# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=693 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 694 --- ## [Updating Elasticsearch Document](https://discuss.elastic.co/t/updating-elasticsearch-document/265705)
**Author:** [@vstevenson](https://discuss.elastic.co/u/vstevenson)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 10:46pm UTC](https://discuss.elastic.co/t/updating-elasticsearch-document/265705 "2021-02-27T22:46:43Z")
I am running into trouble when I try to update a field within my document. Here's my JSON call: POST vs-users/\_update/bwMNiyZZMg4jZVMdueaZ6m { "name": "abc" } I get this error: { "error" :… --- ## [Indices are not allocate in hot nodes](https://discuss.elastic.co/t/indices-are-not-allocate-in-hot-nodes/265609)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 9:21pm UTC](https://discuss.elastic.co/t/indices-are-not-allocate-in-hot-nodes/265609 "2021-02-27T21:21:11Z")
I have defined, data\_hot, data\_warm roles in the elastic cluster nodes as below. node1, node2c- node.roles: \[ "data\_content", "ingest", "data\_hot" \] node3, node4 - node.roles: \[ "data\_content", "data\_hot" \] node5, nod… --- ## [Elastic Cloud Log Archiving Recommendations](https://discuss.elastic.co/t/elastic-cloud-log-archiving-recommendations/264532)
**Author:** [@dandrejvv](https://discuss.elastic.co/u/dandrejvv)\ **Replies:** 8\ **Last updated:** [February 27, 2021, 8:15pm UTC](https://discuss.elastic.co/t/elastic-cloud-log-archiving-recommendations/264532 "2021-02-27T20:15:55Z")
We recently moved to the Elastic Stack on the Elastic Cloud but we have a very minimal setup and would like to ask for guidance and recommendations as to how to go about archiving logs without doing anything unnecessaril… --- ## [How to execute a stored script in a search query](https://discuss.elastic.co/t/how-to-execute-a-stored-script-in-a-search-query/265514)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 12:48pm UTC](https://discuss.elastic.co/t/how-to-execute-a-stored-script-in-a-search-query/265514 "2021-02-27T12:48:41Z")
hey there, I created a stored script that should add a new field to all the docs into an index. POST \_scripts/set\_new\_field { "script": { "lang": "painless", "source": """ if (ctx.\_source.speaker == "TED… --- ## [Elasticsearch - Timestamp based document Upsert](https://discuss.elastic.co/t/elasticsearch-timestamp-based-document-upsert/265688)
**Author:** [@tag\_v](https://discuss.elastic.co/u/tag_v)\ **Replies:** 0\ **Last updated:** [February 27, 2021, 11:34am UTC](https://discuss.elastic.co/t/elasticsearch-timestamp-based-document-upsert/265688 "2021-02-27T11:34:45Z")
I am looking for more efficient and performance way to implement below use case: Every input JSON contains event\_timestamp and document\_id field. document\_id is '\_id' for the index. If a document with document\_id alre… --- ## [Cannot create index from news Data showcased in https://www.youtube.com/watch?v=CCTgroOcyfM&t=1315s](https://discuss.elastic.co/t/cannot-create-index-from-news-data-showcased-in-https-www-youtube-com-watch-v-cctgroocyfm-t-1315s/265687)
**Author:** [@sushicodee](https://discuss.elastic.co/u/sushicodee)\ **Replies:** 0\ **Last updated:** [February 27, 2021, 11:10am UTC](https://discuss.elastic.co/t/cannot-create-index-from-news-data-showcased-in-https-www-youtube-com-watch-v-cctgroocyfm-t-1315s/265687 "2021-02-27T11:10:49Z")
the error which i get from kibana is Error creating index \[mapper\_parsing\_exception\] No type specified for field \[properties\] More {"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"No type specifie… --- ## [Index share allocation question with Docker containers](https://discuss.elastic.co/t/index-share-allocation-question-with-docker-containers/265676)
**Author:** [@InnerJoin](https://discuss.elastic.co/u/InnerJoin)\ **Replies:** 8\ **Last updated:** [February 27, 2021, 3:43am UTC](https://discuss.elastic.co/t/index-share-allocation-question-with-docker-containers/265676 "2021-02-27T03:43:18Z")
Hi all, I am currently working on building out an Elasticsearch cluster. I have sent out for the hardware that I'm planning to use and created another topic with the architecture that I'm planning and hardware specs to … --- ## [Trying to find saved dashboard](https://discuss.elastic.co/t/trying-to-find-saved-dashboard/265651)
