# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=707

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 708

---

## [Xpack from msi](https://discuss.elastic.co/t/xpack-from-msi/262279)

<div class="topic-metadata">

**Author:** [@Tino23](https://discuss.elastic.co/u/Tino23)\
**Replies:** 6\
**Last updated:** [February 10, 2021, 7:57am UTC](https://discuss.elastic.co/t/xpack-from-msi/262279 "2021-02-10T07:57:18Z")

</div>

please help me fix this installed my search using msi version elasticsearch-7.10.2 Unexpected response code \[405\] from calling GET http://127.0.0.1:9200/\_security/\_authenticate?pretty It doesn't look like the X-Pack se…

---

## [ELastic credentials not working for Elasticsearch Endpoints of elastic cloud deployement](https://discuss.elastic.co/t/elastic-credentials-not-working-for-elasticsearch-endpoints-of-elastic-cloud-deployement/263837)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 0\
**Last updated:** [February 10, 2021, 7:01am UTC](https://discuss.elastic.co/t/elastic-credentials-not-working-for-elasticsearch-endpoints-of-elastic-cloud-deployement/263837 "2021-02-10T07:01:10Z")

</div>

Hi, I am using free trial of Elastic cloud for a POC purpose. I have created one test-observability-v1 deployment. I have got ES endpoints, Kibana end points and APM end points affet deployement. Also there one e…

---

## [Elastic clould price calculator. RAM size?](https://discuss.elastic.co/t/elastic-clould-price-calculator-ram-size/263742)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 1\
**Last updated:** [February 10, 2021, 6:11am UTC](https://discuss.elastic.co/t/elastic-clould-price-calculator-ram-size/263742 "2021-02-10T06:11:32Z")

</div>

Hi folks, i am trying to use the this calculator: https://cloud.elastic.co/pricing and trying to size my cloud cluster and compare it to my current on prem cluster. I know from the documentation that it is recomended t…

---

## [I want to create Snapshots of indices on External Hard Drive](https://discuss.elastic.co/t/i-want-to-create-snapshots-of-indices-on-external-hard-drive/263801)

<div class="topic-metadata">

**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\
**Replies:** 5\
**Last updated:** [February 10, 2021, 5:46am UTC](https://discuss.elastic.co/t/i-want-to-create-snapshots-of-indices-on-external-hard-drive/263801 "2021-02-10T05:46:18Z")

</div>

Hi , I have created NFS location in my cluster that is accessible from all the nodes. I checked it through terminal, The Repository has read and write both permissions. But when i create a repository from kibana termi…

---

## [File storage](https://discuss.elastic.co/t/file-storage/263813)

<div class="topic-metadata">

**Author:** [@Jcroy](https://discuss.elastic.co/u/Jcroy)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 10:09pm UTC](https://discuss.elastic.co/t/file-storage/263813 "2021-02-09T22:09:46Z")

</div>

Hey everyone, I’m trying figure out the best way to configure a backup solution for 8 nodes. I want to have anything older than 30 days be sent to local file storage. Is the best way to do this to use snapshots?

---

## [Getting bucket size from response](https://discuss.elastic.co/t/getting-bucket-size-from-response/263188)

<div class="topic-metadata">

**Author:** [@araujonelson](https://discuss.elastic.co/u/araujonelson)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 9:46pm UTC](https://discuss.elastic.co/t/getting-bucket-size-from-response/263188 "2021-02-09T21:46:45Z")

</div>

Hello there. Is there any way to get the bucket size (number of buckets) generated from a terms aggregation? I'm using the Java High Level client but couldn't find anything. P.S: What I'm trying to get is the number 3 …

---

## [Issue with deserializing MultilineStringGeoShape](https://discuss.elastic.co/t/issue-with-deserializing-multilinestringgeoshape/263670)

<div class="topic-metadata">

**Author:** [@rckreddy](https://discuss.elastic.co/u/rckreddy)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 9:10pm UTC](https://discuss.elastic.co/t/issue-with-deserializing-multilinestringgeoshape/263670 "2021-02-09T21:10:34Z")

</div>

Please see the code below. Results when calling ElasticSearch. "\_source": { "TEST1": 450304485, "TEST2": 1612465007053, "GEOMETRY": { "TYPE": "MultiLineString", "COORDINATES": \[ \[ \[ -83.01273, 39.94391 \], \[ …

---

## [Kibana realm-specific login URL (or another way to pre-select the realm)?](https://discuss.elastic.co/t/kibana-realm-specific-login-url-or-another-way-to-pre-select-the-realm/263533)

