# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=683

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 684

---

## [Log viewing Elastic stack](https://discuss.elastic.co/t/log-viewing-elastic-stack/266598)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 5\
**Last updated:** [March 15, 2021, 7:53pm UTC](https://discuss.elastic.co/t/log-viewing-elastic-stack/266598 "2021-03-15T19:53:07Z")

</div>

Hello there, I would like to explore the possibility of log viewing through Elastic stack. I understand that I can use filebeat in order to do that but I already have logs that I would like to view in kibana dashboard …

---

## [How to index null values/ empty array thru Ingest Pipeline](https://discuss.elastic.co/t/how-to-index-null-values-empty-array-thru-ingest-pipeline/267256)

<div class="topic-metadata">

**Author:** [@sravankayitha](https://discuss.elastic.co/u/sravankayitha)\
**Replies:** 0\
**Last updated:** [March 15, 2021, 12:07pm UTC](https://discuss.elastic.co/t/how-to-index-null-values-empty-array-thru-ingest-pipeline/267256 "2021-03-15T12:07:40Z")

</div>

Hello, I'm new to ES, Can any one suggest me How to resolve this issue: Pipeline name: cpqtest2602 Actual default index: cpqtest26\* Unformatted index: unformatted2602\* I'm trying to index the null values/empty array…

---

## [Elasticsearch indexing strategy for searching multiple entities](https://discuss.elastic.co/t/elasticsearch-indexing-strategy-for-searching-multiple-entities/267300)

<div class="topic-metadata">

**Author:** [@Pravesh\_Jain](https://discuss.elastic.co/u/Pravesh_Jain)\
**Replies:** 0\
**Last updated:** [March 15, 2021, 7:25pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-strategy-for-searching-multiple-entities/267300 "2021-03-15T19:25:33Z")

</div>

My application deals with multiple entities, each having different fields. New entities can be added. New fields may be added in existing entities. I want to search over all of these entities, together, using elasticsea…

---

## [Can fields in the mapping be made non sortable](https://discuss.elastic.co/t/can-fields-in-the-mapping-be-made-non-sortable/266461)

<div class="topic-metadata">

**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\
**Replies:** 3\
**Last updated:** [March 15, 2021, 3:57pm UTC](https://discuss.elastic.co/t/can-fields-in-the-mapping-be-made-non-sortable/266461 "2021-03-15T15:57:21Z")

</div>

Can we make a field in the mapping as non sortable? The way we can make a field unsearchable by setting the mapping parameter "index:false" ,is there a way to make fields non sortable? Is there any mapping parameter t…

---

## [Painless: bug using for loops and vector functions](https://discuss.elastic.co/t/painless-bug-using-for-loops-and-vector-functions/267263)

<div class="topic-metadata">

**Author:** [@coreation](https://discuss.elastic.co/u/coreation)\
**Replies:** 0\
**Last updated:** [March 15, 2021, 12:34pm UTC](https://discuss.elastic.co/t/painless-bug-using-for-loops-and-vector-functions/267263 "2021-03-15T12:34:17Z")

</div>

Hello everyone, I ran into what seems to be a bug in Painless where if a vector function is used, say l2norm(), the outcome remains the same outcome as the first iteration. I'm using the painless script in a function sc…

---

## [Issue about Invalid stemmer class specified CJK](https://discuss.elastic.co/t/issue-about-invalid-stemmer-class-specified-cjk/267254)

<div class="topic-metadata">

**Author:** [@omaquaire](https://discuss.elastic.co/u/omaquaire)\
**Replies:** 0\
**Last updated:** [March 15, 2021, 11:59am UTC](https://discuss.elastic.co/t/issue-about-invalid-stemmer-class-specified-cjk/267254 "2021-03-15T11:59:21Z")

</div>

Dear all, I know there is another topic that was created, but I could not find any usable solutions, and since I have been looking for the solution for hours, I resolute myself to post here. Overall, I know that I use …