**Author:** [@nicks1993](https://discuss.elastic.co/u/nicks1993)\ **Replies:** 10\ **Last updated:** [February 27, 2021, 1:35am UTC](https://discuss.elastic.co/t/trying-to-find-saved-dashboard/265651 "2021-02-27T01:35:11Z")
I was under the impression that saved objects would be saved in a .kibana/ directory or index found here /usr/share/elasticsearch/data/nodes/0/indices But that is not the case, my kibana.yml is found here, I run kibana… --- ## [How to manage multitenant ELK Cluster](https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606)
**Author:** [@verdienansein](https://discuss.elastic.co/u/verdienansein)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 12:18am UTC](https://discuss.elastic.co/t/how-to-manage-multitenant-elk-cluster/265606 "2021-02-27T00:18:52Z")
Hi, in our project we are using a multitenant cluster where several applications are logging to it with weekly log indices. We are facing now a problem because some of these applications are creating very big indices o… --- ## [Directory ELK Stack](https://discuss.elastic.co/t/directory-elk-stack/265576)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 9:00pm UTC](https://discuss.elastic.co/t/directory-elk-stack/265576 "2021-02-26T21:00:22Z")
guys, where is the default log's directory in server elasticsearch? because there are several policies in my company, please help me what directories should be accessible on this ELK stack? thanks --- ## [Archiving Elasticsearch Data](https://discuss.elastic.co/t/archiving-elasticsearch-data/265575)
**Author:** [@roh689](https://discuss.elastic.co/u/roh689)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 8:59pm UTC](https://discuss.elastic.co/t/archiving-elasticsearch-data/265575 "2021-02-26T20:59:23Z")
I would like to know how we can do Archiving of Elasticsearch data. We want to move all logs older that 30 days to Azure Blob Storage and retrieve it as when require to show in Kibana. We want to reduce the size of Data… --- ## [Index repeatedly gets "stuck" with high index writer memory usage](https://discuss.elastic.co/t/index-repeatedly-gets-stuck-with-high-index-writer-memory-usage/265526)
**Author:** [@shr](https://discuss.elastic.co/u/shr)\ **Replies:** 3\ **Last updated:** [February 26, 2021, 8:54pm UTC](https://discuss.elastic.co/t/index-repeatedly-gets-stuck-with-high-index-writer-memory-usage/265526 "2021-02-26T20:54:56Z")
Running ES 7.11.0 on Google Kubernetes Engine via ECK 1.4.0. Three-node cluster with each VM having 4 vCPUs, 16GB RAM, 3TB persistent disk. I am loading data into several time-based indices. Most of them are fine, but o… --- ## [Sometimes index template change after node reboot](https://discuss.elastic.co/t/sometimes-index-template-change-after-node-reboot/265239)
**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\ **Replies:** 5\ **Last updated:** [February 26, 2021, 8:53pm UTC](https://discuss.elastic.co/t/sometimes-index-template-change-after-node-reboot/265239 "2021-02-26T20:53:37Z")
Hi everyone, regarding to my needs i defined a index template with PUT \_template API in kibana! on that template i set index pattern and specific index rollover alias.i send my logs from filebeat to logstash,,in logstas… --- ## [Elasticsearch aggregation on a field with dynamic properties](https://discuss.elastic.co/t/elasticsearch-aggregation-on-a-field-with-dynamic-properties/265667)
**Author:** [@gkeswani92](https://discuss.elastic.co/u/gkeswani92)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 8:42pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-on-a-field-with-dynamic-properties/265667 "2021-02-26T20:42:32Z")
Given the following mapping where variants are a nested type and options is a flattened type: { "doc\_type" : "product", "id" : 1, "variants" : \[ { "options" : { "Size" : "XS", }, "pri… --- ## [Field limits for objects vs flattened documents](https://discuss.elastic.co/t/field-limits-for-objects-vs-flattened-documents/265663)
**Author:** [@acmatt](https://discuss.elastic.co/u/acmatt)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 8:19pm UTC](https://discuss.elastic.co/t/field-limits-for-objects-vs-flattened-documents/265663 "2021-02-26T20:19:05Z")
I recently ran into an issue when creating indexes and wanted to confirm if my understanding was correct. When I attempt to create a new index, with a total\_fields.limit of 1, and a single object with a single field I r… --- ## [JAVA\_HOME not getting set via chef (provider\_configure.rb)](https://discuss.elastic.co/t/java-home-not-getting-set-via-chef-provider-configure-rb/265659)