<div class="topic-metadata">

**Author:** [@ngrigoriev](https://discuss.elastic.co/u/ngrigoriev)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 9:07pm UTC](https://discuss.elastic.co/t/kibana-realm-specific-login-url-or-another-way-to-pre-select-the-realm/263533 "2021-02-09T21:07:45Z")

</div>

Hi! I am trying to define several authc providers/realms in Elastic + Kibana but I do not want my clients to select a realm. Instead, I would like to drive them to a particular one that corresponds to them. Is there a w…

---

## [404 Not found only for filebeat](https://discuss.elastic.co/t/404-not-found-only-for-filebeat/258876)

<div class="topic-metadata">

**Author:** [@pup\_seba](https://discuss.elastic.co/u/pup_seba)\
**Replies:** 7\
**Last updated:** [February 9, 2021, 8:05pm UTC](https://discuss.elastic.co/t/404-not-found-only-for-filebeat/258876 "2021-02-09T20:05:09Z")

</div>

Hi, We are trying to send our filebeat logs to an elasticsearch cluster but we get this error: 2020-12-16T15:32:37.816+0100 ERROR \[esclientleg\] eslegclient/connection.go:261 error connecting to Elasticsearch a…

---

## [Grok test works - Grok through pipeline doesn't](https://discuss.elastic.co/t/grok-test-works-grok-through-pipeline-doesnt/262867)

<div class="topic-metadata">

**Author:** [@mgevans](https://discuss.elastic.co/u/mgevans)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 8:01pm UTC](https://discuss.elastic.co/t/grok-test-works-grok-through-pipeline-doesnt/262867 "2021-02-09T20:01:28Z")

</div>

Hi Folks, I have updated the out-of-the-box Metricbeat IIS module 7.10 pipeline with a slightly different Grok for one of our IIS servers. When I test the Grok it works fine (dev tools and Grok test GUI and Pipeline ed…

---

## [RestHighLevelClient Elastic Search Java Client takes more time for Search Query](https://discuss.elastic.co/t/resthighlevelclient-elastic-search-java-client-takes-more-time-for-search-query/263784)

<div class="topic-metadata">

**Author:** [@nidhi217](https://discuss.elastic.co/u/nidhi217)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 6:32pm UTC](https://discuss.elastic.co/t/resthighlevelclient-elastic-search-java-client-takes-more-time-for-search-query/263784 "2021-02-09T18:32:47Z")

</div>

RestHighLevelClient is taking more time for Search Queries and have bad performance.From direct Elastic Search Rest API it is taking less time. How can we optimise the performance for this search request This is the Co…

---

## [Kibana console code 44 trying to get \_souce timestamp](https://discuss.elastic.co/t/kibana-console-code-44-trying-to-get-souce-timestamp/263649)

<div class="topic-metadata">

**Author:** [@Chris6](https://discuss.elastic.co/u/Chris6)\
**Replies:** 0\
**Last updated:** [February 8, 2021, 7:10pm UTC](https://discuss.elastic.co/t/kibana-console-code-44-trying-to-get-souce-timestamp/263649 "2021-02-08T19:10:44Z")

</div>

I am getting: unexpected character (',' (code 44)): was expecting a colon to seperate field name and value\\n at \[Source: org.elasticsearch.transport. netty4.ByteBufStreamInput@249c1586; line: 3, column:28\]" I am using …

---

## [Script query with nested array - is it possible?](https://discuss.elastic.co/t/script-query-with-nested-array-is-it-possible/263772)

<div class="topic-metadata">

**Author:** [@Ofir\_Edi](https://discuss.elastic.co/u/Ofir_Edi)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 4:34pm UTC](https://discuss.elastic.co/t/script-query-with-nested-array-is-it-possible/263772 "2021-02-09T16:34:22Z")

</div>

Hi, i'm having issue filtering by script on a nested array. this is my sample data and mapping: { "id" : "123", "messages" : \[ { "level" : "error",…

---

## [Are replicas just for disaster recovery?](https://discuss.elastic.co/t/are-replicas-just-for-disaster-recovery/263745)

<div class="topic-metadata">

**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 3:44pm UTC](https://discuss.elastic.co/t/are-replicas-just-for-disaster-recovery/263745 "2021-02-09T15:44:50Z")

</div>

We are using Elasticsearch mainly as cache, for getting fast results. Currently, we have all the default settings which I think is 1 replica per shard. Should I change this setting to 0? Are replicas just for data recov…

