# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=688 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 689 --- ## [Processor for shingles, similar to split?](https://discuss.elastic.co/t/processor-for-shingles-similar-to-split/266254)
**Author:** [@Mark\_Petersen](https://discuss.elastic.co/u/Mark_Petersen)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 7:40pm UTC](https://discuss.elastic.co/t/processor-for-shingles-similar-to-split/266254 "2021-03-05T19:40:02Z")
Is there a processor that will do shingles or can I make a custom one somehow? In the pipeline processor below, I split on the space character, but I'd also like to combine words like a shingle analyzer would: PUT \_ing… --- ## [Index Policies Never Rollover to the Defined Index Life-cycle Policy](https://discuss.elastic.co/t/index-policies-never-rollover-to-the-defined-index-life-cycle-policy/266146)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 10\ **Last updated:** [March 5, 2021, 7:17pm UTC](https://discuss.elastic.co/t/index-policies-never-rollover-to-the-defined-index-life-cycle-policy/266146 "2021-03-05T19:17:25Z")
No matter what how I edit the index policies. The indexes never roll over to Warm tier. My indexes just goes straight from hot to delete. Even though my index policy says the following: PUT \_ilm/policy/filebeat { "po… --- ## [Indexes are not going to Warm Tier](https://discuss.elastic.co/t/indexes-are-not-going-to-warm-tier/266389)
**Author:** [@austinsonger](https://discuss.elastic.co/u/austinsonger)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 3:55pm UTC](https://discuss.elastic.co/t/indexes-are-not-going-to-warm-tier/266389 "2021-03-05T15:55:14Z")
Trying to get indexes to go into warm for 30 days. Am I doing something incorrect? --- ## [Highlight. Different tags for different words in one highlight request. For one field](https://discuss.elastic.co/t/highlight-different-tags-for-different-words-in-one-highlight-request-for-one-field/266388)
**Author:** [@boralex](https://discuss.elastic.co/u/boralex)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 3:43pm UTC](https://discuss.elastic.co/t/highlight-different-tags-for-different-words-in-one-highlight-request-for-one-field/266388 "2021-03-05T15:43:59Z")
Good day I have a question: Can I use several different tags for different words in one highlight request? Is it possible? For example (Let I have one text field): I have a request with phrases that should definitely… --- ## [How to use the search after after getting the result using the geolocation sort](https://discuss.elastic.co/t/how-to-use-the-search-after-after-getting-the-result-using-the-geolocation-sort/266359)
**Author:** [@kushal\_sharma](https://discuss.elastic.co/u/kushal_sharma)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 11:41am UTC](https://discuss.elastic.co/t/how-to-use-the-search-after-after-getting-the-result-using-the-geolocation-sort/266359 "2021-03-05T11:41:07Z")
Hi, I have an index in which I have a point field that holds the geolocation of the place, and I have a user interface on the frontend where the user can move the map and he will get the top 10 nearest location, everyth… --- ## [Elastic does not reindex all indicies while using a wildcard](https://discuss.elastic.co/t/elastic-does-not-reindex-all-indicies-while-using-a-wildcard/266336)
**Author:** [@konart](https://discuss.elastic.co/u/konart)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 10:30am UTC](https://discuss.elastic.co/t/elastic-does-not-reindex-all-indicies-while-using-a-wildcard/266336 "2021-03-05T10:30:34Z")
Hi! I'm trying to reindex our indicies for them to use updated mappings. Here is the query: { "source": { "index": "cards\_\*" }, "dest": { "index": "cards\_temp" … --- ## [Mapping all Bools as String](https://discuss.elastic.co/t/mapping-all-bools-as-string/265583)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 9:35am UTC](https://discuss.elastic.co/t/mapping-all-bools-as-string/265583 "2021-03-05T09:35:22Z")
When my logstash starts it sends a template to ES where I set the mappings for various fields. I'm getting a lot of conflicts on a lot of fields(150+) that I do not have individual mappings for. These are dynamic as th… --- ## [Docker limits and JVM heap setting](https://discuss.elastic.co/t/docker-limits-and-jvm-heap-setting/266339)
