 cluster and I am trying to create a plugin to add some advanced things in my painless scripts. To do so, I compiled this : https://github.com/elastic/elasticsearch/tree/6.2/plugins… --- ## [Odd behaviour with search\_as\_you\_type](https://discuss.elastic.co/t/odd-behaviour-with-search-as-you-type/267695)
**Author:** [@mgvarley](https://discuss.elastic.co/u/mgvarley)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 4:00pm UTC](https://discuss.elastic.co/t/odd-behaviour-with-search-as-you-type/267695 "2021-03-18T16:00:01Z")
I am using the search\_as\_you\_type field to provide suggestions to users for addresses from a large index of around 30m addresses. I am using this with the default settings for the most part and it generally works great … --- ## [Collapse Search](https://discuss.elastic.co/t/collapse-search/267688)
**Author:** [@ToonB](https://discuss.elastic.co/u/ToonB)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 3:19pm UTC](https://discuss.elastic.co/t/collapse-search/267688 "2021-03-18T15:19:01Z")
Hi. I am using Collapse Search to retrieve my search results collapsed to a certain field, in addition I use the inner\_hits option to return the top hits for each collapse key. Because of the way Collapse Search works, i… --- ## [Weekly index cleanup using curator 5.8](https://discuss.elastic.co/t/weekly-index-cleanup-using-curator-5-8/267354)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 7\ **Last updated:** [March 18, 2021, 2:40pm UTC](https://discuss.elastic.co/t/weekly-index-cleanup-using-curator-5-8/267354 "2021-03-18T14:40:43Z")
I am trying to clean weekly indexes older than 4 weeks on elasticsearch 7.x however not able to figure out the curator config Current config is - filtertype: period period\_type: relative source: name … --- ## [Logstash - Validate the value of a field from the last ingest against the previous one](https://discuss.elastic.co/t/logstash-validate-the-value-of-a-field-from-the-last-ingest-against-the-previous-one/267679)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 2:06pm UTC](https://discuss.elastic.co/t/logstash-validate-the-value-of-a-field-from-the-last-ingest-against-the-previous-one/267679 "2021-03-18T14:06:55Z")
Good day At the moment in elastic search I am ingesting data from several weblogic servers, and for the data sources I want to make a graph where I can identify when an application changes version. At the moment in a fi… --- ## [ILM delete all indices in X days](https://discuss.elastic.co/t/ilm-delete-all-indices-in-x-days/267127)
**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\ **Replies:** 4\ **Last updated:** [March 18, 2021, 1:35pm UTC](https://discuss.elastic.co/t/ilm-delete-all-indices-in-x-days/267127 "2021-03-18T13:35:25Z")
Hello, I need some help with understanding ILM configuration. Here is my configuration for ILM PUT \_ilm/policy/example { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { … --- ## [Monitoring Machine Learning Job States](https://discuss.elastic.co/t/monitoring-machine-learning-job-states/267587)
**Author:** [@saraKM](https://discuss.elastic.co/u/saraKM)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 1:32pm UTC](https://discuss.elastic.co/t/monitoring-machine-learning-job-states/267587 "2021-03-18T13:32:06Z")
Hi, I wonder what would be the best approach to get alerts when a job fails or goes into an unexpected state. I have some failed jobs and some jobs showing closed with started datafeed ( so moving from open/started to c… --- ## [Need help with aggregation query in ES 6.8](https://discuss.elastic.co/t/need-help-with-aggregation-query-in-es-6-8/267648)