---

## [Search Issue with Long Text keyword](https://discuss.elastic.co/t/search-issue-with-long-text-keyword/266513)

<div class="topic-metadata">

**Author:** [@sdubey472](https://discuss.elastic.co/u/sdubey472)\
**Replies:** 6\
**Last updated:** [March 15, 2021, 9:30am UTC](https://discuss.elastic.co/t/search-issue-with-long-text-keyword/266513 "2021-03-15T09:30:34Z")

</div>

I'm facing the issue with elastic Search, Actually I've search query given bellow and By using this search query I'm facing the issue with long text, whenever I type long text to search then search isn't giving proper r…

---

## [Caching query results](https://discuss.elastic.co/t/caching-query-results/267232)

<div class="topic-metadata">

**Author:** [@zegulas](https://discuss.elastic.co/u/zegulas)\
**Replies:** 0\
**Last updated:** [March 15, 2021, 9:08am UTC](https://discuss.elastic.co/t/caching-query-results/267232 "2021-03-15T09:08:21Z")

</div>

Hello, I am trying to cache the query results, by sending ?request\_cache=true also i can see that the cache size is increasing, but i don't see any improvement in response time. Basically what is happening is, when we…

---

## [Elasticsearch single node is occasionally loaded very high](https://discuss.elastic.co/t/elasticsearch-single-node-is-occasionally-loaded-very-high/266904)

<div class="topic-metadata">

**Author:** [@bxl](https://discuss.elastic.co/u/bxl)\
**Replies:** 6\
**Last updated:** [March 15, 2021, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-single-node-is-occasionally-loaded-very-high/266904 "2021-03-15T08:15:15Z")

</div>

Hi, My ES cluster is used to store logs. When writing data in graylog, I found that occasionally the load of a node would suddenly increase, affecting the data written to the whole cluster. The node did not have gc, and…

---

## [java.lang.RuntimeException - I/O reactor status: STOPPED](https://discuss.elastic.co/t/java-lang-runtimeexception-i-o-reactor-status-stopped/267222)

<div class="topic-metadata">

**Author:** [@Sriram8894](https://discuss.elastic.co/u/Sriram8894)\
**Replies:** 0\
**Last updated:** [March 15, 2021, 6:35am UTC](https://discuss.elastic.co/t/java-lang-runtimeexception-i-o-reactor-status-stopped/267222 "2021-03-15T06:35:30Z")

</div>

We are getting the below error while executing the search requests. We are using ElasticSearch 7.6v java.lang.RuntimeException: Request cannot be executed; I/O reactor status: STOPPED We are only using sync method to …

---

## [Configuration of elastic search using organisation specific certificates](https://discuss.elastic.co/t/configuration-of-elastic-search-using-organisation-specific-certificates/267223)

<div class="topic-metadata">

**Author:** [@Srinivas1602](https://discuss.elastic.co/u/Srinivas1602)\
**Replies:** 0\
**Last updated:** [March 15, 2021, 6:36am UTC](https://discuss.elastic.co/t/configuration-of-elastic-search-using-organisation-specific-certificates/267223 "2021-03-15T06:36:38Z")

</div>

Hi. I have a 3 node cluster setup with 2 data nodes and 1 master node setup running with tls/ssl/https enabled with the help of Elasticsearch offical documentation. However I would like to use our internal organisation…

---

## [Cluster Nodes are not reflecting](https://discuss.elastic.co/t/cluster-nodes-are-not-reflecting/267194)

<div class="topic-metadata">

**Author:** [@roh689](https://discuss.elastic.co/u/roh689)\
**Replies:** 4\
**Last updated:** [March 15, 2021, 5:07am UTC](https://discuss.elastic.co/t/cluster-nodes-are-not-reflecting/267194 "2021-03-15T05:07:43Z")

</div>

We were using elasticsearch with only 1 node i.e. ES01 which also have log data of almost 2 weeks. Now we are trying to expand to 3 nodes with additional 2 servers i.e. ES02 & ES03, configured yml files on these 2 server…