**Author:** [@sb116](https://discuss.elastic.co/u/sb116)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 7:56pm UTC](https://discuss.elastic.co/t/java-home-not-getting-set-via-chef-provider-configure-rb/265659 "2021-02-26T19:56:46Z")
Hello, I would like to set JAVA\_HOME at \`/etc/default/elasticsearch\` via \`provider\_configure.rb\`, and I setting up JAVA\_HOME via role; for some reason, the env variable is not getting set on the target host. Any thought… --- ## [Elasticsearch 7.6.2 fails to start up with BCFKS enforcement](https://discuss.elastic.co/t/elasticsearch-7-6-2-fails-to-start-up-with-bcfks-enforcement/265646)
**Author:** [@Mili\_Kahi](https://discuss.elastic.co/u/Mili_Kahi)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 6:28pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-2-fails-to-start-up-with-bcfks-enforcement/265646 "2021-02-26T18:28:39Z")
We have customized the entry point for Elasticsearch process. In that, we are enforcing to us BCFKS keystore. However, Elasticsearch xpack stack is trying to load with default keytype (JKS) and that is causing error in s… --- ## [Reindexing is failing](https://discuss.elastic.co/t/reindexing-is-failing/265387)
**Author:** [@mouli\_v](https://discuss.elastic.co/u/mouli_v)\ **Replies:** 6\ **Last updated:** [February 26, 2021, 5:26pm UTC](https://discuss.elastic.co/t/reindexing-is-failing/265387 "2021-02-26T17:26:54Z")
We are trying to reindex 2+Tb indexed data between 2 clusters: Cluster size: 6 Reindexing commands: curl -XPOST "http://localhost:9200/\_reindex?scroll=5m&wait\_for\_completion=false" -H 'Content-Type: application/json' … --- ## [Total hits count not equal to doc\_count total](https://discuss.elastic.co/t/total-hits-count-not-equal-to-doc-count-total/264863)
**Author:** [@rivariv](https://discuss.elastic.co/u/rivariv)\ **Replies:** 0\ **Last updated:** [February 19, 2021, 1:29pm UTC](https://discuss.elastic.co/t/total-hits-count-not-equal-to-doc-count-total/264863 "2021-02-19T13:29:54Z")
Hi! I am using bucket aggregation- terms. Something is going wrong and I cannot seem to solve it. Spent a lot of time already. The total keys I have in my bucket and their doc\_count sum is not coming to be equal total … --- ## [Watch Execution results does not go past Firing state](https://discuss.elastic.co/t/watch-execution-results-does-not-go-past-firing-state/264377)
**Author:** [@Saugat\_Mukherjee](https://discuss.elastic.co/u/Saugat_Mukherjee)\ **Replies:** 0\ **Last updated:** [February 16, 2021, 3:51am UTC](https://discuss.elastic.co/t/watch-execution-results-does-not-go-past-firing-state/264377 "2021-02-16T03:51:12Z")
Hi, Very new to elastic. Trying to setup a watch where my ultimate goal is to have an action on slack but first testing it out using a simple logging action. My problem is - when I look at the execution history of the … --- ## [How to reset built in elastic password?](https://discuss.elastic.co/t/how-to-reset-built-in-elastic-password/264829)
**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\ **Replies:** 3\ **Last updated:** [February 26, 2021, 4:15pm UTC](https://discuss.elastic.co/t/how-to-reset-built-in-elastic-password/264829 "2021-02-26T16:15:00Z")
Hi Team, I have lost my password for the built-in user "elastic". Please help me to recover the password. Or else shall I do change password for the same user in Kibana "users" page? If I change the password means anyt… --- ## [Elasticsearch fails to parse documents with timestamp in the following format due to space "2021-02-23T01:08:06.39502Eastern Daylight Time"](https://discuss.elastic.co/t/elasticsearch-fails-to-parse-documents-with-timestamp-in-the-following-format-due-to-space-2021-02-23t0106-39502eastern-daylight-time/265217)
**Author:** [@Antonis\_Michael](https://discuss.elastic.co/u/Antonis_Michael)\ **Replies:** 2\ **Last updated:** [February 26, 2021, 3:29pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-parse-documents-with-timestamp-in-the-following-format-due-to-space-2021-02-23t0106-39502eastern-daylight-time/265217 "2021-02-26T15:29:10Z")
Is there a way ElasticSearch can still map this timestamp field without errors? Thanks, Tony --- ## [How much disk should I have?](https://discuss.elastic.co/t/how-much-disk-should-i-have/265619)
**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 2:41pm UTC](https://discuss.elastic.co/t/how-much-disk-should-i-have/265619 "2021-02-26T14:41:54Z")
How can I know how much disk space I need for Elasticsearch? Right now I'm having unassigned shards because I'm hitting the disk threshold. How much disk growth should I expect? --- ## [Memory Mapped files using full RAM leaving very less room for other processes](https://discuss.elastic.co/t/memory-mapped-files-using-full-ram-leaving-very-less-room-for-other-processes/265617)