**Author:** [@trak](https://discuss.elastic.co/u/trak)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 11:53am UTC](https://discuss.elastic.co/t/need-help-with-aggregation-query-in-es-6-8/267648 "2021-03-18T11:53:30Z")
I try to make aggregation query with ElasticSearch 6.8: I want to find last documents for specific date, and last documents before specific date, group by documents fields. curl -X PUT "http://localhost:9200/test/x… --- ## [FSCrawler: Error while crawling - Invalid UTF-8 start byte 0xff](https://discuss.elastic.co/t/fscrawler-error-while-crawling-invalid-utf-8-start-byte-0xff/267665)
**Author:** [@HaroldH](https://discuss.elastic.co/u/HaroldH)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 1:08pm UTC](https://discuss.elastic.co/t/fscrawler-error-while-crawling-invalid-utf-8-start-byte-0xff/267665 "2021-03-18T13:08:49Z")
Continuing the discussion from FSCrawler: Error while crawling - Invalid UTF-8 start byte 0xb5: Hi, I have a recent version of fscrawler-es7-2.7-SNAPSHOT installed. I have a folder containing a wide range of document t… --- ## [What snapshot data should I copy from one cluster to another for a migration?](https://discuss.elastic.co/t/what-snapshot-data-should-i-copy-from-one-cluster-to-another-for-a-migration/266969)
**Author:** [@juang](https://discuss.elastic.co/u/juang)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 1:03pm UTC](https://discuss.elastic.co/t/what-snapshot-data-should-i-copy-from-one-cluster-to-another-for-a-migration/266969 "2021-03-18T13:03:46Z")
Hi, I'm trying to migrate some indices from one Elasticsearch cluster to another in a completely different datacenter. They share basically no common infrastructure. Both clusters are on version 1.6.0 and the latter clus… --- ## [Changing the shard size](https://discuss.elastic.co/t/changing-the-shard-size/267359)
**Author:** [@sagar\_rao](https://discuss.elastic.co/u/sagar_rao)\ **Replies:** 7\ **Last updated:** [March 18, 2021, 12:48pm UTC](https://discuss.elastic.co/t/changing-the-shard-size/267359 "2021-03-18T12:48:16Z")
Hi, I have Aws elastic search cluster with two nodes. The data is being pushed from fluentd to elastic search. By default all the indexs have 5 primary shards and 1 replica. And i want to resize the no of primary shard… --- ## [Use case - Rules-Based Pricing with ElasticSearch - Tips](https://discuss.elastic.co/t/use-case-rules-based-pricing-with-elasticsearch-tips/267655)
**Author:** [@Julian\_Alexis\_Correa](https://discuss.elastic.co/u/Julian_Alexis_Correa)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 12:25pm UTC](https://discuss.elastic.co/t/use-case-rules-based-pricing-with-elasticsearch-tips/267655 "2021-03-18T12:25:35Z")
I am implementing a search for products whose prices are calculated based on rules based on the quantity requested. For example: 1 to 5 units -\> price = units \* X + Y 6 to 10 units $ 8 -\> price = units \* Z 11 to 15 un… --- ## [Search Multiple Indices using elastic low level client](https://discuss.elastic.co/t/search-multiple-indices-using-elastic-low-level-client/266683)
**Author:** [@schawla](https://discuss.elastic.co/u/schawla)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 10:44am UTC](https://discuss.elastic.co/t/search-multiple-indices-using-elastic-low-level-client/266683 "2021-03-18T10:44:47Z")
I am trying to use elastic low level client to search multiple indices through - client.LowLevel.Search\(PostData.Serializable(new SearchRequest(new\[\] {"Index1", "Index2"}) { Size = 10, From = 0, Query =… --- ## [How to get Elasticsearch query of a kibana visualization](https://discuss.elastic.co/t/how-to-get-elasticsearch-query-of-a-kibana-visualization/267606)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 9:03am UTC](https://discuss.elastic.co/t/how-to-get-elasticsearch-query-of-a-kibana-visualization/267606 "2021-03-18T09:03:00Z")
Hi all, I'm trying to get elasticsearch query for a kibana visualization in 7.9 version. When i copy request code present in a visualization and run it in dev tools,i get error. So what is right procedure to fetch ex… --- ## [Inconsistent behaviour of the UAX URL email tokenizer?](https://discuss.elastic.co/t/inconsistent-behaviour-of-the-uax-url-email-tokenizer/267493)