---

## [Errors when enabling tls for APM and Elasticsearch kubernetes deployment](https://discuss.elastic.co/t/errors-when-enabling-tls-for-apm-and-elasticsearch-kubernetes-deployment/263758)

<div class="topic-metadata">

**Author:** [@ciarand](https://discuss.elastic.co/u/ciarand)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 3:44pm UTC](https://discuss.elastic.co/t/errors-when-enabling-tls-for-apm-and-elasticsearch-kubernetes-deployment/263758 "2021-02-09T15:44:02Z")

</div>

I am trying to set up tls in my kubernetes cluster that is using the elastic operator version 1.2. I was able to set up tls with Elasticsearch but I am having issues with the APM issue and don't what is the correct confi…

---

## [Elasticsearch 6.8 ignores my field mappings](https://discuss.elastic.co/t/elasticsearch-6-8-ignores-my-field-mappings/262816)

<div class="topic-metadata">

**Author:** [@logben](https://discuss.elastic.co/u/logben)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 3:03pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-ignores-my-field-mappings/262816 "2021-02-09T15:03:57Z")

</div>

Hello! I have field mappings for an index like { "index\_patterns": \["logstash-iis2-\*"\], "version":100, "settings":{ "number\_of\_replicas":0, "number\_of\_shards":1, "index.refresh\_interval":"30s" }, "m…

---

## [java.lang.IllegalStateException: node \[LKTUQfgPSeClvaOfA8oIdg\] is not available](https://discuss.elastic.co/t/java-lang-illegalstateexception-node-lktuqfgpseclvaofa8oidg-is-not-available/263750)

<div class="topic-metadata">

**Author:** [@praffuln](https://discuss.elastic.co/u/praffuln)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 2:37pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-node-lktuqfgpseclvaofa8oidg-is-not-available/263750 "2021-02-09T14:37:44Z")

</div>

I am using Scroll API Elastic search (https://www.elastic.co/guide/en/elasticsearch/client/java-rest/master/java-rest-high-search-scroll.html). Java code is exactly same as describe in link. This code is giving below ex…

---

## [Proximity with intervals query question](https://discuss.elastic.co/t/proximity-with-intervals-query-question/263730)

<div class="topic-metadata">

**Author:** [@Daantie](https://discuss.elastic.co/u/Daantie)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 1:12pm UTC](https://discuss.elastic.co/t/proximity-with-intervals-query-question/263730 "2021-02-09T13:12:28Z")

</div>

Hi all! I'm trying to understand the inner workings of intervals query and I'm confused and hope that anyone can explain this to me a bit. So I have encountered this piece of data (mind the bold words for the query later…

---

## [Filebeat logs not being published to Elastic](https://discuss.elastic.co/t/filebeat-logs-not-being-published-to-elastic/263605)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 1:11pm UTC](https://discuss.elastic.co/t/filebeat-logs-not-being-published-to-elastic/263605 "2021-02-09T13:11:19Z")

</div>

I am sending csv data from filebeat to elastic search following this guide: I have created an ingest pipeline, tested it with the \_simulate api, and everything looks fine. This is my filebeat configuration: fil…

---

## [Moving from daily to weekly indices, advice needed](https://discuss.elastic.co/t/moving-from-daily-to-weekly-indices-advice-needed/263710)

<div class="topic-metadata">

**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 12:52pm UTC](https://discuss.elastic.co/t/moving-from-daily-to-weekly-indices-advice-needed/263710 "2021-02-09T12:52:29Z")

</div>

After running into the 1000/1000 shards issue, I need to reduce the number of shards in use preferably without needing to remove to many old indices. Currently the configuration is set to daily indices, so we decided to …

---

## [Reindex api to move all data from one cluster to another](https://discuss.elastic.co/t/reindex-api-to-move-all-data-from-one-cluster-to-another/263721)

<div class="topic-metadata">

**Author:** [@abhijit](https://discuss.elastic.co/u/abhijit)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 11:28am UTC](https://discuss.elastic.co/t/reindex-api-to-move-all-data-from-one-cluster-to-another/263721 "2021-02-09T11:28:26Z")

</div>

I have a use-case where I want to move all my elastic data (index/shards/documents etc) from one cluster to another remote cluster. I am trying to use the \_reindex api for the same but it requires source and destination …

---

## [PV sizing](https://discuss.elastic.co/t/pv-sizing/263715)

<div class="topic-metadata">

**Author:** [@crazysyops](https://discuss.elastic.co/u/crazysyops)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 10:57am UTC](https://discuss.elastic.co/t/pv-sizing/263715 "2021-02-09T10:57:48Z")

