# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=684

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 685

---

## [This node does not have the remote\_cluster\_client role](https://discuss.elastic.co/t/this-node-does-not-have-the-remote-cluster-client-role/266294)

<div class="topic-metadata">

**Author:** [@dylan0911](https://discuss.elastic.co/u/dylan0911)\
**Replies:** 3\
**Last updated:** [March 12, 2021, 9:01pm UTC](https://discuss.elastic.co/t/this-node-does-not-have-the-remote-cluster-client-role/266294 "2021-03-12T21:01:53Z")

</div>

Hi all, Been going through the doc, the topics and github. Can't seem to find an answer tho this one. I have 2 clusters running in 2 different regions and wanted to test CCR. Both of them are running on 7.11.1. I was a…

---

## [Can we use more master nodes instead of 'coordinating only'](https://discuss.elastic.co/t/can-we-use-more-master-nodes-instead-of-coordinating-only/266123)

<div class="topic-metadata">

**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\
**Replies:** 15\
**Last updated:** [March 12, 2021, 8:28pm UTC](https://discuss.elastic.co/t/can-we-use-more-master-nodes-instead-of-coordinating-only/266123 "2021-03-12T20:28:13Z")

</div>

Hi, We have an issue that is supposed to be resolved by adding 'coordinating only' nodes: But on AWS (it might be a special case due to the fact that we are using internal company system built on top of AWS for secur…

---

## [Changed Cluster Name - Licensing Not Working Now](https://discuss.elastic.co/t/changed-cluster-name-licensing-not-working-now/267002)

<div class="topic-metadata">

**Author:** [@brett.b](https://discuss.elastic.co/u/brett.b)\
**Replies:** 2\
**Last updated:** [March 12, 2021, 6:52pm UTC](https://discuss.elastic.co/t/changed-cluster-name-licensing-not-working-now/267002 "2021-03-12T18:52:59Z")

</div>

Hello there, I had a cluster which was running fine, but it was called simply "elasticsearch". I wanted to give it a more specific name, so I applied that to my helm chart (elasticsearch-dev) and restarted all of the da…

---

## [Elasticsearch 7.11 with 3 nodes](https://discuss.elastic.co/t/elasticsearch-7-11-with-3-nodes/266996)

<div class="topic-metadata">

**Author:** [@b0r1s](https://discuss.elastic.co/u/b0r1s)\
**Replies:** 6\
**Last updated:** [March 12, 2021, 6:46pm UTC](https://discuss.elastic.co/t/elasticsearch-7-11-with-3-nodes/266996 "2021-03-12T18:46:37Z")

</div>

Hey everyone o/ I'm trying to setup a cluster with 3 nodes using the elasticsearch.yml file: # ======================== Elasticsearch Configuration ========================= # # NOTE: Elasticsearch comes with reasonabl…

---

## [So confused on test prep](https://discuss.elastic.co/t/so-confused-on-test-prep/265997)

<div class="topic-metadata">

**Author:** [@jgearheart](https://discuss.elastic.co/u/jgearheart)\
**Replies:** 1\
**Last updated:** [March 4, 2021, 2:42pm UTC](https://discuss.elastic.co/t/so-confused-on-test-prep/265997 "2021-03-04T14:42:19Z")

</div>

I completed Elasticsearch Engineer 1. I want to prepare for the exam by practicing in the lab environment. Since I completed the course already I now cannot access the lab. The training team recommended downloading El…

---

## [How to export ELK data from Windows server to AWS cloud](https://discuss.elastic.co/t/how-to-export-elk-data-from-windows-server-to-aws-cloud/267110)

<div class="topic-metadata">

**Author:** [@DENMODSupport](https://discuss.elastic.co/u/DENMODSupport)\
**Replies:** 1\
**Last updated:** [March 12, 2021, 5:07pm UTC](https://discuss.elastic.co/t/how-to-export-elk-data-from-windows-server-to-aws-cloud/267110 "2021-03-12T17:07:47Z")

</div>

Hi, We are in the process of migrating our Elastic search from On Prem server to AWS cloud. Could you please help me what could be the best option to export data from On Prem server and import into AWS cloud?