**Author:** [@jakopako](https://discuss.elastic.co/u/jakopako)\ **Replies:** 0\ **Last updated:** [March 17, 2021, 11:59am UTC](https://discuss.elastic.co/t/inconsistent-behaviour-of-the-uax-url-email-tokenizer/267493 "2021-03-17T11:59:05Z")
The following two queries extract urls in different ways and I am wondering whether this is a bug. In the first case the ' following the url is part of the extracted token whereas in the second case it is not. This seems… --- ## [JVM Consumption continuously increasing](https://discuss.elastic.co/t/jvm-consumption-continuously-increasing/267024)
**Author:** [@cjc](https://discuss.elastic.co/u/cjc)\ **Replies:** 4\ **Last updated:** [March 18, 2021, 9:06am UTC](https://discuss.elastic.co/t/jvm-consumption-continuously-increasing/267024 "2021-03-18T09:06:05Z")
Hi, I'm new in Elasticsearch and I'm encountering a recurring high JVM issue. I don't see anything from the logs aside from a dangled index which keep trying to reimport. just want to know if this dangled index (.watch… --- ## [How To set JAVA\_HOME separately för Elsticsearch](https://discuss.elastic.co/t/how-to-set-java-home-separately-for-elsticsearch/267626)
**Author:** [@Ahmad1](https://discuss.elastic.co/u/Ahmad1)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 8:49am UTC](https://discuss.elastic.co/t/how-to-set-java-home-separately-for-elsticsearch/267626 "2021-03-18T08:49:13Z")
Hi I have an Elasticsearch cluster with four nodes on different servers! I need to customize JAVA\_HOME only for ES, as I have other applications that use different versions of JAVA on the same environment! --- ## [Can't change a field type](https://discuss.elastic.co/t/cant-change-a-field-type/267382)
**Author:** [@msieumouche](https://discuss.elastic.co/u/msieumouche)\ **Replies:** 3\ **Last updated:** [March 18, 2021, 7:57am UTC](https://discuss.elastic.co/t/cant-change-a-field-type/267382 "2021-03-18T07:57:10Z")
Hello everyone, I have a stack with ELK and wazuh, I'm looking to change the type of some fields ("keyword" to "ip") to personal fields (srcip, dstip, etc.) Their search fields in kibana are data.srcip, etc. I tried t… --- ## [Elasticsearch process exits abnormally](https://discuss.elastic.co/t/elasticsearch-process-exits-abnormally/267603)
**Author:** [@bxl](https://discuss.elastic.co/u/bxl)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 7:05am UTC](https://discuss.elastic.co/t/elasticsearch-process-exits-abnormally/267603 "2021-03-18T07:05:48Z")
elasticsearch process exits abnormally system：CentOS Linux release 7.4.1708 (Core) 3.10.0-693.el7.x86\_64 #1 SMP Tue Aug 22 21:09:27 UTC 2017 x86\_64 x86\_64 x86\_64 GNU/Linux openjdk version "1.8.0\_252" OpenJDK Runtime … --- ## [Steps to perform for changing the data mount in ES](https://discuss.elastic.co/t/steps-to-perform-for-changing-the-data-mount-in-es/267605)
**Author:** [@Jax\_dev](https://discuss.elastic.co/u/Jax_dev)\ **Replies:** 0\ **Last updated:** [March 18, 2021, 7:02am UTC](https://discuss.elastic.co/t/steps-to-perform-for-changing-the-data-mount-in-es/267605 "2021-03-18T07:02:19Z")
Do we have any recommended approach to change the data mount path ( path.data ) in elastic\_search.yaml ? One of the elastic node in the cluster of 4, have mounted into /var/lib/elastic, I want to change this to /data/el… --- ## [Setting heap size using the Docker images](https://discuss.elastic.co/t/setting-heap-size-using-the-docker-images/266975)
**Author:** [@Phandora](https://discuss.elastic.co/u/Phandora)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 6:32am UTC](https://discuss.elastic.co/t/setting-heap-size-using-the-docker-images/266975 "2021-03-18T06:32:14Z")
Hi everyone, I am using Elasticsearch 7.10.0 version on EKS. I need to manually set the heap size since Elasticsearch does not automatically sizes JVM heap until 7.11 version. It is recommended that the heap size shoul… --- ## [Deploying Kibana contribution code in production](https://discuss.elastic.co/t/deploying-kibana-contribution-code-in-production/266916)