---

## [License for SSO option alone](https://discuss.elastic.co/t/license-for-sso-option-alone/267049)

<div class="topic-metadata">

**Author:** [@raja.parameswaran](https://discuss.elastic.co/u/raja.parameswaran)\
**Replies:** 4\
**Last updated:** [March 15, 2021, 3:39am UTC](https://discuss.elastic.co/t/license-for-sso-option-alone/267049 "2021-03-15T03:39:31Z")

</div>

Hi, I am new to Elastic Stack. We are looking at embedding Kibana dashboard inside our application. We are planning to go with the Basic version of Elastic stack(free version) to begin with. However, we want to have the…

---

## [3 nodes in the cluster, 2 data and 1 master - why if one fails it takes the whole cluster down?](https://discuss.elastic.co/t/3-nodes-in-the-cluster-2-data-and-1-master-why-if-one-fails-it-takes-the-whole-cluster-down/267165)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 14\
**Last updated:** [March 15, 2021, 3:27am UTC](https://discuss.elastic.co/t/3-nodes-in-the-cluster-2-data-and-1-master-why-if-one-fails-it-takes-the-whole-cluster-down/267165 "2021-03-15T03:27:24Z")

</div>

Hello, I have 3 nodes; 2 data nodes and 1 master node. When one of the data nodes fails, the whole cluster stops processing data, nothing is shown in Kibana anymore, even though a data node is working and receiving data…

---

## [Minimum grants required for application user to manipulate indices data](https://discuss.elastic.co/t/minimum-grants-required-for-application-user-to-manipulate-indices-data/267201)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 0\
**Last updated:** [March 14, 2021, 8:08pm UTC](https://discuss.elastic.co/t/minimum-grants-required-for-application-user-to-manipulate-indices-data/267201 "2021-03-14T20:08:55Z")

</div>

Hi Elastic 7.11.1 When enable-ing security on my elastic cluster. Then applications that access data, need to have an user for these operations. My question is, what would be the minimum roles/grants that need to be a…

---

## [Update all collection based on pattern](https://discuss.elastic.co/t/update-all-collection-based-on-pattern/267199)

<div class="topic-metadata">

**Author:** [@ClubberLang](https://discuss.elastic.co/u/ClubberLang)\
**Replies:** 0\
**Last updated:** [March 14, 2021, 5:47pm UTC](https://discuss.elastic.co/t/update-all-collection-based-on-pattern/267199 "2021-03-14T17:47:54Z")

</div>

Hi, I have a several indexes, they all contains data such this one: { "\_index" : "item\_index", "imageUri" : "https://cdn.socloze.com/cdn/e\_07266e9e-d294.jpg" ... } and I wish to convert all the "/cdn/" into "/v1/c…

---

## [Schedule ElasticSearch 6.1.2 snapshots](https://discuss.elastic.co/t/schedule-elasticsearch-6-1-2-snapshots/267154)

<div class="topic-metadata">

**Author:** [@mwise29](https://discuss.elastic.co/u/mwise29)\
**Replies:** 4\
**Last updated:** [March 14, 2021, 4:56pm UTC](https://discuss.elastic.co/t/schedule-elasticsearch-6-1-2-snapshots/267154 "2021-03-14T16:56:28Z")

</div>

We have an older ElasticSearch cluster that is currently running version 6.1.2. I noticed it didn't have any snapshots of the data. SLM isn't supported with that version so I was wondering how snapshots could be schedu…

---

## [Elastic TLS: "xpack.security.http.ssl.enabled: true" vs proxy](https://discuss.elastic.co/t/elastic-tls-xpack-security-http-ssl-enabled-true-vs-proxy/267197)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 0\
**Last updated:** [March 14, 2021, 4:39pm UTC](https://discuss.elastic.co/t/elastic-tls-xpack-security-http-ssl-enabled-true-vs-proxy/267197 "2021-03-14T16:39:43Z")