---

## [Rest High Level Client - 6.8.13 - long reindex api call - timeout](https://discuss.elastic.co/t/rest-high-level-client-6-8-13-long-reindex-api-call-timeout/267106)

<div class="topic-metadata">

**Author:** [@LJRamsey](https://discuss.elastic.co/u/LJRamsey)\
**Replies:** 0\
**Last updated:** [March 12, 2021, 4:06pm UTC](https://discuss.elastic.co/t/rest-high-level-client-6-8-13-long-reindex-api-call-timeout/267106 "2021-03-12T16:06:52Z")

</div>

Hello, We are upgrading existing application from TransportClient to RestHighLevelClient in 6.8.13 (part of 5.6 to 6.8 upgrade) and facing some issues regarding reindex api and timeout. We are doing index copy throw re…

---

## [Can you tune the split\_on\_case\_change setting on the word delimiter token filter?](https://discuss.elastic.co/t/can-you-tune-the-split-on-case-change-setting-on-the-word-delimiter-token-filter/267102)

<div class="topic-metadata">

**Author:** [@peterbe](https://discuss.elastic.co/u/peterbe)\
**Replies:** 0\
**Last updated:** [March 12, 2021, 3:20pm UTC](https://discuss.elastic.co/t/can-you-tune-the-split-on-case-change-setting-on-the-word-delimiter-token-filter/267102 "2021-03-12T15:20:00Z")

</div>

I have a love-hate relationship with split\_on\_case\_change My problem is that only certain words make sense to split on case change. For example, I'd like to treat TypedArray as Typed, Array. But I don't want to split up…

---

## [Can I add ingest pipelines to Elasticsearch with a config file as with Logstash?](https://discuss.elastic.co/t/can-i-add-ingest-pipelines-to-elasticsearch-with-a-config-file-as-with-logstash/267098)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 3\
**Last updated:** [March 12, 2021, 3:10pm UTC](https://discuss.elastic.co/t/can-i-add-ingest-pipelines-to-elasticsearch-with-a-config-file-as-with-logstash/267098 "2021-03-12T15:10:17Z")

</div>

Pretty basic question regarding ingest pipelines. I've used Logstash in the past and used pipeline files to create the grok pipelines. I do not see how to do this with Elasticsearch ingest pipelines. I have only been abl…

---

## [Find sequences in time series data](https://discuss.elastic.co/t/find-sequences-in-time-series-data/266965)

<div class="topic-metadata">

**Author:** [@markdturner](https://discuss.elastic.co/u/markdturner)\
**Replies:** 1\
**Last updated:** [March 12, 2021, 1:43pm UTC](https://discuss.elastic.co/t/find-sequences-in-time-series-data/266965 "2021-03-12T13:43:36Z")

</div>

Hi, I'm trying to find example queries for returning sequences of events in a time series. My dataset is rainfall values at 10-minute intervals, and I want to find all storm events. A storm event would be considered con…

---

## [Is it recommended to run es aggregations during api calls, how expensive can it be?](https://discuss.elastic.co/t/is-it-recommended-to-run-es-aggregations-during-api-calls-how-expensive-can-it-be/267084)

<div class="topic-metadata">

**Author:** [@manish\_kakoti](https://discuss.elastic.co/u/manish_kakoti)\
**Replies:** 1\
**Last updated:** [March 12, 2021, 1:11pm UTC](https://discuss.elastic.co/t/is-it-recommended-to-run-es-aggregations-during-api-calls-how-expensive-can-it-be/267084 "2021-03-12T13:11:38Z")

</div>

there are couple of scenarios that i wanted to discuss: If we run aggregations (on large data sets) during REST API calls? How expensive it is experienced to be? If we store pre-aggregated data(which runs during in…

---

## [PUT mappings API overriding the exsisting mappings](https://discuss.elastic.co/t/put-mappings-api-overriding-the-exsisting-mappings/267055)