**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 9:07am UTC](https://discuss.elastic.co/t/docker-limits-and-jvm-heap-setting/266339 "2021-03-05T09:07:10Z")
Hello People, quick question (confirmation). I've got a server with 32 GB ram and 4vcpcu for one elk node (v7.11.1). If I set this in docker-compose (v.2.4): mem\_limit: 24G mem\_reservation: 4G cpus: 4 And … --- ## [Message not fully read (response) for request AND incompatible wire format](https://discuss.elastic.co/t/message-not-fully-read-response-for-request-and-incompatible-wire-format/266209)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 7\ **Last updated:** [March 5, 2021, 8:29am UTC](https://discuss.elastic.co/t/message-not-fully-read-response-for-request-and-incompatible-wire-format/266209 "2021-03-05T08:29:53Z")
Hello, I am trying ELasticsearch from code source (8.0.0) , and I am getting these warninigs: java.lang.IllegalStateException: Message not fully read (response) for requestId \[542\], handler \[org.elasticsearch.transpor… --- ## [HELP with query =\> Doc with array of 2 values Return 2 hits](https://discuss.elastic.co/t/help-with-query-doc-with-array-of-2-values-return-2-hits/266325)
**Author:** [@Peter4](https://discuss.elastic.co/u/Peter4)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 8:11am UTC](https://discuss.elastic.co/t/help-with-query-doc-with-array-of-2-values-return-2-hits/266325 "2021-03-05T08:11:24Z")
Hi I need help writing query. doc in ES is { A: "A", B: \["1","2"\] } result from query should be: hits(2x) { A:"A" , B: "1"} { A:"A" , B: "2" } is this possible? --- ## [How to increase speed when using es-hadoop bulk data from hdfs to elasticsearch?](https://discuss.elastic.co/t/how-to-increase-speed-when-using-es-hadoop-bulk-data-from-hdfs-to-elasticsearch/266329)
**Author:** [@Chuckiefan](https://discuss.elastic.co/u/Chuckiefan)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 7:55am UTC](https://discuss.elastic.co/t/how-to-increase-speed-when-using-es-hadoop-bulk-data-from-hdfs-to-elasticsearch/266329 "2021-03-05T07:55:13Z")
When I use es-hadoop to run a MapReduce bulk data from hdfs to elasticsearch ,the number of reducer is 1 as default. Is there any way to increase the speed of it ? --- ## [Get events for Elasticsearch cluster health degraded , but cluster is green](https://discuss.elastic.co/t/get-events-for-elasticsearch-cluster-health-degraded-but-cluster-is-green/266322)
**Author:** [@oldthreefeng](https://discuss.elastic.co/u/oldthreefeng)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 6:55am UTC](https://discuss.elastic.co/t/get-events-for-elasticsearch-cluster-health-degraded-but-cluster-is-green/266322 "2021-03-05T06:55:40Z")
the es version is 6.8.8 $ k get events -n sls-prod LAST SEEN TYPE REASON OBJECT MESSAGE 44m Warning Unhealthy elasticsearch/elastic Elasticsearch cluster health degraded but … --- ## [Watcher Assistance (ii)](https://discuss.elastic.co/t/watcher-assistance-ii/265261)
**Author:** [@PinkElephant](https://discuss.elastic.co/u/PinkElephant)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 5:45am UTC](https://discuss.elastic.co/t/watcher-assistance-ii/265261 "2021-03-05T05:45:07Z")
Hey, Trying to use some code I found in the docs, and am met with an error. { "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { "indices": ".moni… --- ## [Curate Unable to connect to Elasticsearch cluster](https://discuss.elastic.co/t/curate-unable-to-connect-to-elasticsearch-cluster/266171)
**Author:** [@Bjen\_Shah](https://discuss.elastic.co/u/Bjen_Shah)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 4:43am UTC](https://discuss.elastic.co/t/curate-unable-to-connect-to-elasticsearch-cluster/266171 "2021-03-05T04:43:28Z")
$ curator\_cli --version curator\_cli, version 5.8.3 $ curator\_cli --loglevel DEBUG --use\_ssl --host 'https://test01.elk.com' --certificate '/etc/pki/www/pams-ca.pem' --port 9200 show\_indices 2021-03-03 16:22:08,053 DEBUG… --- ## [Default analyser in annotated text](https://discuss.elastic.co/t/default-analyser-in-annotated-text/266313)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 4:05am UTC](https://discuss.elastic.co/t/default-analyser-in-annotated-text/266313 "2021-03-05T04:05:41Z")
What is the default analyser used in annotated text?is it standard analyser?how do I find it? Can we use a different analyser for annotated text? --- ## [How to find whether the field in elasticSearch is sortable and analysed](https://discuss.elastic.co/t/how-to-find-whether-the-field-in-elasticsearch-is-sortable-and-analysed/265106)