</div>

Hey Guys, I am just starting my journey with ELK. I was trying to do a little bit of research about it however I could not find a clear answer. We say we have 100TB requirement for data storage etc. We have built our cl…

---

## [Is it possible to assign shard according to disk space?](https://discuss.elastic.co/t/is-it-possible-to-assign-shard-according-to-disk-space/263720)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 11:18am UTC](https://discuss.elastic.co/t/is-it-possible-to-assign-shard-according-to-disk-space/263720 "2021-02-09T11:18:29Z")

</div>

I have a cluster of 3 masters and 13 data nodes. The disk capacity of data-12 and data-13 nodes is 1.5TB, but the disk capacity of other data nodes is 5TB. As shown in the screenshot, data-12 and data-13 disk space are…

---

## [JVM reached above 70% in client node without any request serve](https://discuss.elastic.co/t/jvm-reached-above-70-in-client-node-without-any-request-serve/262305)

<div class="topic-metadata">

**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 10:58am UTC](https://discuss.elastic.co/t/jvm-reached-above-70-in-client-node-without-any-request-serve/262305 "2021-02-09T10:58:01Z")

</div>

JVM of client node reached above 70% in an ideal state of the cluster. Is there any reason to increase JVM without any request? The number of shards and instance memory is optimal.

---

## [Getting MasterNotDiscoveredException: null in client node](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-null-in-client-node/262317)

<div class="topic-metadata">

**Author:** [@nchalise](https://discuss.elastic.co/u/nchalise)\
**Replies:** 5\
**Last updated:** [February 9, 2021, 10:57am UTC](https://discuss.elastic.co/t/getting-masternotdiscoveredexception-null-in-client-node/262317 "2021-02-09T10:57:16Z")

</div>

We have 3 master nodes, 2 client nodes, and 8 data nodes. And client nodes ES logs show below mentioned error even though resource usage(JVM and CPU ) looks fine at that time. And cluster went unresponsive mode. ALL node…

---

## [Can not list indices](https://discuss.elastic.co/t/can-not-list-indices/263711)

<div class="topic-metadata">

**Author:** [@Muhammad\_Yasser](https://discuss.elastic.co/u/Muhammad_Yasser)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 10:43am UTC](https://discuss.elastic.co/t/can-not-list-indices/263711 "2021-02-09T10:43:49Z")

</div>

Hello, I'm running ELK cluster on Openshift. I can see the container log for Elasticsearch container and verify that it's storing infra, audit and app indices. Like this: \[2021-02-09T08:10:39,473\]\[INFO \]\[o.e.c.m.Meta…

---

## [Group the data fields from multiple indexes](https://discuss.elastic.co/t/group-the-data-fields-from-multiple-indexes/263712)

<div class="topic-metadata">

**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 10:45am UTC](https://discuss.elastic.co/t/group-the-data-fields-from-multiple-indexes/263712 "2021-02-09T10:45:37Z")

</div>

Hi Team, I have 3 different index with one transaction\_id as common in all, i am generation report with fields from all 3 indices at every midnight for transactions of last 3 days. I have different fields in all indic…

---

## [Data stream = real time search?](https://discuss.elastic.co/t/data-stream-real-time-search/263697)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 10:36am UTC](https://discuss.elastic.co/t/data-stream-real-time-search/263697 "2021-02-09T10:36:29Z")

</div>

I dont understand what feature Data Stream (https://www.elastic.co/guide/en/elasticsearch/reference/master/data-streams.html) is providing. On first reading, DataStream is dynamic index alias. Is it providing in-memory…

---

## [Error cosine similarity](https://discuss.elastic.co/t/error-cosine-similarity/263699)

<div class="topic-metadata">

**Author:** [@fjac](https://discuss.elastic.co/u/fjac)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 9:11am UTC](https://discuss.elastic.co/t/error-cosine-similarity/263699 "2021-02-09T09:11:30Z")

</div>

Hello, I have created a field der type dense\_vector, I have reindexed the database and when performing a search it gives me an error, as you can only have a single dense\_vector value per document, I have added it as "nes…

---

## [Elasticsearch upgrade strategies](https://discuss.elastic.co/t/elasticsearch-upgrade-strategies/263706)

<div class="topic-metadata">

**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\
**Replies:** 0\
**Last updated:** [February 9, 2021, 10:00am UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-strategies/263706 "2021-02-09T10:00:54Z")

</div>

Hi, We have a situation where our application breaks when upgraded to a new minor version. I would like to get the community thoughts on how this can better be solved. There are some breaking changes documented and und…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=706)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=708)