<div class="topic-metadata">

**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\
**Replies:** 0\
**Last updated:** [March 12, 2021, 8:23am UTC](https://discuss.elastic.co/t/put-mappings-api-overriding-the-exsisting-mappings/267055 "2021-03-12T08:23:06Z")

</div>

Hello, I have created an index template, where I am defining an "ignore\_above" mapping parameter for a "keyword" field type. Now I want to update the mappings and want to add a new parameter "eager\_global\_ordinals" for…

---

## [Check whether a field has mapping store=true](https://discuss.elastic.co/t/check-whether-a-field-has-mapping-store-true/264792)

<div class="topic-metadata">

**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\
**Replies:** 2\
**Last updated:** [March 12, 2021, 8:15am UTC](https://discuss.elastic.co/t/check-whether-a-field-has-mapping-store-true/264792 "2021-03-12T08:15:42Z")

</div>

I am trying out the following use case: I want only the fields from index template, or index mapping, for which mapping property store=true, though I can get the mapping and parse it and check for the criteria or can u…

---

## [Elastic snapshots - is one big repository recommended?](https://discuss.elastic.co/t/elastic-snapshots-is-one-big-repository-recommended/267045)

<div class="topic-metadata">

**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\
**Replies:** 1\
**Last updated:** [March 12, 2021, 7:25am UTC](https://discuss.elastic.co/t/elastic-snapshots-is-one-big-repository-recommended/267045 "2021-03-12T07:25:20Z")

</div>

I am putting in place a shared filesystem repository to take snapshots. I noticed the second cluster I configured with the sahred FS automatically gets info about existing snapshots, even if I give a different name to t…

---

## [How to add index to datastream manually?](https://discuss.elastic.co/t/how-to-add-index-to-datastream-manually/267043)

<div class="topic-metadata">

**Author:** [@LoadingZhang](https://discuss.elastic.co/u/LoadingZhang)\
**Replies:** 0\
**Last updated:** [March 12, 2021, 6:48am UTC](https://discuss.elastic.co/t/how-to-add-index-to-datastream-manually/267043 "2021-03-12T06:48:22Z")

</div>

I use split api to an index which belong to a datastream, but the new index not set the datastream automatically. How can I set the new index let it belong to datastream?

---

## [Ilm index not migrating](https://discuss.elastic.co/t/ilm-index-not-migrating/267039)

<div class="topic-metadata">

**Author:** [@Vishnu\_Singhal](https://discuss.elastic.co/u/Vishnu_Singhal)\
**Replies:** 0\
**Last updated:** [March 12, 2021, 6:24am UTC](https://discuss.elastic.co/t/ilm-index-not-migrating/267039 "2021-03-12T06:24:32Z")

</div>

Hi, i have a index eligible to move to w"message": "\[ryvscale54\_raw\_session\_20210306\] lifecycle abc\_20210306": { "index": "abc\_20210306", "managed": true, "policy": "ilm-uniq-com", "lifecycle\_date\_millis": 161499459084…

---

## [Load is not distributed evenly between cpus](https://discuss.elastic.co/t/load-is-not-distributed-evenly-between-cpus/267040)

<div class="topic-metadata">

**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\
**Replies:** 0\
**Last updated:** [March 12, 2021, 6:29am UTC](https://discuss.elastic.co/t/load-is-not-distributed-evenly-between-cpus/267040 "2021-03-12T06:29:17Z")

</div>

We're operating an Elastic Stack on kubernetes on a single host(Centos 7). The host has 2x Intel E5-2640 v4 @ 2.40GHz. The processes are supposedly working with all cores but the load is mainly on the first cpu. Most of …

---

## [The following security realms are not matched across Elasticsearch and stateless resources:](https://discuss.elastic.co/t/the-following-security-realms-are-not-matched-across-elasticsearch-and-stateless-resources/267013)

<div class="topic-metadata">

**Author:** [@MuhammadEzzat](https://discuss.elastic.co/u/MuhammadEzzat)\
**Replies:** 0\
**Last updated:** [March 12, 2021, 1:08am UTC](https://discuss.elastic.co/t/the-following-security-realms-are-not-matched-across-elasticsearch-and-stateless-resources/267013 "2021-03-12T01:08:20Z")