**Author:** [@Deepti](https://discuss.elastic.co/u/Deepti)\ **Replies:** 8\ **Last updated:** [March 5, 2021, 4:00am UTC](https://discuss.elastic.co/t/how-to-find-whether-the-field-in-elasticsearch-is-sortable-and-analysed/265106 "2021-03-05T04:00:16Z")
How to find whether the field in elasticSearch is sortable and analysed --- ## [Dissector mapping, pattern not found (Jfrog artifactory service logs)](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-jfrog-artifactory-service-logs/266305)
**Author:** [@jchiu](https://discuss.elastic.co/u/jchiu)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 2:23am UTC](https://discuss.elastic.co/t/dissector-mapping-pattern-not-found-jfrog-artifactory-service-logs/266305 "2021-03-05T02:23:48Z")
Hello all, I am having a hard time parsing the JFrog's artifactory-service log with "dissect". Even after few searches here, I still couldn't figure out what went wrong... Hope that someone could be kind enough to take… --- ## [Isuue while overriding JSON object in document](https://discuss.elastic.co/t/isuue-while-overriding-json-object-in-document/266239)
**Author:** [@pawar.pradeep85](https://discuss.elastic.co/u/pawar.pradeep85)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 12:43pm UTC](https://discuss.elastic.co/t/isuue-while-overriding-json-object-in-document/266239 "2021-03-04T12:43:40Z")
Hello, I want to perform a task which requires below activities: Override "xyz" record with the new "xyz" record completely (avoid update/merging) in the existing document. New "xyz" record structure could be differen… --- ## [Elastalert spike rule not getting any hits](https://discuss.elastic.co/t/elastalert-spike-rule-not-getting-any-hits/266306)
**Author:** [@Bhanu\_Praveen](https://discuss.elastic.co/u/Bhanu_Praveen)\ **Replies:** 0\ **Last updated:** [March 5, 2021, 12:57am UTC](https://discuss.elastic.co/t/elastalert-spike-rule-not-getting-any-hits/266306 "2021-03-05T00:57:27Z")
Hello, I have a scenario to identify if any spike on incoming work items. There is a huge spike around 57000 for works arrived when compared to a max range of 27000 last 3 months as shown below. I tried to use a spi… --- ## [ILM based on disk space / FIFO indices](https://discuss.elastic.co/t/ilm-based-on-disk-space-fifo-indices/266301)
**Author:** [@Kfiro](https://discuss.elastic.co/u/Kfiro)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 11:42pm UTC](https://discuss.elastic.co/t/ilm-based-on-disk-space-fifo-indices/266301 "2021-03-04T23:42:33Z")
Hi, Im wondering if there is option to save Elastic from getting above 90% disk space.. I have ILM policy set to rollover new index every 50 GIGA and Delete phase for 30 Days. i have 10 Tera disk space on my Cluster... … --- ## [Setting a long custom \_id value when inserting into Elastic search](https://discuss.elastic.co/t/setting-a-long-custom-id-value-when-inserting-into-elastic-search/266300)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 11:42pm UTC](https://discuss.elastic.co/t/setting-a-long-custom-id-value-when-inserting-into-elastic-search/266300 "2021-03-04T23:42:18Z")
I'm reading data with filebeat, sending to logstash and it ends up in ES. One issue we have is sometimes Filebeat re-reads files leading to duplicate entries in Elastic Search. One idea was to create a custom \_id value… --- ## [Found differences in mapping. Can I simply update the mapping?](https://discuss.elastic.co/t/found-differences-in-mapping-can-i-simply-update-the-mapping/266278)
**Author:** [@Lennart\_Wong](https://discuss.elastic.co/u/Lennart_Wong)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 11:04pm UTC](https://discuss.elastic.co/t/found-differences-in-mapping-can-i-simply-update-the-mapping/266278 "2021-03-04T23:04:10Z")
Hello! I am very new to Elasticsearch and was tasked to add a new cluster and put it to work. Any help is much appreciated! My company has a few existing ES cluster. After I added the new cluster and the indexes, I a… --- ## [maxClauseCount error on Multi Match after Upgrade to 7.10.1](https://discuss.elastic.co/t/maxclausecount-error-on-multi-match-after-upgrade-to-7-10-1/266160)
**Author:** [@dwhite44](https://discuss.elastic.co/u/dwhite44)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 9:39pm UTC](https://discuss.elastic.co/t/maxclausecount-error-on-multi-match-after-upgrade-to-7-10-1/266160 "2021-03-04T21:39:20Z")
We are in the process of upgrading from Elasticsearch 6.5.4 to 7.10.1. We have some searches that worked fine against 6.5.4 but are getting "failed to create query: maxClauseCount is set to 1024" errors against 7.10.1. H… --- ## [Index all data from treshold watcher](https://discuss.elastic.co/t/index-all-data-from-treshold-watcher/266222)