</div>

Hi Elastic 7.11.1 Planning on configuring TLS for elasticsearch port 9200 I was wondering, is there a difference, whether I configure TLS with: elasticsearch.yml: xpack.security.http.ssl.enabled: true or via apache/…

---

## [How hot node differ from warm node](https://discuss.elastic.co/t/how-hot-node-differ-from-warm-node/267186)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 4\
**Last updated:** [March 14, 2021, 4:40pm UTC](https://discuss.elastic.co/t/how-hot-node-differ-from-warm-node/267186 "2021-03-14T16:40:00Z")

</div>

Total index=25 Logs/day=50gbx2(copies)=100gb Shards/day=25x2=50 shards Log retention 60 days Logs for 60 days=100x60=6Tb Shards for 60 days=50x60=3000 So we are planning to use 3 master node with 8gb heap 6 hot dat…

---

## [Elasticsearch shards size increase sometimes](https://discuss.elastic.co/t/elasticsearch-shards-size-increase-sometimes/267188)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 4\
**Last updated:** [March 14, 2021, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-shards-size-increase-sometimes/267188 "2021-03-14T16:01:14Z")

</div>

I have a time based index called log-wlb-sysmon-2021.03.13 its index size is 19gb with replication 38gb.I created 2 shards(1p+1r) Sometimes its size increases from 38gb to 44gb.I am using ilm policy for this index in th…

---

## [Ingest Pipeline Convert Processor is not converting](https://discuss.elastic.co/t/ingest-pipeline-convert-processor-is-not-converting/267166)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 2\
**Last updated:** [March 14, 2021, 2:37pm UTC](https://discuss.elastic.co/t/ingest-pipeline-convert-processor-is-not-converting/267166 "2021-03-14T14:37:22Z")

</div>

I am using Filebeat, Elasticsearch and Kibana 7.10.2 in docker containers I have a working pipeline: PUT /\_ingest/pipeline/test\_grok\_pipeline { "description": "Test grok pattern", "processors": \[ { "grok"…

---

## [How to create geo-point fields from longitude / latitude](https://discuss.elastic.co/t/how-to-create-geo-point-fields-from-longitude-latitude/267179)

<div class="topic-metadata">

**Author:** [@lostsoul352](https://discuss.elastic.co/u/lostsoul352)\
**Replies:** 7\
**Last updated:** [March 14, 2021, 2:33pm UTC](https://discuss.elastic.co/t/how-to-create-geo-point-fields-from-longitude-latitude/267179 "2021-03-14T14:33:25Z")

</div>

ELK 7.10. I've used the geoip filter in logstash to get geo data from a remote IP Address. Now I have geo data appearing in elastic. I want to be able to map these on a map chart and I don't understand how to do the …

---

## [Cross Cluster Replication monitoring](https://discuss.elastic.co/t/cross-cluster-replication-monitoring/267184)

<div class="topic-metadata">

**Author:** [@eli.cohen](https://discuss.elastic.co/u/eli.cohen)\
**Replies:** 1\
**Last updated:** [March 14, 2021, 1:46pm UTC](https://discuss.elastic.co/t/cross-cluster-replication-monitoring/267184 "2021-03-14T13:46:10Z")

</div>

We use Prometheus and Grafana as a monitoring solution. I would like to know if there is a Prometheus exporter for CCR. If not, then what is the best way to monitor the replication state, replication lag per index and ot…

---

## [Which version is recommended?](https://discuss.elastic.co/t/which-version-is-recommended/267134)

<div class="topic-metadata">

**Author:** [@PaulGureghian](https://discuss.elastic.co/u/PaulGureghian)\
**Replies:** 3\
**Last updated:** [March 14, 2021, 8:58am UTC](https://discuss.elastic.co/t/which-version-is-recommended/267134 "2021-03-14T08:58:39Z")

</div>

Which version(s) of Java or OpenJDK is recommended for Elasticsearch 7.11.1 ?