</div>

Can't edit deployment from elastic cloud configuration and I always get the following response. The following security realms are not matched across Elasticsearch and stateless resources:

---

## [Can I use STMPS in Watcher](https://discuss.elastic.co/t/can-i-use-stmps-in-watcher/267008)

<div class="topic-metadata">

**Author:** [@VeeT](https://discuss.elastic.co/u/VeeT)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 11:36pm UTC](https://discuss.elastic.co/t/can-i-use-stmps-in-watcher/267008 "2021-03-11T23:36:22Z")

</div>

Can Elasticsearch Watcher work on SMTPS?

---

## [Packetbeat create pcap file and ingest data](https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992)

<div class="topic-metadata">

**Author:** [@andywt123](https://discuss.elastic.co/u/andywt123)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 9:01pm UTC](https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992 "2021-03-11T21:01:42Z")

</div>

We have a requirement to create and store pcap files for all of our web server traffic. I wanted to find out if anyone has used packetbeat to create pcap files to be store and also ingest the data to be used in dashboard…

---

## [Mapping, error my normalizer](https://discuss.elastic.co/t/mapping-error-my-normalizer/266995)

<div class="topic-metadata">

**Author:** [@jcornejo](https://discuss.elastic.co/u/jcornejo)\
**Replies:** 5\
**Last updated:** [March 11, 2021, 8:53pm UTC](https://discuss.elastic.co/t/mapping-error-my-normalizer/266995 "2021-03-11T20:53:58Z")

</div>

Help, how to create a mapping in elasticsearch ? PUT /sdm\_cr\_nrt/\_mapping { "properties" : { "@timestamp" : { "type" : "date" }, "@version" : { "type" : "text" …

---

## [Circuit Breaker Exception + Data Too Large for HTTP Request + HTTP/1.1 429 Too Many Requests](https://discuss.elastic.co/t/circuit-breaker-exception-data-too-large-for-http-request-http-1-1-429-too-many-requests/266460)

<div class="topic-metadata">

**Author:** [@israni.amit](https://discuss.elastic.co/u/israni.amit)\
**Replies:** 6\
**Last updated:** [March 11, 2021, 6:49pm UTC](https://discuss.elastic.co/t/circuit-breaker-exception-data-too-large-for-http-request-http-1-1-429-too-many-requests/266460 "2021-03-11T18:49:44Z")

</div>

Hello Team, We recently went Live with Elastic Search as our search engine and observed few instances where circuit breaker exception was thrown along with messages like Data too large and too many requests. We have 5 …

---

## [Elasticsearch pricing](https://discuss.elastic.co/t/elasticsearch-pricing/266971)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 4\
**Last updated:** [March 11, 2021, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-pricing/266971 "2021-03-11T18:27:38Z")

</div>

Hello everyone, i was looking at elasticsearch pricing. I found this link: https://www.elastic.co/pricing/ which says the "Standard" version is $ 16 a month. But I don't understand why, with this configurator: http…

---

## [Reindex data will not copy all documents](https://discuss.elastic.co/t/reindex-data-will-not-copy-all-documents/266967)

<div class="topic-metadata">

**Author:** [@dslavescu](https://discuss.elastic.co/u/dslavescu)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 3:42pm UTC](https://discuss.elastic.co/t/reindex-data-will-not-copy-all-documents/266967 "2021-03-11T15:42:03Z")

</div>

Hello, I am trying to migrate data from an ES cluster 5.5.6 to ES 7.6.2, using an intermediate cluster ES 6.8 in order to reindex the data and prepare the mapping for ES 7.6.2 version. I am using a python script to aut…

---

## [GUI for Explicit Index Mapping management](https://discuss.elastic.co/t/gui-for-explicit-index-mapping-management/266941)

<div class="topic-metadata">

**Author:** [@Paulo\_Azevedo](https://discuss.elastic.co/u/Paulo_Azevedo)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 1:37pm UTC](https://discuss.elastic.co/t/gui-for-explicit-index-mapping-management/266941 "2021-03-11T13:37:40Z")