**Author:** [@tomaszgorka](https://discuss.elastic.co/u/tomaszgorka)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 11:20am UTC](https://discuss.elastic.co/t/index-all-data-from-treshold-watcher/266222 "2021-03-04T11:20:41Z")
Hi, I have a treshold alert on my data. The data is simply an integer "age" and "phone", and varchars of name and surname, and a date "time". I made a condition that checks if the age is below 18 in the data from last w… --- ## [Version Conflict Engine Exception](https://discuss.elastic.co/t/version-conflict-engine-exception/266286)
**Author:** [@edubcn](https://discuss.elastic.co/u/edubcn)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 8:13pm UTC](https://discuss.elastic.co/t/version-conflict-engine-exception/266286 "2021-03-04T20:13:15Z")
Hi. It is the first time I am using Elastic Search technology and I don't know how to face the following issue. \[6c48d578-2f5f-4d7c-9cd1-2dd356906801\_application\_unique\_id/B8Q4QxraQSW026dKuKd8Jg\]\[\[6c48d578-2f5f-4d7c-9c… --- ## [How to get Fleet Agent to use CA Cert w/ Elasticsearch?](https://discuss.elastic.co/t/how-to-get-fleet-agent-to-use-ca-cert-w-elasticsearch/266238)
**Author:** [@dmitryyankowski](https://discuss.elastic.co/u/dmitryyankowski)\ **Replies:** 3\ **Last updated:** [March 4, 2021, 5:45pm UTC](https://discuss.elastic.co/t/how-to-get-fleet-agent-to-use-ca-cert-w-elasticsearch/266238 "2021-03-04T17:45:49Z")
I'm trying to get logs sent to my Elasticsearch instance w/ Elastic Cloud Enterprise (Self Hosted), and i'm seeing the following error in the logs: {"file.name":"pipeline/output.go","file.line":154},"message":"Failed t… --- ## [How to Copy Elasticsearch Volume Data into Another Server Machine](https://discuss.elastic.co/t/how-to-copy-elasticsearch-volume-data-into-another-server-machine/266262)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 0\ **Last updated:** [March 4, 2021, 4:22pm UTC](https://discuss.elastic.co/t/how-to-copy-elasticsearch-volume-data-into-another-server-machine/266262 "2021-03-04T16:22:47Z")
Hi All, Below is the content which i have to copy that data of ES which is having more than 4GB root@server ~ # du -sh /var/lib/docker/volumes/uat\_esdata/\_data/ 4.1G /var/lib/docker/volumes/uat\_esdata/\_data/ root@serve… --- ## [Failed to set monitoring pipeline \[xpack\_monitoring\_2\] And process cluster event (put-pipeline-xpack\_monitoring\_2)](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline-xpack-monitoring-2-and-process-cluster-event-put-pipeline-xpack-monitoring-2/265754)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 12\ **Last updated:** [March 4, 2021, 4:13pm UTC](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline-xpack-monitoring-2-and-process-cluster-event-put-pipeline-xpack-monitoring-2/265754 "2021-03-04T16:13:36Z")
Hi All, Below is the Error im getting in Elasticsearch container logs 'failed to set monitoring pipeline \[xpack\_monitoring\_2\] Org.elasticsearch.cluster.metadata.ProcessClusterEventTimeoutException: failed to process c… --- ## [How can I stream data from ES to Azure Blob (not snapshot)?](https://discuss.elastic.co/t/how-can-i-stream-data-from-es-to-azure-blob-not-snapshot/266240)
**Author:** [@Andrei\_Budaes-Tanaru](https://discuss.elastic.co/u/Andrei_Budaes-Tanaru)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 2:24pm UTC](https://discuss.elastic.co/t/how-can-i-stream-data-from-es-to-azure-blob-not-snapshot/266240 "2021-03-04T14:24:22Z")
Hi Guys, My company is using Elasticsearch for one of our projects to collect event data from an app. As the number of users increased on the app so did the analytics needs. We are keeping data in for about 3 months for… --- ## [Elasticsearch,yaml](https://discuss.elastic.co/t/elasticsearch-yaml/266247)
**Author:** [@sanketj1112](https://discuss.elastic.co/u/sanketj1112)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 2:14pm UTC](https://discuss.elastic.co/t/elasticsearch-yaml/266247 "2021-03-04T14:14:33Z")
I am using managed elasticsearch on AWS. I want to edit some configuration in elasticsearch.yaml file. Can anyone suggest where is Elastiucsearch.yaml is located? [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=687) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=689)