**Author:** [@Chinmaya\_Panigrahi](https://discuss.elastic.co/u/Chinmaya_Panigrahi)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 6:23am UTC](https://discuss.elastic.co/t/deploying-kibana-contribution-code-in-production/266916 "2021-03-18T06:23:54Z")
I want to deploy the contribution code in production and connect my elastic search from outside the kibana-master directory without using yarn es snapshot everytime. Kindly help me out. Thank you --- ## [Group scripted fields of many document in one](https://discuss.elastic.co/t/group-scripted-fields-of-many-document-in-one/266909)
**Author:** [@kouraf](https://discuss.elastic.co/u/kouraf)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 6:22am UTC](https://discuss.elastic.co/t/group-scripted-fields-of-many-document-in-one/266909 "2021-03-18T06:22:14Z")
Hi ! i have some scripted field that i want to group in one document/field here's an example of my scripts response: { "\_index" : "data-index", "\_type" : "\_doc", "\_id" : "661316070591028\_35… --- ## [Pricing for self-managed Elastic components](https://discuss.elastic.co/t/pricing-for-self-managed-elastic-components/266882)
**Author:** [@iniyan.g](https://discuss.elastic.co/u/iniyan.g)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 6:19am UTC](https://discuss.elastic.co/t/pricing-for-self-managed-elastic-components/266882 "2021-03-18T06:19:42Z")
Hi Team We are running a self-managed infra setup with the following Elastic components with basic free license. Elasticsearch (2 Nodes) Kibana (1 Node) Logstash (1 Node) We would like to know how the pricing works w… --- ## [Profiler - How to Identify Bottlenecks when Total Search Time is Bigger than Shard Times](https://discuss.elastic.co/t/profiler-how-to-identify-bottlenecks-when-total-search-time-is-bigger-than-shard-times/267309)
**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 6:05am UTC](https://discuss.elastic.co/t/profiler-how-to-identify-bottlenecks-when-total-search-time-is-bigger-than-shard-times/267309 "2021-03-18T06:05:38Z")
Hi, I am running a complex search, it takes a while to complete, and I am trying to figure out why. I ran the search through the profiler, and it looks like the total search time, is much greater than the individual ind… --- ## [Setting Up Snapshot Feature](https://discuss.elastic.co/t/setting-up-snapshot-feature/267559)
**Author:** [@test\_tester](https://discuss.elastic.co/u/test_tester)\ **Replies:** 1\ **Last updated:** [March 18, 2021, 5:55am UTC](https://discuss.elastic.co/t/setting-up-snapshot-feature/267559 "2021-03-18T05:55:04Z")
Hi, So I've tested out curl commands for snapshot API on localhost and its working fine. Moving forward, am attempting to replicate the same thing in my staging/test servers for my elk nodes (i have 3 nodes). My quest… --- ## [Elasticsearch-setup-passwords commands with ERROR: Failed to verify bootstrap password](https://discuss.elastic.co/t/elasticsearch-setup-passwords-commands-with-error-failed-to-verify-bootstrap-password/267441)
**Author:** [@Willy](https://discuss.elastic.co/u/Willy)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 4:51am UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords-commands-with-error-failed-to-verify-bootstrap-password/267441 "2021-03-18T04:51:51Z")
I am new to ElasticSearch. I followed the steps in this page: Configuring SSL, TLS, and HTTPS to secure Elasticsearch, Kibana, Beats, and Logstash I used bin/elasticsearch-setup-passwords interactive -u 'https://abc.m… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=679) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=681)