</div>

Hello, I'm making an ElasticSearch POC and looking for a GUI to manage explicit index mapping. Already tried ElasticSearchHQ and Kibana but coudn't find a way to manage the explicit mappings. Can somebody help please? T…

---

## [Enabled xpack.security.authc.api\_key.enabled=true but \_security/api\_key still not working](https://discuss.elastic.co/t/enabled-xpack-security-authc-api-key-enabled-true-but-security-api-key-still-not-working/266831)

<div class="topic-metadata">

**Author:** [@PaulMess](https://discuss.elastic.co/u/PaulMess)\
**Replies:** 5\
**Last updated:** [March 11, 2021, 12:30pm UTC](https://discuss.elastic.co/t/enabled-xpack-security-authc-api-key-enabled-true-but-security-api-key-still-not-working/266831 "2021-03-11T12:30:52Z")

</div>

Hello, I stared a ES Cluster with xpack.security.authc.api\_key.enabled=true, If I check node settings inform that is enabled "security" : { "authc" : { "api\_key" : { …

---

## [Can't compile elasticsearch from source: error: release version 11 not supported](https://discuss.elastic.co/t/cant-compile-elasticsearch-from-source-error-release-version-11-not-supported/266797)

<div class="topic-metadata">

**Author:** [@Kazimazi](https://discuss.elastic.co/u/Kazimazi)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 12:24pm UTC](https://discuss.elastic.co/t/cant-compile-elasticsearch-from-source-error-release-version-11-not-supported/266797 "2021-03-11T12:24:51Z")

</div>

First and foremost I'm kinda new, so I might be missing something very basic. I'm trying to compile elasticsearch from source from master branch (060b3aadd60116e6055e3fc35f472687719b7658). I've installed openjdk15 on a …

---

## [Synthetic Monitoring Https URL monitoring error ERR\_CERT\_AUTHORITY\_INVALID](https://discuss.elastic.co/t/synthetic-monitoring-https-url-monitoring-error-err-cert-authority-invalid/266938)

<div class="topic-metadata">

**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 12:13pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-https-url-monitoring-error-err-cert-authority-invalid/266938 "2021-03-11T12:13:54Z")

</div>

// Go to https://hostname:8443/ await page.goto('https://hostname:8443/'); Hi Team, When I am using HTTPS protocol and I am getting below error, Please suggest I need to provide some extra configuration for HTTPS URLs…

---

## [Java RestHighLevelClient gives different exception responses on a repeated request](https://discuss.elastic.co/t/java-resthighlevelclient-gives-different-exception-responses-on-a-repeated-request/266930)

<div class="topic-metadata">

**Author:** [@eivind.ronnevik](https://discuss.elastic.co/u/eivind.ronnevik)\
**Replies:** 0\
**Last updated:** [March 11, 2021, 11:06am UTC](https://discuss.elastic.co/t/java-resthighlevelclient-gives-different-exception-responses-on-a-repeated-request/266930 "2021-03-11T11:06:41Z")

</div>

Hi everyone, I am hitting this "strange" behavior related to search\_phase\_execution\_exceptions that I don't really understand and would like to know the underlying reasons for. A bit of context; I'm running ES 7.8.1, t…

---

## [If I buy elastic license, can I use all the features without the cloud?](https://discuss.elastic.co/t/if-i-buy-elastic-license-can-i-use-all-the-features-without-the-cloud/266914)

<div class="topic-metadata">

**Author:** [@lachezar.uzunov](https://discuss.elastic.co/u/lachezar.uzunov)\
**Replies:** 1\
**Last updated:** [March 11, 2021, 11:24am UTC](https://discuss.elastic.co/t/if-i-buy-elastic-license-can-i-use-all-the-features-without-the-cloud/266914 "2021-03-11T11:24:11Z")

</div>

Hello everyone, I have setup cluster of 3 nodes, I want to use security features like alerting. For alerting I need a license. If I buy elastic license, can I use the features without migrating to the cloud?

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=683)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=685)