**Author:** [@abhinavtk97](https://discuss.elastic.co/u/abhinavtk97)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 1:59pm UTC](https://discuss.elastic.co/t/memory-mapped-files-using-full-ram-leaving-very-less-room-for-other-processes/265617 "2021-02-26T13:59:52Z")
We were testing out Elasticsearch with almost 1.5 TB index size and there is a different java process running on the same machine which does lots of data processing, which gives batch index jobs to Elasticsearch. The mac… --- ## [Missing fields in a document](https://discuss.elastic.co/t/missing-fields-in-a-document/265531)
**Author:** [@kvmuralidhar](https://discuss.elastic.co/u/kvmuralidhar)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 1:20pm UTC](https://discuss.elastic.co/t/missing-fields-in-a-document/265531 "2021-02-26T13:20:07Z")
Hi, I am working on a watcher that's looking for a specific event type and extracting certain fields from the source document. The source document does not have all fields that I am trying to query. When I try to exec… --- ## [Filebeat multiple index rollover problem](https://discuss.elastic.co/t/filebeat-multiple-index-rollover-problem/264833)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 5\ **Last updated:** [February 26, 2021, 11:32am UTC](https://discuss.elastic.co/t/filebeat-multiple-index-rollover-problem/264833 "2021-02-26T11:32:25Z")
Dear all I'm sending log data to elastic using filebeat. I have multiple files to read, actually I'm sending all log files (eg. \*.log) and it works correctly, I have index and rollover works. Now I need to have differe… --- ## [Failed to parse exception - Preview of field's value: ''](https://discuss.elastic.co/t/failed-to-parse-exception-preview-of-fields-value/265599)
**Author:** [@Q\_the\_River](https://discuss.elastic.co/u/Q_the_River)\ **Replies:** 0\ **Last updated:** [February 26, 2021, 11:02am UTC](https://discuss.elastic.co/t/failed-to-parse-exception-preview-of-fields-value/265599 "2021-02-26T11:02:11Z")
We are using fluentd to forward logs towards elasticsearch. A lot of messages are getting rejected by ES without a rejection reason, does anybody have idea on how to debug this? Rejected by Elasticsearch \[error type\]: … --- ## [Elastic stack issues Certificates and Kibana is not ready yet](https://discuss.elastic.co/t/elastic-stack-issues-certificates-and-kibana-is-not-ready-yet/264728)
**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\ **Replies:** 9\ **Last updated:** [February 26, 2021, 10:36am UTC](https://discuss.elastic.co/t/elastic-stack-issues-certificates-and-kibana-is-not-ready-yet/264728 "2021-02-26T10:36:19Z")
Hello everyone, I am writing this topic because I have an issue on my Elastic Stack. It comes from the day when certificates reached its expiration date. The following message was on in my Kibana's interface : "Kibana i… --- ## [Matching fields in two different indexes together](https://discuss.elastic.co/t/matching-fields-in-two-different-indexes-together/265563)
**Author:** [@Sagar\_Mandal](https://discuss.elastic.co/u/Sagar_Mandal)\ **Replies:** 3\ **Last updated:** [February 26, 2021, 9:39am UTC](https://discuss.elastic.co/t/matching-fields-in-two-different-indexes-together/265563 "2021-02-26T09:39:08Z")
Hey Team, Let just say I have two different indexes named index1 and index2, they both have a column/ field in them named C1 and C2, what I basically want to do is I want to match where C1 and C2 are the same and creat… --- ## [How to re-indexed in Elasticsearch 6.8.13 before upgrading to 7.6.2](https://discuss.elastic.co/t/how-to-re-indexed-in-elasticsearch-6-8-13-before-upgrading-to-7-6-2/265525)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 4\ **Last updated:** [February 26, 2021, 9:34am UTC](https://discuss.elastic.co/t/how-to-re-indexed-in-elasticsearch-6-8-13-before-upgrading-to-7-6-2/265525 "2021-02-26T09:34:03Z")
Hi All, I'm New in Elasticsearch and I don't know how to re-indexed Elasticsearch in Ubuntu Here is the ERROR :- java.lang.IllegalStateException: The index \[\[test-suites- tscount/kKudK8xxxxxxxxxxxXrvzAA\]\] was created … [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=692) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=694)