---

## [Can't launch Elasticsearch](https://discuss.elastic.co/t/cant-launch-elasticsearch/267168)

<div class="topic-metadata">

**Author:** [@PaulGureghian](https://discuss.elastic.co/u/PaulGureghian)\
**Replies:** 0\
**Last updated:** [March 14, 2021, 1:20am UTC](https://discuss.elastic.co/t/cant-launch-elasticsearch/267168 "2021-03-14T01:20:56Z")

</div>

My JAVA\_HOME code in .profile export JAVA\_HOME=/usr/lib/jvm/java-1.11.0-openjdk-amd64 export PATH=$JAVA\_HOME/bin:$PATH And when I try to launch: \[elasticsearch-7.11.1\] ./bin/elasticsearch Exception in thread "main" j…

---

## [Elasticsearch suddenly unavailable](https://discuss.elastic.co/t/elasticsearch-suddenly-unavailable/267153)

<div class="topic-metadata">

**Author:** [@cdalexndr](https://discuss.elastic.co/u/cdalexndr)\
**Replies:** 1\
**Last updated:** [March 13, 2021, 7:32pm UTC](https://discuss.elastic.co/t/elasticsearch-suddenly-unavailable/267153 "2021-03-13T19:32:40Z")

</div>

After some time, the service suddenly doesn't work... org.elasticsearch.cluster.block.ClusterBlockException: blocked by: \[SERVICE\_UNAVAILABLE/1/state not recovered / initialized\]; I'm using a single node instance, ES 7…

---

## [Elasticsearch on-premise licensing](https://discuss.elastic.co/t/elasticsearch-on-premise-licensing/266821)

<div class="topic-metadata">

**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\
**Replies:** 2\
**Last updated:** [March 13, 2021, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-on-premise-licensing/266821 "2021-03-13T16:21:18Z")

</div>

Hi all, I have a question regarding Elasticsearch licensing. I got a license for an on-premise Elasticsearch deployment that says max\_nodes=12. I know I can apply it to an Elasticsearch cluster comprised of up to 12 d…

---

## [Grok Debugger in Dev tools Parses differently than logstash](https://discuss.elastic.co/t/grok-debugger-in-dev-tools-parses-differently-than-logstash/266602)

<div class="topic-metadata">

**Author:** [@nfored](https://discuss.elastic.co/u/nfored)\
**Replies:** 1\
**Last updated:** [March 13, 2021, 3:10pm UTC](https://discuss.elastic.co/t/grok-debugger-in-dev-tools-parses-differently-than-logstash/266602 "2021-03-13T15:10:31Z")

</div>

I can copy and paste a the log from kibana discover into the debugger, then open up the .conf file copy and past the grok from there, and press simulate. Ever single time without fail it works, but Its only partly workin…

---

## [Get the documents with max of @version based on document\_id](https://discuss.elastic.co/t/get-the-documents-with-max-of-version-based-on-document-id/266877)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 1\
**Last updated:** [March 13, 2021, 3:47am UTC](https://discuss.elastic.co/t/get-the-documents-with-max-of-version-based-on-document-id/266877 "2021-03-13T03:47:00Z")

</div>

Hi All, I have certain documents in my index with each document having a document\_id as primary key with the combination of "Campaign" and "Camp Line" which will be %{Campaign}%{Camp Line} Every Document has @version. …

---

## [ILM change index settings between phases](https://discuss.elastic.co/t/ilm-change-index-settings-between-phases/267128)

<div class="topic-metadata">

**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\
**Replies:** 0\
**Last updated:** [March 12, 2021, 10:42pm UTC](https://discuss.elastic.co/t/ilm-change-index-settings-between-phases/267128 "2021-03-12T22:42:58Z")

</div>

Hello, is it possible to change index settings between phases? I have a issue with moving index to warm phase and then shrink with index settings index.routing.allocation.total\_shards\_per\_node = 1. Because of shrink ac…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=682)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=684)
